04 November, 2008
Codebench, Inc. announced that Software House has signed a distribution agreement to sell its PIVCheck Product Suite, a cardholder validation solution for HSPD-12 compliance with automated registration and certificate management.
PIVCheck Plus has been integrated with Software House C·CURE 800/8000 and C·CURE 9000, providing three-factor authentication and performing biometric matching. Managing the acquisition of cardholder data from a PIV, TWIC, CAC, or FRAC card, PIVCheck Plus performs automated registration into the C·CURE system, and does not require a third-party identity or credential management system.
PIVCheck uses FIPS-201 challenge-response in order to identify forged or cloned cards. Digital certificates may be verified using the issuer’s validation authority, OCSP responder or repeater. TWIC card FASC-Ns are also verified against a live or cached TSA Hot List.
Using PIVCheck Plus to update a C·CURE cardholder record with information harvested from a TWIC, PIV, CAC or FRAC credential, end-users may continue to utilize their already issued badges for access, while their certificates are constantly re-validated by PIVCheck’s Certificate Manager software. If Certificate Manager finds a revoked certificate, the cardholder’s badges can be automatically suspended. This feature leverages the already existing access control infrastructure and supports it with certificate management.