|
|
 |
 |
|
|
 |
 |
 |
| October 22, 2006
|
|
 |
 |
| |
Dear readers,
The Biometrics Info provides you with the latest news on biometrics, smartcards and network security. We provide you with this free service 2 or 3 times a week depending on the news available.
We provide a RSS feed for daily use. During the week all the news will be available through the RSS feed with a weekly summary on friday through the Biometrics Info e-zine.
We carefully selected the newsarticles for this Biometrics Info and we hope you appreciate this edition.
Enjoy reading.
Reinier M. van der Drift
BioXS
English
Home Office advisor urges biometrics testing
ID card campaigners are 'terrified' by the lack of biometrics testing conducted by the Government. A senior Home Office advisor has warned that biometrics has a massive usability hurdle to overcome before systems can be rolled out.
The biometrics industry is currently being driven by government projects such as the identity cards scheme in the UK — which became law through the Identity Cards Act 2006 — and the US-VISIT border control system in the US. However, Marek Rejman-Greene, a senior biometrics advisor for the Home Office's scientific development branch, has said that far more research into usability is needed before any massive rollout. One such rollout is the UK ID cards scheme, which will roll out from 2008. "I'm surprised how little we know about how people interact with this technology," said Rejman-Greene, appearing on a panel discussion at the Biometrics 2006 show in London.
Introducing next-generation biometrics
Panasonic is to introduce its next-generation iris recognition reader at DatacenterDynamics London 2006, to be held at the Royal Lancaster Hotel on 28 and 29 November 2006.
According to turk.internet.com, The BM-ET200 looks set to re-define the possibilities of biometric technology in physical security for data centres.
Biometric technology is seeing increasing usage in security-critical environments such as airports, immigration control and financial institutions.
Password: 0bs0l3t
October 23, 2006 (Computerworld) -- Fully a third of our users write down their passwords instead of remembering them. That’s according to a recent study of 325 enterprise users, conducted by Nucleus Research and KnowledgeStorm. And I’m surprised. Only one-third? It’s a small miracle that the number isn’t closer to 90%. After all, what do we ask of users when it comes to passwords? We ask them to choose complex, hard-to-remember passwords. And to choose a different hard-to-remember password for each system. And then we tell them not to write all those passwords down. That’s crazy. But that’s the password as we know it today. No wonder our help desks spend so much time resetting passwords. And no wonder users compromise security by using Post-its, cheat sheets and text files to keep track of all their passwords.
Computerworld
Date: 2006-10-20 |
Estonia Adopts Next-Gen Immigration Solution
As a means of facilitating increased international travel, automating identity verification, speeding immigration inspections, and improving border protection and security, many countries are adopting advanced technologies in their immigration and border controls. Specifically, they are contracting advanced chip technology firms to implant biometric chips in new passports and other documents that provided added security while improving border crossing processes.
Gemalto, which provided SIM cards and software to the telecom industry, also has made a name for itself with its digital security solutions for the banking, retail, enterprise, and public sectors. As the company says, it creates solutions so that “only the right people can use them to identify themselves, make a transaction, or communicate.”
Watchdog cites flaws in transportation ID program
A Transportation Security Administration program for issuing port workers secure, biometric-based identification cards is susceptible to more cost overruns and delays, government auditors concluded in a new report.
The Government Accountability Office report finds flaws in TSA's test program for implementing the transportation worker identification credential program. TSA is developing the so-called TWIC program to meet a congressional mandate that all workers with access to sensitive port and vessel areas undergo background checks and carry such IDs.
Face Recognition Biometrics Industry Gears Up for Immense Growth
PALO ALTO, Calif., Oct. 19 /PRNewswire/ -- Intensifying global security concerns following recent terror attacks and constant threats to safety have created an urgent need for advanced security solutions in many parts of the world. This has created exciting opportunities for vendors of sophisticated face recognition biometrics solutions, particularly in countries such as the United States, which is witnessing strong regulatory activity in this regard."Face recognition biometric technologies hold immense revenue-generating potential, especially in the government vertical," notes Frost and Sullivan Industry Analyst Sapna Capoor. "Currently, one of the primary drivers of this market is the mandated adoption of face recognition biometric technologies for passports."
