BaselineWatch
Desk

7.1.2 Visual (VIS) Authentication

NIST PIV and digital identity SP 800-116 Rev. 1 against SP 800-116
All changes in this version
removed 7 PIV Authentication Mechanisms part of 7.1

Title changed

Before · SP 800-116

Visual (VIS) Authentication

After · SP 800-116 Rev. 1

Visual (VIS) Authentication

Control changed

Before · SP 800-116

Visual authentication entails inspection of the topographical features on the front and back of the PIV Card. The human guard checks to see that the PIV Card looks genuine, compares the cardholder’s facial features with the picture on the card, checks the expiration date printed on the card, verifies the correctness of other data elements printed on the card, and visually verifies the security feature(s) on the card. The effectiveness of this mechanism depends on training, skill, and diligence of the guard (to match the face in spite of changes in beard, mustache, hair coloring, eye glasses, etc.)—counterfeit IDs and banknotes can pass visual inspections easily. Digital scanners, printers, and image editing software have made counterfeiting easier. Moreover, the visual verification of security features does not scale well across agencies since each agency may implement different security features.

After · SP 800-116 Rev. 1

Visual authentication entails inspection of the topographical features on the front and back of the PIV Card. The human guard checks to see that the PIV Card looks genuine, compares the cardholder’s facial features with the picture on the card, checks the expiration date printed on the card, verifies the correctness of other data elements printed on the card, and visually verifies the security feature(s) on the card. The effectiveness of this mechanism depends on training, skill, and diligence of the guard (to match the face in spite of changes in beard, mustache, hair coloring, eye glasses, etc.)—counterfeit IDs and banknotes can pass visual inspections easily. Digital scanners, printers, and image editing software have made counterfeiting easier. Moreover, the visual verification of security features does not scale well across agencies since each agency may implement different security features.