Cardholder Authentication for the PIV Digital Signature Key

Polk, W.; Ferraiolo, Hildegard; Cooper, David

doi:https://doi.org/10.6028/NIST.IR.7863

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov. [12:20 pm ET - If you received "Page Not Found" errors recently, please retry accessing those files. File synchronization should now be complete.]

NIST IR 7863

Cardholder Authentication for the PIV Digital Signature Key

Documentation Topics

Date Published: June 2015

Author(s)

W. Polk (NIST), Hildegard Ferraiolo (NIST), David Cooper (NIST)

Abstract

FIPS 201-2 requires explicit user action by the Personal Identity Verification (PIV) cardholder as a condition for use of the digital signature key stored on the card. This document clarifies the requirement for explicit user action to encourage the development of compliant applications and middleware that use the digital signature key.

Keywords

personal identification number; personal identity verification; PIN caching; PIV

Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.IR.7863
Download URL

Supplemental Material:
None available

Related NIST Publications:
FIPS 201-3

Document History:
06/18/15: IR 7863 (Final)

Topics

Security and Privacy

authentication, digital signatures, Personal Identity Verification

Laws and Regulations

Homeland Security Presidential Directive 12