IAB Interactive Standardized Equipment List   return to main tree

Search Interactive SEL:




Last Updated: 3/7/2024 12:09:39 PM

Previous SEL Number: 05AU-00-TOKN

Description: System used to provide enhanced remote authentication, usually consisting of a server, some synchronization scheme, and a device, token, or smartphone application.

ImportantFeatures: May be connected via USB or other external connection to remote computer.
Some may not be connected, but simply generate a time-based, synchronized password.
Provides secure (encrypted) communication to network.

Operating Considerations: Battery life is critical for tokens not connected to a machine.
Carefully check compatibility with hardware/operating system/software suite to be used. May not be compatible with some applications, so that a different scheme might be necessary for initial login versus access to online application.
Will require management of the synchronization process and a process for immediate cancellation of lost/stolen devices.

Training Requirements: Core Training: Per Manufacturer's Specifications
Initial Training: Minimal (<1 day)
Sustainment Training: Minimal (<1 day)

Mandatory Standards:

Applicable Standards and References:

Criminal Justice Information Services (CJIS) Security Policy, Version 5.9.5, 07/09/2024

NIST SP 800-036, Guide to Selecting Information Security Products, Oct 2003 (WITHDRAWN, still available.)

NIST SP 800-046, Revision 2, Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security, July 2016

NIST SP 800-171 Rev. 3, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations, May 2024