Open Proofing Foundation
Menu

Federal or military ID

The PIV, CAC or TWIC card was issued under the Federal PKI.

NIST SP 800-63A-4 step
Evidence validation
Source
FIPS 201, Federal PKI
Where it runs
On device
Component
Passport SDK
Cost per check
$0.00

What the step requires

SP 800-63A-4 requires the proofing service to confirm that each piece of identity evidence is genuine, unaltered and current. The service checks the document's security features or verifies the issuer's digital signature.

How the check works

  1. The person holds the card to the phone, and the SDK reads it over NFC.
  2. The SDK reads the card authentication certificate and validates its path to the Federal PKI.
  3. The SDK sends the card a random challenge, and the card signs it with its card authentication key. A copy of the certificate on another card cannot produce the signature.

What the person provides

  • Their PIV, CAC or TWIC card, held to the back of the phone

What leaves the device

Nothing leaves the device for this check. Images and face data stay on the phone; only the outcome goes into the evidence record.

Outcomes

Pass
The certificate chains to the Federal PKI and the card signed the challenge.
Fail
The certificate does not chain to the Federal PKI or is expired, or the card's signature does not verify.
Unavailable
The card cannot be read over NFC.

In the evidence record

The entry this proof adds to the record's checks, shown with a pass outcome.

{
  "proof": "federalId",
  "step": "evidence",
  "outcome": "pass",
  "source": "FIPS 201, Federal PKI",
  "checkedAt": "2026-11-02T15:04:11Z"
}

Every field is defined in the evidence record specification.

Other proofs in the Evidence validation step.