Software helps developers get started with PIV cards
The demonstration software, written in C++, will assist software developers, system integrators and computer security professionals as they develop products and solutions in response to Homeland Security Presidential Directive 12 and the FIPS 201-1 standard.
“We wanted to provide IT professionals with a model of one way that PIV cards can be used to support authentication to federal information systems,” explains Donna Dodson, deputy director of the NIST Computer Security Division. “Our objective was not to say 'do the steps this way,' but to show an example of how you might proceed.”
Homeland Security Presidential Directive 12 calls for government employees and contractors to use secure identity credentials to access federal facilities and computers. NIST worked with industry to develop the standards for the PIV cards that will be used for those purposes. Each card contains a unique number, two of the employee's biometric fingerprint templates, and cryptographic keys stored on an electronic chip embedded in the card's plastic body.
While each federal agency will implement the use of PIV cards on its own schedule, NIST computer scientists developed the software to demonstrate that PIV cards can work with common computer activities such as system logon. The typical process of keying in user name and password will be replaced with the user inserting his/her PIV card in a reader and entering a personal identification number (PIN). This secure logon could eliminate the need for passwords for other applications and could provide access to secure databases to which the user is authorized.
The PIV Crypto Service Provider (CSP) demonstrates Windows XP Logon with PIV cards. The Public Key Cryptography Standard #11 module was developed to operate in the Fedora Core 5 environment and to implement Linux Logon, signing and encrypting email (following the S/MIME standard) and Web site authentication (following the SSL/TLS standard), configured in Linux OS, Thunderbird and Firefox applications.
Media Contact
More Information:
http://csrc.nist.gov/groups/SNS/piv/download.htmlAll latest news from the category: Information Technology
Here you can find a summary of innovations in the fields of information and data processing and up-to-date developments on IT equipment and hardware.
This area covers topics such as IT services, IT architectures, IT management and telecommunications.
Newest articles
Trotting robots reveal emergence of animal gait transitions
A four-legged robot trained with machine learning by EPFL researchers has learned to avoid falls by spontaneously switching between walking, trotting, and pronking – a milestone for roboticists as well…
Innovation promises to prevent power pole-top fires
Engineers in Australia have found a new way to make power-pole insulators resistant to fire and electrical sparking, promising to prevent dangerous pole-top fires and reduce blackouts. Pole-top fires pose…
Possible alternative to antibiotics produced by bacteria
Antibacterial substance from staphylococci discovered with new mechanism of action against natural competitors. Many bacteria produce substances to gain an advantage over competitors in their highly competitive natural environment. Researchers…
