BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

2.5 Biometric Data Use

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 2 Common Identification, Security, and Privacy Requirements part of 2

Title

Biometric Data Use

Control changed

Before · FIPS 201-2

The full set of fingerprints shall be used for one-to-many identification in the databases of fingerprints maintained by the FBI.

4 For example, [SPRINGER MEMO] at http://www.opm.gov/investigate/resources/final_credentialing_standards.pdf and the Federal Investigative Standards. 5 For example, [OMB0524] at http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2005/m05-24.pdf. The two mandatory fingerprints shall be used for preparation of templates to be stored on the PIV Card as described in Section 4.2.3.1. The fingerprints provide an interagency-interoperable authentication mechanism through a match-off-card scheme as described in Section 6.2.1. These fingerprints are also the primary means of authentication during PIV issuance and maintenance processes.

The optional fingerprints may be used for preparation of the fingerprint templates for on-card comparison as described in Section 4.2.3.1. OCC may be used to support card activation as described in Section 4.3.1. OCC may also be used for cardholder authentication (OCC-AUTH) as described in Section 6.2.2.

The electronic iris images may be stored on the PIV Card as described in Section 4.2.3.1. Agencies may choose to collect iris biometrics as a second biometric to support multimodal authentication to improve accuracy, operational suitability, to accommodate user preferences, or as a backup when the fingerprint biometric is unavailable.

The electronic facial image:

+ shall be stored on the PIV Card as described in Section 4.2.3.1;

+ shall be printed on the PIV Card according to Section 4.1.4.1;

+ may be used for generating a visual image on the monitor of a guard workstation for augmenting the visual authentication process defined in Section 6.2.6; and

+ may be used for automated facial authentication in operator-attended PIV issuance, reissuance, and verification data reset processes.

After · FIPS 201-3

The full set of fingerprints shallSHALL be usedcollected for one-to-manybiometric identification in theagainst databases of fingerprints maintained by the FBI.

4 For example, [SPRINGER MEMO] at http://www.opm.gov/investigate/resources/final_credentialing_standards.pdf and the Federal Investigative Standards. 5 For example, [OMB0524] at http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2005/m05-24.pdf. The two mandatory fingerprints shallSHALL be used for the preparation of biometric templates to be stored on the PIV Card as described in Section 4.2.3.1. The fingerprints provide an interagency-interoperableinteroperable authentication mechanism through aan match-off-cardoff-card comparison scheme (BIO or BIO-A) as described in Section 6.2.1. These fingerprints are also the primary means of authentication during PIV issuance and maintenance processes.

The optional fingerprints mayMAY be used for the preparation of the fingerprintbiometric templates for on-card comparisonOCC as described in Section 4.2.3.1. OCC mayMAY be used tofor supportPIV issuance and maintenance processes as applicable, card activation as described in Section 4.3.1. OCC may also be used, forand cardholder authentication (OCC-AUTH) as described in Section 6.2.2.

TheAgencies MAY choose to collect electronic iris images mayas an additional biometric characteristic. If collected, the electronic iris images SHALL be stored on the PIV Card as described in Section 4.2.3.1. Agencies may choose toThe collectimages irisMAY biometricsbe asused afor secondcardholder biometricauthentication to(BIO supportor multimodalBIO-A) authenticationas todescribed improvein accuracy,Section operational6.2.1. suitability,Electronic toiris accommodateimages userare preferences,an oradditional asmeans aof backupauthentication whenduring thePIV fingerprintissuance biometricand ismaintenance unavailableprocesses.

The electronic facial image:

+ shallSHALL be stored on the PIV Card as described in Section 4.2.3.1;

+. shallIt SHALL be printed on the PIV Card according to Section 4.1.4.1;

+. mayThe image MAY be used for generatingcardholder aauthentication visual(BIO imageor onBIO-A) theas monitordescribed ofin aSection guard6.2.1. workstationIt forMAY augmentingbe theretrieved visualand authenticationdisplayed processon definedguard inworkstations to augment other authentication processes from Section 6.2.6; The electronic facial image is an additional means of authentication during PIV issuance and

+ maymaintenance beprocesses when used forwith an automated facial authenticationcomparison inalgorithm.

PIV operator-attendedbackground PIVinvestigation, issuanceidentity proofing, reissuanceregistration, and issuance processes MAY be performed across multiple sessions at different facilities. If multiple sessions are needed, the applicant SHALL be linked through a positive biometric verification decision obtained from an automated comparison of biometric characteristics captured at a previous session to biometric characteristics captured during the current session. Issuers SHALL follow applicable federal laws and regulations regarding the retention and destruction of biometric data.

For resetlinking processesto background investigations, only fingerprints SHALL be used, since fingerprints are the only biometric characteristic used for background investigations. For all other purposes, verification attempts MAY be performed against any available biometric characteristic stored electronically on the PIV Card or in the enrollment record.