1 Introduction (was: It implements the functions in the PIV Client Application Programming Interface)
All changes in this version
Title changed
Before · SP 800-85A-2
It implements the functions in the PIV Client Application Programming Interface
After · SP 800-85A-4
It implements the functions in the PIV Client Application Programming InterfaceIntroduction
Control changed
Before · SP 800-85A-2
(Part 3 of SP 800-73-3).
After · SP 800-85A-4
Federal Information Processing Standard 201, Personal Identity Verification (PartPIV) 3of Federal Employees and Contractors [ FIPS 201 ], was developed to establish standards for identity credentials. FIPS 201 sets the minimum requirements for a federal personal identification system that meets the control and security objectives of Homeland Security Presidential Directive (HSPD) 12 [ HSPD 12 ]. FIPS 201 also gives the technical specifications of components and processes required for the interoperability of PIV Cards 1 with the access control and PIV card management systems throughout the Federal Government. FIPS 201 is accompanied by three documents: + NIST Special Publication 800-73-4 (NIST SP 800-73-3800-73-4) [ SP 800-73 ] specifies interface requirements for retrieving and using the identity credentials from the PIV Card. It also defines a PIV data model, which details the structure and format of the information stored on the PIV Card. + NIST SP 800-76-2 [ SP 800-76 ] contains technical specifications for biometric data mandated in FIPS 201 . + NIST SP 800-78-4 [ SP 800-78 ] specifies the cryptographic algorithms and key sizes for performing cryptographic operations on PIV data objects defined as part of the PIV data model. This test guidance document specifies the test plan, processes, derived test requirements, and the detailed test assertions/conformance tests for testing the following PIV software components: + PIV Middleware (implements PIV Client API). + PIV Card Application. The present document, SP 800-85A-4, supersedes SP 800-85A-2 in its entirety, effective immediately upon publication.