Something that the Claimant possesses and controls (typically a key or password) that is used to authenticate the Claimant’s identity.SOURCE: SP 800-63
SOURCE: CNSSI-4009