- Email: [email protected]
IT security success for US-based biometric suppliers
BTT SEPTEMBER
8/14/02
12:49 PM
Page 3
NEWS Specifically, the document is designed for evaluators of biometric systems, to be used in conjunction with existing Common Criteria documentation. It includes guidance for developers in the construction of a biometric Security Target and it addresses aspects such as statistical performance testing and biometric vulnerabilities. By way of background, the Common Criteria are used as the basis for evaluation of security properties of information technology (IT) products and systems. Accepted in a number of countries, CC provides a common set of security functional requirements for IT products and systems. An important goal of CC evaluations is to help consumers determine whether an IT product is secure enough for its intended use and whether implicit risks are tolerable. The document may be found at www.cesg. gov.uk/technology/biometrics/index.htm and the BEMWG says it is open to comment on the document. Contact: Alan Richards at CESG, Tel: +44 1242 221491 (x9136), email: [email protected]
IT Security
IT security success for US-based biometric suppliers Government, education and healthcare markets proved to be rich picking grounds for suppliers of biometric-based IT security software over the last few months, as a raft of new deals were announced by some of the industry’s leading suppliers. On the government front, the US State of Louisiana’s Department of Public Safety (LADPS) revealed it had completed an 1100+ seat deployment and that an additional 1100 seats could be added over the next year. The system is using BioLogon software from Identix and BioTouch USB 200 readers at the corresponding computer terminals. In a separate development, Identix also announced an order from the State of Mississippi Public Services Commission for more than 100 BioLogon user licenses, as well as BioTouch USB 200 and BioTouch PC Card units. A number of IT security announcements have been made in the healthcare sector recently thanks to impending Healthcare Insurance Portability and Accountability Act (HIPAA), which will go into effect in 2003. The latest deals to add to the list include one iris recognition system and one fingerprint system. Meresys Development Corporation, a software development company that targets the healthcare industry, and Iridian Technologies, announced that an iris recognition-enabled medical records
Biometric Technology Today • September 2002
management solution has been launched at the three University of South Alabama hospitals in Mobile, AL. The new system keeps sensitive clinical information secured from inappropriate access, so that only clinicians with access privileges are granted permission to view information and associated reports. Meanwhile, Blue Cross & Blue Shield of Rhode Island (BCBSRI) in the USA has selected Saflink's SAFmodule biometric software for Novell Modular Authentication Service to secure an enterprise-level computer security system that contains patient records. According to Saflink, over 1000 BCBSRI employees will ultimately be enrolled to use the system, which replaces existing password protection with fingerprint authentication. In this instance, the supplier’s SAFmodule is used as an extension of the company's existing NMAS security framework, adding fingerprint authentication capability through the use of fingerprint sensors from SecuGen. Implementation of the new biometric security solution will occur in several phases. Phase one, recently completed, involved a one-year pilot test of the Saflink solution among BCBSRI employees. Phase two is a permanent deployment and the rollout began in July. Saflink also announced a deal at the University of Minnesota. Here the supplier’s SAFmodule solution will be deployed across the University’s enterprise network. The University plans to deploy the system to 1,200 users, pending a successful first phase of the project. Contact: Frances Zelazny at Identix, Tel: +1 201 332 9213, email: [email protected] Lina Page at Iridian Technologies, Tel: +1 856 222 3102, email: [email protected] Thomas Doggett at Saflink, Tel: +1 800 762 9595, email: [email protected]
Automobiles/Fingerprint
Biometric solution motors ahead in the new Audi A8 European versions of the luxury Audi A8 are to debut fingerprint sensors that will control driver preferences when it is launched next year. Developed by Siemens, the system mounts on the car’s centre console. Although technically possible, the fingerprint sensor will not be able to immobilize the engine, if an unauthorised user attempts to start the car. Instead, it will adjust comfort and convenience features to suit up to four drivers, such as seat, mirror and steering-column positions, radio stations and climate control.
Application News • Following the Tri-State Crematory scandal in the USA, which saw 339 bodies left uncremated, a new invention by a company called LP&R has been launched which tracks crematory operators. The company is looking at using a biometric system to identify the person dealing with the body, in order to ensure the cremation is carried out properly. In effect the system will provide an audit trail for the body. • Identix has received more orders for its livescan systems. The company reported US$520,000 worth of orders, from two undisclosed government agencies, for 20 Tenprinter Transportable devices and six Tenprinter Desktop Modular systems. Meanwhile the company secured a US$721,000 live scan order from the US Immigration And Naturalization Service, comprising 20 systems. • More casinos are signing up to use facial recognition technology in order to identify known cheats. Biometrica, a division of Viisage Technology, said that Harrah's Joliet Casino & Hotel in Chicago has implemented a system. Meanwhile Imagis Technologies’ partner, API Gaming, has installed the supplier’s ID-2000 technology in a South Korean casino. • Viisage Technology’s keyless entry system FacePASS is now in operation at the Point Loma Submarine Base in San Diego, CA, in the USA. The system is used as part of a mantrap environment and the goal is to allow the Navy to move from a manned to an unmanned facility, permitting access to the pier during offpeak hours.
