PIV Data Model Testing Ketan Mehta [email_address] March 3, 2006
Agenda PIV Test Environment Test Methodology Test Areas Schedule
PIV Test Environment PIV Client Application Programming Interface PIV Card Command Calls Card Reader Driver Card Reader PI...
Agenda PIV Test Environment Test Methodology Test Areas Schedule
Inputs Process Outputs Derived Test Requirements & Test Assertions Lab Testing: Conformance to  SP 800-73 NIST Test Gu...
Agenda PIV Test Environment Test Methodology Test Areas Schedule
Test Areas CHUID Data Object Security Object Biometric Data Object PKI Keys and Certificates Note that all test requiremen...
PIV Client Application Programming Interface PIV Card Command Calls Card Reader Driver Card Reader PIV Card Application PI...
Enrollment Process Face Templating Fingerprint Templating CBEFF Header Generation PIV-Specific Enrollment Procedures Verif...
Test Toolkit Application Card Reader Driver Card Reader PIV Card Application PIV Card Command Interface Agency / System In...
Validate signatures on all signed PIV objects Validate signature block format on all signed PIV objects Validate encoding ...
Validate the presence of CRL and OCSP URLs Validate NACI indicator field SP 800-85B  —  Cryptographic Objects Conformance ...
The tags and lengths in various data objects should conform to specifications in Appendix A of SP 800-73. SP 800-85B  —  B...
Tentative Schedule Draft SP 800-85B – April 3rd Final SP 800-85B – April 28th
Upcoming SlideShare
Loading in …5
×

Nist piv data model testing

800
-1

Published on

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
800
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
3
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Nist piv data model testing

  1. 1. PIV Data Model Testing Ketan Mehta [email_address] March 3, 2006
  2. 2. Agenda PIV Test Environment Test Methodology Test Areas Schedule
  3. 3. PIV Test Environment PIV Client Application Programming Interface PIV Card Command Calls Card Reader Driver Card Reader PIV Card Application PIV Data Model PIV Card Command Interface PIV MIDDLEWARE (SP 800-73) Host PC Smart Card Reader PIV CARD (FIPS 201, SP 800-73, SP 800-76, SP 800-78) Test Toolkit Application
  4. 4. Agenda PIV Test Environment Test Methodology Test Areas Schedule
  5. 5. Inputs Process Outputs Derived Test Requirements & Test Assertions Lab Testing: Conformance to SP 800-73 NIST Test Guidance — SP 800-85 Lab Activity SP 800-85A PIV Test Methodology PIV Data Model Testing* Agency Activity** SP 800-85B * Conformance to FIPS 201, SP 800-76, and SP 800-78 ** The process is currently being defined FIPS 201 SP 800-73 SP 800-76 SP 800-78 Test Results NPIVP Certificate Self-certification
  6. 6. Agenda PIV Test Environment Test Methodology Test Areas Schedule
  7. 7. Test Areas CHUID Data Object Security Object Biometric Data Object PKI Keys and Certificates Note that all test requirements are designed to: - Validate the format of PIV data - Validate values in the fields - Validate computation such as signatures or data comparison
  8. 8. PIV Client Application Programming Interface PIV Card Command Calls Card Reader Driver Card Reader PIV Card Application PIV Card Command Interface PIV MIDDLEWARE Agency / System Integrator Smart Card Reader PIV CARD (SP 800-73 Conformant) Test Toolkit Application Finger print stored for FBI Transmission Finger print stored for PIV Enrollment Finger print minutiae for PIV Card Facial Image for PIV Card Data Under Test SP 800-85B – PIV Biometrics Testing PIV Data Model
  9. 9. Enrollment Process Face Templating Fingerprint Templating CBEFF Header Generation PIV-Specific Enrollment Procedures Verification Process Fingerprint Matching Documentation (Fingerprint and Facial Acquisition, Equipment, Procedures) - Quality dependent on the MINEX04 test results - External to PIV testing Tested through SP 800-85B - Dependent on the policy requirements and procedural steps - External to PIV Testing Integrated PIV Biometrics Process Format Validation Human Inspection Performance Tests SP 800-85B – Biometric Data Conformance
  10. 10. Test Toolkit Application Card Reader Driver Card Reader PIV Card Application PIV Card Command Interface Agency / System Integrator Smart Card Reader Data Under Test Certificate Profile Conformance Algorithm Conformance Signature Conformance PIV Card SP 800-85B – PIV PKI Testing PIV Data Model
  11. 11. Validate signatures on all signed PIV objects Validate signature block format on all signed PIV objects Validate encoding of Cryptographic Message Syntax external digital signature Validate values in certain fields of the signature block Validate algorithms employed are in agreement with SP 800-78 Values are consistent with other data objects on the PIV Card SP 800-85B — Cryptographic Objects Conformance …Signature Conformance
  12. 12. Validate the presence of CRL and OCSP URLs Validate NACI indicator field SP 800-85B — Cryptographic Objects Conformance …Certificate Conformance
  13. 13. The tags and lengths in various data objects should conform to specifications in Appendix A of SP 800-73. SP 800-85B — BER-TLV Format Conformance
  14. 14. Tentative Schedule Draft SP 800-85B – April 3rd Final SP 800-85B – April 28th
  1. A particular slide catching your eye?

    Clipping is a handy way to collect important slides you want to go back to later.

×