NIST PIV and digital identity SP 800-96
| Ref | Title | Text | |
|---|---|---|---|
| 1 | Introduction | ||
| 1.1 in 1 |
Authority | This document has been developed by the National Institute of Standards and Technology (NIST) in furtherance of its statutory responsibilities under the Federal Information Security Management Act (FISMA) of 2002, Public Law 107-347. NIST i | |
| 1.2 in 1 |
Purpose and Scope | The purpose of this document is to present recommendations for Personal Identity Verification (PIV) card readers in the area of performance and communications characteristics to foster interoperability. This document is not intended to re-s | |
| 2 | PIV Card Reader Requirements | ||
| 2.1 in 2 |
PIV Contact Card Reader (Logical Access) | ||
| 2.1.1 in 2.1 |
Application Programming Interface (API) | The reader shall be Personal Computer Smart Card (PC/SC) conformant when used with corresponding drivers for the host Operating System Platform. The reader, in conjunction with its corresponding driver, should handle the Application Protoco | |
| 2.1.2 in 2.1 |
Application Protocol Data Unit (APDU) Support | At a minimum, the contact interface shall support all card commands for contact based access specified in Section 7, End-point PIV Card Application Card Command Interface of SP 800-73-1, Interfaces for Personal Identity Verification. | |
| 2.1.3 in 2.1 |
Buffer Size | The reader must contain a buffer large enough to receive the maximum size frame permitted by International Organization for Standardization International Electrotechnical Commission (ISO/IEC) 7816-3:1997, Section 9.4. | |
| 2.1.4 in 2.1 |
Programming Voltage | PIV Readers shall not generate a Programming Voltage. | |
| 2.1.5 in 2.1 |
Support for Operating Class | PIV Readers shall support cards with Class A Vccs as defined in ISO/IEC 7816-3:1997 and ISO/IEC 7816- 3:1997/Amd 1:2002. | |
| 2.1.6 in 2.1 |
Retrieval Time | Retrieval time 1 for 12.5 kilobytes (KB) of data through the contact interface of the reader shall not exceed 2.0 seconds. | |
| 2.1.7 in 2.1 |
Transmission Protocol | The PIV Reader shall support both the character-based T=0 protocol and block-based T=1 protocol as defined in ISO/IEC 7816-3:1997. 1 The time to retrieve a specified amount of data does not include activation/deactivation time. | |
| 2.1.8 in 2.1 |
Support for PPS Procedure | The reader shall support Protocol and Parameters Selection (PPS) procedure by having the ability to read character TA1 of the Answer to Reset (ATR) sent by the card as defined in ISO/IEC 7816-3:1997. | |
| 2.2 in 2 |
PIV Contact Card Reader (Physical Access) | ||
| 2.2.1 in 2.2 |
Common Requirements | The contact interface of the reader shall support all requirements in sections 2.1.2 to 2.1.8. | |
| 2.3 in 2 |
PIV Contactless Card Reader (Logical Access) | ||
| 2.3.1 in 2.3 |
API | The reader shall be Personal Computer Smart Card (PC/SC) conformant when used with corresponding drivers for the host Operating System Platform. The reader, in conjunction with its corresponding driver, should handle the APDU exchange with | |
| 2.3.2 in 2.3 |
APDU Support | At a minimum, the contactless interface shall support all card commands for contactless based access specified in Section 7, End-point PIV Card Application Card Command Interface of SP 800-73-1, Interfaces for Personal Identity Verification | |
| 2.3.3 in 2.3 |
Buffer Size | The reader shall contain a buffer large enough to receive the maximum size frame permitted by ISO/IEC 7816- 3, Section 9.4. | |
| 2.3.4 in 2.3 |
ISO 14443 Support | The PIV Reader shall support parts (1 through 4) of ISO/IEC 14443 as amended in the References of this publication. | |
| 2.3.5 in 2.3 |
Type A and B Communication Signal Interfaces | The contactless interface of the reader shall support both the Type A and Type B communication signal interfaces as defined in ISO/IEC 14443-2:2001. | |
| 2.3.6 in 2.3 |
Type A and B Initialization and Anti-Collision | The contactless interface of the reader shall support both Type A and Type B initialization and anti-collision methods as defined in ISO/IEC 14443-3:2001. | |
| 2.3.7 in 2.3 |
Type A and B Tran smission Protocols | ed in ISO/IEC 14443-4:2001. s. 2.3.9 Transmission Speeds ), fc/64 (~212 kbits/s), and /64 and fc/32 may be configurable to allow activation / deactivation. 2.3.10 Readability Range PIV card more than 10cm from the reader. | |
| 2.4 in 2 |
PIV Contactless Card Reader (Physical Access) | ||
| 2.4.1 in 2.4 |
Common Requirements | The contactless interface of the reader shall support all requirements in sections 2.3.2 through 2.3.10. The contactless interface of the reader shall support both Type A and Type B transmission protocols as defin 2.3.8 Retrieval Time Retr | |
| 3 | References | ISO/IEC 7816-3:1997 Information technology - Identification cards - Integrated circuit(s) cards with contacts - Part 3: Electronic signals and transmission protocols ISO/IEC 7816-3:1997/Amd. 1:2002 Information technology - Identification ca | |
| 4 | Abbreviations and Acronyms | APDU Application Protocol Data Unit API Application Programming Interface ATR Answer to Reset FIPS Federal Information Processing Standards HSPD Homeland Security Presidential Directive IEC International Electrotechnical Commission ISO Inte |
27 of 27.