BaselineWatch
Desk

6 The PIV Vision

NIST PIV and digital identity SP 800-116 Rev. 1 against SP 800-116
All changes in this version
removed 6 The PIV Vision

Title changed

Before · SP 800-116

The PIV Vision

After · SP 800-116 Rev. 1

The PIV Vision

Control changed

Before · SP 800-116

HSPD-12 begins, “Wide variations in the quality and security of forms of identification used to gain access to secure Federal and other facilities where there is potential for terrorist attacks need to be eliminated.” HSPD-12 continues, in Paragraph 2, “As promptly as possible… the heads of executive departments and agencies shall, to the maximum extent practicable, require the use of identification by Federal employees and contractors that meets the Standard in gaining physical access to Federally controlled facilities…” HSPD-12 directs Federal departments and agencies to improve identification and authentication of Federal employees and contractors requiring access to Federally controlled facilities through the widespread application of FIPS 201. The standard defines the characteristics of the PIV System. This section describes the benefits that are expected from the use of the PIV System, to the maximum extent practicable, for authenticating people to PACS managed by the United States Government. This section focuses on the benefits of electronic verification and direct integration with an electronic PACS. The VIS authentication mechanism, which must be verified manually, is applicable to physical access control, as described in other sections of this publication. The FIPS 201 authentication mechanisms that can be performed electronically are CHUID, PKI, BIO, and BIO-A. NIST SP 800-73, included by reference in FIPS 201, defines an additional, optional authentication mechanism, CAK. [SP800-73]

After · SP 800-116 Rev. 1

HSPD-12 begins, “Wide variations in the quality and security of forms of identification used to gain access to secure Federal and other facilities where there is potential for terrorist attacks need to be eliminated.” HSPD-12 continues, in Paragraph 2, “As promptly as possible… the heads of executive departments and agencies shall, to the maximum extent practicable, require the use of identification by Federal employees and contractors that meets the Standard in gaining physical access to Federally controlled facilities…” HSPD-12 directs Federal departments and agencies to improve identification and authentication of Federal employees and contractors requiring access to Federally controlled facilities through the widespread application of FIPS 201. The standard defines the characteristics of the PIV System. This section describes the benefits that are expected from the use of the PIV System, to the maximum extent practicable, for authenticating people to PACS managed by the United States Government. This section focuses on the benefits of electronic verification and direct integration with an electronic PACS. The VIS authentication mechanism, which must be verified manually, is applicable to physical access control, as described in other sections of this publication. The FIPS 201 authentication mechanisms that can be performed electronically are CHUID, PKI, BIO, and BIO-A. NIST SP 800-73, included by reference in FIPS 201, defines an additional, optional authentication mechanism, CAK. [SP800-73]