BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

1.1 Background

NIST PIV and digital identity SP 800-156
All changes in this version
first version loaded 1 Introduction part of 1

Title

Background

Control

The Homeland Security Presidential Directive 12 [ HSPD12 ] called for a common identification standard to be adopted governing the interoperable use of identity credentials to allow physical and logical access to federal government locations and systems. The Federal Information Processing Standard (FIPS) 201 [ FIPS201 ], “Personal Identity Verification (PIV) of Federal Employees and Contractors,” was developed as the standard for the identity credentials hosted on a smart card called the PIV Card. [ FIPS201 ] defines the identity proofing, registration, and issuance requirements for issuing PIV Cards to Federal Government employees and contractors.

Data collected during identity proofing, registration, and issuance may be maintained in a chain-of-trust record. As per FIPS 201-2, “a card issuer may optionally maintain, for each PIV Card issued, a documentary chain-of-trust for the identification data it collects. The chain-of-trust is a sequence of related enrollment data records that are created and maintained through the methods of contemporaneous acquisition of data within each enrollment data record, and biometric matching of samples between enrollment data records.”

The chain-of-trust offers process efficiencies because a PIV Card can be re-issued based on the most current chain-of-trust record, and more importantly, can avoid having to repeat the identity proofing and re-registration (re-enrollment) process. Departments and agencies that implement a chain-of-trust will also be able to transfer the record to another agency or to a service provider, so that the receiving agency or service provider can use the record to issue a PIV Card rather than re-enroll an applicant. This Special Publication provides the representation of a chain-of-trust for import and export between PIV Card issuers.