Question 62

Non-repudiation allows for the attribution of messages to individuals.

Non-repudiation is a property that ensures a sender cannot deny sending a message, thus allowing for the attribution of messages to individuals. This is crucial in various contexts, such as legal and financial transactions, where accountability is essential.

A) Adaptive identity

Adaptive identity refers to a dynamic identity system that can change based on context or need. While it deals with identity management, it does not inherently provide a mechanism for confirming that a specific individual sent a message.

B) Non-repudiation

Non-repudiation is the correct choice as it specifically guarantees that once a message is sent, the sender cannot deny their involvement. This is typically achieved through cryptographic methods, such as digital signatures, which link the message to the individual sender.

C) Authentication

Authentication is the process of verifying the identity of a user or system. While it is a crucial step in ensuring that the right person is accessing a system, it does not alone provide the assurance that a specific message was sent by that authenticated user.

D) Access logs

Access logs record the activities of users within a system, including login times and accessed resources. Although they can provide evidence of user actions, they do not directly establish that a particular message was sent by a specific individual, thus lacking the definitive attribution aspect.

Conclusion

Non-repudiation is essential for ensuring that individuals can be held accountable for their messages, distinguishing it from the other options, which either pertain to identity management or lack the direct linkage of messages to senders. The other choices do not provide the same level of assurance in attributing messages to individuals, making them inadequate for this particular requirement.