identity verification

{
  "id": "MLC-T-CYB-002041",
  "term": "identity verification",
  "field": "Cybersecurity",
  "definition": "1. The process of confirming or denying that a claimed identity is correct by comparing the credentials of a person requesting access with those previously proven and associated with the PIV Card or a derived PIV credential associated with the identity being claimed.\n\n2. The process of producing objective evidence that sufficiently demonstrates that the system satisfies its security requirements and security characteristics with the level of assurance that applies to the system.\n\n3. Process of producing objective evidence that sufficiently demonstrates that the system satisfies its security requirements and security characteristics with the level of assurance that applies to the system.\n\n4. The process of evaluating a system or component to determine whether the products of a given development phase satisfy the conditions imposed at the start of that phase (INCOSE).\n\n5. The process or act of confirming that the applicant undergoing identity proofing holds the claimed real-life identity represented by the validated identity attributes and associated evidence. Synonymous with identity verification.\n\n6. A process whose purpose is to provide objective evidence that a system or system element fulfills its specified requirements and characteristics. Note: Methods of performing verification action generally include inspection, analysis, demonstration, or test.\n\n7. Confirmation, through the provision of objective evidence, that specified requirements have been fulfilled (e.g., an entity’s requirements have been correctly defined, or an entity’s attributes have been correctly presented; or a procedure or function performs as intended and leads to the expected outcome).\n\n8. A test of a system to prove that it meets all its specified requirements at a particular stage of its development.\n\n9. The process of testing the media to ensure the information cannot be read.\n\n10. The process of confirming or denying that a claimed identity is correct by comparing the credentials (something you know, something you have, something you are) of a person requesting access with those credentials previously proven and stored in the PIV Card or system and associated with the identity being claimed.\n\n11. Confirmation, through the provision of objective evidence, that specified requirements have been fulfilled (e.g., an entity’s requirements have been correctly defined, or an entity’s attributes have been correctly presented; or a procedure or function performs as intended and leads to the expected outcome). Adapted from Verification.\n\n12. Internal phase within the NVD where a second, usually more experienced, NVD Analyst verifies the work completed during the Initial Analysis.\n\n13. The process of confirming or denying that a claimed identity is correct by comparing the credentials (something you know, something you have, something you are) of a person requesting access with those previously proven and stored in the PIV Card or system and associated with the identity being claimed.\n\n14. See “Identity Verification”.\n\n15. Confirmation, through the provision of objective evidence, that specified requirements have been fulfilled.",
  "abbreviation": "verification",
  "see_also": [
    "Comparison"
  ],
  "references": [
    "FIPS 201-3",
    "NIST IR 8401 from NIST SP 800-160v1r1 (adapted)",
    "NIST IR 8323r1 from NIST SP 800-160 Vol. 1 ((§3.4.9), adapted); NIST IR 8441 from NIST SP 800-160v1r1 (§3.4.9, adapted); NISTIR 8323 [Superseded] from NIST SP 800-160 Vol. 1 (§3.4.9, Adapted)",
    "NIST CSWP 31",
    "NIST SP 800-63-4; NIST SP 800-63A-4",
    "CNSSI 4009-2022 from ISO/IEC/IEEE 15288:2015",
    "NIST SP 800-161 [Superseded] from CNSSI 4009, ISO 9000 (Adapted); NISTIR 7622 from CNSSI 4009, ISO 9000 (Adapted)",
    "CNSSI 4009-2015; CNSSI 4009-2022 from ISO/IEC/IEEE 24765:2017 (adapted)",
    "NIST SP 800-88 Rev. 1 [Superseded]",
    "NIST SP 1800-12b",
    "NIST SP 1800-21B from CNSSI 4009-2015, CNSSI 4009-2022",
    "NISTIR 8246",
    "FIPS 201 [version unknown]",
    "NIST SP 800-160 Vol. 1 from ISO 9000; NIST SP 800-161r1-upd1 [11/1/2024 errata update] from CNSSI 4009-2015, ISO 9000:2015 (adapted), CNSSI 4009-2022; NIST SP 800-160v1r1 from ISO 9000:2015",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/identity-verification/"
}