gchq / event-logging-schema

Event Logging is an XML Schema for describing the auditable events generated by computer systems, hardware devices and access control systems
Apache License 2.0
25 stars 6 forks source link

Improve support for physical access events with `Authenticate` activity #65

Closed p-kimberley closed 3 years ago

p-kimberley commented 3 years ago

Summary Authenticate/Action enum values don't adequately describe the action of authenticating with a physical or virtual token. Some examples:

  1. Smartcard
  2. Door access card
  3. MFA physical or virtual token

Likewise, Authenticate/LogonType doesn't cater for physical access events either.

Proposal

  1. Add ReadToken to AuthenticateActionSimpleType enum
  2. Add PhysicalAccess to AuthenticateLogonTypeSimpleType enum