Home » Identity & Access » Access Control

How HSPD-12 Works

The goal of HSPD-12 is to give federal employees and contractors a standardized, tamperproof smart card that they can use for both physical and logical access. Here's how it would work:

By Sarah D. Scalet

August 01, 2006 — CSO —

How Joe Public-Servant Gets Around Today

Front door of building: Waves his ID card near a 10-year-old proximity reader, which lets him through a turnstile.

Computer:Punches in a user name and password for each application.

Sensitive area of the building:Unlocks door using a different access card, which may or may not incorporate biometrics.

Another federal building where he has business:Shows his ID card to a security guard or receptionist, who checks that his name is on the guest list before letting him in.

How Joe Public-Servant Might Get Around Tomorrow

Front door of building:Waves his ID card near a new smart card reader, which lets him through a turnstile.

Computer:Inserts the same ID card into a card reader, then punches in his user name and password once to access many applications (two-factor authentication with single sign-on).

Sensitive area of the building:Unlocks door by inserting the same ID card into a smart card reader, punching in a PIN and having his fingerprint read (three-factor authentication).

Another federal building where he has business:Waves his ID card at that agencys new smart card reader. If the system has electronically received information about his visit and confirmed that his credentials are valid, it lets him through the turnstile.