token

{
  "id": "MLC-T-CYB-004365",
  "term": "token",
  "field": "Cybersecurity",
  "definition": "1. Something the cardholder possesses and controls (e.g., PIV Card or derived PIV credential) that is used to authenticate the cardholder’s identity.\n\n2. An entity that facilitates authentication of other entities attached to the same LAN using a public key certificate.\n\n3. Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity. This was previously referred to as a token.\n\n4. See authenticator type and multi-factor authenticator.\n\n5. Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity.\n\n6. The means used to confirm the identity of a user, process, or device (e.g., user password or token).\n\n7. Something that the claimant possesses and controls (such as a key or password) that is used to authenticate a claim. See cryptographic token.\n\n8. Something that the Claimant possesses and controls (typically a key or password) that is used to authenticate the Claimant’s identity.\n\n9. The means used to confirm the identity of a user, processor, or device (e.g., user password or token).\n\n10. Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity. In previous editions of SP 800-63, this was referred to as atoken.\n\n11. See Authenticator.\n\n12. A portable, user-controlled, physical device (e.g., smart card or memory stick) used to store cryptographic information and possibly also perform cryptographic functions.\n\n13. See Authenticator\n\n14. Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity. In previous editions of SP 800-63, this was referred to as a token.\n\n15. Something that the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant’s identity. This was previously referred to as a token.\n\n16. Either information that is only known to the person and the verifier, or a hardware device that can generate information that the verifier knows can only come from that device\n\n17. A physical object a user possesses and controls that is used to authenticate the user’s identity.\n\n18. A representation of a particular asset that typically relies on a blockchain or other types of distributed ledgers.\n\n19. Something that the Claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the Claimant’s identity.",
  "synonyms": [
    "authenticator"
  ],
  "references": [
    "FIPS 201-3",
    "CNSSI 4009-2022",
    "NIST SP 800-171r3",
    "NIST SP 800-63-4",
    "NIST IR 8523 from NIST SP 800-63-4; NIST SP 1800-17b; NIST SP 1800-17c",
    "CNSSI 4009-2015 from NIST SP 800-53 Rev. 4",
    "CNSSI 4009-2015 from NIST SP 800-63-2 (Adapted)",
    "NIST SP 800-12 Rev. 1 from NIST SP 800-63-2",
    "NIST SP 800-53 Rev. 4 [Superseded]",
    "NIST SP 800-63-3 [Superseded]",
    "NIST SP 800-57 Part 2 Rev.1",
    "NIST SP 1800-17b; NIST SP 1800-17c",
    "NIST SP 800-53 Rev. 5",
    "NISTIR 7682",
    "NISTIR 7711",
    "NISTIR 8301 from Taxonomic Approach to Blockchain IDMS",
    "NIST SP 800-63-2 [Superseded]",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/token/"
}