# Presentation: 428210

## PIV Data Model Testing

- Ketan Mehta
- mehta_ketan@nist.gov
- March 3, 2006

## Agenda

- PIV Test Environment
- Test Methodology
- Test Areas
- Schedule

## PIV Test Environment

**PIV Test Environment**

## Agenda

- PIV Test Environment
- Test Methodology
- Test Areas
- Schedule

## Derived Test Requirements

***Inputs***

***Process***

***Outputs***

- &
- Test Assertions

- Lab Testing:
- Conformance to
- SP 800-73

**NIST Test Guidance ****—**** SP 800-85**

**Lab Activity**
**SP 800-85A**

**PIV Test Methodology**

- PIV Data Model
- Testing*

**Agency Activity****
**SP 800-85B**

- * Conformance to FIPS 201, SP 800-76, and SP 800-78
- ** The process is currently being defined

## Agenda

- PIV Test Environment
- Test Methodology
- Test Areas
- Schedule

## Test Areas

- CHUID Data Object
- Security Object
- Biometric Data Object
- PKI Keys and Certificates

*Note that all test requirements are designed to:*
*- Validate the format of PIV data*
*- Validate values in the fields*
*- Validate computation such as signatures or data comparison*

## SP 800-85B – PIV Biometrics Testing

**PIV Client Application Programming Interface**

**PIV Card Command Calls**

**Card Reader Driver**

**Card Reader**

**PIV Card Application**

**PIV Card Command Interface**

**PIV **
**MIDDLEWARE**

**Agency / System Integrator**

**Smart Card Reader**

**PIV CARD (SP 800-73 Conformant)**

**Test Toolkit Application**

- Finger print stored for FBI Transmission
- Finger print stored for PIV Enrollment
- Finger print minutiae for PIV Card
- Facial Image for PIV Card

**Data Under Test**

**SP 800-85B – PIV Biometrics Testing**

## SP 800-85B – Biometric Data Conformance

- Enrollment Process
- Face Templating
- Fingerprint Templating
- CBEFF Header Generation
- PIV-Specific Enrollment Procedures

- Verification Process
- Fingerprint Matching

- Documentation (Fingerprint and Facial Acquisition, Equipment, Procedures)

**- Quality dependent  on the MINEX04 test results**
**- External to PIV testing**

**Tested through **
**SP 800-85B**

**- Dependent on the policy requirements and procedural steps**
**- External to PIV Testing**

**Integrated **
**PIV**
**Biometrics **
**Process**

- Format Validation

- Human Inspection

- Performance Tests

**SP 800-85B – Biometric Data Conformance**

## SP 800-85B – PIV PKI Testing

**Test Toolkit Application**

**Card Reader Driver**

**Card Reader**

**PIV Card Application**

**PIV Card Command Interface**

**Agency / System Integrator**

**Smart Card Reader**

**Data Under Test**

**Certificate Profile Conformance**

**Algorithm Conformance**

**Signature Conformance**

**PIV Card**

**SP 800-85B – PIV PKI Testing**

## Validate signatures on all signed PIV objects
Validate signature block format on all signed PIV objects
Validate encoding of Cryptographic Message Syntax external digital signature
Validate values in certain fields of the signature block
Validate algorithms employed are in agreement with SP 800-78
Values are consistent with other data objects on the PIV Card

- Validate signature block format on all signed PIV objects
- Validate encoding of Cryptographic Message Syntax external digital signature
- Validate values in certain fields of the signature block
- Validate algorithms employed are in agreement with SP 800-78
- Values are consistent with other data objects on the PIV Card

**SP 800-85B ****— ****Cryptographic Objects Conformance****...Signature Conformance**

## Validate the presence of CRL and OCSP URLs
Validate NACI indicator field

- Validate NACI indicator field

**SP 800-85B ****— ****Cryptographic Objects Conformance****...Certificate Conformance**

## The tags and lengths in various data objects should conform to specifications in Appendix A of SP 800-73.

**SP 800-85B ****— ****BER-TLV Format Conformance**

## Tentative Schedule

- Draft SP 800-85B – April 3rd
- Final SP 800-85B – April 28th