BaselineWatch
Desk

4.2.3.1 Biometric Data Representation

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
modified 4 PIV Front-End Subsystem part of 4.2.3

Title

Biometric Data Representation

Control changed

Before · FIPS 201-2

The following biometric data shall be stored on the PIV Card:

• Two fingerprint templates. If no fingerprint images meeting the quality criteria of [SP 800-76] are available, the PIV Card shall nevertheless be populated with fingerprint records as specified in [SP 800-76].

• An electronic facial image.

The following biometric data may also be stored on the PIV Card:

• One or two iris images.

• Fingerprint templates for on-card comparison. 25

All biometric data shall be stored in the data elements referenced by [SP 800-73] and in conformance with the preparation and formatting specifications of [SP 800-76].

After · FIPS 201-3

The following biometric data shallSHALL be stored on the PIV Card:

• Two fingerprint biometric templates. If no fingerprint images meetingmeet the quality criteria of [SP 800-76] are available, the PIV Card shallSHALL nevertheless be populated with fingerprint recordsbiometric templates, as specified in [SP 800-76].


• An electronic facial image.

The following biometric data mayMAY also be stored on the PIV Card:

• Oneelectronic orimage twoof the left iris,
•
images.electronic image of the right iris, and

31 Private key operation with the PIV secur e messaging key is defined as the use of the key to establish session keys for secure messaging or the use of key for SM-AUTH card authentication.
• Fingerprintfingerprint biometric templates for on-card comparisonOCC. 2532

All biometric data shallSHALL be stored in the data elements referenced by [SP 800-73] and in conformance with the preparation and formatting specifications of [SP 800-76].