Authentication Protocol
What is Authentication Protocol?
A set of rules governing the exchange of information for verifying the identity of a user, device, or system in a communication.
Frameworks that govern authentication protocol
What the standards actually require on authentication protocol
Requirements naming authentication protocol across 5 standards, quoted from the control text.
When multi-factor authentication is used to authenticate users or customers to online services or online customer services, all other authentication protocols that do not support multi-factor authentication are disabled.
ISM-1919 · Disabling authentication protocols without MFA →LoA2 gives some confidence in the identity that has been claimed or asserted and is meant where a wrong authentication carries moderate risk. One authentication factor is enough.
iso-iec-29115-2013-entity-authentication-assurance-framework::6.2 · 6.2 Level of assurance 2 (LoA2) →The mechanism is designed for asymmetric controlling and controlled stations (different message formats each way, session keys issued by the controlling station), message-oriented protocols needing per-message authentication, protocols without usable sequence...
iec-62351-power-systems-communication-security::5:5.3 · Part 5, 5.3: design issues of the telecontrol environment →Lists the connection capabilities that must be considered in security management: whether the device has hardware connectivity at all, with the installed or optional hardware and operating-system capabilities listed and whether each is a purchase option or can...
mds2-medical-device::CONN · CONN Connectivity capabilities: disclose every wireless, physical and network connection, protocol, API and internet dependency →Implement AAL3 authentication per NIST SP 800-63B Section 4.3. AAL3 requires (a) Multi-Factor Cryptographic Hardware authenticator OR Single-Factor Cryptographic Hardware combined with a memorised secret OR Multi-Factor One-Time Password Device combined with a...
NISTSP63-6 · AAL3 Authentication: Hardware Cryptographic, Verifier Impersonation Resistance, Phishing Resistance →Questions people ask about authentication protocol
What is Authentication Protocol?
Why is Authentication Protocol important for compliance?
Which compliance frameworks address Authentication Protocol?
Where can I learn more about Authentication Protocol?
See how Authentication Protocol applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.