BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

D.2 Derived PIV Application Token Command Interface

NIST PIV and digital identity SP 800-157 Rev. 1 (Draft)
All changes in this version
first version loaded Appendix D Physical Access 1151 part of D

Title

Derived PIV Application Token Command Interface

Control

This appendix contains the technical specifications for the command interface to the derived PIV application surfaced by the wireless interface to the derived PIV credential for PACS. The command interface for the derived PIV application SHALL implement a subset of the card commands supported by the PIV Card application, as described in [SP800-73pt2] , which include:

• SELECT

• GET DATA

• GENERAL AUTHENTICATE

• PUT DATA

• GENERATE ASYMMETRIC KEY PAIR

The specifications for the token command interface SHALL be the same as the specifications for the corresponding card edge commands for a PIV Card, as described in [SP800-73pt2] , except for the following deviations:

• References to “PIV Card application” are replaced with “derived PIV application.”

• References to “PIV data objects” are replaced with “derived PIV data objects.”

• References to “card authentication key” are replaced with “derived card authentication key.”

• In Appendix A: – References to “PIV Card application administrator” are replaced with 1341 1342

1343 1344

1345 1346 1347

1348 1349 1350 1351

1352 1353 1354 1355 1356 1357 1358 1359 “derived PIV application administrator.”

– References to “card management key” are replaced with “derived PIV token management key.”

The token platform SHALL support a default selected application, which is the application chosen immediately following a cold or warm reset. This default application MAY be the derived PIV application or another application.