BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

9.1 Scope

NIST PIV and digital identity SP 800-76-2 against SP 800-76-1
All changes in this version
added 9 Common header for PIV biometric data part of 9

Title changed

Before · SP 800-76-1

After · SP 800-76-2

Scope

Control changed

Before · SP 800-76-1

After · SP 800-76-2

All PIV biometric data shall be embedded in a data structure conforming to Common Biometric Exchange Formats Framework [CBEFF]. This specifies that all biometric data shall be digitally signed and uniformly encapsulated. This covers the following static data: ― The PIV Card fingerprints mandated by [FIPS]; ― The PIV Card facial image mandated by [FIPS]; ― Any other biometric data that agencies elect to place on PIV Cards (e.g.,iris); ― Any biometric records that agencies elect to retain (including purely proprietary, or derivative, elements); ― Any biometric data retained by, or for, agencies or Registration Authorities. There are three pieces of data that are exempt: ― The [EBTS] data of Section 3.4 sent for background checks 20 ; ― The OCC data of Section 5.4 that is stored on the PIV Card 21 ; For the relevant data above, integrity shall be protected by pre-pending the data with a CBEFF header and appending with a signature stored in the CBEFF signature block as depicted in the linear structure of Table 13 .

Table 13 − CBEFF concatenation structure CBEFF_HEADER CBEFF_BIOMETRIC_RECORD CBEFF_SIGNATURE_BLOCK Section 9.2 Sections 3.2.2 , 3.3 , 6.3 . 6.4 and 7.2 Section 9.3 INCITS 398 5.2.1 INCITS 398 5.2.2 INCITS 398 5.2.3