Assurance - Revision history

Tom at 19:18, 18 September 2025

2025-09-18T19:18:10Z

2025-05-06T23:54:54Z

‎Context

2024-11-01T22:58:26Z

‎A summary of the 3 categories in NIST SP 800-63-3 and Later

2024-11-01T22:57:06Z

‎Solutions

2024-11-01T22:55:06Z

‎External References

2024-11-01T22:53:18Z

‎References

2024-09-20T04:27:33Z

‎Context

2024-09-20T04:25:21Z

‎Context

2023-12-22T20:40:28Z

‎External References

2023-08-17T14:07:23Z

‎A summary of the 3 categories now in NIST 800-63-3

@@ Line 59: / Line 59: @@
 ====European Financial====
 *Also known as Know Your Customer, or KYC, the rules are established as Anti-Money Laundering ([[AML]]) regulations that are roughly analogous to the IAL levels.
 ==References==

@@ Line 12: / Line 12: @@
 ** (63A-IAL) [[Identity]] of the subject to the [[Attribute]]s or [[Claim]]s about that subject.  More details can be found on the wiki page [[Assured Identity]].
 ** (63B-AAL) [[Authentication]] of the subject to the [[Credential]] used to verify the identity of the subject (which includes attributes from IAL)
-** (63C-FAL) [[Federation]] of the subject or issuer to the [[Best_Practice_in_HealthCare#Federated_Trust_Anchor|Trust Anchor]].
+** (63C-FAL) [[Federation]] of the subject or issuer to the [[Trust Anchor]].
 For a [[User]] that wants some [[Assurance]] about a [[Web Site]] see [[Trusted Third Party]].

@@ Line 29: / Line 29: @@
 The best source of [[Truth]] about an [[Identity]] is obtained by documentation of the [[Identity Proofing]] process. That is something that can be audited to measure reality against expectations.
-===A summary of the 3 categories in NIST SP 800-63-3 and Later===
+===The 3 categories in NIST SP 800-63-3 and Later===
-A summary of each of the identity, authenticator, and federation assurance levels is provided below.
+A summary of each of the [[Identifier]], [[Authentication]], and federation assurance levels is provided below.
 When described generically or bundled, NIST guidelines refers to IAL, AAL, and FAL as xAL.

@@ Line 29: / Line 29: @@
 The best source of [[Truth]] about an [[Identity]] is obtained by documentation of the [[Identity Proofing]] process. That is something that can be audited to measure reality against expectations.
-===A summary of the 3 categories now in NIST SP 800-63-3===
+===A summary of the 3 categories in NIST SP 800-63-3 and Later===
 A summary of each of the identity, authenticator, and federation assurance levels is provided below.

@@ Line 63: / Line 63: @@
 ==References==
 <references />
-===External References===
+===Other Materiel===
 # Synonyms include: [[Validated]] which typically is used with [[Assurance]] of claims, or [[Attested]] which typically is used with [[Assurance]] of [[User Device]]s.
 # Also see the wiki page on [[Accuracy]].

@@ Line 4: / Line 4: @@
 ==Context==
 * Some means for assuring the [[Web Site Security]] is required. See that page for details.
 * The rest of this page is about establishing a level of assurance for [[User Information]] about a [[User]] also known as a [[Subject]].
@@ Line 11: / Line 10: @@
 * [[Provenance]] is a term that is sometimes used for the level of [[Assurance]] that a [[Data Controller]] has in the origin and reliability of [[User]] [[Attribute]]s, especially health care data
 * The [[Assurance]] level measures the quality of the [[Binding]]:
-** (63A-IAL)  of the subject to the [[Attribute]]s or [[Claim]]s about that subject.  More details can be found on the wiki page [[Assured Identity]].
+** (63A-IAL) [[Identity]] of the subject to the [[Attribute]]s or [[Claim]]s about that subject.  More details can be found on the wiki page [[Assured Identity]].
-** (63B-AAL)  of the subject to the [[Credential]] used to verify the identity of the subject (which includes attributes from IAL)
+** (63B-AAL) [[Authentication] of the subject to the [[Credential]] used to verify the identity of the subject (which includes attributes from IAL)
-** (63C-FAL) of the subject or issuer to the [[Best_Practice_in_HealthCare#Federated_Trust_Anchor|Trust Anchor]].
+** (63C-FAL) Federatopm of the subject or issuer to the [[Best_Practice_in_HealthCare#Federated_Trust_Anchor|Trust Anchor]].
 For a [[User]] that wants some [[Assurance]] about a [[Web Site]] see [[Trusted Third Party]].