BaselineWatch
Desk

7.1.1 Deployed Proximity or Magnetic Stripe Authentication

NIST PIV and digital identity SP 800-116
All changes in this version
first version loaded 7 PIV Authentication Mechanisms part of 7.1

Title

Deployed Proximity or Magnetic Stripe Authentication

Control

Deployed proximity and magnetic stripe authentication are not PIV authentication mechanisms and when used in conjunction with PIV authentication mechanisms, there is a strong potential for “collisions”. Proximity and magnetic stripe card technology read a number from a card and send it to the Controller. The Controller compares this number against its database to make the access control decision. If a deployed system does not include an agency code in the numbers compared, an out-of-agency cardholder may be mistakenly accepted as an authorized site user. Refer to Appendix B for additional details. Moreover, proximity and magnetic stripe cards can be easily counterfeited or cloned.