authenticator

{
  "id": "MLC-T-CYB-000335",
  "term": "authenticator",
  "field": "Cybersecurity",
  "definition": "1. Something the cardholder possesses and controls (e.g., PIV Card or derived PIV credential) that is used to authenticate the cardholder’s identity.\n\n2. Authentication using two or more different factors to achieve authentication. Factors include something you know (e.g., PIN, password); something you have (e.g., cryptographic identification device, token); or something you are (e.g., biometric).\n\n3. An entity that facilitates authentication of other entities attached to the same LAN using a public key certificate.\n\n4. A characteristic of an authentication system or an authenticator that requires more than one distinct authentication factor for successful authentication. MFA can be performed using a single authenticator that provides more than one factor or by a combination of authenticators that provide different factors.\nThe three authentication factors are something you know, something you have, and something you are.\n\n5. Something that the Claimant possesses and controls (typically a key or password) that is used to authenticate the Claimant’s identity.\n\n6. A portable, user-controlled, physical device (e.g., smart card or memory stick) used to store cryptographic information and possibly also perform cryptographic functions.\n\n7. Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity.\n\n8. See Authenticator\n\n9. Authentication using two or more factors to achieve authentication. Factors are (i) something you know (e.g., password/personal identification number); (ii) something you have (e.g., cryptographic identification device, token); and (iii) something you are (e.g., biometric).\n\n10. Something that the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity. This was previously referred to as a token.\n\n11. Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity. This was previously referred to as a token.\n\n12. See authenticator type and multi-factor authenticator.\n\n13. A physical object a user possesses and controls that is used to authenticate the user’s identity.\n\n14. A representation of a particular asset that typically relies on a blockchain or other types of distributed ledgers.",
  "abbreviation": "token",
  "synonyms": [
    "multifactor authentication"
  ],
  "references": [
    "FIPS 201-3",
    "CNSSI 4009-2022",
    "NIST SP 800-12 Rev. 1",
    "NIST SP 800-57 Part 2 Rev.1",
    "NIST SP 1800-17b; NIST SP 1800-17c; NIST IR 8523 from NIST SP 800-63-4",
    "NIST SP 1800-17b; NIST SP 1800-17c",
    "NIST SP 1800-12b",
    "NIST SP 800-53 Rev. 5",
    "NIST SP 800-171r3",
    "NIST SP 800-63-4",
    "NISTIR 7711",
    "NISTIR 8301 from Taxonomic Approach to Blockchain IDMS",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/authenticator/"
}