7.1.1 Deployed Proximity or Magnetic Stripe Authentication
All changes in this version
Title changed
Before · SP 800-116
Deployed Proximity or Magnetic Stripe Authentication
After · SP 800-116 Rev. 1
Deployed Proximity or Magnetic Stripe Authentication
Control changed
Before · SP 800-116
Deployed proximity and magnetic stripe authentication are not PIV authentication mechanisms and when used in conjunction with PIV authentication mechanisms, there is a strong potential for “collisions”. Proximity and magnetic stripe card technology read a number from a card and send it to the Controller. The Controller compares this number against its database to make the access control decision. If a deployed system does not include an agency code in the numbers compared, an out-of-agency cardholder may be mistakenly accepted as an authorized site user. Refer to Appendix B for additional details. Moreover, proximity and magnetic stripe cards can be easily counterfeited or cloned.
After · SP 800-116 Rev. 1
Deployed proximity and magnetic stripe authentication are not PIV authentication mechanisms and when used in conjunction with PIV authentication mechanisms, there is a strong potential for “collisions”. Proximity and magnetic stripe card technology read a number from a card and send it to the Controller. The Controller compares this number against its database to make the access control decision. If a deployed system does not include an agency code in the numbers compared, an out-of-agency cardholder may be mistakenly accepted as an authorized site user. Refer to Appendix B for additional details. Moreover, proximity and magnetic stripe cards can be easily counterfeited or cloned.