1. for Joe Broghamer Philip S. Lee May 5, 2005 Implementing PIV Specifications HSPD-12 Workshop

2. 2 PIV Implementation Approach Adopt Industry Best Practices and Lessons Learned from other Government Smart Card Implementations DoD Common Access Card (CAC) Program –Card Profile –Card Management –Card Issuance DHS TSA Transportation Worker Identification Credential (TWIC) Program –Enrollment –Identity Management –CMS Integration

3. 3 PIV Identity Verification and Issuance Employee Application 1:n biometric search Confirm employment ID Validation through standard government wide services Government DBs Threat risk 1:n biometric search Confirm employment ID Validation through standard government wide services Government DBs Threat risk Identity Verification Enrollment Identity Management System (IDMS) Card Production & Personalization 2 1 4 5 Numbers Indicate Functional Areas of Responsibility Green functions manage Chain of Trust for Identity Verification Employer Sponsorship Issuer - Card Activation 6 PIV Activated for Operational Use 7 8 Approval Authority 3 Employee Enrolls PIV Identity Verification and Issuance

4. 4 PIV Functional Process Flow Pre-Enrollment Enrollment Individual FP Images Segmentation Capture 10 Slaps Two I-9 Doc Processing Card Request Package Data Check and Generate Audit OPM Portal Generate EFTS Records Enrollment Database Duplicate Check IAFIS & Other Background Checks Template Generation ANSI 378 Minutiae Templates Other Templates (MOC) Generate CBEFF Records Card Management Card Production Employee Application Forms Card Printing and Contact & Contactless Chip Encoding Load FP Templates Facial Image Applets Encryption Certificate Card Activation 1:1 MOS Cardholder Verification Load PIN Load Certificates Facial Image Capture Physical Access Logical Access Desktop/Remote Logon FP Biometrics 1:1 Verification Email Sign & Encryption FASC-N Relying Party Authorization Operational Use Biographic Info Capture Two Best FP Characterization

5. 5 Enrollment Workstation PIV Architecture SQL DB Staging DB Open IT Agent Identity Management System PACS Meta Directory CA Repository Active Directory HQ Active Directory Certificate Authority Life Cycle Mgmt API Notification API PACS Adaptor Interface Card Issuance Workstation Badging API Issuance Request Notifications Issuance Revocation HR Security Clearance User Provisioning Authorization HQ Network Admin Browser Hot List Subsystem Office of Security Revocation Browser Card Management & Production System PIV Card Physical Access Logical Access

6. 6 PIV Implementation Plan Sharing Lessons Learned and Seeking Stakeholder Buy-in via Integrated Product Testing (IPT) Process Physical and IT/Cyber Access Infrastructure Survey via Stakeholders PIV Implementation Plan to OMB by 6/27/05 IDMS DB Integration with HR/Security Clearance DB Integration of PIV-1 Compliant IDMS, CMS and PACS Integration of the Enterprise PACS Network with the Agency IT Network PIV-1 Implementation Ready by 10/27/05 Agency-wide Migration Strategy for Legacy PACS Industry Participation toward Open API for Card Life Cycle Management and Open Badging API for Interoperable Card Issuance System Component Migration to PIV-2 Smart Card & Biometrics Solutions by and beyond October 2006

7. 7 Thanks! Q & A Philip S. Lee (202) 674-5104 (M) Lee@identityalliance.com pleesmart@aol.com