Guide to Understanding Identification and Authentication in Trusted Systems.

摘要

This document provides a set of good practices related to the design and implementation of identification and authentication (I & A) for systems employed for processing classified and other sensitive information. It's written to help vendors and evaluators understand I & A requirements. It contains suggestions and recommendations derived from Trusted Computer System Evaluation Criteria (TCSEC) objectives but which aren't required by the TCSEC.