Study: 1 in 3 put passwords to paper
System admins might want to take a long, deep breath before reading the findings of a recent research report about end-user passwords from Nucleus Technology.
Ready?
According to the survey, more than one in three enterprise users write down their passwords. And it gets worse: "Of the third of users that write down their passwords, one third of those do it on paper, such as a sticky note. Even more dangerous are the other two thirds: They keep their passwords as a text file on their laptop PC or mobile device, where it could be easily lost or stolen."
Whether you require complex passwords or basic ones; whether you require users to change them weekly or never; whether you use single sign-on or users have multiple passwords, the risk remains the same: according to the study, that same one-third-plus will continue jotting them down.
A total of 325 users participated in the survey by the way, which isn't an overwhelming number, but it's still enough to give you cause to revisit your organization's password policies and security measures.
InfoWorld
Date: 2006-10-18 |
ID Management Market to Surpass $1B
WASHINGTON — The U.S. identity management market will surpass $1 billion for the first time this year and government contracting titans like Lockheed Martin Corp. as well as smaller players, such as L-1 Identity Solutions Inc., are jockeying for a piece of the action, analysts said Thursday.
One of the biggest opportunities is the production of a common federal ID system for government employees and contractors mandated by a 2004 White House directive. Federal agencies are required to begin issuing the cards Oct. 27 and have two years to complete the process.
Chron.com
Date: 2006-10-19 |
Big Growth Projected For Fingerprint Biometrics
U.S. research firm Frost & Sullivan projects the global market for non-AFIS fingerprint biometrics will grow from $190.4 million in 2004 to just over $3 billion in 2011, a compound annual growth rate of 48.3%. The study includes the finger-scan systems typically used in physical and computer network access control and for identifying the owner of a notebook computer or mobile phone. AFIS (Automated Fingerprint Identification Systems) is the technology used by law enforcement and generally requires more expensive finger-scanning equipment.
CardTechnology
Date: 2006-10-18 |
Labour admissions leave ID cards plans in disarray
LABOUR'S national identity card scheme was in disarray last night after the Home Office insisted that its budget and timetable were now "flexible", despite claiming last week that both elements were set in stone.
A devastating document slipped out by the Government yesterday also revealed that the Home Office believes it is impossible to work out exactly what ID cards will be used for, and what biometric data they should hold, until after they are introduced.
Tory Shadow Home Secretary David Davis said the uncertainty over the project at this late stage "beggars belief", while Harrogate Liberal Democrat MP Phil Willis called the announcements "pure Yes Minister stuff".
Home Office Minister Liam Byrne insisted last week that the scheme would cost £5.4bn over 10 years, close to previous official estimates, and that it would be introduced according to plan from 2008.
Yorkshire Post
Date: 2006-10-21 |
Beer fingerprints to go UK-wide
The government is is funding the roll out of fingerprint security at the doors of pubs and clubs in major English cities.
Funding is being offered to councils that want to have their pubs keep a regional black list of known trouble makers. The fingerprint network installed in February by South Somerset District Council in Yeovil drinking holesy is being used as the show case. "The Home Office have looked at our system and are looking at trials in other towns including Coventry, Hull & Sheffield," said Julia Bradburn, principal licensing manager at South Somerset District Council.
The Register
Date: 2006-10-20 |
Microsoft dumping Wintel, moving into chip design
For more than two decades, Microsoft's software and Intel's processors were so wedded that the pairing came to be known as Wintel. But as that computing era wanes, Microsoft is turning to a new source of chip design: its own labs.
The design effort will initially be split between research labs at the company's headquarters in Redmond, Washington, and its Silicon Valley campus here. Tentatively named the Computer Architecture Group, the project underscores sweeping changes in the industry. One reason for the effort is that Microsoft needs to begin thinking about the next-generation design of its Xbox game console, said Charles Thacker, a veteran engineer and Microsoft engineer who will head the Silicon Valley group. Voice recognition may also be an area where the research could play a significant role.
