Cloud Security Authors: Elizabeth White, Liz McMillan, Carmen Gonzalez, Yeshim Deniz, Peter Silva
News Feed Item
New Smart Card Alliance White Paper Addresses the Impact of FIPS 201 on Federal Physical Access Control Systems
New Smart Card Alliance White Paper Addresses the Impact of FIPS 201 on Federal Physical Access Control Systems
|By Marketwired .
|October 4, 2005 02:16 PM EDT
PRINCETON JUNCTION, NJ -- (MARKET WIRE) -- 10/04/05 -- Homeland Security Presidential
Directive 12 (HSPD-12) is driving a momentous change in how the U.S.
federal government manages physical access control and information
security. The new Smart Card Alliance white paper, FIPS 201 and Physical
Access Control: An Overview of the Impact of FIPS 201 on Federal Physical
Access Control Systems, provides a roadmap to the key specifications that
federal agencies need to consider in implementing FIPS 201 compliant
physical access control systems (PACS). The paper also provides an
overview of essential but unresolved questions, for which standards
definition and implementation guidance are still being developed.
In both government and enterprises today, the convergence of logical and
physical access control systems is recognized as necessary to provide
improved security and uniform security policy enforcement. For the U.S.
federal government, HSPD-12 made this convergence mandatory. It requires a
common identification credential for all federal government employees and
contractors that will be used for both physical access to federally
controlled facilities and logical access to information systems.
To meet this requirement, the National Institute of Standards and
Technology (NIST) published a standard for secure and reliable forms of
identification -- FIPS 201 -- in February 2005. The FIPS 201 Personal
Identity Verification (PIV) card standard requires contact and contactless
smart card technologies and biometrics and provides specific standards for
the issuance and use of the PIV card.
While FIPS 201 and its associated special publications define many aspects
for an interoperable federal identity card, the standard also provides a
variety of options for implementation and permits individual agencies to
define their own approaches to meeting agency-specific access requirements.
The new Smart Card Alliance white paper provides guidance to agencies on
how the new PIV card should be used in physical and logical security, how
the standards compare to previous specifications, and what aspects of the
specifications are still open that might affect an agency's implementation.
"FIPS 201 is driving a paradigm shift for government-issued ID badges that
will impact the private sector as well," said Randy Vanderhoof, executive
director of the Alliance. "A detailed roadmap has been defined that
addresses policy and technology in a comprehensive set of standards. The
end result is a secure, trusted credential that addresses physical and
logical security as a system. To achieve this result, it is critically
important for industry and customers to work together to develop and
implement the standards-based solutions that will facilitate the
This white paper was developed by the Smart Card Alliance Physical Access
Council. Individuals from 36 organizations in this Alliance Council were
involved in the development of this white paper. Lead contributors
included representatives from: AMAG Technology, Anteon, Booz Allen
Hamilton, Competech Smart Card Solutions, CoreStreet, EDS, Fargo
Electronics, GTSI Corp., HID Corporation, HIRSCH Electronics Corporation,
IBM, Identification Technology Partners, Inc. (IDTP), InfoGard
Laboratories, Integrated Engineering, International Biometric Industry
Association (IBIA), LEGIC Identsystems, Lenel Systems International, Inc.,
Lockheed Martin, MAXIMUS, MDI Federal Systems Division, Northrop Grumman
Corporation, Precise Biometrics, SAFLINK Corporation, SAIC, SCM
Microsystems, Shane-Gelling Company, Tyco Fire & Security, U.S. Department
of Homeland Security, XTec, Inc.
The Physical Access Council focuses on activities that are important to the
physical access industry and that address key issues that organizations
have in deploying new physical access system technology. Physical Access
Council participation is open to any Smart Card Alliance member who wishes
to contribute to the Council projects.
The white paper, written for executives and managers, is available at no
charge from the Smart Card Alliance web site at www.smartcardalliance.org.
About the Smart Card Alliance
The Smart Card Alliance is a not-for-profit, multi-industry association
working to accelerate the acceptance of smart card technology.
Through specific projects such as education programs, market research,
advocacy, industry relations and open forums, the Alliance keeps its
members connected to industry leaders and innovative thought. The Alliance
is the single industry voice for smart cards, leading industry discussion
on the impact and value of smart cards in the U.S. and Latin America. For
more information please visit http://www.smartcardalliance.org.
