What is BS 8626 about?
Organizations providing online authentication services need to ensure that access is only provided to relevant authorized users in an effective and efficient way. BS 8626 is a new British Standard on how to design and operate an online user identification system. BS 8626 applies where the user initiates the process of identification/authentication for an online service supplied by an RP.
BS 8626 also describes various categories of authentication methods, together with their inherent vulnerabilities.
Note: BS 8626 does not give recommendations for single sign-on systems; digital identity federation schemes; password application managers and password generation software, and attributes sharing b...