Federal Information Processing Standards

Federal Information Processing Standards (FIPS) are publicly announced standards developed by the United States federal government for use in computer systems by non-military government agencies and government contractors.^[1]

FIPS standards are issued to establish requirements for various purposes such as ensuring computer security and interoperability, and are intended for cases in which suitable industry standards do not already exist.^[2] Many FIPS specifications are modified versions of standards used in the technical communities, such as the American National Standards Institute (ANSI), the Institute of Electrical and Electronics Engineers (IEEE), and the International Organization for Standardization (ISO).

Specific areas of FIPS standardization

The U.S. government has developed various FIPS specifications to standardize a number of topics including:

• Codes: for instance, standards for encoding data (such as FIPS county codes or codes to indicate weather conditions or emergency indications). In 1994 NOAA began broadcasting coded signals called FIPS codes along with their standard weather broadcasts from local stations. These codes identify the type of emergency and the specific geographic area, such as a county, affected by the emergency.
• Encryption standards, such as the Data Encryption Standard (FIPS 46-3^[3]) and the Advanced Encryption Standard (FIPS 197^[4])

Data security standards

Some FIPS standards have related to the security of data processing systems.^[5] Some of these included the use of key escrow systems.^[6][7]

Withdrawal of geographic codes

Some examples of FIPS Codes for geographical areas include FIPS 10-4 for country codes or region codes and FIPS 5-2 for state codes. These codes were similar to or comparable with, but not the same as, ISO 3166, or the NUTS standard of the European Union. In 2002, the National Institute of Standards and Technology (NIST) withdrew several geographic FIPS code standards, including those for countries (FIPS 10-4), U.S. states (FIPS 5-2), and counties (FIPS 6-4).^[8][9] These are to be replaced by ISO 3166 and INCITS standards 38 and 31, respectively.^[10] Some of the codes maintain the previous numerical system, particularly for states.^[11]

In 2008, NIST withdrew the FIPS 55-3 database.^[8] This database included 5-digit numeric place codes for cities, towns, and villages, or other centers of population in the United States. The codes were assigned alphabetically to places within each state, and as a result changed frequently in order to maintain the alphabetical sorting. NIST replaced these codes with the more permanent GNIS Feature ID, maintained by the U.S. Board on Geographic Names. The GNIS database is the official geographic names repository database for the United States, and is designated the only source of geographic names and locative attributes for use by the agencies of the Federal Government.^[12] FIPS 8-6 "Metropolitan Areas" and 9-1 "Congressional Districts of the U.S." were also withdrawn in 2008, to be replaced with INCITS standards 454 and 455, respectively.^[10]

The U.S. Census Bureau used FIPS place codes database to identify legal and statistical entities for county subdivisions, places, and American Indian areas, Alaska Native areas, or Hawaiian home lands when they needed to present census data for these areas.^[13]

In response to the NIST decision, the Census Bureau is in the process of transitioning over to the GNIS Feature ID, which will be completed after the 2010 Census. Until then, previously issued FIPS place codes, renamed "Census Code," will continue to be used, with the Census bureau assigning new codes as needed for their internal use during the transition.^[11][14]

See also

• Federal Information Security Management Act of 2002 (FISMA)
• FIPS 140 Security requirements for cryptography modules
• FIPS 153 (3D graphics)
• FIPS 197 (Rijndael / AES cipher)
• FIPS 199 Standards for Security Categorization of Federal Information and Information Systems
• FIPS 201 Personal Identity Verification for Federal Employees and Contractors
• List of FIPS region codes
• List of FIPS state codes

References

1. "FIPS General Information". 2013-09-09. Retrieved 2015-04-01.
3. FIPS 46-3
4. FIPS 197
5. "Minimum Security Requirements for Federal Information and Information Systems" (PDF). 2007-03-01. Retrieved 2015-04-01.
6. "87-20-20 Key Escrow Encryption Policies and Technologies" (PDF). 1998-06-01. Retrieved 2015-02-14.
7. "FIPS-185 Escrowed Encryption Standard" (PDF). 1994-02-01. Retrieved 2015-04-01.
8. National Institute of Standards and Technology (2012-10-22). "Withdrawn FIPS Listed by Number" (PDF). National Institute of Standards and Technology. Retrieved 2013-03-06.
9. National Institute of Standards and Technology (September 2, 2008). "Announcing Approval of the Withdrawal of Ten Federal Information Processing Standards (FIPS)" (PDF). 73 FR 51276. Federal Register. Retrieved 2010-08-03.
10. "FIPS Code Replacement Chart 2012" (PDF). National Institute of Standards and Technology. 2012-06-28. Retrieved 2013-03-06.
11. "American National Standards Institute (ANSI) Codes". United States Census Bureau. February 24, 2010. Retrieved 2010-08-03.
12. "FIPS 55 Change Notice" (PDF). United States Geological Survey. January 1, 2006. Retrieved 2010-08-03.
13. "Federal Information Processing Standard (FIPS)". United States Census Bureau. Archived from the original on 2014-02-07. Retrieved 2010-08-03.
14. "2009 TIGER/Line Shapefiles Technical Documentation" (PDF). United States Census Bureau. 2009. Retrieved 2010-08-03.

External links

• FIPS homepage at NIST
• Computer Security Division NIST