Tapei Times
Date: 2006-10-20 |
Feds Start Small on Smart IDs
Several federal agencies said last week that they’re ready to start distributing smart ID cards to workers by Friday, as mandated by a directive issued in 2004 by President Bush. But some of the initial rollouts will be very small and will focus solely on controlling access to buildings — not IT systems.
For instance, the Social Security Administration became at least technically compliant with the directive last week when it issued one of the new ID cards to Commissioner Jo Anne Barnhart. SSA spokeswoman Kia Green said the agency expects to hand out more cards in the coming weeks but is “still in the process of finalizing the details.” She added that the SSA hopes to issue cards to all of its employees and contractors by the end of September 2008, which is the deadline for doing so.
ComputerWorld
Date: 2006-10-23 |
Deutsch
Regierung: Ex-Minister Schily war direkt an Auftragsvergabe an Biometrie-Firmen beteiligt
Die Bundesregierung hat eingestanden, dass der frühere Bundesinnenminister Otto Schily (SPD) direkt an der Auftragsvergabe an Biometrie-Firmen beteiligt war, in deren Aufsichtsrat er heute sitzt. Im August 2003 ging der Zuschlag für das Projekt "Automatisierte und biometriegestützte Grenzkontrolle" an die Firma Bosch Sicherheitssysteme, deren Unterauftragnehmer Byometric Systems ist. "An Gesprächen zur Eignung und Anwendung biometrischer Verfahren habe zum Teil auch der damalige Bundesminister Schily teilgenommen", so eine heute veröffentlichte Antwort auf eine parlamentarische Anfrage der FDP. Allerdings habe sein "derzeitiges Engagement als Aufsichtsratsmitglied keinen Einfluss auf die weiterhin bestehenden Beziehungen der Bundesregierung zu diesen Unternehmen", erklärte die Merkel/Müntefering-Regierung weiter.
de.internet.com
Date: 2006-10-20 |
Schweizer Privatbank setzt konsequent auf Biometrie
Byometric systems liefert die Technologie für das nach Firmenangaben bisher weltweit umfangreichste, von der Privatwirtschaft in Auftrag gegebene Iriserkennungssystem. Rund 70 Spezialkameras zur Iriserkennung kontrollieren im Neubau der Schweizer Privatbank Pictet & Cie Private Banquiers die Zugänge zu allen sicherheitsrelevanten Bereichen innerhalb des Gebäudes. Die Innensicherung ist Teil eines weltweit einzigartigen Biometrie-Projekts, das die Interflex AG Schweiz, ein Unternehmen der Ingersoll Rand Security Technologies, als Generalunternehmer für die in Genf ansässige Bank realisiert. Erstmals entschied sich ein Unternehmen dafür, komplett auf konventionelle Sicherungsmethoden wie PIN, Ausweis und Schlüssel zu verzichten und konsequent auf modernste Sicherheitstechnologien und biometrische Erkennungsverfahren zu setzen.
Francais
L’Estonie vote pour l'e-passeport de Gemalto
Ce contrat, qui court jusqu’en 2012, porte sur 600.000 passeports électroniques
La technologie de passeport électronique Gemalto a déjà été adoptée au Danemark, aux Etats-Unis, en France, en Norvège, en Pologne, au Portugal, en République tchèque, en Russie, à Singapour, en Slovénie et en Suède.
Le groupe fournira aussi l’Office estonien de l’Immigration et de la Citoyenneté avec sa solution d'e-passeport, basée sur la technologie Setec, pour le futur passeport électronique national.
Silicon.fr
Date: 2006-10-20 |
HP TC4400
Hewlett Packard, après avoir lancé le Tablet PC TC4200 en 2005 - son premier Tablet PC convertible - propose aujourd'hui une évolution baptisée TC4400. Cette dernière utilise désormais un processeur Intel CoreDuo de type T2500.
Verdict
s'inscrivant dans les standards du marché - poids de 2 Kg et écran 12,1 pouces d'excellente facture en résolution XGA, le TC4400 brille par son excellente autonomie. De plus, son processeur puissant en fait un outil pertinent pour l'utilisateur nomade qui recherche performance, robustesse, et autonomie.
