Federal Information Processing Standards (FIPS)
The Federal Information Processing Standards (FIPS) are a set of publicly announced standards developed by the National Institute of Standards and Technology (NIST). These standards are designed for use in computer systems across non-military United States government agencies and their contractors.
The primary goal of FIPS is to establish rigorous requirements for computer security and interoperability—the ability of different systems to work together seamlessly. FIPS standards are typically implemented in scenarios where suitable industry standards do not already exist. In many cases, NIST develops FIPS specifications by modifying existing standards used by technical communities, including the American National Standards Institute (ANSI), the Institute of Electrical and Electronics Engineers (IEEE), and the International Organization for Standardization (ISO).
[ไม่มีภาพประกอบ]
Key Facts
- Developer: National Institute of Standards and Technology (NIST).
- Purpose: Ensures security and interoperability for non-military US government agencies.
- Scope: Covers encryption, geographic coding, and data processing security.
- Relationship to Industry: Often based on modified ANSI, IEEE, or ISO standards.
- Modern Transition: Many geographic FIPS codes have been replaced by ISO and INCITS standards.
Specific Areas of FIPS Standardization
The U.S. government utilizes FIPS to standardize a wide array of technical topics, ranging from administrative codes to high-level cryptography.
Encryption and Data Security
FIPS plays a critical role in protecting sensitive information. Notable encryption standards include AES (FIPS 197) and its predecessor, the now-withdrawn 56-bit DES (FIPS 46-3). Additionally, some standards focus on the security of data processing systems, including the implementation of key escrow systems (systems where encryption keys are held in trust by a third party).
Administrative and Emergency Codes
FIPS is used to create standardized codes for various identifiers. For example, FIPS county codes are used to indicate specific geographic areas. Since 1994, the National Oceanic and Atmospheric Administration (NOAA) has broadcast these codes during weather alerts to identify the specific type of emergency and the affected county.
The Evolution and Withdrawal of Geographic Codes
Over time, NIST has transitioned away from several geographic FIPS standards in favor of more globally recognized or permanent systems.
Transition to ISO and INCITS
In 2002, NIST withdrew several geographic standards, including FIPS 10-4 (country/region codes), FIPS 5-2 (state codes), and FIPS 6-4 (county codes). These were replaced by ISO 3166 and INCITS standards 38 and 31. While the standards changed, some numerical systems, particularly for states, were maintained.
The Shift to GNIS Feature ID
In 2008, NIST withdrew the FIPS 55-3 database, which provided 5-digit numeric codes for cities, towns, and villages. Because these codes were assigned alphabetically, they changed frequently, making them unstable for long-term use. They were replaced by the GNIS Feature ID, maintained by the U.S. Board on Geographic Names. The GNIS database is now the official repository for geographic names and locative attributes for all Federal Government agencies.
Other withdrawals in 2008 included FIPS 8-6 (Metropolitan Areas) and FIPS 9-1 (Congressional Districts), which were replaced by INCITS standards 454 and 455, respectively.
Impact on the U.S. Census Bureau
The U.S. Census Bureau previously relied on FIPS place codes to identify legal and statistical entities for county subdivisions and American Indian, Alaska Native, or Hawaiian home lands. Following the NIST decision, the Bureau began transitioning to the GNIS Feature ID, a process scheduled for completion after the 2010 census. During this transition, previous FIPS place codes were renamed "Census Codes."
FIPS Standards Summary
| Standard/ID | Focus Area | Status/Replacement |
|---|---|---|
| FIPS 197 | AES Encryption | Active |
| FIPS 46-3 | DES Encryption | Withdrawn |
| FIPS 10-4 | Country/Region Codes | Replaced by ISO 3166 |
| FIPS 55-3 | Place Codes (Cities/Towns) | Replaced by GNIS Feature ID |
| FIPS 140 | Cryptography Modules | Active |
| FIPS 201 | Personal Identity Verification | Active |
Frequently Asked Questions
What is the main purpose of FIPS?
FIPS provides a set of publicly announced standards developed by NIST to ensure that computer systems used by non-military US government agencies and contractors are secure and can work together (interoperability).
How does FIPS relate to ISO or ANSI standards?
FIPS standards are often modified versions of existing industry standards from organizations like ISO, ANSI, and IEEE, adapted to meet specific US government requirements.
Why were FIPS place codes (FIPS 55-3) withdrawn?
FIPS 55-3 codes were assigned alphabetically, meaning they changed frequently whenever new places were added. They were replaced by the GNIS Feature ID to provide more permanent and stable identification.
Which encryption standard is currently associated with FIPS?
The Advanced Encryption Standard (AES) is defined under FIPS 197. It replaced the older 56-bit Data Encryption Standard (DES), which was defined under FIPS 46-3.
Who maintains the official geographic names for the US government?
The U.S. Board on Geographic Names maintains the GNIS database, which is the designated sole source of geographic names and locative attributes for Federal Government agencies.