Physical Access Control Systems and FIPS 201 Physical Access ...

More documents

Recommendations

Info

Current PACS 2.2/2.3 Authentication Profiles CHUID Low Assurance Free read data, sent to panel Small volume of data Low anti-counterfeiting, low anti-tampering CHUID Medium Assurance Free read data, subset sent to panel Medium volume of signed data Low to medium (with security guard observation) anti-counterfeiting, higher antitampering CHUID High Assurance Authentication key stored on card Key verified by readers/panels holding Site Secret Key (SSK) Can’t use on a reader without a copy of an SSK Compromise of an SSK could permit batch counterfeiting SSK distribution/management challenges 12
PKI High Assurance Profile On-card generation of private key (RSA, ECC) Public key bound to card/FASC-N in X.509 certificate St<strong>and</strong>ard card authentication certificate from SP 800-73, certificate profile from FICC Card verification without shared secrets (no SSK) Highest anti-counterfeiting Interoperation with logical security uses 13
Page 1 and 2: Physical Access Control Systems and
Page 3 and 4: Introduction: Traditional PACS
Page 5 and 6: Introduction: FIPS 201 - PACS Relat
Page 7 and 8: PIV Card Issues/Recommendations FA
Page 9 and 10: PIV Card Issues/Recommendations CH
Page 11: Recommendation and Benefits to Use
Page 17 and 18: PACS Readers: Issues/Recommendation
Page 21 and 22: PACS Panels: Overview Panels are c
Page 23 and 24: PACS Hosts (Servers): Overview The
Page 25 and 26: PACS Hosts: Cardholder Enrollment
Page 27 and 28: PACS Infrastructure: Issues / Recom
Page 29 and 30: PACS Infrastructure: Issues / Recom
Page 31 and 32: C CR CRI CARD 1 2 CARD READER PACS
Page 33 and 34: Biometrics An access control reade
Page 35 and 36: Biometrics: Issues/Recommendations
Page 37 and 38: Privilege Granting and Revocation
Page 39 and 40: Privilege Granting and Revocation
Page 41 and 42: PACS Products Issues GSA has not p
Page 43 and 44: Certifying PACS The Authority Havi
Page 45 and 46: Conclusions FIPS 201 and associate
Page 47 and 48: Physical Access Council Mission: A
Page 49: For More Information Physical Acce

Physical Access Control Systems and FIPS 201 Physical Access ...

Create successful ePaper yourself

Delete template?

Save as template?