ISO 5158:2023 モバイル金融サービス — 顧客識別ガイドライン | ページ 6

3.1

assurance level

AL

amount of assurance obtained according to the specific scale used by the assurance method

[SOURCE:ISO/IEC 19792:2009, 4.1.1, modified — Note 1 to entry removed.]

3.2

biometrics

automated recognition of individuals based on their behavioural and biological characteristics

[SOURCE:ISO/IEC 19784-1:2018, 4.17]

3.3

customer

person or business that has contracted with a mobile financial services provider (MFSP) in order to use mobile financial services (MFS)

Note 1 to entry: Only customers who are natural persons are covered by this document.

[SOURCE:ISO 12812-1:2017, 3.12, modified — Note 1 to entry added.]

3.4

evidence issuer

identity information provider or identity information authority (3.7) which issues the identity evidence

3.5

identity

set of attributes related to an entity

Note 1 to entry: The entity is a natural person in this document.

[SOURCE:ISO/IEC 24760-1:2019, 3.1.2, modified — Notes to entry replaced.]

3.6

identity assurance level

IAL

parameter used to describe the amount of assurance in a subscriber’s identity (3.5) obtained by a credential service provider

Note 1 to entry: IAL1 indicates that there is no requirement to link the applicant to a specific real-life identity.

Note 2 to entry: IAL2 indicates that evidence supports the real-world existence of the claimed identity and verifies that the applicant is appropriately associated with this real-world identity.

Note 3 to entry: IAL3 requires physical presence.

[SOURCE:NIST SP-800-63A:2019, 2.2, modified.]

3.7

identity information authority

IIA

entity related to a particular domain responsible for the life cycle management of trusted identities, which can make provable statements on the validity and/or correctness of one or more attribute values in an identity (3.5)

Note 1 to entry: An identity information authority is typically associated with the domain, for instance the domain of origin, in which the attributes, which the identity information authority can make assertions on, have a particular significance.

Note 2 to entry: The activity of an identity information authority is usually subject to a policy on privacy protection.

Note 3 to entry: An entity can combine the functions of identity information provider and identity information authority.

[SOURCE:ISO/IEC 24760-1:2019, 3.3.3, modified — Definition and Note 2 to entry revised.]