+D Change Log

D Change Log

This appendix is informative.

This appendix provides a high-level overview of the changes made to SP 800-63A since its initial release.

Separates global requirements from IAL-specific requirements to facilitate the design of identity services, regardless of assurance level
Reorganizes the sections to introduce general identity proofing requirements before providing specific requirements
Introduces the concept of core attributes
Decouples the collection of identity attributes from the collection of identity evidence
Introduces fraud management guidance and requirements
Provides guidance and requirements for digital injection prevention and forged media detection
Adds requirements for CSP-specific privacy risk assessments and considerations for integrating the results into agency assessment processes
Expands acceptable evidence and attribute validation sources to include credible sources
Introduces exception handling concepts and requirements, including requirements for the use of trusted referees and applicant references
Provides requirements for lower-risk applications through an updated IAL1
Adjusts evidence collection requirements for IALs 1 and 2
Provides non-biometric options for identity verification at IALs 1 and 2
Adds new guidance and requirements for subscriber accounts

1. Visão geral

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

Requisitos

3. Regulamentos relacionados

Regulamentos
  • NIST -

    EN: Publications of the National Institute of Standards and Technology (NIST), U.S. Department of Commerce, https://www.nist.gov/, from their electronic versions (OSCAL; SP 800-63-4 from its HTML version, https://pages.nist.gov/800-63-4/). Works of NIST employees are not subject to copyright protection in the United States (17 U.S.C. § 105); the OSCAL content is dedicated to the public domain worldwide (CC0 1.0); outside the United States NIST grants the right to reprint its technical series publications in all formats (NIST copyright statement). Republished courtesy of the National Institute of Standards and Technology; each document names its citation. Divided into sections and converted into the GRCA format, the wording unchanged. Only the versions published by NIST are authoritative.

    DE: Veröffentlichungen des National Institute of Standards and Technology (NIST), U.S. Department of Commerce, https://www.nist.gov/, aus ihren elektronischen Fassungen (OSCAL; SP 800-63-4 aus ihrer HTML-Fassung, https://pages.nist.gov/800-63-4/). Werke von NIST-Beschäftigten sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105); die OSCAL-Inhalte sind weltweit gemeinfrei gestellt (CC0 1.0); außerhalb der USA räumt das NIST das Recht ein, seine Technical-Series-Publikationen in allen Formaten neu zu veröffentlichen (Copyright-Hinweis des NIST). „Republished courtesy of the National Institute of Standards and Technology“; jedes Dokument nennt seine Zitierangabe. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Maßgeblich sind allein die vom NIST veröffentlichten Fassungen.