How HSPD-12 Works
The goal of HSPD-12 is to give federal employees and contractors a standardized, tamperproof smart card that they can use for both physical and logical access. Here's how it would work:
By Sarah D. Scalet
August 01, 2006 — CSO —
How Joe Public-Servant Gets Around Today
Front door of building: Waves his ID card near a 10-year-old proximity reader, which lets him through a turnstile.
Computer:Punches in a user name and password for each application.
Sensitive area of the building:Unlocks door using a different access card, which may or may not incorporate biometrics.
Another federal building where he has business:Shows his ID card to a security guard or receptionist, who checks that his name is on the guest list before letting him in.
How Joe Public-Servant Might Get Around Tomorrow
Front door of building:Waves his ID card near a new smart card reader, which lets him through a turnstile.
Computer:Inserts the same ID card into a card reader, then punches in his user name and password once to access many applications (two-factor authentication with single sign-on).
Sensitive area of the building:Unlocks door by inserting the same ID card into a smart card reader, punching in a PIN and having his fingerprint read (three-factor authentication).
Another federal building where he has business:Waves his ID card at that agencys new smart card reader. If the system has electronically received information about his visit and confirmed that his credentials are valid, it lets him through the turnstile.
Read more about access control in CSOonline's Access Control section.
Other stories by Sarah D. Scalet
Good access control policies and technologies protect employees, assets, data, and organizational value. Get critical insights on network and facility access from leading CSOs, CISOs and security directors.
Physical security information management: The basics
PSIM promises to synthesize data across multiple sensor, allowing for faster and better incident identification and response
The physical access control project planner
Solid planning avoids cost overruns and business disruptions
Network access control: now or never?
The promise and problems of NAC technology
HSPD12: converged physical and digital access control
A look at the government's ambitious undertaking
Converged access control checklist
How to write good passwords
19 ways to build physical security into a data center
Second thoughts on second factors
- What CSOs are saying about Advanced Persistent Threats
- How to Avoid Being the Next Victim of the Social Web
- Introduction to VMware vCenter Site Recovery Manager 5
- Reliable Disaster Protection with VMware vCenter Site Recovery Manager
- Introduction to Virtualization
- Preventing Unplanned Downtime with Server Virtualization
- Patch Tuesday preview, February 2012
Microsoft published its Patch Tuesday Preview for February of 2012 a few minutes ago. IT admins can expect nine bulletins to address 21 security vulnerabilities.
It looks like four bulletins will be rated critical while the rest are designated as important.
Affected Microsoft products are:
- M86 report proves water is wet
- Actor, banker, soldier, spy: Suits and Spooks Anti-Conference aims to redefine security
More Salted Hash with Bill Brenner
