What is ISO/IEC 27551 about ?
ISO/IEC 27551 provides a framework and establishes requirements for attribute-based unlinkable entity authentication (ABUEA).
Attribute-based unlinkable entity authentication (ABUEA) provides a means for PII principals to establish the authenticity of a selected subset of their identity attributes without revealing a larger subset. Special focus is put on unlinkability and a metric that measures the strength of this property in implementations of ABUEA is introduced.
ISO/IEC 27551 focuses on cases where at least one attribute is attested by a third party. ISO/IEC 27551 also identifies security properties to be met to achieve various protections as well as unlinkable properties.
Who is ISO/IEC 27551 for ?
ISO/IEC 27551 on Information security, cybersecurity and privacy protection is useful for:
- Government
- Cyber security
- Cyber security experts
- Any entity responsible for security and safety against cyber attacks
Why should you use ISO/IEC 27551 ?
Cyber security is the practice of defending computers, servers, mobile devices, electronic systems, networks, and data from malicious attacks.
ISO/IEC 27551 has set the privacy principles which apply to all actors that can be involved in the processing of PII. An attribute-based entity authentication protocol is a sequence of computations and communications among user agents, relying on the party and attribute providers.
ISO/IEC 27551 will help you in establishing a form of trust between two unfamiliar parties that share trust in the common third-party entity.
ISO/IEC 27551 helps in computing as well as communicating between three parties about the statement that are made on them.
ISO/IEC 27551 helps in achieving the unlinkability of protocol execution without external context. ISO/IEC 27551 helps in reducing the leakage of information to relying party of a user agent and also helps in satisfying the assurance level of attributes that are required by a relying party.
ISO/IEC 27551 will help you in using an entity identifier that does not allow the site to link two or more visits by the PII principal. That means when two transactions are performed, it is difficult to distinguish whether the transactions were performed by the same user or by two different users.
ISO/IEC 27551 will help in protecting and building trust among the three parties. ISO/IEC 27551 helps in lower layers privacy and these security properties of lower communication layers are also taken into consideration.
