BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

B.1.4 Authentication Using OCC (OCC-AUTH)

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
added Appendix B PIV Authentication Mechanisms part of B.1

Title changed

Before · SP 800-73-4

After · SP 800-73-5

Authentication Using OCC (OCC-AUTH)

Control changed

Before · SP 800-73-4

After · SP 800-73-5

The OCC-AUTH authentication mechanism is implemented by performing OCC over secure messaging. The PIV Application authenticates the PIV Card as part of the process of establishing secure messaging. When the live-scan fingerprint biometric is supplied to the card for OCC over secure messaging, both the request and the response are protected using message authentication codes (MAC), allowing the PIV Application on the local system to verify that the response has not been altered and that it was created by the PIV Card that was authenticated during the establishment of secure messaging.

The OCC-AUTH authentication mechanism is performed by establishing secure messaging as described in Sec. 4 of SP 800-73-5 Part 2 and then performing the VERIFY command, as illustrated in Fig. 6 .

Fig. 6. Authentication using OCC