2014 Digital Yearbook of Homeland Security Awards

source. With the pivCLASS portfolio, customers can use
a phased deployment approach designed to meet their
immediate needs while staying within their budget. For
example, an agency may want to initially enable their facility
to accept PIV cards without moving immediately to
strong authentication at each door. This can be achieved
by deploying the pivCLASS Registration Engine, the
pivCLASS Certificate Manager and pivCLASS Readers
configured in Wiegand output mode. This will enable
PIV cardholders to be registered into the PACS head-end
and to use their cards to gain access. At some later time,
strong authentication can be achieved by deploying the
pivCLASS Reader Services software at the PACS head-end
and the pivCLASS Authentication Modules (PAMs) for
the desired access points along with easily reconfiguring
the existing installed pivCLASS readers. pivCLASS
also supports the transition from legacy cards such as
magnetic stripe, proximity and iCLASS, by allowing
simultaneous use of these cards along with PIV cards.
This is achieved by adding the PIV card as an additional
credential to an existing PACS cardholder record. At the
appropriate time, the system can be reconfigured to
only accept PIV cards, seamlessly completing the transition.
The pivCLASS best of breed federal identity solution
also enables users to:
• Register identification credentials into multiple similar
or disparate PACS
• Register credential and verify FIPS 201-based credentials
• Harvest, validate and register credentials into over 30
different PACS head end products
• Provides strong one-, two- or three-factor authentication
at the door
• Verify cardholders identities and check the cards’
revocation status
• Revalidate the harvested certificates after registration
and suspend the card in the PACS if the certificate is
found to have been revoked
• Via a PAM, cache validation status to deliver PKI-based
high security at the door
• Support both FIPS-201 PKI-based cards and legacy
cards ( PIV, PIV-I, CIV, CAC, TWIC, iCLASS, HID Prox
and others)
67
• Import credentials from an authoritative data source,
card management system or human resource database
and provision these credentials into the PACS
pivCLASS meets FIPS 140 U.S. government computer
security standards that specify requirements for cryptography
modules.
Link to Web Page of Nominated Organization:
––––––––––––––––––––––––––––––––––––––––
http://www.hidglobal.com/government/piv
Link to additional information on product,
service or program, with brief description:
––––––––––––––––––––––––––––––––––––––––
HID Global’s pivCLASS Government Solutions portfolio
is an extensive product family that makes it easy
for U.S. Federal Government, government contractors
and other facilities to comply with security regulations
and to use their Personal Identity Verification (PIV)
card and other smart cards for physical access control,
resulting in compliance, interoperability and high
security.
New pivCLASS credentials: http://www.hidglobal.
com/products/cards-and-credentials/pivclass/
pivclass-smart-card
New MultiPACS: http://www.hidglobal.com/products/software/pivclass/pivclass-multipacs
Name and organization of nominating
contact for this entry, including name, title,
organization:
––––––––––––––––––––––––––––––––––––––––
HID Global
Nominating contact’s office telephone and cell
phone:
––––––––––––––––––––––––––––––––––––––––
Leah Washington: (917) 701-7601
Nominating contact’s email address:
––––––––––––––––––––––––––––––––––––––––
lwashington@hidglobal.com