objectAn entity such as a file, folder, shared folder, printer, or Active Directory object, described by a distinct, named set of attributes.
Object IdentifierA specialized formatted number that is registered with an internationally recognized standards organization.
Off-CardRefers to data that is not stored within the PIV card or computation that is not done by the Integrated Circuit Chip (ICC) of the PIV card.
Off-line AttackAn attack where the attacker obtains some data (typically by eavesdropping on an authentication protocol run, or by penetrating a system and stealing…
On-CardRefers to data that is stored within the PIV card or computation that is done by the ICC of the PIV card.
On-line AttackAn attack against an authentication protocol where the attacker either assumes the role of a claimant with a genuine verifier or actively alters the…
One-to-manyA relate in which one record in a table is related to many records in another table.
One-to-oneA phrase used in the biometrics community to describe a system that compares one reference to one enrolled reference to make a decision.
One-Way Hash AlgorithmHash algorithms which map arbitrarily long inputs into a fixed-size output such that it is very difficult (computationally infeasible) to find two…
Open-set IdentificationBiometric task that more closely follows operational biometric system conditions to 1) determine if someone is in a database and 2) find the record of the…
Operational ControlsThe security controls (i.e., safeguards or countermeasures) for an information system that primarily are implemented and executed by people (as opposed to…
Operational EvaluationThe test and analysis of a specific end item or system, insofar as practicable under Service operating conditions, in order to determine if quantity…
Optional TopographyA Personal Identity Verification (PIV) card having both the Standard Topography (Mandatory Topography) features and the Optional features as defined in…
Outside ThreatAn unauthorized entity from outside the domain perimeter that has the potential to harm an Information System through destruction, disclosure…
OvertBiometric sample collection where end users know they are being collected and at what location.