ISO/IEC 9798-4:1999

Information technology — Security techniques — Entity authentication — Part 4: Mechanisms using a cryptographic check function

Publication date:   Dec 16, 1999

General information

90.93 Standard confirmed   Nov 15, 2021

ISO/IEC

ISO/IEC JTC 1/SC 27 Information security, cybersecurity and privacy protection

International Standard

35.030   IT Security

Buying

  Published

PDF - €76.23

  English  



Buy

Scope

This part of ISO/IEC 9798 specifies entity authentication mechanisms using a cryptographic check function. Two
mechanisms are concerned with the authentication of a single entity (unilateral authentication), while the remaining
are mechanisms for mutual authentication of two entities.
The mechanisms specified in this part of ISO/IEC 9798 use time variant parameters such as time stamps,
sequence numbers, or random numbers, to prevent valid authentication information from being accepted at a later
time or more than once.
If a time stamp or sequence number is used, one pass is needed for unilateral authentication, while two passes are
needed to achieve mutual authentication. If a challenge and response method employing random numbers is
used, two passes are needed for unilateral authentication, while three passes are required to achieve mutual
authentication.
Examples of cryptographic check functions are given in ISO/IEC 9797.

Life cycle

PREVIOUSLY

WITHDRAWN
ISO/IEC 9798-4:1995

NOW

PUBLISHED
ISO/IEC 9798-4:1999
90.93 Standard confirmed
Nov 15, 2021