Online and Digital Identification, Securing Web 2.0, PKI and Digital Certificates

Regarding ID Magazine available via interactive PDF viewer

Monday, May 2, 2011

AVISIAN Publishing is pleased to announce the availability of a new interactive PDF viewer allowing subscribers a new way to access our print magazines and content.

The spring 2011 issue of re:ID is ready and the interactive feature enables a miniature mode that you can thumb through as well as a full screen mode that allows you to read the magazine as if it were on the desk in front of you.

To be notified of the next available e-magazine, sign up or update your existing subscription:

  • If you already receive email newsletters from us, click “Add free subscriptions to other AVISIAN publications” at the bottom of your email newsletter issue or click here and go to the bottom of the form and request “Send Access Code” to send a link to your inbox.
  • If you don’t have an existing subscription, click here to sign up at no cost.

Read the spring issue of re:ID online now. [end] 

HIPAA compliance help comes in a contactless reader

Friday, April 29, 2011

RF IDeas unveiled its full line of proximity and contactless readers and devices, all HIPAA compliant and designed to keep health care organizations on top of their compliance requirements.

pcProx Enroll enables users to use their existing building access card for other forms of identification and security throughout their workplace, either embedded in a keyboard or the standard wedge type housing. Acting as a card enrollment or ID badge reader/tester, the USB model mimics a keyboard and will keystroke the card’s ID or site code to the cursor’s location on the screen. 

Citi achieves PIV-I cross-certification with CertiPath

Wednesday, April 27, 2011

CertiPath and Citi’s Global Transaction Services announced that Citi has achieved cross-certification to the PIV-I standard with the CertiPath identity bridge.

CertiPath is the U.S. Federal PKI Policy Authority partner in testing PIV-I credentials, used for both physical and logical access. Certipath’s architecture and operational systems for a single credential provide secure access and interoperability for employees, customers and partners. 

Draft FIPS 201-2 Top 10 changes

Wednesday, April 27, 2011

IDmachines and other colleagues attended a workshop last week at the Department of Commerce National Institute of Standards and Technology in Gaithersburg, Md. on the draft FIPS 201-2.

The workshop enabled NIST, other government agencies and industry to discuss the initial changes and to propose other changes to PIV standard. FIPS 201-1 has more than 5 years of experience and the issuance of millions of credentials to consider as the new draft goes forward. The comment period for FIPS 201-2 closes June 6. 

Episode 75: NSTIC: It's all in the implementation

Tuesday, April 26, 2011

The National Strategy for Trusted Identities in Cyberspace has lofty goals but as always the devil is in the details. If implemented correctly the strategy is a good thing, though this won’t be easy.

“It is a utopian document,” says Aaron Titus, chief privacy officer and vice president of business development at Identity Finder. “Hating NSTIC, in it’s current form, is like hating puppies and rainbows because it just about says anything that anyone would want. My concern is in the implementation, there’s a lot that can go wrong.”

In our continuing series, Titus fills listeners in on some of the potential pitfalls and what officials need to watch out for when it comes to putting the strategy into practice.



iTunes

Aggregator

m4a

mp3

Older podcasts. [end] 

SCA Healthcare Council promotes strong authentication for provider, patient access

Tuesday, April 26, 2011

The health care industry has reached a defining point for building a solid identity management infrastructure, and for meaningful use of electronic health records, the Smart Card Alliance Healthcare Council said.

The Healthcare Council in 2011 plans to continue providing guidance and educational materials on strong authentication and smart card technology for health care professional and patient identity applications. This includes promoting two-factor authentication for patient, provider and payer access to electronic health records and personal health records along with strong patient identity management to combat fraud, waste and abuse. 

Identity as a service

Tuesday, April 26, 2011

Outsourcing identity and credentialing matures

So, you want to deploy a converged smart card system for logical and physical access control for your company?

You start taking inventory, looking at the operating systems in use, applications that would have to be enabled, public key infrastructure technology that would need to be deployed and physical access control infrastructure and try to figure out how to take all this and make it work with one smart card for each employee.

And then you quit.

All kidding aside, deploying a converged solution can be time consuming, costly and frustrating. This is leading some to look at using an identity as a service model which is similar to the software as a service model, says Mark Diodati, research director at the Burton Group.