Trust Vector

Full Title or Meme

A collection of Authentication results or Attribute Validations presented to an Authorization Service to control access to a resource, typically digital but possibly physical.

Context

Internet Relying Parties need to perform Knowledge-based functions to determine if the current request by a User should result in Authorization of access.

Problems

• Many large ecommerce sites are already performing this function, but for obvious reasons do not like to let that fact be known.
• If attackers where to understand the process in full detail, they would know how to subvert it.