Contactless CACs slated for 10 DOD locations

 

Connecting state and local government leaders

Members of the Defense Department's Access Card Office like to say they eat their own dogfood in testing the contactless smart-identification card. In a pilot program, employees traded their Common Access Cards for a newer version that has both contact and contactless capabilities.

Members of the Defense Department's Access Card Office like to say they eat their own dogfood in testing the contactless smart-identification card.In a pilot begun earlier this summer, employees traded their Common Access Cards for a newer version that has both contact and contactless capabilities. Contact cards have to touch a card reader; contactless cards, which have a radio frequency chip, can be read at a short distance.The test proved, on a limited scale, that the new CAC and associated hardware could be modified to accept the new standards under Homeland Security Presidential Directive-12 and Federal Information Processing Standard 201-1.DOD now will test whether others across the country will be able to follow suit.'This is a great big step forward,' said Mike Butler, chief of DOD's smart-card programs, who is on detail to the General Services Administration to work on HSPD-12 implementation. 'The cards handle almost all of the data requirements to meet the October deadline.'By Oct. 27, agencies need to issue at least one HSPD-12 compliant card that includes a cardholder unique identifier (CHUID) with a digital certificate.Frank Jones, who also works in the Access Card Office, said DOD this summer will test the contactless cards at 10 other military locations around the country, involving more than 5,000 Defense employees.He said the pilots will run in Alabama, Texas and Virginia between August and December.'We want to make sure we don't break the functionality that is there today,' Jones said at an Interagency Smart Card Advisory Board meeting in Washington.Separate issuance stations will be set up at each base to hand out the new cards. DOD also, from time to time, will trade the used cards for new ones to perform forensic analyses to ensure the cards are working properly.Jones said the trading of cards will complement the Access Card Office's monthly data collection about the system.'We want to understand how the CHUID operates and is parsed by vendors,' Jones said. 'The key is for the card readers to read and interpret the CHUID and make the right 'go' or 'no go' decisions.'Butler added that the test will include 10 vendor products.The Access Card Office's pilot used the existing infrastructure in two buildings, said Eric Hildre of Technologies Industries of Williamsburg, Va.He said the office learned that it will take longer than first thought to get started with the cards and card readers. He said one of the keys is to establish a lowest common denominator for the data elements of each user.'PIV authenticity is easy, but validity is harder to achieve,' he said. 'We could authenticate data on the CAC but need to close the loop with validity in terms of the certificates and token status.'Defense services and agencies are about 70 percent ready for HSPD-12, said Debra Gallagher, chief technology officer in the Access Card Office.'We will be adding containers for the biometric and the [Federal Agency Smart Card Number],' she said at a recent HSPD-12 conference in Washington, sponsored by the Potomac Forum Inc. of Potomac, Md.The Government Printing Office is designing the new card to include optical variable ink, ultraviolet images and a holographic magnetic stripe.DOD, however, will not be fully HSPD-12 compliant for a number of years and will operate using the transition card, Gallagher said.Gallagher said DOD's challenges include its large installed base'Defense has about 3.5 million active Common Access Cards'and the need for backward-compatibility to ensure that the old and new cards work.GSA and the Office of Management and Budget's Executive Steering Committee for HSPD-12 also are developing governmentwide training modules for agencies.The first two courses'Personal Identity Verification overview and PIV roles and responsibilities'are posted in USALearning.gov. The other three'privacy and awareness, technical architecture and appropriate uses'are expected in the next few months.As agencies move closer to the October deadline, Hildre reminded the IAB of one important lesson: 'Every PIV implementation can and will be different. Look for flexibility ... everywhere in the solution, including the technology and business processes.'

At a glance

Who: Defense Department's Access Card Office

What: Testing contactless Common Access Cards on door readers

Where: 10 Defense locations in Alabama, Texas and Virginia

When: August through December

Why: To ensure the new cards meet the requirements under Homeland
Security Presidential Directive-12 for physical access control.

STEP FORWARD: 'The cards handle almost all of the data requirements to meet the October deadline,' said Mike Butler, chief of DOD's smart-card programs.

Rick Steele









'A great big step'















'Go' or 'no go'

























X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.