Nederlands
Streng beveiligde ThinkPads
AMSTERDAM - De Chinese computerfabrikant Lenovo geeft gebruikers van zijn nieuwste ThinkPad-notebooks de mogelijkheid de harde schijf te beveiligen met een vingerafdruk. Het was al eerder mogelijk om je bij de ThinkPad aan te melden met je vingerafdruk in plaats van een wachtwoord.
Telegraaf
Date: 2006-10-20 |
Werknemers slordig met wachtwoorden
woensdag 18 oktober 2006 - Een onderzoek van de bedrijven Nucleus Research en KnowledgeStorm toonde aan dat de pogingen van bedrijven om de computerbeveiliging te verbeteren zoals het regelmatig veranderen van de wachtwoorden of het ingewikkelder van hen met cijfers, geen effect hebben.
Eén op de drie werknemers schrijft zijn wachtwoord ergens op, waardoor hij of zij meteen de hele beveiliging van het bedrijf ondermijnt. Ondernemingen zouden meer gebruik moeten maken van geavanceerde beveiligingsmethodes als biometrie. De resultaten van het onderzoek werden afgelopen dinsdag gepubliceerd.
De studie die het inloggedrag bekeek van 325 Amerikaanse werknemers ontdekte dat een eenvoudig beveiliging waarbij maar een keer ingelogd moeten worden het even goed doet als meer complexe systemen. Pogingen om de gebruikers een meer verantwoorde omgang met het wachtwoorden aan te leren werkten niet.
Biobeveiliging voor iedereen
Biometrische beveiliging heeft iets hi-techerigs. Denk aan de geavanceerde irisscanners waarmee je toegang krijgt tot bankgebouwen, kerncentrales en (iets minder spannend) Schiphol. Biometrie zit ook in sommige notebooks en usb-sticks, waarbij alleen de juiste vingerafdruk toegang geeft tot geheime gegevens.
Sequiams Biolock (249 dollar) maakt biometrie mogelijk in elk huis. Dit slot beveiligt doodnormale deuren en kasten met je vingerafdruk en kan vijftig verschillende gebruikers herkennen. De batterij gaat een jaar mee en als je onverhoopt je vingers vergeten bent, kun je de meegeleverde reservesleutels gebruiken.
Maar is een vingerafdruk honderd procent veilig? Nou nee. Vorig jaar werd een vinger van een Maleisische zakenman afgehakt omdat onverlaten het op zijn biometrisch beveiligde Mercedes hadden voorzien.
'Driekwart USB-sticks niet beveiligd'
(Novum) - De informatie op driekwart van de USB-sticks is voor iedereen te lezen. Hoewel 92 procent van de gebruikers zegt gevoelige informatie op de stick te zetten, beveiligt slechts een kwart van hen die bestanden. Dat zou blijken uit een dinsdag gepresenteerde enquête onder ruim honderd bezoekers van de Infosecurity-beurs vorige week, uitgevoerd door softwarebeveiliger SafeBoot.
Complexe wachtwoorden hebben geen invloed op beveiliging
Het verzinnen van complexe wachtwoorden en deze regelmatig wijzigen heeft geen invloed op de beveiliging van bedrijfsnetwerken en systemen, zo blijkt uit onderzoek. Grote boosdoener is namelijk het personeel, waarvan 33% het wachtwoord opschrijft, bewaart op de computer of op een mobiel apparaat.
Om te voorkomen dat werknemers de beveiliging ondermijnen, moeten bedrijven dan ook zoeken naar andere oplossingen, zoals biometrie. "Het is hetzelfde als ma en pa die een nieuw beveiligingssysteem voor het huis kopen en zoonlief legt de combinatie onder de deurmat" aldus analist David O'Connell.
Het onderzoek toonde verder aan dat single sign-on systemen net zo effectief zijn als complexere oplossingen, en dat het onderwijzen van gebruikers over het belang van wachtwoorden geen invloed op hun lakse houding heeft.
Security.nl
Date: 2006-10-19 |
|
|
Advertisements
|
|
|