Video experiences should be unique and exciting! But that doesn’t mean you need to patch all the pieces yourself.
Users demand rich and engaging experiences and new ways to connect with you. But creating robust video applications at scale can be complicated, time-consuming and expensive. In his session at @ThingsExpo, Zohar Babin, Vice President of Platform, Ecosystem and Community at Kaltura, discussed how VPaaS enables you to move fast, creating scalable video experiences that reach your aud...
Dec. 10, 2016 01:00 PM EST Reads: 368
With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo 2016 in New York. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place June 6-8, 2017, at the Javits Center in New York City, New York, is co-located with 20th Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry p...
Dec. 10, 2016 12:45 PM EST Reads: 2,130
In his keynote at 18th Cloud Expo, Andrew Keys, Co-Founder of ConsenSys Enterprise, provided an overview of the evolution of the Internet and the Database and the future of their combination – the Blockchain.
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life sett...
Dec. 10, 2016 12:15 PM EST Reads: 7,458
DevOps is being widely accepted (if not fully adopted) as essential in enterprise IT. But as Enterprise DevOps gains maturity, expands scope, and increases velocity, the need for data-driven decisions across teams becomes more acute. DevOps teams in any modern business must wrangle the ‘digital exhaust’ from the delivery toolchain, "pervasive" and "cognitive" computing, APIs and services, mobile devices and applications, the Internet of Things, and now even blockchain.
In this power panel at @...
Dec. 10, 2016 12:00 PM EST Reads: 1,076
The 20th International Cloud Expo has announced that its Call for Papers is open. Cloud Expo, to be held June 6-8, 2017, at the Javits Center in New York City, brings together Cloud Computing, Big Data, Internet of Things, DevOps, Containers, Microservices and WebRTC to one location.
With cloud computing driving a higher percentage of enterprise IT budgets every year, it becomes increasingly important to plant your flag in this fast-expanding business opportunity. Submit your speaking proposal ...
Dec. 10, 2016 12:00 PM EST Reads: 2,396
20th Cloud Expo, taking place June 6-8, 2017, at the Javits Center in New York City, NY, will feature technical sessions from a rock star conference faculty and the leading industry players in the world.
Cloud computing is now being embraced by a majority of enterprises of all sizes. Yesterday's debate about public vs. private has transformed into the reality of hybrid cloud: a recent survey shows that 74% of enterprises have a hybrid cloud strategy.
Dec. 10, 2016 12:00 PM EST Reads: 2,406
20th Cloud Expo, taking place June 6-8, 2017, at the Javits Center in New York City, NY, will feature technical sessions from a rock star conference faculty and the leading industry players in the world. Cloud computing is now being embraced by a majority of enterprises of all sizes. Yesterday's debate about public vs. private has transformed into the reality of hybrid cloud: a recent survey shows that 74% of enterprises have a hybrid cloud strategy.
Dec. 10, 2016 11:30 AM EST Reads: 2,021
The many IoT deployments around the world are busy integrating smart devices and sensors into their enterprise IT infrastructures. Yet all of this technology – and there are an amazing number of choices – is of no use without the software to gather, communicate, and analyze the new data flows. Without software, there is no IT.
In this power panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, Dave McCarthy, Director of Products at Bsquare Corporation; Alan Williamson, Principal...
Dec. 10, 2016 11:00 AM EST Reads: 695
Extracting business value from Internet of Things (IoT) data doesn’t happen overnight. There are several requirements that must be satisfied, including IoT device enablement, data analysis, real-time detection of complex events and automated orchestration of actions. Unfortunately, too many companies fall short in achieving their business goals by implementing incomplete solutions or not focusing on tangible use cases.
In his general session at @ThingsExpo, Dave McCarthy, Director of Products...
Dec. 10, 2016 11:00 AM EST Reads: 1,006
Internet of @ThingsExpo has announced today that Chris Matthieu has been named tech chair of Internet of @ThingsExpo 2017 New York
The 7th Internet of @ThingsExpo will take place on June 6-8, 2017, at the Javits Center in New York City, New York.
Chris Matthieu is the co-founder and CTO of Octoblu, a revolutionary real-time IoT platform recently acquired by Citrix. Octoblu connects things, systems, people and clouds to a global mesh network allowing users to automate and control design flo...
