Andy, Cathy and Scott are all Entities. Scott owns a corporation called Computer Science Innovations, LLC which is also an Entity. Abbie please add in Annex from X.1252. Credentials are attributes of an Entity. Entities have attributes. A set of attributes may be used to uniquely identify an Entity. Identity a set of attributes related to an Entity. Authentication: Provision of assurance in the claimed identity of an entity [ISO/IEC Genesis is the process of defining an Entity to the System. We can mutate attributes associated with Entity. An Entity has a surrogate key called the Entity identifier, that is immutable and uniquely identifies the Entity. Abbie add in Level of Assurance (LOA) levels - 4 levels. LOA levels are based on the combination of present attributes to the Entity. Each LOA level is defined as a minimal subset of authentication attributes. First we have a Genesis, then we may enroll. Enrolment is the process of attaching additional attributes to an Entity. During Genesis we attach the identity attributes. During enrolment we attach the authentication attributes. Both the identity attributes and the authentication attributes, other than the Entity identifier may mutate over time. Actors - Entity, User Agent, Identity Server, Authentication Server, Application Server Precondition - A request to create an Entity is instantiated and Entity does not Exist Entity User Agent Identity Server Request Access ---------------------------------------------------> Request Access (requestAccess (userId) --------------------------------------------> Entity Does not Exist return code (-1) Entity Does not exist <--------------------------------------------- <--------------------------------------------------
Andy, Cathy and Scott are all Entities. Scott owns a corporation called Computer Science Innovations, LLC which is also an Entity. Abbie please add in Annex from X.1252. Credentials are attributes of an Entity. Entities have attributes. A set of attributes may be used to uniquely identify an Entity. Identity a set of attributes related to an Entity. Authentication: Provision of assurance in the claimed identity of an entity [ISO/IEC Genesis is the process of defining an Entity to the System. We can mutate attributes associated with Entity. An Entity has a surrogate key called the Entity identifier, that is immutable and uniquely identifies the Entity. Abbie add in Level of Assurance (LOA) levels - 4 levels. LOA levels are based on the combination of present attributes to the Entity. Each LOA level is defined as a minimal subset of authentication attributes. First we have a Genesis, then we may enroll. Enrolment is the process of attaching additional attributes to an Entity. During Genesis we attach the identity attributes. During enrolment we attach the authentication attributes. Both the identity attributes and the authentication attributes, other than the Entity identifier may mutate over time. Actors - Entity, User Agent, Identity Server, Authentication Server, Application Server Precondition - A request to create an Entity is instantiated and Entity does not Exist Entity User Agent Identity Server Request Access ---------------------------------------------------> Request Access (requestAccess (userId) --------------------------------------------> Entity Does not Exist return code (-1) Entity Does not exist <--------------------------------------------- <--------------------------------------------------
CopyofIBOPS-V4.docx