Authenticator Assurance Level
E414747
Authenticator Assurance Level
NIST-defined term
digital authentication concept
security assurance metric
Authenticator Assurance Level is a NIST-defined measure of the strength and reliability of an authentication process, indicating the degree of confidence that a user has been properly authenticated.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Authenticator Assurance Level canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T4131234 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Authenticator Assurance Level Context triple: [NIST digital identity guidelines, definesConcept, Authenticator Assurance Level]
-
A.
Secure Authentication Version 5
Secure Authentication Version 5 is a security enhancement for the DNP3 protocol that provides robust authentication and protection against unauthorized control and cyber attacks in industrial control systems.
-
B.
Article IX – Authentication and Identification
Article IX – Authentication and Identification is the portion of the Federal Rules of Evidence that governs how parties must prove that documents, records, and other items of evidence are genuine before they can be admitted in court.
-
C.
Simultaneous Authentication of Equals
Simultaneous Authentication of Equals is a secure password-based key exchange protocol that protects Wi‑Fi connections from offline dictionary attacks and improves authentication robustness.
-
D.
LE Secure Connections
LE Secure Connections is an enhanced Bluetooth Low Energy security feature that provides stronger encryption and protection against eavesdropping and man-in-the-middle attacks during device pairing and data exchange.
-
E.
Duo Security
Duo Security is a cybersecurity company best known for its cloud-based multi-factor authentication and zero-trust access solutions.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Authenticator Assurance Level Target entity description: Authenticator Assurance Level is a NIST-defined measure of the strength and reliability of an authentication process, indicating the degree of confidence that a user has been properly authenticated.
-
A.
Secure Authentication Version 5
Secure Authentication Version 5 is a security enhancement for the DNP3 protocol that provides robust authentication and protection against unauthorized control and cyber attacks in industrial control systems.
-
B.
Article IX – Authentication and Identification
Article IX – Authentication and Identification is the portion of the Federal Rules of Evidence that governs how parties must prove that documents, records, and other items of evidence are genuine before they can be admitted in court.
-
C.
Simultaneous Authentication of Equals
Simultaneous Authentication of Equals is a secure password-based key exchange protocol that protects Wi‑Fi connections from offline dictionary attacks and improves authentication robustness.
-
D.
LE Secure Connections
LE Secure Connections is an enhanced Bluetooth Low Energy security feature that provides stronger encryption and protection against eavesdropping and man-in-the-middle attacks during device pairing and data exchange.
-
E.
Duo Security
Duo Security is a cybersecurity company best known for its cloud-based multi-factor authentication and zero-trust access solutions.
- F. None of above. chosen
Statements (47)
| Predicate | Object |
|---|---|
| instanceOf |
Authenticator Assurance Level
ⓘ
Authenticator Assurance Level ⓘ Authenticator Assurance Level ⓘ NIST-defined term ⓘ digital authentication concept ⓘ security assurance metric ⓘ |
| abbreviation | AAL ⓘ |
| allows |
memorized secrets
ⓘ
multi-factor OTP devices ⓘ multi-factor cryptographic hardware authenticators ⓘ multi-factor cryptographic software authenticators ⓘ single-factor OTP devices ⓘ single-factor cryptographic software authenticators ⓘ |
| appliesTo |
digital authentication
ⓘ
online identity systems ⓘ |
| definedBy | National Institute of Standards and Technology ⓘ |
| definedIn |
NIST SP 800-63-3
ⓘ
linked to:
NIST SP 800-63
NIST SP 800-63B ⓘ |
| governedBy | risk management requirements ⓘ |
| hasDescription |
provides high confidence that the claimant controls authenticators bound to the subscriber’s account
ⓘ
provides some assurance that the claimant controls an authenticator bound to the subscriber’s account ⓘ provides very high confidence that the claimant controls authenticators bound to the subscriber’s account ⓘ |
| hasLevel |
AAL1
ⓘ
AAL2 ⓘ AAL3 ⓘ |
| hasPurpose |
indicate confidence that a claimant has been properly authenticated
ⓘ
measure strength of an authentication process ⓘ |
| influences |
identity proofing and lifecycle management policies
ⓘ
technical requirements for authenticators ⓘ |
| notEquivalentTo |
authorization level
ⓘ
data classification level ⓘ |
| orderedBy | increasing authentication strength ⓘ |
| partOf |
NIST Digital Identity Guidelines
ⓘ
linked to:
NIST digital identity guidelines
|
| relatedTo |
Federation Assurance Level
ⓘ
Identity Assurance Level ⓘ authentication factors ⓘ multi-factor authentication ⓘ |
| requires |
hardware-based cryptographic authenticators
ⓘ
multi-factor authentication ⓘ proof of possession and control of two distinct authentication factors ⓘ resistance to replay attacks ⓘ single-factor authentication ⓘ verifier impersonation resistance ⓘ |
| scope | authentication event strength and reliability ⓘ |
| supports | selection of authenticators based on risk ⓘ |
| usedIn |
federal information systems
ⓘ
risk-based authentication design ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Authenticator Assurance Level Description of subject: Authenticator Assurance Level is a NIST-defined measure of the strength and reliability of an authentication process, indicating the degree of confidence that a user has been properly authenticated.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.