Working with NIST and Microsoft to Advance Secure Credential Management on Mobile Devices

Phil Edge August 11th 2015 NIST, PIV

The multiple security breaches that have rocked the foundation of the U.S. Government prove that multi-factor authentication needs to be implemented as a universal standard. The next big challenge in a proactive approach to cybersecurity is mobile devices.

For the past few months, we’ve had the pleasure of working alongside the National Institute of Standards and Technology (NIST) and Microsoft to co-author a report that promotes the use of Derived Personal Identity Verification (PIV) Credentials for multi-factor mobile authentication.

NIST, a non-regulatory agency of the United States Department of Commerce, invited us to apply our technical knowledge and real-world examples to their Inter-Agency Report 8055 – a compilation of proof of concept research into Derived PIV Credentials.

We were able to demonstrate, through the application of MyID, that the specific requirements for Credential Management Systems mapped out by NIST in their Special Publication 800-157, can be met.

The intended audience for the report is cybersecurity experts who have a responsibility to implement NIST standards and develop broad-based cybersecurity programs. A public comments period on the report is now open until August 24, 2015.

Working with NIST to develop this proof of concept document validates that the technology already exists to vastly improve both cyber and mobile security for governments, companies and individuals. And for those building a cybersecurity approach that incorporates mobile devices – derived credentials allows them to do just that.

*NIST does not explicitly endorse or recommend any company or products in their reports but seek to leverage industry insights and a pedigree of security leadership expertise.

Trusted by Governments and Enterprises Worldwide

Where protecting systems and information really matters, you will find Intercede.  Whether its citizen data, aerospace and defence systems, high-value financial transactions, intellectual property or air traffic control, we are proud that many leading organisations around the world choose Intercede solutions to protect themselves against data breach, comply with regulations and ensure business continuity.