Glossary

There are many different definitions for terms in the Identity Management ecosystem; here are those terms and their definitions.

The goal of the glossary is to define common Identity terms so that all parties can communicate about Identity without confusion. Some terms are used differently in specific contexts or dialects; we will map where these terms are used incorrectly or interchangeably.

---

A

B

C

Credential

An object or data structure that authoritatively binds an identity (and optionally, additional attributes) to a token possessed and controlled by a Subscriber. SOURCE: SP 800-63

Evidence attesting to one’s right to credit or authority. SOURCE: FIPS 201

Evidence or testimonials that support a claim of identity or assertion of an attribute and usually are intended to be used more than once. SOURCE: CNSSI-4009

Credential Service Provider (CSP)

A trusted entity that issues or registers Subscriber tokens and issues electronic credentials to Subscribers. The CSP may encompass Registration Authorities (RAs) and Verifiers that it operates. A CSP may be an independent third party, or may issue credentials for its own use SOURCE: SP 800-63

D

E

F

G

H

I

Identity Proofing

The process by which a CSP and a RA collect and verify information about a person for the purpose of issuing credentials to that person

Identity Resolution

The ability to distinguish a person from all others within the context of the total population of persons of interest

J

K

L

M

N

Null Identity

An identity record present in the database that is missing one or more of the attributes included in an analysis that causes a search error and renders that record invalid for the purpose of the analysis

O

P

Q

R

S

T

U

V

W

X

Y

Z