| TD: IDEF Revocation

IDEF Revocation, v1.0

Specifies requirements in accordance with Identity Ecosystem Framework (IDEF) requirement SECURE-13: REVOCATION.

Assessment Step

1 Revocation (Revocation) Does the entity have processes and procedures in place to invalidate credentials and tokens? Artifact A1 Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.

Conformance Criteria (1)

Revocation Entities that issue credentials or tokens MUST have processes and procedures in place to invalidate credentials and tokens. Citation IDEF Page 36

Show Metadata, Sources & Terms

Hide Metadata, Sources & Terms

Metadata

Identifier

https://artifacts.trustmarkinitiative.org/lib/tds/idef-revocation/1.0/

Publication Date

2018-10-01

Issuing Organization

Trustmark Initiative (https://trustmarkinitiative.org/) View Contact

No Responder

help@trustmarkinitiative.org

404-407-8956

75 5th Street NW, Suite 900, Atlanta, GA 30308

Keywords

IDEF, Credential, Expiry, Loss, Process, Revocation, Security, Token

Issuance Criteria

yes(ALL)

Target Recipient

Entities that want to participate in the Identity Ecosystem in the role of Identity Provider (IDP) and demonstrate satisfaction of baseline identity service requirements and best practices such as those defined by the Identity Ecosystem Framework (IDEF) 1.0.

Trustmark Revocation Criteria

For any trustmark issued under this Trustmark Definition, the Trustmark Provider must revoke the trustmark upon any condition whereby one or more Conformance Criteria cease to be satisfied.

Legal Notice

This document and the information contained herein is provided on an "AS IS" basis, and the Georgia Tech Research Institute disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, the Georgia Tech Research Institute disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.

Sources (1)

IDEF	Identity Ecosystem Steering Group. Identity Ecosystem Framework (IDEF) Baseline Functional Requirements v1.0 with Supplemental Guidance. Approved on 15 Oct 2015. https://www.idesg.org/portals/0/documents/core/IDEF-Baseline-Requirement-v1.0-with-Supplemental-Guidance_MOD.pdf.

Terms (3)

Term Name	Abbreviations	Definition
Entity		Any organization providing identity services.
Identity Ecosystem Framework	IDEF	The overarching set of policies, best practices and standards that serve as the policy foundation for the Identity Ecosystem.
Identity Ecosystem Steering Group	IDESG	A voluntary, public-private partnership dedicated to developing an Identity Ecosystem Framework (IDEF) and services to better online digital identity. The IDESG looks to advance the Identity Ecosystem called for in the National Strategy for Trusted Identities in Cyberspace (NSTIC).

Also available as XML or JSON