dobbelttilgang

Dobbelttilgang, translated as "double access," is a term used in Norwegian information technology and security to describe a mechanism in which access to a resource requires two independent conditions to be satisfied. The term combines dobbel- ("double") and tilgang ("access"), and is related to the broader idea of dual-control and multi-factor authentication, though it is not always identical to those concepts.

Dobbelttilgang can refer to scenarios where two separate credentials are required, or where access is granted only after two distinct authorization channels have validated the request. It may involve two different users (a two-person rule), two separate devices, or two independent approval steps, depending on policy and system design. It is thus distinct from a single-factor password plus a token if the two elements are not independent or not required for a single operation.

Applications include secure facilities, high-risk financial transactions, critical IT changes, and collaborative document systems where two authorized parties must validate an action. It is often used in governance and security contexts as a form of dual-control or split-knowledge scheme to mitigate risk of insider threats and ensure that sensitive actions are reviewed by more than one authority.

Implementation requires careful policy design, auditing, and revocation capabilities; it must consider potential deadlock, user experience, and key management. It is commonly discussed in relation to two-factor authentication and dual-control, but remains a distinct concept in Norwegian usage. See also two-factor authentication, dual-control, and access control.