7.1 Threat Mitigation Strategies

Enrollment threats can be deterred by making impersonation more difficult to accomplish or by increasing the likelihood of detection. This recommendation deals primarily with methods for making impersonation more difficult; however, it does prescribe certain methods and procedures that may help prove who perpetrated an impersonation. At each level, methods are employed to determine that a person with the claimed identity exists, that the applicant is the person entitled to the claimed identity, and that the applicant cannot later repudiate the enrollment. As the level of assurance increases, the methods employed provide increasing resistance to casual, systematic, and insider impersonation. Table 7-2 lists strategies for mitigating threats to the enrollment and issuance processes.

Table 7-2 Enrollment and Issuance Threat Mitigation Strategies Activity Threat/Attack Mitigation Strategy Normative Reference(s)

Enrollment Falsified identity proofing evidence CSP validates physical security features of presented evidence. 4.4.1.3 , 4.5.3 , 5.2.2

CSP validates personal details in the evidence with the issuer or other authoritative source. 4.4.1.3 , 4.5.3 , 4.5.6 , 5.2.2 .

Fraudulent use of another’s identity CSP verifies identity evidence and biometric of applicant against information obtained from issuer or other authoritative source. 4.4.1.7 , 4.5.7 , 5.3

Verify applicant- provided non- government-issued documentation (e.g., electricity bills in the name of the applicant with the current address of the applicant printed on the bill, or a credit card bill) to help achieve a higher level of confidence in the applicant’s identity. 4.4.1.7 , 4.5.7 , 5.3

Enrollment repudiation CSP saves a subscriber’s biometric. 4.4.1.7 , 4.5.7

`7.1` Threat Mitigation Strategies

Title

Control