Pentagon deploys handheld PIVMAN system to validate FIPS 201 IDs
29 January, 2007
category: Biometrics, Government, Library
By Chris Corum, Editor
Security at the Pentagon is in the capable hands of the Pentagon Force Protection Agency (PFPA) but now there is something else in their capable hands … Corestreet’s PIVMAN. The PFPA officers will use the handheld identity verification units to authenticate individuals via their FIPS 201 compliant ID cards.
“The first order was for 90,000 privileges under management and 100 (handheld) units,” said Chris Broderick, Corestreet CEO. “This represents the largest transaction to date and the first flagship installation.”
The solution will be used to secure access to Pentagon grounds as well as some of the leased grounds controlled by the Department of Defense in the National Capital Region. “We have been working collaboratively with the Department of Homeland Security’s (DHS) National Capital Region throughout development of the product,” adds Mr. Broderick.
The PIVMAN solution consists of three main components:
- A handheld device: The unit purchased by the PFPA is a ruggedized handheld manufactured for Corestreet by DAP.
- Device software: The software powering the handheld enables secure reading of data on PIV credential, biometric capture and verification, as well as revocation checking.
- Backend software: The backend system monitors the FIPS 201 revocation lists and consolidates data for upload to the handhelds. It also collects privilege data from various data sources and ties that to the credential.
The Pentagon deployment is not the first for the PIVMAN. The system is in use with the City of Los Angeles, in pilot deployment in the state of Maryland, and other pilot locations as well.
“We have seen a significant uptick in the first responder community,” says Mr. Borderick. “The issuance has accelerated in local governments and it is increasing the number of municipalities that can become PIVMAN customers.”
At Corestreet, hopes are high that many of these municipalities will elect to utilize the PIVMAN solution. Such hopes are empowered by the fact that under the DHS Grants Management Program, state and local governments are eligible for reimbursements for the system, suggests Mr. Broderick.
An alternative to the GSA’s Approved Products List?
The PIVMAN, like many applications that have and will emerge to capitalize on the PIV credentials, is not on the frequently referenced GSA Approved Product List. Yet this does not mean it shouldn’t be used. Rather, it means it did not fit into a defined category for evaluation by GSA.
According to the GSA FAQ: “The list created represents the technical data that has been defined. If a product doesn’t have a category, GSA felt that there wasn’t enough information to support that category. However, this doesn’t mean that agencies cannot purchase that specific product. It means that the agency has to determine how to make that product meet the HSPD-12 goals.”
It is this broader schedule of products, applications, and services where you will find the PIVMAN solution. According to Mr. Broderick, “PIVMAN is the only compliant system for this use case in the First Responder Community.”
This “other” list is called SIN 132-62: HSPD-12 Product and Service Components and it is where you will find the PIVMAN and many other products related to HSPD-12.
The government’s IDManagement.gov site describes 132-62 as follows:
“(It)is established for products and services to implement the requirements of HSPD-12, FIPS-201 and associated NIST special publications. Qualification Requirements are established for the following HSPD-12 system components and categories on SIN 132-62:
(a) PIV Enrollment and Registration Services and Products
(b) PIV Systems Infrastructure Services and Products
(c) PIV Card Management and Production Services and Products
(d) PIV Card Activation and Finalization Services and Products
(e) PIV System Integration Services and Products
About the PFPA
The PFPA was created in the wake of the 9-11 attacks to provide law enforcement and force protection for the Pentagon and other DoD building and facilities within the National Capital Region. And now it has 100 new agents on its team – more accurately 100 new PIVMEN – to help in this important mission.
Additional resources:
Check out a video interview on the PIVMAN product at SecureIDNews.
Read SecureIDNews’ November 2006 review of the PIVMAN product, PIVMAN from CoreStreet provides mobile verification of government IDs.
Visit Corestreet online at www.corestreet.com.
Compare FIPS 201 ProductsResearch and evaluate FIPS 201 Approved Products and get the latest info on compliant credentialing systems at FIPS201.com. Click to visit FIPS201.com.
