Introduce
常见的用户认证方法有:
- Password
- 2FA/MFA
- OTP (HOTP, TOTP)
- SMS
- Registered Device Push
- PGP MFA
- FIDO
- WebAuthn
- PKI Sign (BTC/ETH …)
- SSH Key Sign (SSH)
- PGP Sign (yum)
- Smart Card
- PIV
- OpenPGP Card
- Encryption with MAC
Digital Identity Guidelines
https://pages.nist.gov/800-63-3/
Document | Title | URL |
---|---|---|
SP 800-63-3 | Digital Identity Guidelines | https://doi.org/10.6028/NIST.SP.800-63-3 |
SP 800-63A | Enrollment and Identity Proofing | https://doi.org/10.6028/NIST.SP.800-63a |
SP 800-63B | Authentication and Lifecycle Management | https://doi.org/10.6028/NIST.SP.800-63b |
SP 800-63C | Federation and Assertions | https://doi.org/10.6028/NIST.SP.800-63c |