BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

3.5 Complex Type PersonalInformationType

NIST PIV and digital identity SP 800-156
All changes in this version
first version loaded 3 Chain - of - T rust Schema Description part of 3

Title

Complex Type PersonalInformationType

Control

The following schema fragment defines the PersonalInformationType complex type:

<xs:complexType name="PersonalInformationType"> <xs:sequence> <xs:element name="PrimaryIdentifier" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="SecondaryIdentifier" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="PrintedName" type="xs:string" minOccurs="1" maxOccurs="1"/> <xs:element name="SSN" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="IsUSCitizen" type="xs:boolean" minOccurs="1" maxOccurs="1"/> <xs:element name="CitizenshipCountryCode" type="xs:string" minOccurs="1" maxOccurs="unbounded"/> <xs:element name="CardHolderUUID" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="CardUUID" type="xs:string" minOccurs="0" maxOccurs="1"/> <xs:element name="CHUID" type="xs:string" minOccurs="0" maxOccurs="1"/> </xs:sequence> </xs:complexType>

The CardUUID and CHUID type data element generally is not included in the agency to agency record exchange use case as the new agency will generate these values. For the agency to servicer provider record exchange, however, the client agency may wish to specify the CardUUID and CHUID for each PIV cardholder.

The PersonalInformationType complex type contains eight elements that describe the subject of the chain-of-trust enrollment record. Those elements are:

<PrimaryIdentifier>: This element contains the Primary Identifier of the subject of the chain-of- trust enrollment record. The Primary Identifier is defined in [ FIPS201 ] as the surnames or family names of the PIV cardholder. The <PrimaryIdentifier> element is always included in the PersonalInformationType complex type and appears only once. The data is provided in an xs:string format.

<SecondaryIdentifier>: This element contains the Secondary Identifier of the subject of the chain-of- trust enrollment record. The Secondary Identifier is defined in [ FIPS201 ] as pre-names or given names of the PIV Cardholder. The <SecondaryIdentifier> element is always included in the PersonalInformationType complex type and occurs only once. The data is provided in an xs:string format.

<PrintedName>: This element contains the Printed Name of the subject of the chain-of-trust enrollment record. The Printed Name is a combination of the card holder’s primary and secondary identifiers, as it is to be printed on the PIV Card according to [ FIPS201 ]. The <PrintedName> element is always included in the PersonalInformationType complex type and only occurs once. The data is provided in an xs:string format.

<SSN>: This element may contain the Social Security Number of the subject of the chain-of-trust enrollment record. 1 The <SSN> element is optional, and may occur only once if included in the PersonalInformationType complex type. The data is provided in an xs:string format.

<IsUSCitizen>: This element is required, occurs once in the PersonalInformationType complex type and contains a boolean value. If the subject of the chain-of-trust enrollment record is a U.S. Citizen, then the value is set to true. If the subject of the chain-of-trust enrollment record is not a U.S. Citizen, then the value is set to false. The data is provided in an xs:boolean format. If the <IsUSCitizen> element is false, then at least one country is specified in <CitizenshipCountryCode>.

<CitizenshipCountryCode>: This element is required if <IsUSCitizen> is set to false and optional if <IsUSCitizen> is set to true. The element contains the countries of citizenship of the subject of the chain-of-trust enrollment record. The country code is formatted in an abbreviation (alpha-3 format), as documented in [ ISO3166 ]. The <CitizenshipCountryCode> element may occur once for each citizenship the applicant possesses. The data is provided in an xs:string format.

1 To eliminate unnecessary use of the SSN, whenever possible, departments and agencies should avoid using the <SSN> element. See the attachment to OMB M-07-16 [ M-07-16 ], Section 2: “Reduce the Use of Social Security Numbers.” <CardHolderUUID>: The <CardHolderUUID > element is optional, and occurs once when included in the PersonalInformationType complex type. The Cardholder UUID is is a persistent identifier for the cardholder. The data is provided in an xs:string format. <CardHolderUUID> can be used by Agency B to request record from Agency A. The user then re-connects with the record via a biometric match.

<CardUUID>: The <CardUUID > element is optional, and occurs once when included in the PersonalInformationType complex type. It is envisioned that the <CardUUID> will be used only in the agency to service provider record exchange use case to transfer the Card UUID to be stored on the PIV Card. The data is provided in an xs:string format. <CardUUID> can be used by Agency B to request a record from Agency A. The user then re-connects with the record via a biometric match.

<CHUID>: This element is optional and if used should occur once when included in the PersonalInformationType complex type. It is envisioned that the <CHUID> will be used only in the agency to service provider use case to transfer the CHUID-specific details to be stored on the PIV Card. The data is provided in an xs:string format. <CHUID>’s FASC-N can be used by Agency B to request a record from Agency A. The user then re-connects with the record via a biometric match.