ISO IEC 24760-1-2019 PDF

Full title and description

St ISO IEC 24760-1-2019 — IT Security and Privacy — A framework for identity management — Part 1: Terminology and concepts. This standard defines core terminology and fundamental concepts used in identity management to support consistent understanding and implementation across information systems that process identity information.

Abstract

This document defines terms for identity management and specifies the core concepts of identity and identity management and their relationships. It is applicable to any information system that processes identity information and serves as the conceptual foundation for related parts of the ISO/IEC 24760 series.

General information

• Status: Withdrawn / superseded (replaced by a later revision of ISO/IEC 24760-1).
• Publication date: 29 May 2019.
• Publisher: ISO/IEC (International Organization for Standardization / International Electrotechnical Commission).
• ICS / categories: 35.030 (IT security).
• Edition / version: Edition 2 (2019); amended by ISO/IEC 24760-1:2019/Amd 1:2023.
• Number of pages: 24 pages (main document).

Scope

The standard provides a structured set of definitions and clarifies relationships among identity-related concepts (such as identity, identifier, attribute, credential, role, lifecycle, federation and trust). It is intended for use across any information system or environment where identity information is created, maintained, exchanged or used, and serves as the terminology baseline for architecture, requirements and practice documents in the ISO/IEC 24760 identity management series.

Key topics and requirements

• Definitions of identity-related terms: identity, identifier, attribute, credential, subject, agent, and related concepts.
• Conceptual model of identity and identity management and how elements relate (lifecycles, persistence, scope of identifiers).
• Distinctions between identity and identifier, and between identity information and other personal data.
• Concepts of federation, trust relationships, authentication and authorisation as they relate to identity frameworks.
• Privacy and data minimization considerations in identity information processing.
• Terminology alignment to support interoperability with other identity, security and privacy standards.

Typical use and users

Used by standards developers, architects, security and privacy professionals, identity and access management (IAM) designers, system integrators, auditors and legal/compliance teams to establish a common vocabulary and conceptual baseline. It is referenced when developing identity architectures, policies, interoperability profiles, and procurement specifications where precise terminology reduces ambiguity.

Related standards

Part of the ISO/IEC 24760 series. Commonly referenced related documents include ISO/IEC 24760-2 (reference architecture and requirements) and ISO/IEC 24760-3 (practice). The 2019 edition was amended in 2023 and later replaced by a newer ISO/IEC 24760-1 revision (published as the next edition).

Keywords

identity management, identity, identifier, attributes, credential, lifecycle, federation, trust, authentication, authorisation, privacy, IAM, terminology

FAQ

Q: What is this standard?

A: ISO/IEC 24760-1:2019 is the terminology and concepts part of the ISO/IEC 24760 family, providing definitions and a conceptual framework for identity management.

Q: What does it cover?

A: It covers definitions of identity-related terms and the conceptual relationships among identity, identifiers, attributes, credentials, lifecycles, federation and trust to support consistent interpretation and interoperability across systems.

Q: Who typically uses it?

A: Standards authors, IAM architects, security/privacy professionals, system designers, integrators and compliance/audit teams who need a consistent vocabulary and conceptual foundation for identity management work.

Q: Is it current or superseded?

A: The 2019 edition has been amended (Amendment 1, 2023) and later superseded by a more recent revision of ISO/IEC 24760-1; the 2019 edition is listed as withdrawn/superseded in ISO lifecycle information. Check your national standards body or ISO for the currently active edition.

Q: Is it part of a series?

A: Yes — it is Part 1 of the ISO/IEC 24760 series (core terminology and concepts), which is complemented by Parts 2 (architecture and requirements) and 3 (practice).

Q: What are the key keywords?

A: Identity, identifier, attribute, credential, lifecycle, federation, trust, authentication, authorisation, privacy, IAM.