Identity Management and Access Control

Identity Management

• PIV: Personal Identity Verification of Federal Employees and Contractors
    Related to Federal Information Processing Standard (FIPS) 201-2.
• NIST PIV Program
    Testing program for compliance/conformance of PIV middleware and PIV card applications to specifications in NIST Special Publication (SP) 800-73.
• NSTIC: National Strategy for Trusted Identities in Cyberspace
    CSD contributes its technical expertise to the NSTIC National Program Office, which coordinates federal activities needed to implement NSTIC.

Access Control and Privilege Management

• Access Control Policy and Implementation Guides
     Guidance for assessing and implementing AC policies and systems
• Access Control Policy Testing
    Software to automatically check AC policies for syntactic and semantic faults.
• Attribute Based Access Control (ABAC)
    A logical AC methodology using attributes to determine access authorization.
• Policy Machine
    An access control framework that uses program logic to implement, distribute, and enforce the capabilities of data services.
• Role Based Access Control (RBAC)
    Non-discretionary AC based on roles, rather than individual or subject identities.