Dec. 10, 2016 10:30 AM EST Reads: 912
Unsecured IoT devices were used to launch crippling DDOS attacks in October 2016, targeting services such as Twitter, Spotify, and GitHub. Subsequent testimony to Congress about potential attacks on office buildings, schools, and hospitals raised the possibility for the IoT to harm and even kill people. What should be done? Does the government need to intervene? This panel at @ThingExpo New York brings together leading IoT and security experts to discuss this very serious topic.
Dec. 10, 2016 10:15 AM EST Reads: 645
Businesses and business units of all sizes can benefit from cloud computing, but many don't want the cost, performance and security concerns of public cloud nor the complexity of building their own private clouds. Today, some cloud vendors are using artificial intelligence (AI) to simplify cloud deployment and management. In his session at 20th Cloud Expo, Ajay Gulati, Co-founder and CEO of ZeroStack, will discuss how AI can simplify cloud operations. He will cover the following topics: why clou...
Dec. 10, 2016 10:00 AM EST Reads: 1,087
In this strange new world where more and more power is drawn from business technology, companies are effectively straddling two paths on the road to innovation and transformation into digital enterprises. The first path is the heritage trail – with “legacy” technology forming the background. Here, extant technologies are transformed by core IT teams to provide more API-driven approaches. Legacy systems can restrict companies that are transitioning into digital enterprises. To truly become a lead...
Dec. 10, 2016 09:45 AM EST Reads: 653
Internet-of-Things discussions can end up either going down the consumer gadget rabbit hole or focused on the sort of data logging that industrial manufacturers have been doing forever. However, in fact, companies today are already using IoT data both to optimize their operational technology and to improve the experience of customer interactions in novel ways. In his session at @ThingsExpo, Gordon Haff, Red Hat Technology Evangelist, will share examples from a wide range of industries – includin...
Dec. 10, 2016 09:00 AM EST Reads: 1,787
The WebRTC Summit New York, to be held June 6-8, 2017, at the Javits Center in New York City, NY, announces that its Call for Papers is now open. Topics include all aspects of improving IT delivery by eliminating waste through automated business models leveraging cloud technologies. WebRTC Summit is co-located with 20th International Cloud Expo and @ThingsExpo. WebRTC is the future of browser-to-browser communications, and continues to make inroads into the traditional, difficult, plug-in web co...
Dec. 10, 2016 08:30 AM EST Reads: 1,514
"We build IoT infrastructure products - when you have to integrate different devices, different systems and cloud you have to build an application to do that but we eliminate the need to build an application. Our products can integrate any device, any system, any cloud regardless of protocol," explained Peter Jung, Chief Product Officer at Pulzze Systems, in this SYS-CON.tv interview at @ThingsExpo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
Dec. 10, 2016 08:15 AM EST Reads: 1,266
According to Forrester Research, every business will become either a digital predator or digital prey by 2020. To avoid demise, organizations must rapidly create new sources of value in their end-to-end customer experiences. True digital predators also must break down information and process silos and extend digital transformation initiatives to empower employees with the digital resources needed to win, serve, and retain customers.
Dec. 10, 2016 04:15 AM EST Reads: 1,396
Amazon has gradually rolled out parts of its IoT offerings in the last year, but these are just the tip of the iceberg. In addition to optimizing their back-end AWS offerings, Amazon is laying the ground work to be a major force in IoT – especially in the connected home and office.
Amazon is extending its reach by building on its dominant Cloud IoT platform, its Dash Button strategy, recently announced Replenishment Services, the Echo/Alexa voice recognition control platform, the 6-7 strategic...
Dec. 10, 2016 04:15 AM EST Reads: 595
We're entering the post-smartphone era, where wearable gadgets from watches and fitness bands to glasses and health aids will power the next technological revolution. With mass adoption of wearable devices comes a new data ecosystem that must be protected. Wearables open new pathways that facilitate the tracking, sharing and storing of consumers’ personal health, location and daily activity data. Consumers have some idea of the data these devices capture, but most don’t realize how revealing and...
Dec. 10, 2016 04:00 AM EST Reads: 5,324
IoT solutions exploit operational data generated by Internet-connected smart “things” for the purpose of gaining operational insight and producing “better outcomes” (for example, create new business models, eliminate unscheduled maintenance, etc.). The explosive proliferation of IoT solutions will result in an exponential growth in the volume of IoT data, precipitating significant Information Governance issues: who owns the IoT data, what are the rights/duties of IoT solutions adopters towards t...
Dec. 10, 2016 03:15 AM EST Reads: 519