BaselineWatch
Desk

5.2 Door Reader Interface

NIST PIV and digital identity SP 800-116 Rev. 1 against SP 800-116
All changes in this version
removed 5 Limitations of Deployed Physical Access Control Systems part of 5

Title changed

Before · SP 800-116

Door Reader Interface

After · SP 800-116 Rev. 1

Door Reader Interface

Control changed

Before · SP 800-116

Deployed PACS readers come in varying configurations and offer multiple interface options for the card and the Controller. FIPS 201 standardizes the use of the ISO/IEC 14443 interface for the contactless reader to card communication. Note that the card reader may require additional conformance testing for Federal acquisition. An authority for such conformance testing is the [FIPS 201 Evaluation Program] which defines tests and maintains a list of approved products. Not all existing PACS use this interface, so some agencies may have to plan to migrate from their existing environment to the ISO/IEC 14443 conformant interface. Alternatively, an agency may use the contact interface based on ISO/IEC 7816. The interface from the Door Reader to the Controller also comes in different configurations. FIPS 201 does not specify which protocols can be used for this interface, provided the necessary data can be communicated to the Controller. Typical deployed implementations support transmitting a small amount of data (on the order of 10 to 15 bytes), but FIPS 201 defines data elements which are much larger. Therefore, depending on the agency’s implementation strategy, an upgrade to the Door Reader to Controller interface may also be required. At a minimum, a 14 decimal digit FASC-N Identifier will be supported in most cases. Note that any change to this interface may also necessitate changes to the physical wiring and cabling infrastructures.

After · SP 800-116 Rev. 1

Deployed PACS readers come in varying configurations and offer multiple interface options for the card and the Controller. FIPS 201 standardizes the use of the ISO/IEC 14443 interface for the contactless reader to card communication. Note that the card reader may require additional conformance testing for Federal acquisition. An authority for such conformance testing is the [FIPS 201 Evaluation Program] which defines tests and maintains a list of approved products. Not all existing PACS use this interface, so some agencies may have to plan to migrate from their existing environment to the ISO/IEC 14443 conformant interface. Alternatively, an agency may use the contact interface based on ISO/IEC 7816. The interface from the Door Reader to the Controller also comes in different configurations. FIPS 201 does not specify which protocols can be used for this interface, provided the necessary data can be communicated to the Controller. Typical deployed implementations support transmitting a small amount of data (on the order of 10 to 15 bytes), but FIPS 201 defines data elements which are much larger. Therefore, depending on the agency’s implementation strategy, an upgrade to the Door Reader to Controller interface may also be required. At a minimum, a 14 decimal digit FASC-N Identifier will be supported in most cases. Note that any change to this interface may also necessitate changes to the physical wiring and cabling infrastructures.