2.7.1 Supervised Remote Identity Proofing

Before · FIPS 201-2

After · FIPS 201-3

Supervised Remote Identity Proofing

Before · FIPS 201-2

After · FIPS 201-3

Departments and agencies MAY use a supervised remote identity proofing process for the identity proofing of PIV Card applicants. This process involves the use of an issuer- controlled station at a remote location that is connected to a trained operator at a central location. The goal of this arrangement is to permit identity proofing and enrollment of individuals in remote locations where it is not practical for them to travel to the agency for in-person identity proofing.

Supervised remote identity proofing takes advantage of improvements in sensor technology (e.g., cameras and biometric capture devices) and communications bandwidth to closely duplicate the security of in-person identity proofing. This is done through the use of specialized equipment to support an enrollment station that is under the control of either the issuer or a third party that is trusted by the issuer.

The following forms of protection SHALL be provided by either inherent capabilities of the station or staff at the station location:

• ensuring that only the applicant interacts with the station during any session;
• ensuring that the physical integrity of the station (e.g., door locks and restricted access) and integral nature of its sensor devices (e.g., fingerprint readers and cameras) are maintained at all times to protect against tampering, removal, or replacement;
• ensuring that no malicious code 10 is introduced to compromise or otherwise impair the station and the PIV Card; and
• reporting any problems with the station to the issuer.

Supervised remote identity proofing SHALL meet the following requirements:

• The station SHALL be maintained in a controlled-access environment and SHALL be monitored by staff at the station location while it is being used. 11
• The issuer SHALL have a live operator participate remotely with the applicant for the entirety of the identity proofing session.
• The issuer SHALL require operators to have undergone a training program to detect potential fraud and to properly perform a supervised remote identity proofing session.
• The operator SHALL monitor the entire identity proofing session—from which the applicant SHALL NOT depart—by at least one continuous, high-resolution video transmission of the applicant.
• The operator SHALL require all actions taken by the applicant during the identity proofing session to be clearly visible to the operator.
• The operator SHALL validate the physical or cryptographic security features of primary and secondary identity source documents using scanners and sensors that are integrated into the station.
• The issuer SHALL ensure that all communications occur over a mutually authenticated protected channel.

If biometric data cannot be collected per the criteria defined in [SP 800-76] or if validation of the identity evidence is inadequate, supervised remote identity proofing SHALL NOT be used and the identity proofing and enrollment will be performed in person at the issuer’s facility. The trained operator SHALL terminate a supervised remote

10 Security practices to mitigate malicious code threats are outside the scope of this document (see [SP 800-53] for a catalog of security and privacy controls for federal information systems). 11 A controlled-access environment is a location with limited egress points where staff can see the station while performing other duties. identity proofing session and require in-person identity proofing at an issuing facility if there is reasonable basis to believe 12 that the applicant is attempting to bypass protection capabilities of the station.