BaselineWatch
Desk

7.1.1 Deployed Proximity or Magnetic Stripe Authentication

NIST PIV and digital identity SP 800-116 Rev. 1 against SP 800-116
All changes in this version
removed 7 PIV Authentication Mechanisms part of 7.1

Title changed

Before · SP 800-116

Deployed Proximity or Magnetic Stripe Authentication

After · SP 800-116 Rev. 1

Deployed Proximity or Magnetic Stripe Authentication

Control changed

Before · SP 800-116

Deployed proximity and magnetic stripe authentication are not PIV authentication mechanisms and when used in conjunction with PIV authentication mechanisms, there is a strong potential for “collisions”. Proximity and magnetic stripe card technology read a number from a card and send it to the Controller. The Controller compares this number against its database to make the access control decision. If a deployed system does not include an agency code in the numbers compared, an out-of-agency cardholder may be mistakenly accepted as an authorized site user. Refer to Appendix B for additional details. Moreover, proximity and magnetic stripe cards can be easily counterfeited or cloned.

After · SP 800-116 Rev. 1

Deployed proximity and magnetic stripe authentication are not PIV authentication mechanisms and when used in conjunction with PIV authentication mechanisms, there is a strong potential for “collisions”. Proximity and magnetic stripe card technology read a number from a card and send it to the Controller. The Controller compares this number against its database to make the access control decision. If a deployed system does not include an agency code in the numbers compared, an out-of-agency cardholder may be mistakenly accepted as an authorized site user. Refer to Appendix B for additional details. Moreover, proximity and magnetic stripe cards can be easily counterfeited or cloned.