Authn - 认证与授权对象区 —— 认证方式、认证结果、会话数、认证失败次数与锁定状态

Go back Parent node: Security Domain - 安全域 —— 部署运行状态类的安全对象（PKI 监控、认证、审计、合规、威胁），区别于安全产品线 1.3.6.1.4.1.59719.2.900 (1.3.6.1.4.1.59719.6)

Technical information

Dot notation:	`1.3.6.1.4.1.59719.6.2`
ASN.1 notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) security(6) authn(2) }`
OID-IRI notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Security/Authn`
WEID notation:	`weid:P-1A2V-6-2-9`
DER encoding:	`06:0A:2B:06:01:04:01:83:D2:47:06:02`

Description

English:
Authentication and authorization object area. Describes identity authentication, authorization policy, session and access control state, including authentication method, authentication result, session count, failed authentication count and lockout state, used for access security monitoring and auditing.
Status: registered but unused. No object has been implemented; when implementing, define separate sub-numbers for method, result, session and lockout objects, and avoid exposing credentials or tokens. The unused state shall be re-verified at each revision of this file.
Recommendation: expose failed authentication counts per identity and per source, because they are the primary signal for credential stuffing and certificate misuse detection.
See also: 1.3.6.1.4.1.59719.3.200, 1.3.6.1.4.1.59719.6.3, 1.3.6.1.4.1.59719.6.5.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
认证授权对象区。描述身份认证、授权策略、会话与访问控制状态，包含认证方式、认证结果、会话数、认证失败次数与锁定状态，用于访问安全监控与审计。
状态：已注册但未使用。尚无对象被实现；实现时应为方式、结果、会话与锁定对象分别定义子号，且严禁暴露凭据或令牌。本文件每次修订时须重新核验该未使用状态。
建议：应按身份与来源分别暴露认证失败次数，因为这是发现撞库与证书滥用的主要信号。
关联节点：1.3.6.1.4.1.59719.3.200、1.3.6.1.4.1.59719.6.3、1.3.6.1.4.1.59719.6.5。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registration Authority

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

The RA does not want to publish their personal information.

Subordinate objects

ID	Base36	ASN.1 IDs (comma sep.)	IRI IDs (comma sep.)	RA	Comment	Created	Updated
No items available

Alternative Identifiers

Identifier	Description
aid:D276000186B200054278A5EC340239E2 (No PIX allowed)	OIDplus Information Object Application Identifier (ISO/IEC 7816)
aid:D276000186F62B0601040183D2470602 (No PIX allowed)	Application Identifier (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-e3ab12fd253d	OIDplus Information Object Custom UUID (RFC 9562)
guid:e9fc85d1-26a2-33cc-aa4e-d27b09f77ed6	Name based version 3 / MD5 UUID with namespace UUID_NAMEBASED_NS_OID
guid:bcd3f5a7-75d4-5d86-803e-69df0ff5a153	Name based version 5 / SHA1 UUID with namespace UUID_NAMEBASED_NS_OID
mac:72-50-B4-02-39-E2	OIDplus Information Object MAC address, Unicast (AAI)
mac:73-50-B4-02-39-E2	OIDplus Information Object MAC address, Multicast (AAI)
weid:P-1A2V-6-2-9	WEID notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=872561122	OIDplus Information Object X.500 DN