HSPD 12 WorkshopMay 5, 2005Washington, DC.ppt

Smart Card Industry Panel:Delivering PIV compliant products HSPD 12 Workshop May 5, 2005 Washington, DC Moderator: Randy Vanderhoof, SCA Industry Panel: Gilles Lisimaque, Partner ID Technology Partners, Inc. GLisimaque@ Phone: 301-320-5146 Stephen P. Howard, Partner ID Technology Partners SteveHoward@ 703.319.3171 Dwayne M. Pfeiffer, CISSP Northrop Grumman Corp dwayne.pfeiffer@ 703.556.2963 Topics to be covered: Standards Smart Cards PIV Data Model When do I Use What in the PIV? PIV Card and Physical Access How can I use the PIV card in physical access control systems (PACS)? Standards Smart Cards Gilles Lisimaque ID Technology Partners GLisimaque@IDTP.com In the Beginnings …. The World of Smart Cards was formless and empty And ISO WG4 said “let there be a standard for smart cards” and there was ISO/IEC 7816 After the fifteen parts of the standard were finished, ISO WG4 saw this was good and handed the standard to vendors to work with it, built from it and take care of it. And the vendors sinned and used the standard for their own selfish proprietary interests instead of sharing the good news and develop interoperability …. In the Land of North America … A new standard for smart cards (GSC-IS) was develop on the top of ISO 7816 in an attempt to restore interoperability. It provided: Interoperable source of products (procurement) Interoperable data models (data definition) But it still allow applications to be on their own and did not succeed in providing interoperable applications using the various products. Without enough guidance, and using too often the letter of the law instead of its spirit, user’s of GSC-IS developed incompatible application languages and could not built the interoperable “unified tower” their leaders dreamed about. The Quest for Interoperability … The PIV application required true interoperability for cards, systems, back ends, between systems and during issuance in order to provide true security. A new “law” for smart cards was