IDEF Supplemental Common Best Practices, v1.0
Profile of Identity Ecosystem Framework (IDEF) supplemental best practices that are not required but are recommended for all organizational entities participating in the Identity Ecosystem.
| Identifier | https://artifacts.trustmarkinitiative.org/lib/tips/idef-supplemental-common-best-practices/1.0/ | ||||
| Publication Date | 2018-10-01 | ||||
| Issuing Organization |
Trustmark Initiative (https://trustmarkinitiative.org/)
View Contact
|
||||
| Keywords | IDEF, Identity Ecosystem Framework | ||||
| Legal Notice | This document and the information contained herein is provided on an "AS IS" basis, and the Georgia Tech Research Institute disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, the Georgia Tech Research Institute disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein. |
Loading...
Trust Expression:
TD_IDEFRecommendedExchangeStandards and TD_IDEFRecommendedTaxonomyStandards and TD_IDEFRecommendedProcessModels and TD_IDEFRecommendedModularity and TD_IDEFRecommendedFederationCompliance and TD_IDEFRecommendedLegalCompliance and TD_IDEFRecommendedQualityControls and TD_IDEFRecommendedTechnologyEnforcement and TD_IDEFRecommendedConsequencesofDeclining and TD_IDEFRecommendedAttributeRequirementsQuery
References (10)
| TD IDEF Recommended Exchange Standards, v1.0 | |
|---|---|
| Description | Specifies best practices in accordance with Identity Ecosystem Framework (IDEF) best practice INTEROP-BP-B: RECOMMENDED EXCHANGE STANDARDS. |
| ID | TD_IDEFRecommendedExchangeStandards |
| Provider Reference | |
| TD IDEF Recommended Taxonomy Standards, v1.0 | |
|---|---|
| Description | Specifies best practices in accordance with Identity Ecosystem Framework (IDEF) best practice INTEROP-BP-C: RECOMMENDED TAXONOMY STANDARDS. |
| ID | TD_IDEFRecommendedTaxonomyStandards |
| Provider Reference | |
| TD IDEF Recommended Process Models, v1.0 | |
|---|---|
| Description | Specifies best practices in accordance with Identity Ecosystem Framework (IDEF) best practice INTEROP-BP-D: RECOMMENDED PROCESS MODELS. |
| ID | TD_IDEFRecommendedProcessModels |
| Provider Reference | |
| TD IDEF Recommended Modularity, v1.0 | |
|---|---|
| Description | Specifies best practices in accordance with Identity Ecosystem Framework (IDEF) best practice INTEROP-BP-E: RECOMMENDED MODULARITY. |
| ID | TD_IDEFRecommendedModularity |
| Provider Reference | |
| TD IDEF Recommended Federation Compliance, v1.0 | |
|---|---|
| Description | Specifies best practices in accordance with Identity Ecosystem Framework (IDEF) best practice INTEROP-BP-F: RECOMMENDED FEDERATION COMPLIANCE. |
| ID | TD_IDEFRecommendedFederationCompliance |
| Provider Reference | |
| TD IDEF Recommended Legal Compliance, v1.0 | |
|---|---|
| Description | Specifies best practices in accordance with Identity Ecosystem Framework (IDEF) best practice INTEROP-BP-G: RECOMMENDED LEGAL COMPLIANCE. |
| ID | TD_IDEFRecommendedLegalCompliance |
| Provider Reference | |
| TD IDEF Recommended Quality Controls, v1.0 | |
|---|---|
| Description | Specifies best practices in accordance with Identity Ecosystem Framework (IDEF) best practice PRIVACY-BP-A: RECOMMENDED QUALITY CONTROLS. |
| ID | TD_IDEFRecommendedQualityControls |
| Provider Reference | |
| TD IDEF Recommended Technology Enforcement, v1.0 | |
|---|---|
| Description | Specifies best practices in accordance with Identity Ecosystem Framework (IDEF) best practice PRIVACY-BP-B: RECOMMENDED TECHNOLOGY ENFORCEMENT. |
| ID | TD_IDEFRecommendedTechnologyEnforcement |
| Provider Reference | |
| TD IDEF Recommended Consequences of Declining, v1.0 | |
|---|---|
| Description | Specifies best practices in accordance with Identity Ecosystem Framework (IDEF) best practice PRIVACY-BP-C: RECOMMENDED CONSEQUENCES OF DECLINING. |
| ID | TD_IDEFRecommendedConsequencesofDeclining |
| Provider Reference | |
| TD IDEF Recommended Attribute Requirements Query, v1.0 | |
