How a major US federal aviation agency
secured its workforce
The customer is a major civil-aviation agency of the United States federal government and has the authority to regulate and oversee all aspects of civil aviation in the US. With over 47,000 permanent employees in many different locations, its aim is to provide the safest, most efficient aerospace system in the world.
The deployment in numbers
MyID for the secure flow of civil aviation workers throughout the United States
The agency runs one of the world’s largest civil-aviation workforces, spread from major regional offices to small air traffic control facilities. Issuing and managing high-assurance identity credentials across so many sites, without adding help-desk load, was the practical problem MyID was brought in to solve.
As a US federal agency, the agency was mandated to use PIV cards for secure identity management to meet the requirements of HSPD-12. As well as adhering to the FIPS 201 standard, any solution would also have to align with the agency's current business practices, be flexible enough to adapt to evolving business and security policy requirements, and have the ability to facilitate physical access control (PACS) and logical access control (LACS).
As a US federal agency, the agency was mandated to use PIV cards for secure identity management to meet the requirements of HSPD-12
As well as adhering to the FIPS 201 standard, any solution would also have to align with the agency's current business practices, be flexible enough to adapt to evolving business and security policy requirements, and have the ability to facilitate physical access control (PACS) and logical access control (LACS).
Issuance of PIV cards that comply with HSPD-12 and FIPS 201 standards.
Self-service capability.
Integration with card production bureau.
Flexible activation model to align with the agency business environment.
MyID was implemented to act as a single management system for all card and credential issuance and post-issuance activities
As a very flexible product with a wide range of capabilities, MyID interfaced seamlessly with the agency systems out of the box. The implementation was designed to utilize extensive self-service capabilities to reduce cost and minimize help desk overhead.
Extensive self-service
self-activation, biometric PIN reset, card health check and on-card certificate updates.
Existing data leveraged
via MyID's web services the agency imported pre-existing sponsorship information.
Full enrolment capability
MyID captures all required data elements: fingerprints, facial biometrics and photographs of applicants.
Multi-assurance issuance
the system can issue cards at lower assurance levels (PIV-I and CIV cards) to individuals not eligible for PIV cards.
MyID has allowed the agency to successfully comply with the latest updates to NIST standards and cryptographic key algorithms as well as integrating with back-end systems to enable PACS and LACS access. The project has been so successful that the agency's parent agency now uses the agency system for their own PIV card issuance and other US federal agencies are looking to the agency as an example.
Easy to integrate
the MyID Toolkit was used to configure and customise MyID to the agency’s specific business processes.
Easy to operate and manage
by using existing data imported through an XML provisioning interface, the system supports PIV issuance across more than 400 scattered locations.
Efficient and futureproof
efficient and futureproof extensive self-service capabilities save time, reduce help desk costs and future-proof the agency against changes in technology and compliance.
Compliant
compliant MyID allows the agency to comply with HSPD-12, FIPS 201 and NIST standards.
The platform behind the deployment
Intercede is a cybersecurity software company and the digital identity experts. For over 25 years, Intercede has helped government agencies, defence programmes, financial institutions and enterprises deploy phishing-resistant digital identities at scale.
The MyID product family, MyID CMS, MyID MFA and MyID PSM, manages millions of credentials across more than 20 countries. Vendor-neutral architecture means MyID integrates with virtually any certificate authority, hardware security module or smart card manufacturer, without organisations replacing existing infrastructure.