Method and system for efficient exception handling of the production process of personal identification verification (PIV) smartcards

• US 20070074041A1
• Filed: 02/27/2006
• Published: 03/29/2007
• Est. Priority Date: 03/25/2005
• Status: Active Grant

• Current Assignee: Northrop Grumman Systems Corporation (Northrop Grumman Corporation)
• Original Assignee: Northrop Grumman Systems Corporation (Northrop Grumman Corporation)
• Inventors: Bowman, Erik, Aull, Kenneth
• Granted Patent: US 7,934,102 B2
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G07C 2209/41 with means for the generation of identity documents
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence

Abstract

A method and system provide efficient exception handling of the production process of PIV smartcards. Specifically, an automatic personal identity verification (AutoPIV) system and process manage potential failures in identification for agencies, such as a breakdown in correct identification. The AutoPIV system and process may deny access to individuals falsely claiming to be someone with legitimate access rights. The AutoPIV system and process may also accurately identify those with legitimate access rights.

Claims

1. A method for efficient exception handling of the production process of personal identification verification (PIV) smartcards, comprising:

checking a legend submitted by an applicant;

collecting source identity documents and biometrics of the applicant;

checking the biometrics by conducting a criminal background check on the applicant;

inputting the legend, the source identity documents, the biometrics, and security and clearance approvals into an identity management (IDM) system;

printing and issuing a PIV smartcard;

locking the PIV smartcard, wherein the PIV smartcard is locked after issuance;

verifying the applicant'"'"'s authenticity upon receiving the applicant'"'"'s request for access to security systems; and

granting the applicant physical and logical access to the security systems by unlocking the PIV smartcard.

2. The method of claim 1, further comprising issuing private key infrastructure (PKI) certificates and signing the biometrics and the scanned documents with digital signers.

3. The method of claim 1, further comprising registering the PIV smartcard with a card management system.

4. The method of claim 1, further comprising creating a World-Wide Identity (WWID) for the applicant.

5. The method of claim 1, further comprising managing the PIV smartcard using the IDM system.

6. The method of claim 1, wherein the checking the biometrics step includes conducting a National Agency Check (NAC).

7. The method of claim 1, wherein the checking the biometrics step includes conducting a National Agency Check with written Inquiries (NACI).

8. The method of claim 1, wherein the verifying step is conducted at a PIV registration station.

9. The method of claim 1, further comprising changing an access mode from smartcard sign-on to user identification (ID) and password sign-on if the applicant forgets the PIV smartcard.

10. The method of claim 1, further comprising issuing a temporary PIV smartcard if the applicant forgets the PIV smartcard.

15. The system of claim 11, wherein the central security clearance checks the biometrics by conducting a National Agency Check with written Inquiries (NACI).

11. A system for efficient exception handling of the production process of personal identification verification (PIV) smartcards, comprising:

a central security clearance that checks biometrics of an applicant requesting access to security systems, wherein the central security clearance checks the biometrics of the applicant by conducting a criminal background check on the applicant;

an identity management (IDM) system, the IDM system collecting a legend of an applicant from a PIV sponsor and collecting source identity documents and the biometrics of the applicant from a PIV registrar, wherein the IDM communicates with the central security clearance to obtain security and clearance approvals regarding the applicant; and

a network connecting the central security clearance and the IDM system,

wherein the IDM system issues a PIV smartcard for the applicant after obtaining the security and clearance approvals from the central security clearance, wherein the PIV smartcard is locked after issuance, wherein the IDM system, after verifying the applicant'"'"'s authenticity at a registration station, grants the applicant physical and logical access to the security systems by unlocking the PIV smartcard, and wherein the IDM system communicates with the registration station using the network.

12. The system of claim 11, wherein the IDM system uses a certification authority (CA) to issue private key infrastructure (PKI) certificates and to sign the biometrics and the source identity documents with digital signers.

13. The system of claim 11, wherein the IDM system uses a shared service provider (SSP) to sign the biometrics and the source identity documents with digital signers.

14. The system of claim 11, wherein the central security clearance checks the biometrics by conducting a National Agency Check (NAC).

16. The system of claim 11, wherein the IDM system sends a notification to the applicant to pick up the PIV smartcard.

17. The system of claim 11, wherein the IDM system registers the PIV smartcard with a card management system.

18. The system of claim 11, wherein the IDM system creates a World-Wide Identity (WWID) for the applicant.

19. The system of claim 11, further comprising a security database for storing the biometrics and the source identity documents.

20. A computer readable medium providing instructions for efficient exception handling of the production process of personal identification verification (PIV) smartcards, the instructions comprising:

checking a legend submitted by an applicant;

collecting source identity documents and biometrics of the applicant;

checking the biometrics by conducting a criminal background check on the applicant;

inputting the legend, the source identity documents, the biometrics, and security and clearance approvals into an identity management (IDM) system;

printing and issuing a PIV smartcard;

locking the PIV smartcard, wherein the PIV smartcard is locked after issuance;

verifying the applicant'"'"'s authenticity upon receiving the applicant'"'"'s request for access to security systems; and

granting the applicant physical and logical access to the security systems by unlocking the PIV smartcard.

21. The computer readable medium of claim 20, further comprising instructions for registering the PIV smartcard with a card management system.

22. The computer readable medium of claim 20, further comprising instructions for creating a World-Wide Identity (WWID) for the applicant.

23. The computer readable medium of claim 20, further comprising instructions for changing an access mode from smartcard sign-on to user identification (ID) and password sign-on if the applicant forgets the PIV smartcard.