CS Federal Aviation Admin - Intercede

MyID FOR THE SECURE FLOW OF CIVIL AVIATION WORKERS THROUGHOUT THE UNITED STATES

The Federal Aviation Administration (FAA) is an agency of the United States Department of Transportation and has the authority to regulate and oversee all aspects of civil aviation in the US. With over 47,000 permanent employees in many different locations distributed over a wide area, its aim is to provide “the safest, most efficient aerospace system in the world”.

THE CHALLENGE

As a US federal agency, the FAA was mandated to use PIV cards for secure identity management in order to meet the requirements of HSPD-12. As well as adhering to the FIPS 201 standard, any solution would also have to align with FAA’s current business practices, be flexible enough to adapt to evolving business and security policy requirements, and have the ability to facilitate physical access control (PACS) and logical access control (LACS).

Key project requirements included:

  • Issuance of PIV cards that comply with HSPD-12 and FIPS 201 standards.
  • Self-service capability.
  • Integration with card production bureau.
  • Flexible activation model to align with FAA business environment.

THE SOLUTION

MyID® was implemented to act as a single management system for all card and credential issuance and post-issuance activities.

As a very flexible product with a wide range of capabilities, MyID from Intercede was able to interface seamlessly with FAA systems straight out of the box. The implementation was designed to utilize extensive self-service capabilities to reduce cost and minimize help desk overheads; features available to users include self-activation, biometric PIN reset, card health check and on-card certificate updates.

Utilizing MyID’s web services the FAA was able to import pre-existing sponsorship information, allowing them to leverage existing data. By using the enrollment capability of MyID, the FAA fulfills its need to securely capture all required data elements: fingerprints, facial biometrics and photographs of applicants. In addition to meeting FAA’s requirements for PIV, the system is also capable of issuing cards at lower assurance levels (such as PIV-I and CIV cards) to individuals not eligible for PIV cards.

Once a card request has been made, MyID passes this to a central card personalization bureau that prints cards off-site. These cards are then shipped to the FAA for secure activation using MyID. Post issuance management in MyID also allows the operator to issue temporary cards to staff whose card has been lost, forgotten or stolen, which saves time and money and minimizes end user frustration.

MyID has allowed the FAA to successfully comply with the latest updates to NIST standards and cryptographic key algorithms as well as integrating with back-end systems to enable PACS and LACS access. The project has been so successful that the FAA’s parent agency now uses the FAA system for their own PIV card issuance and other US federal agencies are looking to FAA as an example.

THE ​BENEFITS

EASY TO INTEGRATE 

MyID Toolkit used to configure and customize MyID to meet the FAA’s specific business processes.

EFFICIENT AND FUTUREPROOF

MyID's extensive self-service capabilities not only save time and reduce help desk costs but also future-proof the FAA against potential changes in technology and compliance.

EASY TO OPERATE AND MANAGE 

By utilizing existing data imported into MyID via an XML provisioning interface, the system can facilitate the issuance of PIV cards across more than 400 geographically scattered locations.

COMPLIANT

MyID allows the FAA to comply with HSPD-12, FIPS 201 and NIST standards.

Download the case study

In this case study ​discover how MyID® helps the FAA issue and manage secure, federal agency compliant digital identities across their 47,000 strong workforce that's spread US-wide.

DOWNLOAD

Trusted by Governments and Enterprises Worldwide

Where protecting systems and information really matters, you will find Intercede.  Whether its citizen data, aerospace and defense systems, high-value financial transactions, intellectual property or air traffic control, we are proud that many leading organizations around the world choose Intercede solutions to protect themselves against data breach, comply with regulations and ensure business continuity.