This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Authentication Factor
Authentication Factor

Version management

Difference between version and

At line 1 added 24 lines
!!! Overview
[{$pagename}]s are factors that are typically used in [Authentication].
Generally there are three [{$pagename}] categories:
* [Knowledge Factor] - or [Something You Know]
* [Possession Factor] - or [Something You Have]
* [Inherence Factor] - or [Something You Are]
We have seen references to the following [{$pagename}], but can not find any "authoritative" source that they are "Acceptable":
* [Something You Do] - This probably a take off of the [Inherence Factor] described as a [Behavioral Characteristic]
* [Someplace You Are] - Perhaps this is a [Geolocation] as maybe considered a [{$pagename}].
A list of practical factors that might be used are the [Authentication Method Reference Values]
!! [NIST.SP.800-63]
[NIST.SP.800-63] ( or specifically "NIST.SP.800-63-2") discusses in Section 4.3, that "other types of information, such as location data or device identity, may be used by an [RP] or [Verifier] to reject or challenge a claimed identity, but they are not considered [{$pagename}]s.
Further clarification is found within "NIST.SP.800-63-3" section 4.1 where it states:
"As part of [authentication], mechanisms such as device identity or [geo-location|Geolocation] may be used to identify or prevent possible authentication false positives. While these mechanisms do not directly increase the [AAL], they can aid in enforcing security policies and mitigate risks. In many cases, the [authentication] process and services will be shared by many applications and agencies. However, it is the individual agency or application acting as the [RP] that shall make the decision to grant access or process a transaction based on the specific application requirements."
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop