public:99_annexes:annex-b-terms-and-definitions:c:credential

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
public:99_annexes:annex-b-terms-and-definitions:c:credential [2026/09/12 17:42] – removed - external edit (Unknown date) 127.0.0.1public:99_annexes:annex-b-terms-and-definitions:c:credential [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 +====== Credential ======
  
 +[[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
 +
 +===== Discussion =====
 +
 +A Credential associates an [[public:99_annexes:annex-b-terms-and-definitions:i:identity|Identity]] or authority claim with information used during [[public:99_annexes:annex-b-terms-and-definitions:a:authentication|Authentication]] or [[public:99_annexes:annex-b-terms-and-definitions:a:access_control|Access Control]].
 +
 +Credentials include passwords, authentication tokens, cryptographic certificates, signed assertions, application credentials, service credentials, and physical or digital identity tokens.
 +
 +A Credential contains [[public:99_annexes:annex-b-terms-and-definitions:c:cryptographic_material|Cryptographic Material]], refers to Cryptographic Material, or operates without Cryptographic Material. The concepts overlap but remain distinct. A Credential supports an identity or authority claim. Cryptographic Material supports a cryptographic operation or relationship.
 +
 +A Credential requires controlled creation, issuance, storage, distribution, use, rotation, revocation, retention, and disposal throughout its [[public:99_annexes:annex-b-terms-and-definitions:l:lifecycle|Lifecycle]].
 +
 +===== Definition =====
 +
 +//representation of an identity or authority claim used in authentication or access control//
 +
 +===== Source =====
 +
 +DIDO Solutions project definition.
 +
 +===== Note =====
 +
 +Possession of a Credential does not independently establish authorisation. An authentication or access-control process evaluates the Credential and the applicable [[public:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]] before granting access.
 +
 +A record identifies a sensitive Credential through a protected reference, identifier, digest, or redacted representation rather than an exposed value.
 +
 +The controls applied to a Credential preserve its required [[public:99_annexes:annex-b-terms-and-definitions:c:confidentiality|Confidentiality]], [[public:99_annexes:annex-b-terms-and-definitions:i:integrity|Integrity]], authenticity, availability, and [[public:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]].
 +
 +===== Example =====
 +
 +A client certificate presented by a [[public:99_annexes:annex-b-terms-and-definitions:n:node|Node]] during mutual TLS authentication constitutes a Credential.
 +
 +----
 +
 +<WRAP centeralign>
 +© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
 +</WRAP>