DIN EN ISO IEC 24760-1 E 2022-03 PDF

Full title and description

STB DIN EN ISO IEC 24760-1 E 2022-03 — IT security and privacy — A framework for identity management — Part 1: Terminology and concepts. This is the national/EU/DIN adoption (bilingual German/English format indicated by the "E" designation) of the ISO/IEC 24760‑1 identity-management framework standard, published in the national/European/DIN catalogue in March 2022 and based on the ISO/IEC 24760‑1:2019 international text.

Abstract

This document defines fundamental terms and core concepts used in identity management (identity, identifier, attribute, credentials, lifecycle, etc.) and describes their relationships. It provides a common vocabulary and conceptual structure intended to support consistent design, implementation and assessment of identity-management systems across information systems and sectors. The original ISO/IEC text (2019) and its subsequent European/DIN adoptions maintain these core definitions while sometimes providing bilingual editorial presentation.

General information

• Status: Published (national/European/DIN adoption, later updated in subsequent DIN/EN editions; the EN/DIN adoption from March 2022 has been superseded by a later 2023/2025 edition in the ISO/DIN lifecycle).
• Publication date: 2022-03 (March 2022; catalogued as 2022-03 for the E DIN EN ISO/IEC adoption).
• Publisher: STB (national adopter) / DIN (as the German standards body for the EN/DIN edition) — original international text published by ISO/IEC (JTC 1/SC 27).
• ICS / categories: 35.030 (IT security and privacy / information security).
• Edition / version: Designated as E DIN EN ISO/IEC 24760‑1:2022-03 (European/DIN adoption of ISO/IEC 24760‑1); the base international edition is ISO/IEC 24760‑1:2019 (Edition 2), with later revisions published at international level (2023 amendment and a 2025 edition).
• Number of pages: 66 pages for the E DIN EN ISO/IEC 24760‑1:2022-03 bilingual/national publication (page counts vary between the base ISO text and national/EN/DIN publications).

Scope

The standard defines and harmonizes terminology and core concepts for identity management applicable to any information system that processes identity information — including people, devices, software entities and organizational identities. It is intended as a horizontal/reference document to be used by organizations, product developers and other standards when establishing identity-management controls, privacy assessments, authentication/authorization designs and identity lifecycle processes. The EN/DIN adoption preserves the scope of the ISO/IEC 24760‑1:2019 core document.

Key topics and requirements

• Definitions of identity, identifier, attribute, credential, claim and related terms.
• Conceptual model of identity information and identity-management processes (creation, binding, lifecycle, provisioning, deprovisioning, correlation, linkage).
• Distinctions between identifiers and identities, and guidance on attribute usage and privacy considerations.
• Relationships between identity management, authentication, authorization and privacy-protection controls.
• Foundational material to ensure consistent terminology across related standards and implementations.

These topics follow and summarize the core content of the ISO/IEC 24760‑1 family.

Typical use and users

Used by standards editors, security architects, identity and access management (IAM) teams, privacy officers, auditors, solution vendors and system integrators to establish a shared vocabulary and conceptual baseline for designing, documenting and assessing identity-management systems and processes. Also used as the reference terminology for other normative standards and procurement specifications.

Related standards

ISO/IEC 24760‑1 is the first (terminology) part of the ISO/IEC 24760 series and is commonly referenced alongside other information-security and privacy standards such as ISO/IEC 29100 (privacy framework), ISO/IEC 29115 (entity authentication assurance), and later parts of the 24760 series. National and EN/DIN adoptions (EN ISO/IEC and DIN EN ISO/IEC editions) follow the international text and may introduce bilingual presentation or national forewords.

Keywords

identity management, identity, identifier, attribute, credential, identity lifecycle, IAM, authentication, privacy, ISO/IEC 24760, terminology, EN adoption, DIN

FAQ

Q: What is this standard?

A: IT Security and Privacy — A framework for identity management — Part 1: Terminology and concepts. It provides the standardized vocabulary and core concepts used across identity-management activities and related standards.

Q: What does it cover?

A: It covers definitions and conceptual relationships for identity, identifiers, attributes, credentials, identity lifecycle processes and the conceptual model needed to design and evaluate identity-management systems and their privacy/security properties. The EN/DIN publication presents the ISO/IEC content in the national/European context.

Q: Who typically uses it?

A: IAM architects and engineers, privacy and security officers, standards writers, auditors, product vendors and system integrators who need a consistent terminology and conceptual baseline for identity-management work.

Q: Is it current or superseded?

A: The E DIN EN ISO/IEC 24760‑1:2022-03 adoption reflects the ISO/IEC 24760‑1:2019 international edition; the ISO/IEC workline shows later amendments and a newer 2025 edition at international level. National/EN/DIN adoptions may be updated or replaced by subsequent EN/DIN editions (for example a 2023/2025 edition in the DIN/ISO lifecycle). Check the maintaining body for the definitive current status for your catalogue.

Q: Is it part of a series?

A: Yes — ISO/IEC 24760‑1 is the terminology/core-concepts part of the ISO/IEC 24760 identity-management framework series; other parts in the series address architecture, policies and additional guidance and may be published separately.

Q: What are the key keywords?

A: Identity, identifier, attribute, credential, identity lifecycle, identity management, IAM, privacy, authentication, ISO/IEC 24760.