| Both sides previous revision Previous revision | |
| public:99_annexes:annex-b-terms-and-definitions:c:credential [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:c:credential to public:99_annexes:annex-b-terms-and-definitions:c:credential nick_dido | public:99_annexes:annex-b-terms-and-definitions:c:credential [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido |
|---|
| ====== Credential ====== | ====== Credential ====== |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] | [[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] |
| |
| ===== Discussion ===== | ===== Discussion ===== |
| |
| A Credential associates an [[private:99_annexes:annex-b-terms-and-definitions:i:identity|Identity]] or authority claim with information used during [[private:99_annexes:annex-b-terms-and-definitions:a:authentication|Authentication]] or [[private:99_annexes:annex-b-terms-and-definitions:a:access_control|Access Control]]. | A Credential associates an [[public:99_annexes:annex-b-terms-and-definitions:i:identity|Identity]] or authority claim with information used during [[public:99_annexes:annex-b-terms-and-definitions:a:authentication|Authentication]] or [[public:99_annexes:annex-b-terms-and-definitions:a:access_control|Access Control]]. |
| |
| Credentials include passwords, authentication tokens, cryptographic certificates, signed assertions, application credentials, service credentials, and physical or digital identity tokens. | Credentials include passwords, authentication tokens, cryptographic certificates, signed assertions, application credentials, service credentials, and physical or digital identity tokens. |
| |
| A Credential contains [[private:99_annexes:annex-b-terms-and-definitions:c:cryptographic_material|Cryptographic Material]], refers to Cryptographic Material, or operates without Cryptographic Material. The concepts overlap but remain distinct. A Credential supports an identity or authority claim. Cryptographic Material supports a cryptographic operation or relationship. | A Credential contains [[public:99_annexes:annex-b-terms-and-definitions:c:cryptographic_material|Cryptographic Material]], refers to Cryptographic Material, or operates without Cryptographic Material. The concepts overlap but remain distinct. A Credential supports an identity or authority claim. Cryptographic Material supports a cryptographic operation or relationship. |
| |
| A Credential requires controlled creation, issuance, storage, distribution, use, rotation, revocation, retention, and disposal throughout its [[private:99_annexes:annex-b-terms-and-definitions:l:lifecycle|Lifecycle]]. | A Credential requires controlled creation, issuance, storage, distribution, use, rotation, revocation, retention, and disposal throughout its [[public:99_annexes:annex-b-terms-and-definitions:l:lifecycle|Lifecycle]]. |
| |
| ===== Definition ===== | ===== Definition ===== |
| ===== Note ===== | ===== Note ===== |
| |
| Possession of a Credential does not independently establish authorisation. An authentication or access-control process evaluates the Credential and the applicable [[private:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]] before granting access. | Possession of a Credential does not independently establish authorisation. An authentication or access-control process evaluates the Credential and the applicable [[public:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]] before granting access. |
| |
| A record identifies a sensitive Credential through a protected reference, identifier, digest, or redacted representation rather than an exposed value. | A record identifies a sensitive Credential through a protected reference, identifier, digest, or redacted representation rather than an exposed value. |
| |
| The controls applied to a Credential preserve its required [[private:99_annexes:annex-b-terms-and-definitions:c:confidentiality|Confidentiality]], [[private:99_annexes:annex-b-terms-and-definitions:i:integrity|Integrity]], authenticity, availability, and [[private:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]]. | The controls applied to a Credential preserve its required [[public:99_annexes:annex-b-terms-and-definitions:c:confidentiality|Confidentiality]], [[public:99_annexes:annex-b-terms-and-definitions:i:integrity|Integrity]], authenticity, availability, and [[public:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]]. |
| |
| ===== Example ===== | ===== Example ===== |
| |
| A client certificate presented by a [[private:99_annexes:annex-b-terms-and-definitions:n:node|Node]] during mutual TLS authentication constitutes a Credential. | A client certificate presented by a [[public:99_annexes:annex-b-terms-and-definitions:n:node|Node]] during mutual TLS authentication constitutes a Credential. |
| |
| ---- | ---- |