The PK-PACS Specification aims to ensure interoperability between Public Key enabled authenticators, readers, applications and Physical Access Control Systems (PACS).
The PK-PACS Specification defines how to store and verify information relevant to Physical Access Control Systems (PACS) in a digital certificate. PK-PACS certificates can be used to verify the authenticity of a physical access credential throughout the credential lifecycle.
A manufacturer can create PK-PACS certificates to establish trust in its products. A reseller or vendor can use PK-PACS credentials to verify the authenticity of products, and can add PK-PACS certificates to provide information about the credential, such as the date, type, keys and order information. An organization can generate its own PK-PACS certificates to establish its own trust domain for applications, cards and reader. A PACS registration system can verify a PK-PACS credential on enrollment to ensure it is trusted and has the correct features. A door reader can authenticate the card and verify the PK-PACS certificate before allowing access. End users can use PK-PACS certificates to check their credentials, and use them to authenticate to PK-PACS systems for self-management.
As of February 2024 more than 1.8 Million PK-PACS compatible credentials have been issued worldwide.
The PK-PACS specification is open source under the Apache-2.0 license.