Table of Contents - X.1280 (03/2024) - Framework for out-of-band server authentication using mobile devices

1	Scope
2	References
3	Definitions
	3.1	Terms defined elsewhere
	3.2	Terms defined in this Recommendation
4	Abbreviations and acronyms
5	Conventions
6	Introduction
7	Framework for out-of-band server authentication
	7.1	Roles and components
	7.2	Server authentication information
	7.3	Authentication model
8	Procedures for out-of-band server authentication
	8.1	Out-of-band server authenticator installation and registration
	8.2	Server authentication request
	8.3	Server authentication information generation and presentation
	8.4	Server authentication
	8.5	User authentication and service provision
9	Security threats and security requirements
	9.1	Security threats
	9.2	Security requirements
Annex A – Extra procedure for out-of-band server authentication
	A.1	User password automatic renewal
Appendix I – Relationship between security requirements and threats
Appendix II – Use cases of out-of-band server authentication model
	II.1	Websites and applications
	II.2	IdPs
	II.3	Operating systems
Appendix III – Relationship to other authentication technologies
Bibliography