NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Capture – The method of taking a biometric sample from an end user.
Source: FIPS 201
Cardholder – An individual possessing an issued Personal Identity Verification
(PIV) card.
Source: FIPS 201
Cascading – Downward flow of information through a range of security levels
greater than the accreditation range of a system, network, or
component.
SOURCE: CNSSI-4009
Category – Restrictive label applied to classified or unclassified information to
limit access.
SOURCE: CNSSI-4009
CBC/MAC – See Cipher Block Chaining-Message Authentication Code.
CCM – See Counter with Cipher-Block Chaining-Message Authentication
Code.
Central Office of Record (COR) – Office of a federal department or agency that keeps records of
accountable COMSEC material held by elements subject to its
oversight
SOURCE: CNSSI-4009
Central Services Node (CSN) – The Key Management Infrastructure core node that provides central
security management and data management services.
SOURCE: CNSSI-4009
Certificate – A digital representation of information which at least
1) identifies the certification authority issuing it,
2) names or identifies its subscriber,
3) contains the subscriber's public key,
4) identifies its operational period, and
5) is digitally signed by the certification authority issuing it.
SOURCE: SP 800-32
Certificate – A set of data that uniquely identifies an entity, contains the entity’s
public key and possibly other information, and is digitally signed by
a trusted party, thereby binding the public key to the entity.
Additional information in the certificate could specify how the key is
used and its cryptoperiod.
SOURCE: SP 800-21
Pg 25