|---|---|
| Description | Specifies best practices in accordance with Identity Ecosystem Framework (IDEF) best practice USABLE-BP-A: RECOMMENDED ATTRIBUTE REQUIREMENTS QUERY. |
| ID | TD_IDEFRecommendedAttributeRequirementsQuery |
| Provider Reference | |
Sources (1)
| IDEF | Identity Ecosystem Steering Group. Identity Ecosystem Framework (IDEF) Baseline Functional Requirements v1.0 with Supplemental Guidance. Approved on 15 Oct 2015. https://www.idesg.org/portals/0/documents/core/IDEF-Baseline-Requirement-v1.0-with-Supplemental-Guidance_MOD.pdf. |
Terms (12)
| Term Name | Abbreviations | Definition |
|---|---|---|
| Anonymous | An interaction designed such that the data collected is not sufficient to infer the identity of the user involved nor is such data sufficient to permit an entity to associate multiple interactions with a user or to determine patterns of behavior with a user. | |
| Digital Identity Management Function | Any of the functions described in the IDESG Functional Model (registration, credentialing, authentication, authorization, and intermediation), which also encompass enrollment, identity proofing, identity vetting, access control, attribute management, transaction processing, and identity data maintenance. | |
| Entity | Any organization providing identity services. | |
| Identifier | A number or other non-attribute designation designed to specify an individual or set of individuals in a system. | |
| Identity Ecosystem Framework | IDEF | The overarching set of policies, best practices and standards that serve as the policy foundation for the Identity Ecosystem. |
| Identity Ecosystem Steering Group | IDESG | A voluntary, public-private partnership dedicated to developing an Identity Ecosystem Framework (IDEF) and services to better online digital identity. The IDESG looks to advance the Identity Ecosystem called for in the National Strategy for Trusted Identities in Cyberspace (NSTIC). |
| Nonproprietary Published Format/Specification | A known and consistent format that is published and transparent to all relying parties and identity providers in the relevant network, and is not controlled by a commercial interest. | |
| Personal Information | Broadly means any information about or linked to a user that is collected, used, transmitted, or stored in or by digital identity management functions. | |
| Pseudonymous | An interaction designed such that the data collected is not sufficient to allow the entity to infer the user involved but which does permit an entity to associate multiple interactions with the user's claimed identity. | |
| Redress | When (a) an entity offers an opportunity for a party who is transacting with it to complain or ask for adjustment, if the transaction is unsatisfactory to that other party; and (b) the entity responds clearly to each request of that kind; and (c) if the request relates to the entity's failure to comply with the IDESG Baseline Requirements, the entity cures the failure to comply, or provides a remedy for the failure. | |
| User | In usability statements, refers to an individual human being. This does not include machines, algorithms, or other non-human agents or actors. Equivalents and related terms may include: user- centric, user-centered, human-centered, end user, individual user, user-friendly. In security statements, may refer either to an individual natural person, or to an entity such as a company or agency: Various security requirements may confer opportunities, rights or remedies on a party or account which is served by a cybersecurity function, whether that account relates to a single human or to an organization. |
|
| User-Centric | Systems, design and/or program processes that put the individual human being at the center of the activity. Equivalents and related terms may include: user, user-centered, human- centered, end user, individual user, user-friendly. |