pivCLASS READERS FOR "CONTROLLED" AREAS ENABLE HIGH SECURITY, INTEROPERABILITY AND COMPLIANCE
HID Global's pivCLASS Government Solutions enable facilities to upgrade their existing physical access control systems (PACS) to achieve FIPS 201/FICAM compliance without the need to rip-and-replace their existing system. The RK40 and RPK40 are designed to support multiple use cases leading to full FICAM compliance.
Transitional reader - in this approach the reader can be used standalone to read legacy iCLASS and HID prox cards as well as FIPS 201 type cards and pass the card identifier directly to the panel. The key pad can be used to send a user entered PIN directly to the PACS panel. When used with the pivCLASS Registration Engine and Certification Manager software this approach provides a solution for a smooth transition to full FICAM compliance as well as a cost effective solution for "Uncontrolled" doors where access control is desired but FICAM compliance is not required.
FICAM compliant reader - to be FICAM compliant requires the addition of the pivCLASS Authentication Module (PAM) to provide single factor strong authentication.
This configuration supports the CHUID + VIS and card authentication key (CAK) authentication modes as described in NIST Special Publication 800-116.
Two-factor strong authentication can be achieved by adding the HID pivCLASS contact reader sidecar. This sidecar provides a contact card reading slot and an LCD that displays messages and instructions to the card holder. This configuration supports the CHUID + VIS, CAK authentication modes over both the contactless and contact reader interfaces. It also supports the PKI + PIN authentication mode on the contact interface with match-oncard of the PIN.
Three-factor strong authentication can be achieved by adding the HID pivCLASS contact plus biometric reader sidecar. In addition to a contact card reading slot this sidecar also provides a biometric sensor. This configuration supports CHUID + VIS and CAK over both the contactless and contact reader interfaces. The PKI + PIN with match-on-card of the PIN and the PKI + PIN + BIO authentication modes use the contact interface.