idOnDemand SmartID CIV
Commercial Identification Verification (CIV) Credentials from idOnDemand
With the idOnDemand SmartID card with CIV, private enterprises can leverage the same technology and data model that the Federal government uses to establish a secure, reliable, electronically verifiable identity program without the requirement for cross-certification with the Federal Public Key Infrastructure (PKI) Bridge.
One Badge for Secure Physical and IT Access
Many international or multi-site companies looking for a secure credential that allows their employees and contractors to carry only one badge to log on to their computers as well as to access facilities turn to idOnDemand. With an idOnDemand SmartID CIV credential, enterprises can fulfill this vision while achieving high levels of access security and technical interoperability similar to those provided with Personal Identity Verification (PIV) cards.
What is CIV?
CIV credentials are based on the same technology and specifications as PIV and PIV-Interoperable (PIV-I) smart card credentials used today by government agency employees and contractors to access government buildings and facilities, to log on to computers, and to access controlled websites.
PIV and PIV-I credentials require that credentials are cross-certified so they can be used and trusted across all federal agencies. CIV credentials would not carry this requirement, so any enterprise can create, issue, and use CIV credentials according to requirements established within that enterprise’s unique corporate environment.
Comparison of PIV, PIV-I and CIV Credentials
Table by Smart Card Alliance Physical Access Council
| PIV | PIV-I | CIV | |
| Policy | |||
|---|---|---|---|
| Identity vetting Breeder documents Background checks | Follows FIPS 201 | Requires two breeder documents defined by FIPS 201 Other policies are defined by the issuer with the intent to be cross-certified by the Federal Bridge | Follows the corporation’s policies |
| Process | |||
| Enrollment Issuance Activation | Follows FIPS 201 | Follows FIPS 201 | Follows the corporation’s policies |
| Technical Interoperability | |||
| Card data model | Follows SP 800-73* | Follows SP 800-73* | Follows SP 800-73* |
| Credential number | FASC-N | UUID | UUID |
* FIPS 201 currently allows optional use of certain SP 800-73 data objects. Should an enterprise choose not to use all SP800-73 data objects, technical interoperability between the card and the card reader requires that any data objects that are not used must be identified as not populated.
Other Resources
Smart Card Alliance Physical Access Council white paper:
“The Commercial Identity Verification (CIV) Credential–Leveraging FIPS 201 and the PIV Specifications: Is the CIV Credential Right for You?”
