7.1.5 PIV Authentication Key (PKI) Authentication
All changes in this version
Title changed
Before · SP 800-116
PIV Authentication Key (PKI) Authentication
After · SP 800-116 Rev. 1
PIV Authentication Key (PKI) Authentication
Control changed
Before · SP 800-116
PACS may be designed to perform public key cryptography-based authentication using the PIV Authentication Key. Use of the PKI provides two-factor 6 authentication, since the cardholder must enter a PIN to unlock the card in order to successfully authenticate. When using the PKI authentication mechanism, FIPS 201 requires the PACS to determine the validity of certificates at the time an individual presents his or her card to a card reader. This may
6 Two-factor authentication is a system wherein two different methods are used to authenticate. An example of two- factor authentication is a verification of “something you have” and “something you know". Using two factors as opposed to one delivers a higher level of authentication assurance. be done on-line in real-time, or it may be implemented by pre-validating the certificates and caching the results. Section 7.4 specifies procedures for performing public key cryptography- based authentication under the assumption that only individuals who are pre-enrolled will be granted access. 7 Section 7.5 further describes the caching status proxy.
After · SP 800-116 Rev. 1
PACS may be designed to perform public key cryptography-based authentication using the PIV Authentication Key. Use of the PKI provides two-factor 6 authentication, since the cardholder must enter a PIN to unlock the card in order to successfully authenticate. When using the PKI authentication mechanism, FIPS 201 requires the PACS to determine the validity of certificates at the time an individual presents his or her card to a card reader. This may
6 Two-factor authentication is a system wherein two different methods are used to authenticate. An example of two- factor authentication is a verification of “something you have” and “something you know". Using two factors as opposed to one delivers a higher level of authentication assurance. be done on-line in real-time, or it may be implemented by pre-validating the certificates and caching the results. Section 7.4 specifies procedures for performing public key cryptography- based authentication under the assumption that only individuals who are pre-enrolled will be granted access. 7 Section 7.5 further describes the caching status proxy.