Binding to the correct individual

What the clause says

The system should bind the age determination to the person in front of it, so that a correct attribute cannot be used by someone else.

What it supplies to a comparison

Binding is a security objective and an effectiveness indicator. It deserves its own test and its own line in the report.

Evidence to keep

• The binding mechanism and the enrolment step.
• The impersonation test cases and their results.

What the evidence looks like

For 8.1.1, the first artefact is The binding mechanism and the enrolment step.. The second is The impersonation test cases and their results.. If 8.1.1 has no first artefact, the practice is unproven at 8.1.1, and the report should record the absence rather than infer the practice from a policy.

Questions for the provider

1. What stops a person from presenting another person's credential?
2. Does the binding survive a change of device?

How it connects to the draft

Binding to the correct individual belongs to 8 security objectives, and it gives the analysis one fixed point: Binding is a security objective and an effectiveness indicator. It deserves its own test and its own line in the report. A comparison that cannot place a result against 8.1.1 is measuring something the framework has not defined, and the report should say so.

In the register, 8.1.1 is read beside the unit that tests it, and where it sets an objective rather than a number, that unit turns the objective into a question and an evidence artefact.