Random Number Generator (RNG)A process used to generate an unpredictable series of numbers. Each individual value is called random if each of the values in the total population of…
Re-key (a certificate)To change the value of a cryptographic key that is being used in a cryptographic system application; this normally entails issuing a new certificate on…
Receiver Operating Characteristics (ROC)A method of showing measured accuracy performance of a biometric system. A verification ROC compares false accept rate vs. verification rate.
Recipient Usage PeriodThe period of time during the cryptoperiod of a symmetric key when protected information is processed.
RecognitionA generic term used in the description of biometric systems (e.g. face recognition or iris recognition) relating to their fundamental function.
recordAll the documents and evidence plus transcripts of oral proceedings in a case.
recordsAll recorded information, regardless of media or physical characteristics, made or received and maintained by an organization or institution in pursuance…
referenceA document that discloses subject matter that is material to a determination of the patentability of a claimed invention. MPEP 2126, MPEP 2126.
Reference MonitorThe security engineering term for IT functionality that 1) controls all access, 2) cannot be by-passed, 3) is tamper-resistant, and 4) provides confidence…
RegistrationLining up a forms image to determine which fields are where. Also, entering pages into a scanner such that they are correctly read.
Registration Authority (RA)A trusted entity that establishes and vouches for the identity of a subscriber to a CSP.
Relying PartyAn entity that relies upon the subscribers credentials, typically to process a transaction or grant access to information or a system.
RemediationThe cleanup or containment of a hazardous waste disposal site to the satisfaction of the applicable regulatory agency.
Remediation PlanA plan to perform the remediation of one or more threats or vulnerabilities facing an organizations systems.
Remote AccessThe ability to access and use digital information from a location off-site from where the information is physically located.
Remote MaintenanceMaintenance activities conducted by individuals communicating external to an information system security perimeter.
Renew (a certificate)The act or process of extending the validity of the data binding asserted by a public key certificate by issuing a new certificate.
RepositoryA centralized database stored on a computer that houses specific information.
Residual RiskThe remaining, potential risk after all IT security measures are applied. There is a residual risk associated with each threat.
ResponderThe entity that responds to the initiator of the authentication exchange.
Responsible IndividualA trustworthy person designated by a sponsoring organization to authenticate individual applicants seeking certificates on the basis of their affiliation…
Revoke a CertificateTo prematurely end the operational period of a certificate effective at a specific date and time.
Ridge EndingA minutiae point at the ending of a friction ridge, as illustrated below. See also bifurcation, friction ridge.
RijndaelCryptographic algorithm specified in the Advanced Encryption Standard (AES).
RiskThe possibility of loss; the uncertainty of future returns.
risk analysisA process consisting of three components: risk assessment, risk management and risk communication performed to understand the nature of unwanted, negative…
risk assessmenta scientifically based process consisting of the following steps: i) hazard identification; ii) hazard characterization; iii) exposure assessment; and iv)…
risk managementThe process, distinct from risk assessment, of weighing policy alternatives, in consultation with all interested parties, considering risk assessment and…
Risk MitigationRisk mitigation involves prioritizing, evaluating, and implementing the appropriate risk-reducing controls recommended from the risk assessment process.
Risk ToleranceThe degree to which you are willing to risk losing some (or all) of your original investment in exchange for a chance to earn a higher rate of return.
Rolled FingerprintsAn image that includes fingerprint data from nail to nail, obtained by �rolling� the finger across a sensor, as illustrated below.
Root Certification AuthorityIn a hierarchical Public Key Infrastructure, the Certification Authority whose public key serves as the most trusted datum (i.e.
RootkitA set of tools used by an attacker after gaining root-level access to a host to conceal the attackers activities on the host and permit the attacker to…
Round KeyRound keys are values derived from the Cipher Key using the Key Expansion routine; they are applied to the State in the Cipher and Inverse Cipher.
Rule-Based Security PolicyA security policy based on global rules imposed for all subjects. These rules usually rely on a comparison of the sensitivity of the objects being…