Claim - Revision history

Tom: /* Solution */

2022-02-21T19:53:53Z

‎Solution

Tom: /* Context */

2021-12-06T00:20:56Z

‎Context

Tom: /* Context */

2021-12-06T00:19:58Z

‎Context

Tom: /* Context */

2021-07-09T01:32:04Z

‎Context

Tom: /* Context */

2021-07-09T01:30:00Z

‎Context

Tom: /* Context */

2021-07-09T01:26:56Z

‎Context

Tom: /* References */

2021-06-16T15:38:05Z

‎References

Tom: /* Context */

2021-05-10T21:40:05Z

‎Context

Tom: /* Context */

2021-05-10T21:39:01Z

‎Context

Tom: /* Context */

2021-05-10T21:38:38Z

‎Context

@@ Line 37: / Line 37: @@
 <blockquote>Securely authorizing the performance of actions may be enabled by linking each secure/privileged action to a requisite policy for authorizing that secure/privileged action. In a described media implementation, one or more electronically-accessible media include electronically-executable instructions that, when executed, direct an electronic device to execute operations including: receiving an action performance request that is directed to a requested action; locating an authorization policy that is associated with the requested action from among multiple authorization policies, the authorization policy indicating how performance of the requested action can be authorized; and extracting at least one rule and one or more authentication ticket requirements from the authorization policy. Example operations may further include: determining whether one or more authentication tickets have been validated in accordance with the at least one rule and/or the one or more authentication ticket requirements; and if so, authorizing performance of the requested action.</blockquote>
 ==Solution==
 Claims typically go through a series of steps, for example:

@@ Line 5: / Line 5: @@
 ==Context==
-*The English word [[Claim]] means to call our for, or to publish, pretty much the same meaning as the Latin word ''clamare''.<ref>Walther W. Skeat, ''An Etyological Dication of the English Language.'' Oxford (1882)</ref>
+*The English word [[Claim]] means to call our for, or to publish, pretty much the same meaning as the Latin word ''clamare''.<ref>Walther W. Skeat, ''An Etymological Dictionary of the English Language.'' Oxford (1882)</ref>
 * Merriam Webster definitions
 <pre>

@@ Line 5: / Line 5: @@
 ==Context==
-*The English word [[Claim]] means to call our for, or to publish, pretty much the same meaning as the Latin word ''clamare''.<ref>Walther W. Skeat, An Etyological Dication of the English Language. Oxford (1882)</ref>
+*The English word [[Claim]] means to call our for, or to publish, pretty much the same meaning as the Latin word ''clamare''.<ref>Walther W. Skeat, ''An Etyological Dication of the English Language.'' Oxford (1882)</ref>
 * Merriam Webster definitions
 <pre>

