7.1 Collection and Data Minimization (was: Threat Mitigation Strategies)
All changes in this version
Title changed
Before · SP 800-63A
Threat Mitigation Strategies
After · SP 800-63A-4
ThreatCollection Mitigationand StrategiesData Minimization
Control changed
Before · SP 800-63A
Enrollment threats can be deterred by making impersonation more difficult to accomplish or by increasing the likelihood of detection. This recommendation deals primarily with methods for making impersonation more difficult; however, it does prescribe certain methods and procedures that may help prove who perpetrated an impersonation. At each level, methods are employed to determine that a person with the claimed identity exists, that the applicant is the person entitled to the claimed identity, and that the applicant cannot later repudiate the enrollment. As the level of assurance increases, the methods employed provide increasing resistance to casual, systematic, and insider impersonation. Table 7-2 lists strategies for mitigating threats to the enrollment and issuance processes.
Table 7-2 Enrollment and Issuance Threat Mitigation Strategies Activity Threat/Attack Mitigation Strategy Normative Reference(s)
Enrollment Falsified identity proofing evidence CSP validates physical security features of presented evidence. 4.4.1.3 , 4.5.3 , 5.2.2
CSP validates personal details in the evidence with the issuer or other authoritative source. 4.4.1.3 , 4.5.3 , 4.5.6 , 5.2.2 .
Fraudulent use of another’s identity CSP verifies identity evidence and biometric of applicant against information obtained from issuer or other authoritative source. 4.4.1.7 , 4.5.7 , 5.3
Verify applicant- provided non- government-issued documentation (e.g., electricity bills in the name of the applicant with the current address of the applicant printed on the bill, or a credit card bill) to help achieve a higher level of confidence in the applicant’s identity. 4.4.1.7 , 4.5.7 , 5.3
Enrollment repudiation CSP saves a subscriber’s biometric. 4.4.1.7 , 4.5.7
After · SP 800-63A-4
Enrollment threats can be deterred by making impersonation more difficult to accomplish orThese byguidelines increasingpermit the likelihood of detection. This recommendation deals primarily with methods for making impersonation more difficult; however, it does prescribe certain methodscollection and procedures that may help prove who perpetrated an impersonation.processing Atof eachonly level,the methodspersonal areinformation employednecessary to determine that a person withvalidate the claimed identity exists, that the applicant is the person entitled toassociate the claimed identity, and thatto the applicant cannot later repudiate the enrollment. As the level of assurance increases, the methods employed provide increasing resistance to casual,mitigate systematicfraud, and insider impersonation.provide TableRPs 7-2with liststhe strategiesattributes forthey mitigatingmay threatsuse to the enrollment andmake issuanceauthorization processesdecisions.
Table7-2 Enrollment and IssuanceProcessing Threatpersonal Mitigationinformation, Strategiesincluding Activitybiometric Threat/Attackdata, Mitigationthat Strategyis Normativeunnecessary Reference(s)for
EnrollmentFalsifiedthe identityidentify proofing evidence CSP validates physical securityservice featurescan ofcause presentedindividuals evidence.to 4.4.1.3be ,concerned 4.5.3that ,their 5.2.2data
CSPvalidatesis personalbeing detailsused in theways evidencethat withexceed thetheir issuerexpectations or other authoritative sourceauthorization. 4.4.1.3This ,could 4.5.3lead ,to 4.5.6privacy problems, 5.2.2 .such
Fraudulent use of another’s identity CSP verifies identityevidenceas andembarrassment, biometricloss of applicant against information obtained from issuerautonomy, or other authoritative source. 4.4.1.7loss ,of 4.5trust.7 Furthermore, 5.3the
Verifyapplicant-retention providedof non-personal government-issuedinformation documentationcan (e.g.,become electricityvulnerable billsto inunauthorized theaccess nameor ofuse. theData applicantminimization withreduces the current addressamount of the applicant printed on the bill, orpersonal ainformation creditthat cardis bill)vulnerable to helpunauthorized achieveaccess aor higheruse leveland ofencourages confidencetrust in the applicant’s identity. 4.4.1.7 , 4.5.7 , 5.3proofing
Enrollment repudiation CSP saves a subscriber’s biometric. 4.4.1.7 ,4.5process.7