Glossary | Engity

A
- Adequacy Decision
  
  An adequacy decision confirms that a third country has a level of data protection comparable to that of the EU.
- Administrative Fines
  
  Infringement of applicable data protection rules and regulations does not only result in liability to any person having suffered damages but may also cause the imposition of penalties and administrative fees by the supervisory authorities.
- Advanced Encryption Standard AES256
  
  Advanced Encryption Standard (AES256) is a way of encrypting data so that unauthorized people cannot read it.
- Argon2
  
  Engity stores passwords (and other secrets) using this award-winning hashing algorithm, which is currently one of the securest known algorithms for that purpose.
- Asymmetric Encryption
  
  Two different keys are used for encryption and decryption.
- Authentication
  
  Authentication is used to verify identities and plays an important role in data protection.
B
- Bifröst
  
  Engity's open-source SSH server alternative.
- Brute Force Attack
  
  An attempt to gain unauthorized access to a system – or data – by simply trying out all possible combinations of access credentials.
- Business Processes
  
  Data protection regulations must be seamlessly integrated into business processes.
C
- Cookie-Consent
  
  The Cookie Consent informs users of a website or service about how cookies are used on the site and asks for informed consent.
- Credential-Stuffing
- Cybersecurity
  
  Cybersecurity is the protection of computers, servers and other online systems against targeted attacks.
D
- Dark Patterns
  
  Dark patterns are user interface (UI) practices that nudge users to do what's best for the provider, not necessarily the user themselves.
- Data Processing Agreement (DPA)
  
  An Data Processing Agreement defines the rights and obligations between the processor and controller.
- Data Protection
  
  Data Protection is the idea of preventing the misuse of personal data.
- Data Protection Audit
  
  Compliance with data protection regulations in a company can be checked by an external authority by means of a data protection audit.
- Data Protection Officer (DPO)
  
  A Data Protection Officer (DPO) advises companies or organizations on data protection topics.
- Data Transfer
  
  A Data Transfer is a transfer of personal data from one person or organization to another.
- Digital Services Act (DSA)
  
  Digital Services Act, to complete the digital single market.
E
- Elliptic Curves Digital Signature
  
  The Elliptic Curve Digital Signature is an industry standard for e.g. signing tokens.
- European Court of Justice (ECJ)
  
  The highest court in the EU, the European Court of Justice (ECJ), is also responsible for interpreting the GDPR - which has repeatedly led to spectacular decisions.
- European Data Protection Supervisor (EDPS)
  
  The European Data Protection Supervisor (EDPS) is the highest supervisory authority for Data Protection within the EU and is responsible for citizens' data protection rights.
G
- General Data Protection Regulation (GDPR)
  
  The GDPR applies directly in every EU member state and aims to protect the fundamental rights and freedoms of natural persons.
H
- Hooks, Webhooks, Server-side Hooks
  
  Hooks as an interface for integrating external program code.
I
- Identity
  
  In Identity and Access Management (IAM), an identity is a representation of a user with certain access right to resources.
- Identity & Access Management (IAM)
  
  With an identity and access management system, users can be administrated and their access controlled.
- Identity Provider (IdP)
  
  An Identity Provider (IdP) provides authentication and authorization services for users.
L
- Liability
  
  In case of a data protection breach, the data controller can be held liable.
- Location
  
  The server location often determines which laws are applicable to data processing - but it is not the only criterion.
- Lock-out Functionality
  
  A lock-out function is a security mechanism in IAM or access management that denies access to a system or user account after a certain number of failed login attempts.
M
- Managed Services
  
  Keeping pace with IT technology and saving costs and resources with managed services.
- Multi-factor Authentication (MFA)
  
  Multi-factor authentication (MFA) combines various factors when verifying the identity of a user asking for access to a system or resource.
O
- One-Time Password (OTP)
  
  A password that can only be used once is called a one-time password.
- Open Source
  
  Software where the source code is available in a free, open and understandable form is referred to as open source.
- OpenID Connect
  
  OpenID Connect as a secure system for verifying the identity of an end user.
P
- Passkeys
  
  Secure authentication using asymmetric cryptography and the challenge-response method.
- Passphrase
  
  A passphrase is a sequence of words strung together used as a password while being easy to remember.
- Password
  
  A password is a key in the form of "something the user knows" that gives access to digital accounts, devices, or information.
- Password Generator
  
  By using a password generator, strong passwords can be created.
- Password Manager
  
  A password manager is a tool that securely stores and manages a user’s login credentials.
- Password Reset
  
  A password reset is the process of replacing a forgotten or compromised password with a new one.
- Password Spraying Attack
  
  The attempt to gain unauthorized access to user accounts by trying a few commonly used passwords against many usernames or email addresses.
- Password Strength Checker
  
  A password strength checker is a tool that accesses the strength of a password – as the name suggests.
- Privacy Shield I/II
  
  The Privacy Shield is a legal framework addressing transfers of personal data between the EU and the US.
S
- Safe Harbor
  
  Safe Harbor was an inadequate tool for transferring personal data from the EU to the US.
- Scalability
  
  The term scalability means the ability to adapt an IT installation or system.
- Schrems Ruling I/II
  
  Schrems I and II are two judgements by the European Court of Justice (ECJ) that invalidated the transfer tools Safe Harbor and Privacy Shield.
- Server
  
  A server is usually a computer on the Internet that provides data so that other devices can access this data.
- Single Sign-on (SSO)
  
  Single sign-on (or "SSO" in short) is a centralized authentication method that lets users access multiple applications or systems using a single set of login credentials.
- SSH
  
  SSH as a network protocol enables remote access via an encrypted connection.
- Standard Contractual Clauses (SCC)
  
  Standard Contractual Clauses (SCCs) are a contractual tool enabling data transfers between the EU and third countries.
- Symmetric Encryption
  
  The same key is used for both encryption and decryption.
T
- Technical and Organizational Measures (TOMs)
  
  TOMs are technical and organizational measures to protect personal data and make data processing compliant to the GDPR.
- Transatlantic Data Privacy Framework - (TADPF)
  
  The Transatlantic Data Privacy Framework (TADPF) is a mechanism to align differences in EU-US data protection standards that allows data transfers to the US.
- Transfer Impact Assessment (TIA)
  
  A Transfer Impact Assessment (TIA) is a risk assessment regarding data transfers to third countries, in particular when SCC are being used as a transfer tool.
- Transport Layer Security (TLS) 1.2+
  
  TLS is an Internet security protocol and the successor to SSL.
U
- US Cloud Act
  
  The US Cloud Act is a law that gives American intelligence and law enforcement authorities wide-ranging access to personal data, including data of European citizens.

Glossary for Identity Management, Data Security, Data Privacy & GDPR-compliance