This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Identity Assurance Level
Identity Assurance Level

Version management

Difference between version and

At line 1 added 56 lines
!!! Overview
[{$pagename}] ([IAL]) is described in [NIST.SP.800-63A] as a category that conveys the degree of confidence ([Assurance]) that the applicant’s claimed [identity|Identification] is their real identity. (This is the definition of [Authentication])
[{$pagename}] is a [Level Of Assurance] measurement [Identity Proofing]
[{$pagename}] describes the common pattern in which a subject, referred to as an applicant During the [Credential Enrollment], which undergoes an [Identity Proofing] and enrollment process in which the [evidence] and [Identity Attributes] are collected, uniquely resolved to a single identity within a given population or [context], then validated and verified. A [Credential Service Provider] may then bind these [attributes] to an [authenticator] at a specified [{$pagename}] as described in [NIST.SP.800-63B].
%%information
[{$pagename}] as defined within [NIST.SP.800-63A] is lengthy and a bit complex. We provide only a short summary for and overview.
%%
[{$pagename}] may be used in [Risk Assessment] parameters that determine [Magnitude of the Potential loss]
%%zebra-table
%%sortable
%%table-filter
||IAL||Requirement
|[IAL1]|The [Credential Service Provider] ([CSP]) [SHALL NOT] proof applicants. Applicants [MAY] self-assert zero or more attributes to the [Credential Service Provider]. See [NIST.SP.800-63A] Section 4.3
|[IAL2]|allows for remote or in-person [Identity Proofing] and supports a wide range of acceptable [Identity Proofing] techniques in order to increase user adoption, decrease false negatives (legitimate applicants that cannot successfully complete [Identity Proofing]), and detect to the best extent possible the presentation of fraudulent identities by a malicious applicant. A CSP [MAY] exceed these requirements. See [NIST.SP.800-63A] Section 4.4
|[IAL3]| adds additional rigor to the steps required at [IAL2], to include providing further evidence of superior strength, and is subjected to additional and specific processes, including the use of [biometric data], to further protect the identity and [Relying Party] from [impersonation], fraud, or other significantly harmful damages. In addition, [Identity Proofing] at [IAL3] is performed in-person. See [NIST.SP.800-63A] Section 4.5 for more details. A [CSP] [MAY] exceed these requirements.
/%
/%
/%
!! [Trust Elevation]
Required increases in [{$pagename}] is typically referred to as [Trust Elevation]
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [Identity Assurance Level Requirements|https://pages.nist.gov/800-63-3/sp800-63a.html#sec4|target='_blank'] - based on information obtained 2018-05-07-
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop