Smart Card Technology -- increase productivity without decreasing the bottom line - ActivIdentity Blog

ActivIdentity Blog

« Back to Blog Homepage

Smart Card Technology -- increase productivity without decreasing the bottom line - ActivIdentity Blog

Sep 8, 2011 4:15pm by Julian Lovelock | 0 Comment
Bookmark and Share

For most organizations, increasing productivity is so critical to success that it has spawned endless presentations and other initiatives. We all know that many of those PowerPoint decks will collect virtual dust, but some will serve as roadmaps that accelerate successful careers.

Although many theories abound, improving productivity generally requires organizations to do more without adding personnel or investing in additional technology. Virtualization is a nice example of the latter.  Companies are able to increase utilization of physical servers by using them concurrently for multiple business applications.

Investing in security is another area that offers the promise of increased productivity, particularly solutions that leverage investments in physical access, such as ID badges, in order to provide strong authentication for network, application and computer access.

Without relinquishing IT control, deploying such solutions offers users greater convenience as employees will only need to carry a single security device and there will be streamlined management processes for issuing, updating and revoking that credential. Establishing processes that can be controlled and audited and the  solution offers stronger security.

Deployment generally involves two phases. The first phase is to consider how employees can use their existing buildings access smart cards to access computer systems. For example, instead of logging onto Windows using a static password, the user taps the smart card against a reader that is connected to (or embedded in) a laptop and enters a PIN. In that scenario, one factor authentication, which is something you know such as a password, is replaced with two-factor authentication -- something you know (PIN) and something you have (the smart card). The method can also be used for some remote access use cases like Citrix.

The second phase requires upgrading buildings access smart cards to incorporate a smart card chip (Crescendo logical access card products from HID Global offer some excellent examples). The smart card chip doesn’t change the way the smart card functions for physical access, but it greatly expands its capabilities as an IT security credential. The holder can now use the smart card to logon to operating systems, applications and VPNs, and also to encrypt files and emails, as well as sign documents and transactions.

Buying security technology is often compared with buying insurance. Who could argue with a proposition that keeps your premiums the same, but gives you greater coverage?

Tags: smart cards   two-factor authentication

Post a Comment

All fields are required.

Name
Email
CAPTCHA Image
Please enter the text in the image above*

Legal Disclaimer
Some of the individuals posting to this blog website work for ActivIdentity Corporation ("ActivIdentity"). Opinions expressed in the blog postings and in any corresponding comments are the personal opinions of the original authors, not of ActivIdentity. The blog postings are provided for informational purposes only and are not meant to be an endorsement or representation by ActivIdentity or any other party. This blog website is available to the public. ActivIdentity moderates the comments and comments will not be posted until they are approved by the moderator. ActivIdentity does not guarantee that your comments will be posted to this blog website and ActivIdentity may refuse to post any comments in its sole discretion. No information you consider confidential should be posted to this blog website. By posting comments, you agree to be solely responsible for the content of all information you contribute, link to, or otherwise upload to this blog website. You release ActivIdentity from any liability related to your use of this blog website and the content on this blog website. Your use of this blog website is also subject to the terms and conditions of the ActivIdentity Legal Notice available at http://www.actividentity.com/legal/ (the "Legal Notice"). The blog postings are "materials" and any comments that you post to this blog website are "feedback," each as defined in the Legal Notice.
Bookmark and Share
Alltop, all the top stories
 Subscribe to our RSS Feed

Search Blog

Category

Identity & Access Management

Recent Posts

Apr 10, 2012: Preventing Scalable MitB Attacks - ActivIdentity Blog
Mar 9, 2012: Charges Brought Against Anonymous Hackers and Top Risks of Mobile Banking – Industry News Wrap-Up – ActivIdentity Blog
Feb 24, 2012: Identity Fraud via Mobile Devices and Cybersecurity Legislation Concerns – Industry News Wrap-Up – ActivIdentity Blog
Feb 24, 2012: Risk-based Authentication – ActivIdentity Blog
Feb 17, 2012: Android Malware & Bipartisan Cyber Security Bill – Industry News Wrap-Up – ActivIdentity Blog
Feb 13, 2012: Mobile Banking vs. Online Banking – Industry News Wrap-Up – ActivIdentity Blog
Feb 6, 2012: Explaining OCSP through the DigiNotar Attack – ActivIdentity Blog
Feb 3, 2012: Top 10 Security Threats of 2012 – Industry News Wrap-Up – ActivIdentity Blog
Dec 19, 2011: Mobile Security & Identity Theft – Industry News Wrap Up - ActivIdentity Blog
Dec 9, 2011: 2011 Cyber Attacks – Security Industry News Wrap-up – ActivIdentity Blog

Recent Comments

Evelin: Yes beuscae it's a Yes beuscae it's a Security...
jaffa: Great thing.
Interior Savings Online Banking: Internal financial savings on the web consumer...
john : You are we need to try more tactics to protect...
Murugesan: It differ from bank to bank, meergr to meergr. For...

Blogroll

The Forrester Blog For Security & Risk Professionals
Computer Weekly: David Lacey's IT Security Blog
Infosecurity Magazine: Security Viewpoint
Pro Security Zone: Editor's Blog
IT Pro
Adventures in Security
ha.ckers.org
Information Security: Security Bytes
Krebs on Security
SC: Data Breach Blog
Schneier on Security
Securosis
GovInfoSecurity.com: The Security Scrutinizer
GCN Tech Blog
Cybersecurity
Gartner Blog Network
Cnet: Insecurity Complex
Computerworld: Security Impact Blog
Computerworld: Security is Sexy
eWeek Security Watch
InformationWeek Security Weblog
Network World: Security Strategies Alert
ZDNet.com: Zero Day
Bank Info Security: Industry Insights
Bank Technology News
CRN Community: Hot Topics
Threatpost: Digital Underground