Difference between revisions of "Credential"

From MgmtWiki
Jump to: navigation, search
(Solutions)
(Full Title or Meme)
Line 1: Line 1:
 
==Full Title or Meme==
 
==Full Title or Meme==
A Credential in the digital realm is a structure which contains, at a minimum, a secret value.
+
A [[Credential]] in the digital realm is a structure which contains, at a minimum, a secret value which can be used in [[Authentication]] of a [[Subject]].
  
 
==Context==
 
==Context==

Revision as of 14:29, 4 July 2019

Full Title or Meme

A Credential in the digital realm is a structure which contains, at a minimum, a secret value which can be used in Authentication of a Subject.

Context

  • The original digital Credential was just a shared secret, usually called a Password.
  • More secure Credentials keep private keys which are used to build an Identity Token which can include anti-replay elements, that (with User Consent) is sent to a requester.

Solutions

  • A Certificate binds a credential to an Identifier of its owner as well as (potentially) other Attributes.
  • Typically there is also a binding to some sort of real-world credential, usually a piece of paper with a seal.