Document ID: chunk:federal_register_of_legislation:F2024L01435:front:0:p3
Version: federal_register_of_legislation:F2024L01435
Segment Type: other
Provision Reference: 
Character Range: 6446–9845

standards designated ISO/IEC 2382 (concerning vocabulary), published by the International Organization for Standardization.
Note: At the time this instrument was made, located at https://www.iso.org/standard/73514.html.
ISO/IEC 24745:2022 means the standard for biometric information protection, published by the International Organization for Standardization.
Note: At the time this instrument was made, located at https://www.iso.org/standard/75302.html.
ISO/IEC 30107-1:2023 means Part 1 (concerning framework) of the series of standards designated ISO/IEC 30107 (concerning biometric presentation attack detection), published by the International Organization for Standardization.
Note: At the time this instrument was made, located at https://www.iso.org/standard/83828.html.
ISO/IEC 30107-3:2023 means Part 3 (concerning testing and reporting) of the series of standards designated ISO/IEC 30107 (concerning biometric presentation attack detection), published by the International Organization for Standardization.
Note: At the time this instrument was made, located at https://www.iso.org/standard/79520.html.
ISP means an accredited identity service provider.
look-up secret means a physical or electronic record that stores a set of secrets shared between an individual and the accredited entity authorised to provide an authenticator service.
memorised secret means a secret value chosen and memorised by the individual, such as a password or PIN.
MF crypto device is short for multi-factor cryptographic device.
MF crypto software is short for multi-factor cryptographic software.
MF OTP device is short for multi-factor one-time password device.
MitM means a man-in-the-middle attack whereby an adversary intercepts communications between 2 parties and presents themselves to each party as if the adversary were the other party.
multi-factor cryptographic device means a hardware device that performs cryptographic operations using one or more protected cryptographic keys and requires activation through a second authentication factor.
Note: Although cryptographic devices contain software, they differ from cryptographic software authenticators in that all embedded software on the hardware device is under the effective control of the accredited entity providing authentication services.
multi-factor cryptographic software means a cryptographic key that is stored in some form of removable media or device that requires activation through a second authentication factor.
multi-factor one-time password device means a device that generates OTPs as part of an authentication activity.
Note: This includes hardware devices and software-based OTP generators installed on devices such as mobile phones. The OTP is displayed on the device and input or transmitted by an individual, proving possession and effective control of the device.
one-time password means a password that is only valid for a single authentication event.
OTP is short for one-time password.
out-of-band device means a physical device that uses an alternative channel for transmitting information.
phishing resistance means authentication methods implemented by an accredited entity for preventing and addressing impersonation attacks.
presentation attack instrument species means a class of presentation attack instrument created using a common production method and based on different biometric characteristics.
PSTN