Identity Applications

• Secure Technology Alliance Identity Resources
• Smart Cards and Identity Applications
• Other Identity Resources

Secure Technology Alliance Identity Resources

• A Comparison of PIV, PIV-I and CIV Credentials
• Assurance Levels Overview and Recommendations
• Benefits of Smart Cards versus Magnetic Stripe Cards for Healthcare Applications
• The Commercial Identity Verification (CIV) Credential–Leveraging FIPS 201 and the PIV Specifications
• Effective Healthcare Identity Management: A Necessary First Step for Improving U.S. Healthcare Information Systems – A Smart Card Alliance Brief for Government Policy Makers and Other Stakeholders.
• FICAM in Brief: A Smart Card Alliance Summary of the Federal Identity, Credential, and Access Management (FICAM) Roadmap and Implementation Guidance
• FIPS 201 and Physical Access Control: An Overview of the Impact of FIPS 201 on Federal Physical Access Control Systems
• Guide Specification for Architects and Engineers for Smart Card-based PACS Cards and Readers for Non-government PACS
• Healthcare Identity Management: The Foundation for a Secure and Trusted National Health Information Network
• Identifiers and Authentication – Smart Credential Choices to Protect Digital Identity
• Identity Management in Healthcare webinar
• Identity Management Systems, Smart Cards and Privacy
• Identity on a Mobile Device webinar series
• Medical Identity Theft in Healthcare
• Mobile Devices and Identity Applications
• Mobile Identity Authentication
• Personal Identity Verification Interoperability (PIV-I) for Non-Federal Issuers: Trusted Identities for Citizens across States, Counties, Cities and Businesses
• PIV-I for Non-Federal Issuers Webinar
• PIV-Interoperable Credential Case Studies
• Privacy, Identity, and the Use of RFID and RF-Enabled Smart Card Technology – A Smart Card Alliance Brief for State and Local Governments
• Secure Technology Alliance Identity Council
• Smart Cards and Biometrics
• Smart Card Technology and the FIDO Protocols
• Smart Card Technology and NSTIC
• Smart Card Technology in Healthcare: Frequently Asked Questions
• Strong Authentication Using Smart Card Technology for Logical Access
• Supporting the PIV Application in Mobile Devices with the UICC

Smart Cards and Identity Applications

Smart card technology is currently recognized as the most appropriate technology for identity applications that must meet critical security requirements, including:

• Authenticating the bearer of an identity credential when used in conjunction with personal identification numbers (PINs) or biometric technologies
• Protecting privacy
• Increasing the security of an identity credential
• Implementing identity management controls

Countries around the world use smart cards for secure identity applications. In addition, both government organizations and public corporations use smart employee ID cards to secure access to physical facilities and computer systems and networks.

Additional information on the use of smart cards for identity applications can be found on the enterprise ID and government application pages and from the Secure Technology Alliance Identity Council.

Identity in Cyberspace

U.S. citizens are increasingly using the Internet for sensitive transactions, like banking, mortgage applications, buying and trading stocks, and reviewing healthcare information. Given this, there are very real problems of identity management, privacy and security in cyberspace. Smart card technology (in various form factors including cards, USB tokens and mobile phones) enables strong multi-factor authentication on the Internet.

Additional information on the use of smart cards for identity applications in cyberspace can be found on the Secure Technology Alliance Identity Council page.

Other Identity Resources

• FIDO Alliance
• The Identity Ecosystem Steering Group
• IDManagement.gov, providing information on Federal identity management activities
• Initiative for Open Authentication (OATH)
• Kantara Initiative
• Open Identity Exchange (OIX)
• Secure Technology Alliance Access Control Council
• Secure Technology Alliance Identity Council