public:99_annexes:annex-b-terms-and-definitions:a:authentication

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
public:99_annexes:annex-b-terms-and-definitions:a:authentication [2026/09/12 17:42] – removed - external edit (Unknown date) 127.0.0.1public:99_annexes:annex-b-terms-and-definitions:a:authentication [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 +====== Authentication ======
  
 +[[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
 +
 +===== Discussion =====
 +
 +Authentication evaluates evidence associated with a claimed [[public:99_annexes:annex-b-terms-and-definitions:i:identity|Identity]] or another asserted attribute.
 +
 +The subject of Authentication includes a person, organisation, process, device, service, [[public:99_annexes:annex-b-terms-and-definitions:n:node|Node]], system, message, or data source.
 +
 +An authentication process evaluates one or more factors, including knowledge, possession, inherent characteristics, location, behaviour, cryptographic proof, or an assertion issued by a trusted authority.
 +
 +A [[public:99_annexes:annex-b-terms-and-definitions:c:credential|Credential]] supplies or references evidence used by the authentication process. Authentication remains distinct from [[public:99_annexes:annex-b-terms-and-definitions:a:access_control|Access Control]]. Authentication evaluates a claim. Access Control determines whether the authenticated or otherwise identified subject receives access to a resource.
 +
 +===== Definition =====
 +
 +//process that establishes confidence in the validity of a claimed identity or other asserted attribute//
 +
 +===== Source =====
 +
 +Adapted from ISO/IEC 27000, Information security, cybersecurity and privacy protection — Vocabulary, and NIST terminology concerning digital identity.
 +
 +===== Note =====
 +
 +Authentication identifies the claim, subject, evidence, authentication method, applicable assurance criteria, result, and time of evaluation.
 +
 +Authentication does not independently grant access or establish authority. An Access Control decision evaluates the authenticated identity or attribute together with the applicable [[public:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]] and request context.
 +
 +Failed, expired, revoked, incomplete, or unverifiable authentication evidence produces an unsuccessful authentication result.
 +
 +===== Example =====
 +
 +A Node authenticates another Node by validating its certificate chain, verifying possession of the corresponding private key, and confirming the asserted Node identity.
 +
 +----
 +
 +<WRAP centeralign>
 +© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
 +</WRAP>