@@ Line 16: / Line 16: @@
 </pre>
 * The first evidence found so far of the use of the word [[Claim]] in an [[Identity]] context was in the 2003-10-08 [http://www.projectliberty.org/liberty/content/download/327/2405/file/liberty-idwsf-security-privacy-overview-v1.0.pdf Liberty ID-WSF Security and Privacy Overview].  "A security token is a representation of security-related information that is used to represent and substantiate a claim." But in the case the claim appears be be a statement made by a claimant.
 * The [https://tools.ietf.org/html/rfc7519#section-2 JWT spec] defines it as "A piece of information asserted about a subject.  A claim is represented as a name/value pair consisting of a Claim Name and a Claim Value."
 * NIST [https://csrc.nist.gov/glossary/term/claim - Claim] =  A true-false statement about the limitations on the values of an unambiguously defined property called the claim’s property; and limitations on the uncertainty of the property’s values falling within these limitations during the claim’s duration of applicability under stated conditions.
 * NIST [ https://csrc.nist.gov/glossary/term/claimant - Claimant] = A party whose identity is to be verified using an authentication protocol. A subject whose identity is to be verified using one or more authentication protocols. The person who is asserting his or her identity
 * NIST [https://csrc.nist.gov/glossary/term/credential - Credential]   (2. 2) Evidence attesting to one’s right to credit or authority. (1. 1). Evidence or testimonials that support a claim of identity or assertion of an attribute and usually are intended to be used more than once.
-* IETF RFC 7519 JSON Web Token (JWT) Claim =      A piece of information asserted about a subject.  A claim is  represented as a name/value pair consisting of a Claim Name and a  Claim Value.
+* IETF RFC 7519 JSON Web Token (JWT) Claim =  A piece of information asserted about a subject.  A claim is  represented as a name/value pair consisting of a Claim Name and a  Claim Value.
 * OIDC Core first says that the definition is taken from RFC 7519 and then says a few different things, none of which agrees with the other.
 ** Claim =  (section 1.2)  Piece of information asserted about an Entity.
@@ Line 32: / Line 33: @@
 # Identity Attributes (required): most often just a single identifier (e.g. username) associated with the entity being authenticated. However, in many circumstances, other identity attributes may be required (e.g. assertion of a right to use license for a particular resource)
 # Verifier (optional as part of the credential
 *  https://www.w3.org/TR/vc-data-model/#dfn-claims claim = An assertion made about a subject.
 * The first patent that described the process of using a claim (authentication ticket) in an Authorization process (OAuth) appears to be: United States Patent 7,257,835 Thomas C. Jones August 14, 2007 Filed: May 28, 2003 ''Securely authorizing the performance of actions''

@@ Line 15: / Line 15: @@
 advertisers' extravagant claims
 </pre>
-* The first evidence found so far of the use of the word [[Claim]] in an [[Identity]] context was in the 2003-10-08 [http://www.projectliberty.org/liberty/content/download/327/2405/file/liberty-idwsf-security-privacy-overview-v1.0.pdf Liberty ID-WSF Security and Privacy Overview].
+* The first evidence found so far of the use of the word [[Claim]] in an [[Identity]] context was in the 2003-10-08 [http://www.projectliberty.org/liberty/content/download/327/2405/file/liberty-idwsf-security-privacy-overview-v1.0.pdf Liberty ID-WSF Security and Privacy Overview].  "A security token is a representation of security-related information that is used to represent and substantiate a claim." But in the case the claim appears be be a statement made by a claimant.
 * The [https://tools.ietf.org/html/rfc7519#section-2 JWT spec] defines it as "A piece of information asserted about a subject.  A claim is represented as a name/value pair consisting of a Claim Name and a Claim Value."
 * NIST [https://csrc.nist.gov/glossary/term/claim - Claim] =  A true-false statement about the limitations on the values of an unambiguously defined property called the claim’s property; and limitations on the uncertainty of the property’s values falling within these limitations during the claim’s duration of applicability under stated conditions.

← Older revision		Revision as of 15:38, 16 June 2021
Line 56:		Line 56:
	[[Category:Authentication]]		[[Category:Authentication]]
	[[Category:Authorization]]		[[Category:Authorization]]
		+	[[Category:Attribute]]

@@ Line 29: / Line 29: @@
 ** Claim (Assertion) is a statement of the value of one or more identity attributes; e.g. if Ben is currently a CIT freshman, the Identity Management system could create a credential containing the claim: “Ben’s affiliation is student”.
 ** Credential is an object that is verified when presented during an authentication transaction. Credentials consist of one or two elements:
-# Identity Attributes (required): most often just a single identifier (e.g. username) associated with
+# Identity Attributes (required): most often just a single identifier (e.g. username) associated with the entity being authenticated. However, in many circumstances, other identity attributes may be required (e.g. assertion of a right to use license for a particular resource)
 # Verifier (optional as part of the credential
 *  https://www.gsma.com/identity/glossary A claim made by an actor stating its identity. Without validation, no assumptions can be made regarding the actor’s identity. An Identity Claim is usually made by a User towards a Service Provider.