Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research

Bartock, Michael; Cichonski, Jeffrey; Souppaya, Murugiah; Fox, Paul; Miller, Mike; Holley, Ryan; Scarfone, Karen

doi:https://doi.org/10.6028/NIST.IR.8055

NISTIR 8055

Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research

Documentation Topics

Date Published: January 2016

Author(s)

Michael Bartock (NIST), Jeffrey Cichonski (NIST), Murugiah Souppaya (NIST), Paul Fox (Microsoft), Mike Miller (Microsoft), Ryan Holley (Intercede), Karen Scarfone (Scarfone Cybersecurity)

Abstract

This report documents proof of concept research for Derived Personal Identity Verification (PIV) Credentials. Smart card-based PIV Cards cannot be readily used with most mobile devices, such as smartphones and tablets, but Derived PIV Credentials (DPCs) can be used instead to PIV-enable these devices and provide multi-factor authentication for mobile device users. This report captures existing requirements related to DPCs, proposes an architecture that supports these requirements, and then demonstrates how such an architecture could be implemented and operated.

Keywords

authentication; credentials; derived credentials; Derived PIV Credential (DPC); electronic authentication; electronic credentials; mobile devices; Personal Identity Verification (PIV); smart cards

Control Families

Access Control; Configuration Management; Identification and Authentication; System and Communications Protection

Documentation

Publication:
NISTIR 8055 (DOI)
Local Download

Supplemental Material:
None available

Related NIST Publications:
SP 1800-12 (Draft)
SP 1800-12 (Draft)
SP 1800-12

Document History:
01/20/16: NISTIR 8055 (Final)

Topics

Security and Privacy
audit & accountability; authentication; digital signatures; Personal Identity Verification; public key infrastructure; risk assessment

Technologies
cloud & virtualization; smart cards

Applications
communications & wireless

Laws and Regulations
Federal Information Security Modernization Act; Homeland Security Presidential Directive 12