PIV-I White Paper - FINAL - 022111 - Smart Card Alliance

3 Business JustificationCoordinating multiple independent credentialing and identity management efforts can be a challenge. It ischallenging enough to manage identities and attributes locally, and even more challenging to managethem when dealing with multi-jurisdictional interoperability. Credentialing and identity managementsolutions are particularly costly when implementation is not based on standards and best practices.3.1 Advantages of Adopting FIPS 201The adoption of FIPS 201 as the basis for issuing a PIV-I or PIV-C card can substantially reduce thesechallenges. Adoption can:• Provide interoperability across multiple jurisdictionsAdoption of FIPS 201 will reduce redundant credentialing efforts and expenditures, allow one IDto be issued (rather than multiple IDs), and increase policy effectiveness.• Provide trust across multiple jurisdictionsAdoption of FIPS 201 will implement a standardized identity proofing process and standardizedissuance procedures.• Provide strong proof of cardholder identityFIPS 201 enables processes that maintain and protect data from accidental or deliberate loss,alteration, or destruction. Data accuracy is enhanced through processes that prevent, detect, andcorrect errors.• Provide the ability to authenticate identity and attributes electronicallyElectronic authentication enhances data security, physical security, and personal privacy whileallowing for secure physical and logical access. It also protects against identity theft and reducesthe incidence of fraudulent benefit, entitlement, or service payments to individuals whomisrepresent themselves.• Improve ROI for identity credentialing programsThe ability to leverage a common identity infrastructure and technology across multiplecredentialing programs can improve return on investment. In addition, the GSA co-op purchasingprogram is available to state and local governments so that they can acquire products through aGSA purchasing vehicle 18 . For first responder credentialing programs, the U.S. Department ofHomeland Security has potential grant funding available.FIPS 201 leverages existing ANSI, ISO, IETF and other standards. Thousands of products includingmost operating systems, mobile and enterprise applications and services and physical access controlsystem support PIV-I credentials because of these standards.3.2 ExamplesOrganizations that have implemented PIV and other strong authentication credentials and establishedthe associated infrastructure have experienced improved business processes, as described in theexamples below. Organizations that adopt PIV-I credentials can take advantage of high-assurance,trusted relying-party infrastructures.3.2.1 National Cancer InstituteUse of strong authentication credentials and the Federal Bridge trust model has enabled the NationalCancer Institute and the laboratories and pharmaceutical and medical companies involved in cancerresearch to achieve an overall cost savings of more than $40,000 per 100 people, by converting paper18 GSA Advantage: https://www.gsaadvantage.gov/advgsa/advantage/main/start_page.do; Coop Purchasing:http://www.gsa.gov/portal/content/104449Smart Card Alliance © 201112