ISO/IEC 20009-4:2017

Name: ISO/IEC 20009-4:2017 — Information technology — Security techniques — Anonymous entity authentication — Part 4: Mechanisms based on weak secrets
SKU: ISO/IEC 20009-4:2017
Price: 36000 RUB
Availability: InStock

Information technology — Security techniques — Anonymous entity authentication — Part 4: Mechanisms based on weak secrets

Название (английский):

Information technology — Security techniques — Anonymous entity authentication — Part 4: Mechanisms based on weak secrets

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 20
Дата публикации:: 11 августа 2017 г.
Издание:: ISO/IEC IS 20009 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version36 000 ₽Read online 24h1 200 ₽Read online 72h1 800 ₽

Язык документа:

ruen

Срок поставки:4 раб. дн. (перевод)

Цена:36 000 ₽

Описание (английский):

ISO/IEC 20009-4:2017 specifies anonymous entity authentication mechanisms based on weak secrets. The precise operation of each mechanism is specified, together with details of all inputs and outputs. This document is applicable to situations in which the server only verifies that the user belongs to a certain user group without obtaining any information that can be used to identify the user later on.

Abstract

Похожие стандарты

Стандарты, упомянутые в описании

Overview

ISO/IEC 20009-4:2017 defines privacy-preserving, anonymous entity authentication mechanisms that are based on weak secrets (for example, passwords). Part 4 of the ISO/IEC 20009 series specifies the precise operation, inputs and outputs of each mechanism so that a server can verify that a user belongs to a given user group without obtaining identifying information that could be used later to trace the user. The standard supports password-based anonymous entity authentication (PAEA) and addresses the special considerations when using weak secrets for privacy-preserving authentication.

Key topics

Scope and objectives

Anonymous entity authentication using weak secrets (passwords).
Server verifies group membership while preserving user anonymity.

PAEA mechanism types

Password-only PAEA mechanisms - users register password verification data at the server and remember only the password.
Storage-extra PAEA mechanisms - users hold additional password-wrapped credentials (revealable without breaking privacy); server does not retain password verification data.

Mechanisms specified

Named mechanisms in the document include SKI, YZ, and YZW (storage-extra).
Each mechanism is defined with setup, user registration, anonymous authentication, and user revocation procedures.

Technical building blocks

Symbols, conversion functions, and terminology for cryptographic groups, hash- and MAC-functions, authenticated encryption, and credentials.
Attention to attacks on weak secrets, exhaustive search considerations, and revocation handling.

Outputs and identifiers

Details of inputs/outputs for each protocol step; Annex A provides object identifiers for the mechanisms.

Patent and compliance notes

The standard notes potential patent claims (e.g., patent declarations provided by an identified organization) and references ISO/IEC patent resources.

Applications

Privacy-preserving access control for services that need to verify membership of a group (e.g., subscriber-only resources, forums, event access) without collecting persistent identity data.

Anonymous authentication in federated or decentralized systems where user traceability must be minimized.

Systems constrained to passwords/weak secrets where hardware tokens are impractical but privacy goals remain important.

Typical users:

Security architects and protocol designers implementing anonymous authentication.
Developers of identity and access management (IAM) systems, privacy engineers, and compliance teams.

Related standards

ISO/IEC 20009-1 (General) - foundational concepts for anonymous entity authentication.

ISO/IEC 11770-4 - key management mechanisms based on weak secrets.

ISO/IEC 9797-2, ISO/IEC 10118-3, ISO/IEC 19772 - hash, MAC, and authenticated encryption references used by the mechanisms.

Keywords: ISO/IEC 20009-4:2017, anonymous entity authentication, weak secrets, password-based anonymous authentication (PAEA), privacy-preserving authentication, SKI, YZ, YZW.

ISO/IEC 20009-4:2017

Abstract

Похожие стандарты

Overview

Key topics

Applications

Related standards

Технические детали

ISO/IEC 20009-3:2022

Information security — Anonymous entity authentication — Part 3: Mechanisms based on blind signatures

ISO/IEC 20009-1:2013

Information technology — Security techniques — Anonymous entity authentication — Part 1: General

BS ISO/IEC 9797-2:2021

Information security. Message authentication codes (MACs) - Mechanisms using a dedicated hash-function

BS ISO/IEC 10118-3:2018

IT Security techniques. Hash-functions. Dedicated hash-functions.

BS ISO/IEC 19772:2009

Information technology. Security techniques. Authenticated encryption