Credential

Alternative Forms

• Attestation

• Security Credential

Definitions

Definition 1 Computer Science IAM Information Security Physical Security Security

A data structure that is a collection of identity attributes and assertions that vouches for the identity of an entity through some method of trust and authentication.

Credential may be logical or physical. The authorizations granted on the basis of the credential may also be logical or physical.

Credential may be temporary or permanent.

Logical credential examples:

• Password

• PIN

• Public Key Certificate

Physical credential examples:

• Biometrics

• Certificates

• Driving License

• ID Cart

• Passport

• SIM Card

Examples

• In front of the login screen, Alice couldn’t remember her password. She sworn against this obsolete class of credential and daydreamed on how wonderful a passwordless world would be.

Illustrations

Related Terms

Quotes

Credential: A document, object, or data structure that vouches for the identity of a person through some method of trust and authentication. Common types of identity credentials include—but are not limited to—ID cards, certificates, numbers, passwords, or SIM cards. A biometric identifier can also be used as a credential once it has been registered with the identity provider

(World Bank Group and GPFI, 2018, p. vii)

A credential is typically a collection of identity attributes and assertions about a specific subject issued by an identity provider

(/wiki/spaces/QUOT/pages/67633460)

The evidence provided by a user in the process of user authentication is called a credential. Different systems may require different types of credentials to ascertain user identity, and may even require more than one credential. In computer systems, the credential very often takes the form of a user password, which is a secret known only to the individual and the system. Credentials may take other forms, however, including PIN numbers, certificates, tickets, etc.

(Todorov, 2007, p. 5)

Bibliography

• /wiki/spaces/QUOT/pages/67568001

• Benantar, 2006, p. 68.

• World Bank Group and GPFI, 2018, p. vii

See Also

• Page:
  AWS IAM Temporary Security Credentials (Dictionary Entry) (Dictionary)
• Page:
  AWS, 2021 (Bibliography)
• Page:
  Bradley, 2019 (Bibliography)
• Page:
  Credential (Dictionary)
• Page:
  Credential Harvesting (Dictionary)
• Page:
  Credential Service Provider (Dictionary Entry) (Dictionary)
• Page:
  Credential Stuffing (Dictionary)
• Page:
  Credential Theft (Dictionary Entry) (Dictionary)
• Page:
  OM-BP-0013: Rotate service accounts credentials frequently (Best Practice) (Best Practices)
• Page:
  OM-BP-0025: Reset all credentials and secrets following a breach (Best Practices)
• Page:
  Thycotic, 2019 (Bibliography)
• Page:
  Wang and De Filippi, 2020 (Bibliography)