BaselineWatch
Desk

6.1.1 Last Updated Time

NIST PIV and digital identity SP 800-217 (Draft)
All changes in this version
first version loaded 6 Protocol Requirements 996 part of 6.1

Title

Last Updated Time

Control

The last updated attribute is provided as a hint to the RP about the current freshness of the attributes available from the IdP to allow the RP to decide when to refresh any attributes kept in the RP subscriber account.

The timestamp is calculated by the IdP, and its source varies depending on implementation. For example, for the home agency IdP, this would include any modifications made to the PIV identity account that affect the attributes that the IdP makes available. For other PIV IdPs, the last updated timestamp indicates when the IdP’s copies of any attributes were last updated from their source. In all cases, the RP can track this timestamp as a value stored in the RP subscriber account. If the timestamp provided by the IdP is newer than that in the RP subscriber account, the RP can update its cached attributes from the IdP using any available mechanisms. If multiple timestamps are available for different attributes, the latest timestamp SHALL 1066 1067

1068 1069 1070 1071 1072

1073 1074

1075

1076

1077

1078 1079

1080

1081 1082 1083 1084 1085 1086

1087 1088

1089 1090

1091 1092

1093 1094

1095 be used.