Government smart card spec gets updated

Related Links

Getting Smart

The newest version of the Government Smart Card Interoperability Specification is critical to the General Services Administration's Smart Access Common ID contract. Although it provides some additional details that agencies have been clamoring for regarding the use of contactless cards and biometrics, the latest version is still lacking in some areas, experts say. The National Institute of Standards and Technology is developing the specification.

Version 2.1, released in July, includes several general improvements to the contact card interfaces and a new interface for contactless smart cards, which use radio signals to exchange data with a reader instead of requiring the user to swipe the card. The four companies on GSA's smart card contract are required to provide products and solutions that comply with the specification.

"The physical and logical access were the initial core applications, and the spec dealt with a contact card," said Mickey Femino, director of GSA's Center for Innovative Business Solutions. "A lot of agencies said the contact card is a little slow, and they would like to have contactless. This new version addresses that."

On the biometrics front, Version 2.1 supports the use of biometrics as part of agencies' authentication and credentialing efforts, but it doesn't mandate their use or detail the interoperability concerns associated with such tools, said Gordon Hannah, a senior manager at GSA contractor BearingPoint Inc.

"We also need to address how we protect the data both at rest and in transit," he said. "One other piece we may want to include in the spec is a way to authenticate the cards as government-issued."

Smart cards include a processor that can support an automatic challenge/response mechanism to verify their authenticity, but many agencies choose to supplement that check with a password and/or a biometric identifier, Hannah said. The NIST specification could add standards for agencies seeking assurance that a card from another agency is authentic.

Featured

  • Congress
    Rep. Jim Langevin (D-R.I.) at the Hack the Capitol conference Sept. 20, 2018

    Jim Langevin's view from the Hill

    As chairman of of the Intelligence and Emerging Threats and Capabilities subcommittee of the House Armed Services Committe and a member of the House Homeland Security Committee, Rhode Island Democrat Jim Langevin is one of the most influential voices on cybersecurity in Congress.

  • Comment
    Pilot Class. The author and Barbie Flowers are first row third and second from right, respectively.

    How VA is disrupting tech delivery

    A former Digital Service specialist at the Department of Veterans Affairs explains efforts to transition government from a legacy "project" approach to a more user-centered "product" method.

  • Cloud
    cloud migration

    DHS cloud push comes with complications

    A pressing data center closure schedule and an ensuing scramble to move applications means that some Homeland Security components might need more than one hop to get to the cloud.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.