3
8/14/02
12:49 PM
Page 3
NEWS Specifically, the document is designed for evaluators of biometric systems, to be used in conjunction with existing Common Criteria documentation. It includes guidance for developers in the construction of a biometric Security Target and it addresses aspects such as statistical performance testing and biometric vulnerabilities. By way of background, the Common Criteria are used as the basis for evaluation of security properties of information technology (IT) products and systems. Accepted in a number of countries, CC provides a common set of security functional requirements for IT products and systems. An important goal of CC evaluations is to help consumers determine whether an IT product is secure enough for its intended use and whether implicit risks are tolerable. The document may be found at www.cesg. gov.uk/technology/biometrics/index.htm and the BEMWG says it is open to comment on the document. Contact: Alan Richards at CESG, Tel: +44 1242 221491 (x9136), email: [email protected]
IT Security
IT security success for US-based biometric suppliers Government, education and healthcare markets proved to be rich picking grounds for suppliers of biometric-based IT security software over the last few months, as a raft of new deals were announced by some of the industry’s leading suppliers. On the government front, the US State of Louisiana’s Department of Public Safety (LADPS) revealed it had completed an 1100+ seat deployment and that an additional 1100 seats could be added over the next year. The system is using BioLogon software from Identix and BioTouch USB 200 readers at the corresponding computer terminals. In a separate development, Identix also announced an order from the State of Mississippi Public Services Commission for more than 100 BioLogon user licenses, as well as BioTouch USB 200 and BioTouch PC Card units. A number of IT security announcements have been made in the healthcare sector recently thanks to impending Healthcare Insurance Portability and Accountability Act (HIPAA), which will go into effect in 2003. The latest deals to add to the list include one iris recognition system and one fingerprint system. Meresys Development Corporation, a software development company that targets the healthcare industry, and Iridian Technologies, announced that an iris recognition-enabled medical records
Biometric Technology Today • September 2002
management solution has been launched at the three University of South Alabama hospitals in Mobile, AL. The new system keeps sensitive clinical information secured from inappropriate access, so that only clinicians with access privileges are granted permission to view information and associated reports. Meanwhile, Blue Cross & Blue Shield of Rhode Island (BCBSRI) in the USA has selected Saflink's SAFmodule biometric software for Novell Modular Authentication Service to secure an enterprise-level computer security system that contains patient records. According to Saflink, over 1000 BCBSRI employees will ultimately be enrolled to use the system, which replaces existing password protection with fingerprint authentication. In this instance, the supplier’s SAFmodule is used as an extension of the company's existing NMAS security framework, adding fingerprint authentication capability through the use of fingerprint sensors from SecuGen. Implementation of the new biometric security solution will occur in several phases. Phase one, recently completed, involved a one-year pilot test of the Saflink solution among BCBSRI employees. Phase two is a permanent deployment and the rollout began in July. Saflink also announced a deal at the University of Minnesota. Here the supplier’s SAFmodule solution will be deployed across the University’s enterprise network. The University plans to deploy the system to 1,200 users, pending a successful first phase of the project. Contact: Frances Zelazny at Identix, Tel: +1 201 332 9213, email: [email protected] Lina Page at Iridian Technologies, Tel: +1 856 222 3102, email: [email protected] Thomas Doggett at Saflink, Tel: +1 800 762 9595, email: [email protected]
Automobiles/Fingerprint
Biometric solution motors ahead in the new Audi A8 European versions of the luxury Audi A8 are to debut fingerprint sensors that will control driver preferences when it is launched next year. Developed by Siemens, the system mounts on the car’s centre console. Although technically possible, the fingerprint sensor will not be able to immobilize the engine, if an unauthorised user attempts to start the car. Instead, it will adjust comfort and convenience features to suit up to four drivers, such as seat, mirror and steering-column positions, radio stations and climate control.
Application News • Following the Tri-State Crematory scandal in the USA, which saw 339 bodies left uncremated, a new invention by a company called LP&R has been launched which tracks crematory operators. The company is looking at using a biometric system to identify the person dealing with the body, in order to ensure the cremation is carried out properly. In effect the system will provide an audit trail for the body. • Identix has received more orders for its livescan systems. The company reported US$520,000 worth of orders, from two undisclosed government agencies, for 20 Tenprinter Transportable devices and six Tenprinter Desktop Modular systems. Meanwhile the company secured a US$721,000 live scan order from the US Immigration And Naturalization Service, comprising 20 systems. • More casinos are signing up to use facial recognition technology in order to identify known cheats. Biometrica, a division of Viisage Technology, said that Harrah's Joliet Casino & Hotel in Chicago has implemented a system. Meanwhile Imagis Technologies’ partner, API Gaming, has installed the supplier’s ID-2000 technology in a South Korean casino. • Viisage Technology’s keyless entry system FacePASS is now in operation at the Point Loma Submarine Base in San Diego, CA, in the USA. The system is used as part of a mantrap environment and the goal is to allow the Navy to move from a manned to an unmanned facility, permitting access to the pier during offpeak hours.
3