Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 8344 (Initial Public Draft)

Ontology for Authentication

Date Published: February 2021
Comments Due: April 9, 2021 (public comment period is CLOSED)
Email Questions to:


Kim Schaffer (NIST)


This draft document is the result of an effort to define authentication by examining mechanisms used to prove position or membership; analyzing existing methods, tools, and techniques; and developing an abstract representation of authentication features and services. Basic mechanisms used to accomplish authentication are identified and discussed in general terms. While most authentication mechanisms utilize cryptography, specific implementations of the cryptography are left to standards that address the authentication mechanism and are not included in this document.

NOTE: A call for patent claims is included on page v of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy--Inclusion of Patents in ITL Publications.



IAA process; attestation; authentication; confirmation; continuous authentication; measurement; ontology; static authentication; usability
Control Families

Identification and Authentication


Download URL

Supplemental Material:
None available

Document History:
02/08/21: IR 8344 (Draft)


Security and Privacy

authentication, awareness training & education, planning