Glossary of digital security terms

A | B | C | D | E | F | G| H | I | J | K | L |M | N | O | P | Q | R | S | T | U |V | W | X |Y |Z
3G
Third Generation: the broadband telecommunications systems that combine high-speed voice, data and multimedia.
3GPP
3G Partnership Project: a group that aims to produce specifications for a 3G system based on GSM networks.

B

Bot (Internet bot)
A type of computer program designed to do automated tasks.

C

Contactless
A card that communicates by means of a radio frequency signal, eliminating the need for physical contact between the card and a reader.
CAC
Common Access Card: a US Department of Defense smart card issued as standard physical and network identification for military and other personnel
CDMA
Code Division Multiple Access: a wireless communications technology that uses the spread spectrum communication to provide increased bandwidth.

D

DDA
Dynamic Data Authentication: a highly secure authentication technology that allows banks to approve transactions more securely at the terminal.
Digital signature
An electronic signature created using a public-key algorithm that can be used by the recipient to authenticate the identity of the sender.
DNS Cache poisoning
A technique that tricks a Domain Name Server (DNS server) into believing it has received authentic information when in reality it has not.
DOVID
Diffractive Optical Variable Image Device: a hologram, kinegram or other image used in secure printing of cards, documents etc.
DVB-H
 Digital Video Broadcasting-Handheld: a technical specification for bringing broadcast services to handheld receivers.

E

EMV
The industry standard for international debit/credit cards established by Europay, MasterCard and Visa.
e-passport
An “electronic” passport with high security printing, an inlay including an antenna and a microprocessor, and other security features (Go to our e-passport section).
e-purse
A small portable device that contains “electronic money” and is generally used for low-value transactions.
e-ticketing
Electronic systems for issuing, checking and paying for tickets predominantly for public transport.
Ethernet
A diverse family of computer networking technologies for local area networks (LANs).
ETSI
European Telecommunications Standards Institute: the EU organization in charge of defining European telecommunications standards.

F

FIPS 201
 Federal Information Processing Standard: a US federal government standard that specifies Personal Identity Verification requirements for employees and contractors.
FOMA
Freedom of Mobile Multimedia Access: the brand name for world's first W-CDMA 3G services offered by NTT DoCoMo, the Japanese operator.
 

G

GSM
Global System for Mobile Communications: a European standard for digital cellphones that has now been widely adopted throughout the world.
GSMA
The GSM Association, the global association for mobile phone operators
 

H

HIPAA
Health Insurance Portability and Accountability Act: the US act that protects health insurance coverage for workers and their families when they change or lose their jobs
HSPD-12
Homeland Security Presidential Directive 12: orders all US federal agencies to issue “secure and reliable forms of identification” to employees and contractors, with a recommendation in favor of smart card technology.

I

ICAO
International Civil Aviation Organization: a UN agency that defines standards and practices for air navigation, prevention of unlawful interference, and facilitation of border-crossing procedures for international civil aviation.
IP
Internet Protocol: a data-oriented protocol for communicating data across a network; hence an “IP address” is a unique computer address using the IP standard.
ISO
 International Organization for Standardization: an international body that produces the worldwide industrial and commercial “ISO” standards.

J

Java
A network-oriented programming language invented by Sun Microsystems and specifically designed so that programs could be safely downloaded to remote devices

K

Key (keystroke )logging
A means of capturing a user’s keystrokes on a computer keyboard, sometimes for malicious purposes.

M

Malware
Malicious software designed to infiltrate or damage a computer system without the owner's consent.
Man-in-the-middle attack
An attack in which an outsider is able to read, insert and modify messages between two parties without either of them knowing.
Microprocessor (smart) card
A card comprising a module embedded with a microprocessor chip: a “computer” with its own processor, memory, operating system and application software.

O

OATH:
The Initiative for Open Authentication, an industry coalition comprising Gemalto, Citrix, IBM, Verisign and others, that is creating open standards for strong authentication.
OMA
Open Mobile Alliance: a body that develops open standards for the mobile phone industry.
OTA
 Over The Air: a method of distributing new software updates to cellphones which are already in use.
OTP
One Time Password

P

Password cracking
The process of recovering secret passwords from data in a computer system.
PDC Personal Digital Cellular
A2G mobile phone standard used in Japan and South Korea.
Phishing
Sending fraudulent emails requesting someone’s personal and financial details.
PIN
A Personal Identification Number: a secret code required to confirm a user’s identity.
PKI
Public Key Infrastructure: The software and/or hardware components necessary to enable the effective use of public key encryption technology. Public Key is a system that uses two different keys (public and private) for encrypting and signing data.

R

RUIM
Removable User Identity Module: an identity module for standards other than GSM.

S

SIM
Subscriber Identity Module: a smart card for GSM systems.
SMS
Short Message Service: a GSM service that sends and receives messages to and from a mobile phone.
Strong authentication
It refers to any authentication protocol that requires multiple factors to establish identity and privileges. This contrasts with traditional password authentication which requires only one authentication factor such as knowledge of a password. Common implementations of strong authentication use 'something you know' (a password) as one of the factors, and ‘something you have' (a physical device) and/or 'something you are' (a biometric such as a fingerprint) as the other factors.

T

Thin client
A computer (client) that depends primarily on a central server for processing activities. In contrast, a thick or fat client does as much processing as possible.
Trojan
A program that contains or installs a malicious program.

U

USB Universal Serial Bus:
A standard input/output bus that supports very high transmission rates.
USIM Universal Subscriber Identity Module
ensures continuity when migrating to 3G services.

V

VPN Virtual Private Network:
A private network often used within a company or group of companies to communicate confidentially over a public network.

W

W-CDMA Wideband Code Division Multiple Access:
A 3G technology for wireless systems based on CDMA technology.

 

EU Commitments| Offices list| Sitemap| Subscription|
© 2006-2008 Gemalto NV | Disclaimer