BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

1.2 Scope

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 1 Introduction part of 1

Title

Scope

Control changed

Before · FIPS 201-2

Homeland Security Presidential Directive-12 [HSPD-12], signed by President George W. Bush on August 27, 2004, established the requirements for a common identification standard for identity credentials issued by Federal departments and agencies to Federal employees and contractors (including contractor employees) for gaining physical access to Federally controlled facilities and logical access to Federally controlled information systems. HSPD-12 directs the Department of Commerce to develop a Federal Information Processing Standards (FIPS) publication to define such a common identity credential. In accordance with HSPD-12, this Standard defines the technical requirements for the identity credential that—

(a) is issued based on sound criteria for verifying an individual employee’s identity;

(b) is strongly resistant to identity fraud, tampering, counterfeiting, and terrorist exploitation;

(c) can be rapidly authenticated electronically; and (d) is issued only by providers whose reliability has been established by an official accreditation process.

This Standard defines authentication mechanisms offering varying degrees of security for both logical and physical access applications. Federal departments and agencies will determine the level of security and authentication mechanisms appropriate for their applications. This Standard does not specify access control policies or requirements for Federal departments and agencies. Therefore, the scope of this Standard is limited to authentication of an individual’s identity. Authorization and access control decisions are outside the scope of this Standard. Moreover, requirements for a temporary card used until a new or replacement PIV Card arrives are out of scope of this Standard.

After · FIPS 201-3

Homeland Security Presidential Directive-12 [HSPD-12], signed by President George W. Bush on August 27, 2004, established the requirements for a common identification standard for identity credentials issued by Federalfederal departments and agencies to Federalfederal employees and contractors (including contractor employees) for gaining physical access to Federallyfederally controlled facilities and logical access to Federallyfederally controlled information systems. HSPD-12 directs the Department of Commerce to develop a Federal Information Processing Standards (FIPS) publication to define such a common identity credentialcredentials. In accordance with HSPD-12, this Standard defines the following technical requirements for thethese identity credential that—credentials:

(a)• isThey are issued based on sound criteria for verifying an individual employee’s identity;

(b).
• isThey are strongly resistant to identity fraud, tampering, counterfeiting, and terrorist exploitation;

(c).
• They can be rapidly authenticated electronically; and.
• (d)They isare issued only by providers whose reliability has been established by an official accreditation process.

Upon enrollment, a collection of records known as a PIV identity account is created and managed within the issuing department or agency’s enterprise identity management system (IDMS). The PIV identity account includes the attributes of the PIV cardholder, the enrollment data, and information regarding the PIV Card and any derived PIV credentials bound to the account.

This Standard defines authentication mechanisms offeringthat offer varying degrees of security for both logical and physical access applications. Federal departments and agencies will determine the level of security and the authentication mechanisms appropriate for their applications. This Standard does not specify access control policies or requirements for Federal departments and agencies. Therefore, theThe scope of this Standard is limited to the authentication of an individual’s identity. Authorization and access control decisions are outside of the scope of this Standard. Moreover, requirements for a temporary cardcredential used until a new or replacement PIV Cardcredential arrives are out of the scope of this Standard.

While this Standard remains predominantly focused on PIV Cards, derived PIV credentials and federation protocols also play important roles in the use of PIV identity accounts. Section 2.10 of this Standard defines mechanisms for derived PIV credentials associated with an active PIV identity account. Derived PIV credentials have authentication and lifecycle requirements that may differ from the PIV Card itself. This Standard also discusses federation protocols in Section 7 as a means of accepting PIV credentials issued by other agencies. See Section 3 for more information on components of the PIV system.