Ontology for Authentication

Schaffer, Kim

doi:https://doi.org/10.6028/NIST.IR.8344-draft

NISTIR 8344 (Draft)

Ontology for Authentication

Date Published: February 2021
Comments Due: April 9, 2021 (public comment period is CLOSED)
Email Questions to: NISTIR-8344-comments@nist.gov

Author(s)

Kim Schaffer (NIST)

Announcement

This draft document is the result of an effort to define authentication by examining mechanisms used to prove position or membership; analyzing existing methods, tools, and techniques; and developing an abstract representation of authentication features and services. Basic mechanisms used to accomplish authentication are identified and discussed in general terms. While most authentication mechanisms utilize cryptography, specific implementations of the cryptography are left to standards that address the authentication mechanism and are not included in this document.

NOTE: A call for patent claims is included on page v of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy--Inclusion of Patents in ITL Publications.

Abstract

Authentication appears to be headed into crisis with the difficulties of passwords, the need for derived credentials, and the uncertainty of quantum processing, mobile platforms, and the Internet of Things. The establishment of an ontology of authentication can better manage the requirements placed upon both systems and users. This document includes a survey of authentication mechanisms, establishing the need and basis for authentication metrology, as well as key factors in determining strength and management requirements when assessing an authentication system in a given environment.

Keywords

IAA process; attestation; authentication; confirmation; continuous authentication; measurement; ontology; static authentication; usability

Control Families

Identification and Authentication

Documentation

Publication:
NISTIR 8344 (Draft) (DOI)
Local Download

Supplemental Material:
None available

Document History:
02/08/21: NISTIR 8344 (Draft)

Topics

Security and Privacy
authentication; awareness training & education; planning

Technologies
biometrics