A HIMSS report on Patient Portal Identity Proofing and Authentication, tells us that the National Institute of Standards and Technology (NIST) identifies three factors as the cornerstone of identity authentication: • Something you know (for example, a password) • Something you have (for example, an ID badge or a cryptographic key).