Device Authentication
What is Device Authentication?
The process of verifying the identity of a hardware device connecting to a network or system before granting it access to resources.
Terms that appear alongside device authentication
Each of these is named in at least one of the same controls as device authentication. The number is how many controls name both.
- authentication 12 shared controls
- access control 4 shared controls
- oauth 2 shared controls
- multi factor authentication 2 shared controls
- saml 2 shared controls
- tls 2 shared controls
- biometric authentication 2 shared controls
- nist 2 shared controls
Frameworks that govern device authentication
What the standards actually require on device authentication
Requirements naming device authentication across 6 standards, quoted from the control text.
Mobile devices authorised for CJI access use local device authentication to unlock the device, with an authenticator that meets the IA family requirements.
fbi-cjis-security-policy::5.20.7.1 · 5.20.7.1 Local Device Authentication →Validate device identity and posture during enrollment and at access time before granting access to enterprise resources.
800-124r2-3.2 · Device Authentication and Enrollment →Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication confirms that each party to a communication (for example a person, device, service or application) really is who it claims to be, and gives assurance that no party is impersonating anothe...
X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →CTAP2 transports define how the client communicates with the authenticator. USB-HID: USB Human Interface Device class for security keys (YubiKey + Token2 + Feitian + SoloKeys + Trezor + others); FIDO2 HID protocol with CTAPHID frames.
FIDO2-CTAP2-Transport · CTAP2 Transports (USB-HID, NFC, BLE, Hybrid / caBLE, Platform-internal) →Fibre Channel storage should use the fabric's security capabilities: zoning and LUN masking, fabric and device authentication where supported, secure management of switches, protection of inter-switch links, and the FC security protocol options of the fabric,...
iso-iec-27040-2024::10.9.1 · Fibre Channel (FC) storage →A control policy covers device authentication, approval, access scope and security settings for PCs, laptops, virtual PCs and tablets used for work;
south-korea-isms-p::2.10.6 · Security of work endpoints →Questions people ask about device authentication
What is Device Authentication?
Why is Device Authentication important for compliance?
Which compliance frameworks address Device Authentication?
Where can I learn more about Device Authentication?
See how Device Authentication applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.