DoD Implementation Guide for CAC PIV End-Point - Common ...

DoD Implementation Guide for CAC PIV End-Point
LIST OF APPENDICES
APPENDIX A ACRONYMS.......................................................................................................................................26
APPENDIX B REFERENCES.....................................................................................................................................27
APPENDIX C COMPARISON OF SIMPLE TLV AND BERT TLV...............................................................................29
APPENDIX D SAMPLE DATA FOR PIV AUTHENTICATION CERTIFICATE .................................................................30
APPENDIX E DOD CAC PIV TRANSITIONAL AND END-POINT QUICK GUIDE .......................................................33
APPENDIX F SAMPLE JAVA PROGRAM: ACCESSING THE CHUID ..........................................................................34
APPENDIX G SAMPLE DATA FOR “CARDHOLDER FINGERPRINTS” CONTAINER......................................................39
APPENDIX H PIV DATA ENCODING.......................................................................................................................41
APPENDIX I ADDRESSING OF DATA OBJECTS.......................................................................................................42
LIST OF FIGURES
FIGURE 1. SAMPLE CAC AND PIV COMPONENTS ................................................................................................3
FIGURE 2. CONTACT CARD DISCOVERY FLOW....................................................................................................5
FIGURE 3. CAC PIV END-POINT DATA MODEL..................................................................................................7
FIGURE 4. RETRIEVAL OF CCC SEQUENCE DIAGRAM .......................................................................................11
FIGURE 5. GSC-IS CCC ENCODING ..................................................................................................................12
FIGURE 6. SECURITY OBJECT STRUCTURE.........................................................................................................19
FIGURE 7. CARD HOLDER FINGERPRINTS CONTAINER STRUCTURE...................................................................21
FIGURE 8. AUTHENTICATE PIV AUTHENTICATION KEY SEQUENCE DIAGRAM ..................................................24
LIST OF TABLES
TABLE 1. CARD DATA MODEL DISCOVERY .......................................................................................................4
TABLE 2. DEFAULT SELECTED CONTAINERS......................................................................................................6
TABLE 3. APPLET ACCESS CONTROL RULES DEFINITIONS.................................................................................8
TABLE 4. PIV DATA OBJECTS ACCESS CONTROL RULES...................................................................................8
TABLE 5. PIV END-POINT APPLICATION URL VALUES ...................................................................................10
TABLE 6. CHUID CONTAINER .........................................................................................................................15
TABLE 7. FASC-N ...........................................................................................................................................16
TABLE 8. ISSUER ASYMMETRIC SIGNATURE “SIGNEDDATA” OBJECT .............................................................17
TABLE 9. SECURITY OBJECT CONTAINER.........................................................................................................19
TABLE 10. SECURITY OBJECT CONTAINER ELEMENTS.......................................................................................19
TABLE 11. MAPPING OF DATA GROUPS TO CONTAINER ID...............................................................................20
TABLE 12. SIMPLE CBEFF STRUCTURE.............................................................................................................22
TABLE 13. PIV, CAC KEY, AND CERTIFICATE ACCESS RULES. .........................................................................23
TABLE 14. PIV AUTH ACTIVATED AND NON-ACTIVATED MODE.......................................................................25
iv