B.2 Summary Table

Before · SP 800-73-4

After · SP 800-73-5

Summary Table

Before · SP 800-73-4

After · SP 800-73-5

Table 45 summarizes the types of validation activities that are included in each of the PIV authentication mechanisms described earlier in this section.

Table 45. Summary of PIV authentication mechanisms

PIV Authentication Mechanism Card Validation Steps (CardV) Credential Validation Steps (CredV) Cardholder Validation Steps (HolderV) PIV Biometric Expiration check CHUID signature check PIV Bio signature check Match CHUID FASC-N with PIV Bio FASC-N Possession of Card Match PIN provided by Cardholder Match Cardholder bio with PIV bio PIV Biometric (Attended) Expiration check CHUID signature check PIV Bio signature check Match CHUID FASC-N with PIV Bio FASC-N Possession of Card Match PIN provided by Cardholder Match of Cardholder bio to PIV bio in view of attendant PIV Authentication Key Perform challenge and response with a PIV asymmetric key, and validate signature on response Certificate validation of a PIV certificate Possession of Card Match PIN or OCC data provided by Cardholder

Asymmetric Card Authentication Key Perform challenge and response with a PIV asymmetric Card Authentication key, and validate signature on response Certificate validation of a PIV certificate Possession of Card

Secure Messaging Key Perform key agreement to establish session keys Certificate validation of a Secure Messaging Card Verifiable Certificate Possession of Card

Symmetric Card Authentication Key (Deprecated) Perform challenge and response with a PIV symmetric key Possession of Card

On-card Biometric Comparison Establish Secure Messaging Certificate validation of a PIV certificate Possession of Card Match OCC data provided by Cardholder PIV Visual Authentication (Deprecated) Counterfeit, tamper, and forgery check Expiration check Possession of Card Match of card visual characteristics with cardholder