BaselineWatch
Desk

4.1.2 Tamper-proofing and Resistance (was: Tamper Proofing and Resistance)

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 4 PIV Front-End Subsystem part of 4.1

Title changed

Before · FIPS 201-2

Tamper Proofing and Resistance

After · FIPS 201-3

Tamper ProofingTamper-proofing and Resistance

Control changed

Before · FIPS 201-2

The PIV Card shall contain security features that aid in reducing counterfeiting, are resistant to tampering, and provide visual evidence of tampering attempts. At a minimum, a PIV Card shall incorporate one such security feature. Examples of these security features include the following:

• optical varying structures;

• optical varying inks;

• laser etching and engraving;

• holograms;

• holographic images; and

• watermarks.

Incorporation of security features shall—

• be in accordance with durability requirements;
• be free of defects, such as fading and discoloration;

• not obscure printed information; and

• not impede access to machine-readable information.

Departments and agencies may incorporate additional tamper-resistance and anti-counterfeiting methods. As a generally accepted security procedure, Federal departments and agencies are strongly encouraged to periodically review the viability, effectiveness, and currency of employed tamper resistance and anti- counterfeiting methods.

After · FIPS 201-3

TheTo combat counterfeiting and alterations, the PIV Card shallSHALL contain security features that aidoutlined in reducingthe counterfeiting,American areAssociation resistantof toMotor tamperingVehicle Administrators (AAMVA) Drivers License/Identification Card (DL/ID) Card Design Standard [CDS]. The Card Design Standard classifies security features into three categories, depending on the inspection level required for verification:

Inspection Level 1 Security features that can be examined without tools or aids
and provideinclude easily identifiable visual evidenceor oftactile tamperingfeatures attemptsfor rapid inspection at point of usage. AtExamples include an embossed surface pattern, an optically variable device (such as a minimumhologram), or color-shifting inks. Inspection Level 2 Security features that require the use of a PIVtool Cardor shallinstrument incorporate(e.g., oneUV suchlight, securitymagnifying featureglass, or scanner) to discern. Examples ofinclude thesemicrotext, securityUV-fluorescent featuresimages, includeIR-fluorescent theink, following:

•
nano opticaland varyingmicro structures;images, and chemical taggants.

•Inspection opticalLevel varying3 inks;Security features inspected by forensic specialists to conduct in-depth examination that may require special equipment to provide true certification.

•A laserPIV etchingCard SHALL incorporate at least one security feature at inspection level 1 or inspection level 2. Federal departments and engraving;

•
agencies holograms;

•
SHOULD holographicincorporate images;additional security features and

•
watermarksinclude all three inspection levels.

Incorporation of security features shall—SHALL

• be in accordance with durability requirements;
• be free of defects, such as fading and discoloration;


• not obscure printed information; and


• not impede access to machine-readable information.

DepartmentsAll andsecurity agenciesfeatures maySHOULD incorporatemaintain additionaltheir tamper-resistancefunction andfor anti-counterfeitingthe methodslife of the card. As a generally accepted security procedure, Federalfederal departments and agencies are strongly encouraged toSHOULD periodically review the viability, effectiveness, and currency of employed tamper resistance and anti- counterfeitinganti-counterfeiting methods.