Online and Digital Identification, Securing Web 2.0, PKI and Digital Certificates

Episode 33: A GICS Primer

Thursday, June 11, 2009

Regarding ID Editor Zack Martin sat down with Patrick Hearn, vice president of government and identification markets for North and Central America at Oberthur Technologies, to find out the latest GICS, or the Generic ID Card Command Set. GICS is a data scheme that takes different smart card program standards, such as registered traveler, corporate programs and FIPS 201, and aims to create improved performance and interoperability with less middleware.



iTunes

Aggregator

m4a

mp3

Older podcasts. [end] 

BMW deploys single-sign on from CA

Wednesday, June 10, 2009

CA Inc., an IT management software company, is supporting BMW with centralized Web access management and single sign-on. The improvements help increase security for the carmaker’s Web applications, while simultaneously lowering IT administration costs.

BMW uses CA SiteMinder, a centralized Web access management solution, to provide user authentication and single sign-on access for more than 300,000 users. By implementing this solution, BMW can manage secure access to a variety of Internet and intranet applications through a single login. [end] 

ActiveIdentity, Konica Minolta partner

Tuesday, June 9, 2009

Konica Minolta Business Solutions U.S.A. Inc., a provider of imaging and networking technologies for the desktop to the print shop, and ActivIdentity Corp., a provider of strong authentication and credential management, announced that they have co-developed a Personal Identification Verification-Compliant Card System that increases security and document control for customers using multifunctional products, such as print, copy, fax, and scan all in one system.

The ActivIdentity ActivClient security software is available to U.S. Department of Defense customers - as well as customers of other government agencies - using Konica Minolta multifunctional products. The PIV-Compliant Card System can be used in conjunction with the Common Access Card, as well as the next generation CAC, a PIV-Compliant Identification Card. [end] 

FIPS 201 for health credentials

Tuesday, June 9, 2009

Interoperability among health care providers, payers and patients provides a great use case for high assurance interoperable credentials. Health care is a perfect use case for an identity credential and is a great opportunity to use the new PIV-I specification.

Any investment in health care IT has to realize this. Health care needs strong identity assurance yet most systems in the U.S. don’t make the investment in an identity infrastructure. The United States government needs to invest in infrastructure to identity management/privacy and civil liberties.

Some organizations have begun this, Mt. Sinai being a leader. Many countries have also done this; the U.S. has not. Unless the U.S. invests in strong identity, we won’t get the cost saving or improve health care and the U.S. will continue to be a laggard. 

SAFRAN Group receives PIV certification

Monday, June 8, 2009

SAFRAN Group’s Sagem Orga and MorphoTrak have received FIPS 201 approval of its technology for the PIV program. The General Services Administration-approved products include smart cards and readers that satisfy security standards of the PIV program. 

Australian smart card standard coming to U.S.

Monday, June 8, 2009

Centrelink, the Australian human services agency, is pitching its smart card technology in the U.S., according to a CRN.com news report.

Two-day workshops are planned in Canberra, Australia in June and Washington in July to introduce Centrelink’s PLAID protocol. PLAID stands for Protocol for Lightweight Authentication of ID. PLAID is a standard for how smart card ID system communicate. 

Software watches the watchers

Monday, June 8, 2009

It’s a harsh reality, but in this economic environment there are layoffs and companies need to make sure employees that are let go can’t access networks and files after they walk out the door.

Agoura Hills, Calif.-based Symark is a company supplying software that enables IT administrators to see who accesses what files, giving them the ability to shut individuals out of systems with just a couple of clicks, says John Mutch, CEO at Symark.

The software also makes sure privileged users, or the watchers who grant access to the end user, don’t do anything they’re not supposed to do and if need be shuts them out of systems as well. “The security around the watchers is very granular and that’s where we specialize,” Mutch says.