Identity, Security, Payments, Biometrics, Smart Cards and Authentication News

Factors for physical and IT security convergence aligning, Like the start of a perfect storm

Monday, December 19, 2005

A panel of ID industry experts provided predictions for 2006. One of these glimpses into the future will appear here each day during December.

Between contactless payment and the electronic passport, this year was certainly big for contactless technology. But for me the highlight of 2005 was the pickup in activity and interest around the convergence of physical security and IT applications on ID cards.


There were some notable deployments, such as Microsoft using our Cryptoflex .NET cards for its own internal IT security. There was also some respectable volume–Axalto alone has now shipped more than six million smart cards to the Department of Defense CAC card program for example.

What I found exciting though is the way all of the factors for the growth of convergence are aligning. It’s like the start of a “perfect storm.”

To start with, we had a steady stream of data security incidents, resulting in the theft of millions of consumers’ personal financial records. These fraudulent incidents had many causes and methods, but many capitalized on a central weakness of existing systems: the lack of adequate IT security protections. Fraudulent activity in turn has driven regulatory pressure on companies in many countries to implement better systems for protecting data, such as the Gramm-Leach-Bliley and Sarbanes-Oxley Acts in the US. These factors are all making the business case for introducing smart cards into IT applications for security purposes.

At the same time, the technologies involved have matured. Over the past few decades, many enterprises have spent large amounts of money to deploy physical access control systems utilizing RFID or magnetic stripe technologies. Yet few would disagree that contact-based microprocessor smart cards are by far the best for IT applications. As has been proven in large scale deployments around the world, the technology is super-secure, highly flexible, and increasingly affordable. Standards for digital IDs have become well established, even for advanced capabilities like PKI, web services and federated identities.

And the products keep moving ahead. Our company, for example, introduced a broad range of interoperable smart card form factor solutions in 2005 called Protiva. It brings new options like one-time passwords and USB connectivity that are perfectly suited for a flexible, smart card-based identity management platform that meets the varying needs of users within an organization. These features will significantly reduce implementation costs and increase convenience, further accelerating adoption of the technology.

In my view, we’ll look back and say the trend toward convergence started in 2005. With the pressure to do something getting stronger and the solutions getting ever easier to implement, now the convergence trend will accelerate. I expect the market demand for strong authentication with smart cards will continue to build, for the benefit of all.


Visit Axalto on the web at www.axalto.com[end] 

DigitalPersona announced the release of a new version of its Pro Enterprise software solution, version 5.2.

Among the aspects of the new version DigitalPersona is touting are the extensive number of factors a company utilizing the solution can use to authenticate for access to sensitive information or secured computer stations. These factors include what a user knows, such as PINs or passwords, things you have, such as smart cards, contactless identity cards or Bluetooth devices, and things you are, such as fingerprints.

read more »

Codebench Inc. and S2 Security Corp. announced that Codebench’s PIVCheck Plus software suite, a card validation, authentication, and registration solution for HSPD-12 compliance, now integrates with the S2 NetBox Extreme and Enterprise systems from S2 Security Corporation.

read more »

Multicard, a unit of Identive Group that supplies credential, identity management and system integration services, has signed a contract with global consumer products company Henkel to provide a global multi-function identity credential service card to Henkel employees.

read more »

The General Services Administration (GSA) has implemented its first cloud-based physical access system at the Neal Smith Federal Building in Des Moines, Iowa.

The GSA contracted with BridgePoint Systems to utilize its TrustAlert Physical Access Control Systems. BridgePoint partnered with EmbarkIT to install the system, which replaced the GSA’s 10-year-old legacy system. The system leverages the GSA’s Kansas City, Missouri-based WAN and remote IT infrastructure, which allows the building to shrink its carbon footprint.

read more »

The Indian start-up ArrayShield Technologies has entered the two-factor authentication market in India and is looking for value-added resellers, managed service providers and system integrators to help it become a player in this field, which it estimates to be nearly Rs 2 billion.

read more »

Hirsch Identive announced that its Velocity Access Control and Security Management software has been tested and verified to be compliant with the IF-MAP computing standard by the international industry standards organization, Trusted Computing Group.

read more »