Personal Identity Verification (PIV)

enrollment, issuance, and lifecycle management

The Unifyia Platform offers a robust solution for Personal Identity
Verification (PIV) enrollment, issuance, and lifecycle management,
adhering to the highest standards set by NIST SP 800-63-4, FIPS 201-3,
and NIST SP 800-73-5. Our platform streamlines the entire PIV process,
ensuring secure, compliant, and efficient identity management for
federal employees, contractors, and enterprise users.

The enrollment process begins with obtaining authorization from an
approved sponsor or supervisor. This step is crucial for
initiating the PIV enrollment process and ensuring that only
eligible individuals proceed.

In-Person Identity Verification

Applicants must appear at an authorized enrollment center for
identity verification. During this step, an official verifies the
applicant's identity against government-issued IDs and supporting
documents to ensure authenticity.

Document Authentication

Enrollment officials authenticate the provided documents through
various methods, including visual inspection and electronic
validation tools, ensuring the legitimacy of the applicant's
credentials.

Biometric Data Capture

The Unifyia platform allows capturing biometric data, such as
fingerprints, iris, and facial images, to establish a unique and
verifiable identity. This biometric information is securely stored
and linked to the applicant's identity record, ensuring long-term
security and accuracy.

Applicant Information Entry

Once identity verification and biometric capture are complete, the
applicant's verified personal information and biometric data are
entered into the PIV enrollment system.

Background Check

A background check may be conducted to ensure that the applicant
meets the necessary security standards. This check can include
criminal history, employment verification, and other relevant
criteria.

Applicant Review and Consent

The final step in the enrollment process involves the applicant
reviewing their collected information and providing consent for
PIV issuance. This step ensures the applicant is aware of their
responsibilities and agrees to the terms of use.

PIV Issuance

The Unifyia Platform streamlines the issuance of PIV credentials,
using group and device-specific workflows to ensure a smooth and
efficient process. Credentials are issued based on the successful
completion of the enrollment process and compliance with FIPS 201-3
standards.

Supported Authenticators

Our platform supports a wide range of authenticators, including PIV,
FIDO2.1 smart cards, security keys, and mobile app-based
authenticators through the Unifyia ID Wallet. This flexibility allows
organizations to choose the most suitable authentication methods for
their needs.

PIV Derived Credentials

The platform leverages the status of existing PIV credentials to issue
Derived PIV (DPIV) or Derived FIDO (DFIDO) credentials, enabling
seamless integration for trusted partners and additional use cases.

Lifecycle Management

Certificate Renewal and Management

The platform provides tools for renewing certificates and managing
the entire lifecycle of PIV credentials. This includes actions
such as certificate suspension, activation, reactivation, and
revocation, ensuring credentials remain secure and up to date.

PIN Management and Security

Users can manage their PINs directly through the platform, with
options to reset or change their PINs securely. The platform also
supports the use of PUK (Personal Unblocking Key) for enhanced
security.

Incident Reporting and Credential Management

The platform allows users and administrators to report incidents,
such as lost or compromised credentials, and take necessary
actions, including revoking or reissuing credentials to maintain
security.

Compliance with NIST SP 800-73-5

The Unifyia Platform is fully compliant with NIST SP 800-73-5,
ensuring that all PIV credentials are managed according to the
latest standards and best practices. This compliance guarantees
the highest level of security and interoperability across federal
and enterprise systems.