BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

2.4 Biometric Data Collection for PIV Card

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 2 Common Identification, Security, and Privacy Requirements part of 2

Title

Biometric Data Collection for PIV Card

Control changed

Before · FIPS 201-2

The following biometric data shall be collected from each PIV applicant:

+ Two fingerprints, for off-card comparison. These shall be taken either from the full set of fingerprints collected in Section 2.3, or collected independently.

+ An electronic facial image.

The following biometric data may optionally be collected from a PIV applicant:

+ One or two iris images.

+ Two fingerprints, for on-card comparison. It is recommended that these be different than the fingerprints collected for off-card comparison.

If the biometric data that is collected as specified in this section and in Section 2.3 is collected on separate occasions, then a 1:1 biometric match of the applicant shall be performed at each visit against biometric data collected during a previous visit.

Biometric data collection shall conform to the procedural and technical specifications of [SP 800-76]. The choice of which two fingers is important and may vary between persons. The recommended selection and order is specified in [SP 800-76].

After · FIPS 201-3

The following biometric data shallSHALL be collected from each PIV applicant:

+• Two fingerprints, for off-card one-to-one comparison. These shallfingerprints MAY be taken either from the full set of fingerprints collected in Section 2.3, or collected independently.

+
• An electronic facial image.

The following biometric data may optionallyMAY be collected from a PIV applicant:

+• OneAn orelectronic twoimage of the left iris.
• imagesAn electronic image of the right iris.

+
• Two fingerprints, for on-card comparison. It is(OCC). recommendedThese thatfingerprints theseMAY be differenttaken thanfrom the full set of fingerprints collected in Section 2.3 and SHOULD be imaged from fingers not imaged for off-card one-to-one comparison.

 If the identity proofing and enrollment process is performed over multiple visits, an automated biometric verification attempt comparing the applicant’s newly captured biometric characteristics against biometric data thatcollected isduring a previous visit SHALL be performed at each visit and return a positive verification decision.

If biometric data was collected as specified in Section 2.3 and if collection of biometric data as specified in this section and in Section 2.3 is collectedoccur on separate occasions, then a 1:1 biometric matchcomparison ofSHALL be performed to confirm that the applicanttwo shallfingerprints becollected performedfor atoff-card eachone-to-one visitcomparisons againstelicit a positive biometric dataverification collecteddecision duringwhen acompared previousto visitthe same two fingerprints from the original set of ten fingerprints.

Biometric data collection shallSHALL conform to the procedural and technical specifications of [SP 800-76]. The choice of whichfingers twoto fingersuse isfor importantmandatory fingerprint templates and mayoptional fingerprint templates MAY vary between persons. The recommended selection and order is specified in [SP 800-76].