Archive
The final version of the NIST SP800-63-4 Digital Identity Guideline, which identity experts have been eagerly awaiting, was finally published on August 1st. There are quite a few differences; the diff shows 95 files changed, +10152, and -12999 lines changed. The Digital Agency has already...
On April 1st, the Digital Agency published the results of the expert panel meeting (FY2024) for revising the identity verification guidelines. The "DS-500 Guidelines on Online Identity Verification Methods in Administrative Procedures" (commonly known as the "Identity Verification Guidelines") summarizes the rules and methods for securely verifying identity when digitizing administrative procedures. To give an example, it's like teaching online identity verification...
There's been a lot of talk circulating about NIST releasing a second draft of its password policy guidelines saying "Don't change your passwords regularly," and people are saying that the prohibition of regular password changes is new. So let me tell you, it's already been the case in NIST SP800-63, version 3, published in June 2017. It's not new. Regarding the structure of password characters...
We'd like to hold the NIST SP800-63-4 2pd reading group (2) on Friday, September 6th, starting at 9 PM. This time, we'll be reading through the basic identity model and Part C, focusing on federation and wallet-related aspects. Mr. Katsuhara is expected to join us again, as he did last time. Please join us! If you haven't seen the previous session, please check out this blog...
Although it is a bit sudden, the first reading session for the NIST SP800-63-4 Digital ID Guidelines Second Public Draft will be held on August 2th at 8pm. We hope you will join us.
The second exposure draft (2pd) of NIST SP800-63-4 was published a week ago. The workshop held today (1:00 AM to 3:00 AM JST on the 29th) was the first in a planned series of workshops, outlining some of the most significant changes since the initial exposure draft. Introduction and Housekeeping NIST Special Publication 800-63-4…
Overview: In recent years, with the rapid advancement of the digital society, the importance of online identity verification and authentication has increased. The U.S. National Institute of Standards and Technology (NIST) has now released a draft update (2nd Public Draft) of its digital identity guideline, "SP 800-63-4." This update aims to strengthen security and create an environment where everyone can access digital services fairly…
In recent years, with the increasing adoption of multi-factor authentication (MFA), balancing user convenience and security has become a challenge. MFA is a security method that prevents unauthorized access to accounts by combining multiple authentication methods, such as passwords, biometric authentication, and one-time passwords. However, implementing MFA means adding more cumbersome steps for users. This article aims to address this challenge…
