Identity Verification

Identity Verification
Processes for checking a claimed identity
Category	Security process
Area	Artificial intelligence, robotics and connected systems
Related concepts	Machine Authentication, Digital Identity, Public Key Infrastructure

Identity verification refers to processes for checking whether an entity corresponds to a claimed identity. In digital systems, identity proofing, authentication and authorization are related but distinct activities.

Different questions

Identity proofing may establish information about a person or organization; authentication tests control of credentials; authorization determines permitted operations. A signed credential can be authentic even when its underlying claim is outdated or unsuitable.

Guidance and scope

NIST SP 800-63-4 provides digital identity guidance mainly for users interacting with government information systems over networks. Its precise requirements should not be assumed to govern robot identity by default.

Machine contexts

For devices and services, verification can involve certificates, keys or provisioning records. Controls may additionally check device status, enrollment and authorization before allowing sensitive commands.

See also

• Machine Authentication
• Digital Identity
• Public Key Infrastructure