It's the ID badge of the future — minus the passport photo, company logo and a signature. Oops, unless you are thinking of a digital signature.
The smart card will be a digital identity store that will hold photographs (images), biometric data (fingerprints), personal information numbers (PIN) as well as other electronic credentials stored on the card, such as digital certificates and e-money. The card will allow a corporate user to use a single sign-on from any branch of his enterprise using a secure ID. These cards, when used with appropriate data collection systems, will allow their bearers to be identified in several standard ways.
What it contains
A smart card is a credit-card sized credential with a microprocessor chip embedded in it. Smart cards are used in conjunction with a smart card reader and access security software when used with a desktop or server.
The contact-less ones have a chip embedded within, which is invisible to the user. This chip communicates with physical access readers over a wireless protocol to permit or deny entry into premises or sections within premises. The chip runs on Java Card operating system using cryptography for security. The 32-bit processor, running at 25 to 32 MHz, is encased by tough plastic to ensure it doesn't get scratched. These are the new kind of cards, called contact-less smart cards.
Their predecessor, contact smart cards, or `proximity' cards, have been in existence for more than 20 years. The contact cards had a slow data transfer rate, the communication was not secure and the card could only launch a single application. The reader for such a card would continuously sweep the room for a card transmitting information at a particular frequency (125KHz). The card would respond with the card number when in the proximity of the reader.
The new contact-less smart card does more than that. After responding to the reader's sweep request with a serial number, it requests an encrypted communication over the 13.58 MHz frequency. The reader authenticates and initiates a secure communication. The card then transfers data stored on it. It uses encrypted security, and can store up to 16 Kb of data.
Since it is based on a processor, it can launch multiple applications. It is also much faster at 424 KB/sec.
Smart badging
According to the Smart Card Alliance, identity theft is the fourth most common threat to companies today, after viruses, `denial of service' attacks and spam. With smart badging, which is the combination of physical and logical access capabilities on a single card, organisations can ensure this threat is mitigated.
Organisations can manage and monitor their employees' movements both in reality (across the office) and virtually (in the company network). Smart cards can be used for both physical access (such as entry to buildings) and logical access (such as access to computer systems and networks). When a user walks up to his desktop, the chip on the smart card transmits the information on it to the reader, which reads, stores and identifies the biometric template of the individual, before granting access to the desktop.
The card can also store digital certificates, which are used to send secure e-mails and for accessing sensitive content on the Intranet. According to IDC, 60 per cent of identity threats are internal, people with privileged access. Smart cards are part of the solution to this issue.
Examples of application
Surat-based Mahindra Brothers, a jewellery store, uses smart cards to manage its employees and sub-contractors. The jeweller relies on smart cards to restrict admission to its jewellery polishing and design houses, says Krishna Prasad H.S., Product Marketing Manager, Systems, Security Technology Division, Bosch.
A tuition provider for engineering studies in Mumbai is also taking the smart route. It has issued smart cards instead of ID cards to students availing of tuition. Previously, the provider faced discrepancies and defaulters. Many students would attend the wrong classes, or pursue extra tuition without deigning to register themselves.
With smart cards, professors could keep a check on the attendance and the students, too, were able to manage their tuitions better. It also saved the tuition provider from further losses, says Anil Makhija, General Manager - Projects, CA Satyam ASP.
Why it hasn't matured yet
The perception of smart cards is that it is difficult or too costly to make changes to systems or to implement cost savings strategies. However, according to RSA Security, a provider of smart cards, they can be deployed throughout the organisation just as you would any other ID badge, without requiring process changes.
There is a clear lack of information and tools to support decision making by Facility Managers, says T.V. Chandrashekar, Head - Sales (South India), Honeywell Building Solutions.
"There is a high ongoing cost for maintaining installed systems, keeping up with technology and training staff, and integration of systems is also difficult. Systems don't operate in a way that supports how users want to run their business," he says.
However, the advantages of installing them now are many, say early adopters. The backbone is established for future expansions, and integration with other building sub-systems such as Video Surveillance & Physical Security can be done easily.
The tech road map is also established for subsequent expansion — Canteen, Library, E-Purse, RFID Systems, ERP Integration, etc. These are besides the primary advantage of smart cards enabling enterprises to assure their employees of enhanced safety and security.
The use of smart card for access in office buildings is now a Rs 250-crore market in India. Applications of smart card in e-Governance (national ID card project) and credit cards are being hit by various challenges and issues, including bureaucracy and legacy infrastructure, says Makhija.
It is learnt that the Bangalore-based ITI is bidding for the National ID card project, which will assign every Indian citizen a smart card for identification.
Says Sourabh Kaushal, Industry Manager, ICT Practice, Frost & Sullivan India, "In 2005, the smart cards market was $66.6 million, showing a growth of 40.3 per cent over 2004, and is expected to reach $248 million by 2009."Also, industry reports indicate that India's installed base of smart cards is about 70 million, estimated to cross 400 million in 2012.
Autor(en)/Author(s): Preethi J
Quelle/Source: The Hindu Business Line, 25.12.2006
