ISO/IEC 9798-5:2009 情報技術—セキュリティ技術—エンティティ認証—パート5：ゼロ知識技術を使用するメカニズム | ページ 5

2.1

accreditation exponent

secret number related to the verification exponent and used in the production of private keys

2.2

adaptation parameter

public key specific to the modulus and used in the definition of public keys in the GQ2 mechanisms

2.3

asymmetric cryptographic technique

cryptographic technique that uses two related operations: a public operation defined by a public data item, and a private operation defined by a private data item (the two operations have the property that, given the public operation, it is computationally infeasible to derive the private operation)

2.4

asymmetric encryption system

system based on asymmetric cryptographic techniques whose public operation is used for encryption and whose private operation is used for decryption

2.5

asymmetric pair

two related data items where the private data item defines a private operation and the public data item defines a public operation

2.6

challenge

procedure parameter used in conjunction with secret parameters to produce a response

2.7

claimant

entity whose identity can be authenticated, including the functions and the private data necessary to engage in authentication exchanges on behalf of a principal

2.8

coupon

pair of pre-computed numbers to be used only once; one is kept secret and the other remains secret until its use by an entity

2.9

claimant parameter

public data item, number or bit string, specific to a given claimant within the domain

2.10

decryption

reversal of a corresponding encryption

Note 1 to entry: Decryption ^[30] and decipherment ^[24] are equivalent terms.

2.11

domain

collection of entities operating under a single security policy

Note 1 to entry: For example, public key certificates created either by a single certification authority, or by a collection of certification authorities using the same security policy.

2.12

domain parameter

public key, or function, agreed and used by all entities within the domain

2.13

encryption

reversible operation by a cryptographic algorithm converting data into ciphertext, so as to hide the information content of the data

Note 1 to entry: Encryption ^[30] and encipherment ^[24] are equivalent terms.

2.14

entity authentication

corroboration that an entity is the one claimed

[SOURCE:ISO/IEC 9798-1:1997, definition 3.3.11]

2.15

exchange multiplicity parameter

number of exchanges of information involved in one instance of an authentication mechanism

2.16

hash-function

[SOURCE:ISO/IEC 10118-1:2000, definition 3.5]

2.17

identification data

set of public data items (an account number, an expiry date and time, a serial number, etc.) assigned to an entity and used to identify it

2.18

mutual authentication

entity authentication that provides both entities with assurance of each other's identity

[SOURCE:ISO/IEC 9798-1:1997, definition 3.3.14]

2.19

number

natural number, i.e. a non-negative integer

2.20

pair multiplicity parameter

number of asymmetric pairs of numbers involved in one instance of an authentication mechanism

2.21

private key

data item of an asymmetric pair, that shall be kept secret and should only be used by a claimant in accordance with an appropriate response formula, thereby establishing its identity

2.22

procedure parameter

transient public data item used in an instance of an authentication mechanism such as a witness, challenge or response

2.23

public key

data item of an asymmetric pair, that can be made public and shall be used by every verifier for establishing the claimant's identity

2.24

random number

time variant parameter whose value is unpredictable

[SOURCE:ISO/IEC 9798-1:1997, definition 3.3.24]

2.25

response

procedure parameter produced by the claimant, and processed by the verifier for checking the identity of the claimant

2.26

secret parameter

number or bit string that does not appear in the public domain and is only used by a claimant, e.g. a private key

2.27

token

message consisting of data fields relevant to a particular communication and which contains information that has been produced using a cryptographic technique

2.28

unilateral authentication

entity authentication that provides one entity with assurance of the other's identity but not vice versa

[SOURCE:ISO/IEC 9798-1:1997, definition 3.3.33]

2.29

verification exponent

public key used as exponent by the claimant and the verifier

2.30

verifier

entity including the functions necessary for engaging in authentication exchanges on behalf of an entity requiring an entity authentication

2.31

witness

procedure parameter that provides evidence of the claimant's identity to the verifier