2.2.3 Subscriber-Controlled wallets 552
NIST PIV and digital identity SP 800-217 (Draft)
All changes in this version
All changes in this version
Title
Subscriber-Controlled wallets 552
Control
553 554 555 556 557
558 559 560 561 562 563
564 565 566 567 568 569
570 571 572 573 The PIV IdP can be a subscriber-controlled wallet, as defined in [SP800-63C] . In this architecture, the IdP is issued a signed attribute bundle that represents the PIV identity account. This is done while the subscriber is authenticated using a PIV credential. The RP in turn trusts the assertions from the subscriber-controlled wallet thanks to the inclusion of the signed attribute bundle from a trusted source.