Best Practice Detail
13-13-8768
Network Operators, Service Providers, Equipment Suppliers, Public Safety and Government should support multi-factor authentication to increase confidence in the identity of an entity.
Status: Edited
References/Comments: Multi-factor authentication involves validating the authenticity of the identity of an entity by verifying multiple identifiers and attributes associated with the entity. The data for multi-factor authentication capabilities should be organized based something you are (e.g., physical of behavioral characteristics of an end user or customer\\\'s characteristic or attribute that is being compared such as typing patterns, voice recognition), something you have (e.g., a driver\\\'s license, or a security token) and something you know (e.g., a password, pin number, security image). ITU-T Y.2702, Authentication and authorization requirements for NGN release 1 ATIS-1000030, Authentication and Authorization Requirements for Next Generation Network (NGN) NIST SP 800-63, Electronic Authentication Guideline.
Historical events:
- Network Operators
- Service Providers
- Equipment Suppliers
- Public Safety
- Government
- Cable
- Internet/Data
- Satellite
- Wireless
- Wireline
- Cyber Security
- Information Protection
- Encryption
- Intrusion Detection
- CSRIC VII: Edited By WG 4 In CSRIC VII
