DoDI 8520.03 信息系统的身份认证.pdf

DOD INSTRUCTION 8520.03 IDENTITY AUTHENTICATION FOR INFORMATION SYSTEMS Originating Component:Office of the DoD Chief Information Officer Effective:May 19,2023 Releasability:Cleared for public release.Available on the Directives Division Website at https:/www.esd.whs.mil/DD/.Reissues and Cancels:DoD Instruction 8520.03,“Identity Authentication for Information Systems,”May 13,2011,as amended Incorporates and Cancels:See Paragraph 1.3.Approved by:John B.Sherman,DoD Chief Information Officer Purpose:In accordance with the authority in DoD Directive 5144.02,this issuance:Establishes policy,assigns responsibilities,and provides procedures for authenticating person and non-person entities(NPEs)to DoD information systems,including credential management.Establishes policy and prescribes procedures for establishing credentials and performing identity authentication of all entities accessing DoD information systems that authenticate themselves to DoD or external entities in accordance with DoD Instruction(DoDI)8500.01.Establishes sensitivity levels to align with risk management requirements as specified in DoDI 8510.01,and establishes credential strengths to better align with identity proof