Identity Management Systems, Logical and Physical Access, Convergence

Identive forms converged access ID product group

Friday, January 27, 2012

Identive Group Inc. has formed a new product group within its business structure to provide services for integrated access control. This Converged Access group will build on technology designed for Identity as a Service/SaaS products like idOnDemand, as well as work with Identive’s products in the network access smart reader technology field.

Identive has hired industry veteran John Menzel in the role of vice president Access Control ID Solutions to lead the group. Menzel most recently worked with Ingersoll-Rand Security Technologies serving in general manager and director of marketing strategy roles. Prior to that, Menzel co-founded XceedID, a secure RFID reader and credential company, in 2003. XceedID was purchased by Ingersoll Rand in 2008. 

OAuth 2.0 one step closer to IETF standardization

Tuesday, January 24, 2012

The Web Authorization Protocol (OAuth) has submitted OAuth 2.0, a framework for using security identity access tokens for native mobile application and API security, to the Internet Engineering Task Force’s (IETF) Internet Engineering Steering Group (IESG), reports ZDNet.

The IESG put the framework into “In Last Call” status and has opened it up for comment until Feb. 6. 

Upgrading existing physical access control to comply with PIV mandates

Tuesday, January 24, 2012

Beginning in fiscal year 2012, U.S. government agencies must upgrade their physical and logical access control systems to provide federal employees and contractors with more secure and reliable forms of identification using Personal Identity Verification (PIV) credentials.

These credentials must leverage smart card and biometric technology in accordance with National Institute of Standards and Technology guidelines embodied in FIPS 201. These upgrades must be completed before federal agencies may use development and technology refresh funds to complete other activities. 

RSA sets 2012 strategy

Friday, January 20, 2012

RSA Security executives spelled out the company’s product strategy for 2012, announcing that it would focus on mobile, anti-threat and cloud security.

As reported in Network World, RSA wants to develop tools that can help businesses improve data protection on mobile devices by separating personal and corporate data and improving mobile device authentication. RSA’s strategy includes adding more factor options to multi-factor authentication and embedding SecurID technology in mobile phones. 

Entrust Discovery enhances digital certificate management

Thursday, January 19, 2012

Entrust Inc. has made enhancements to its Entrust Discovery digital certificate product by expanding search capabilities for digital certificates residing within Microsoft’s Cryptographic APIs and adding more than 25 basic or custom policy field alerts to ease certificate management.

Entrust Discovery is a certificate management tool that locates, inventories and manages digital certificates. It can work across diverse systems and aims to prevent outages, data breach and non-compliance. Users can establish and customize policies for certificate management and can run hourly, daily, weekly or monthly scans to check certificates for their status. 

Colt licenses Cryptocard's cloud-based authentication

Wednesday, January 18, 2012

Information delivery company Colt has licensed Cryptocard’s BlackShield authentication-as-a-service platform to enhance its virtual desktop infrastructure with secure remote access for up to 5,000 employees.

Techworld reports that Colt employees will use a smart phone application or key fob to generate a one-time password for use during remote login situations. 

Easier, better identitiy on the horizon

Tuesday, January 17, 2012

One of the most exciting things that will happen in the next year or two is the confluence of a few major trends. It’s exciting because, together, they promise to make security and identity better and more manageable than it has been in the past.

Before I start, let me point out that these end-of-year articles, talking about the year ahead, often pretend that nothing happened the past 12 months. But these changes are happening now. They’ve been happening for a while. Furthermore, it’s not going to be complete in 2012. By the time 2015 rolls around, we’ll look back at 2012 and say that’s when it really took off.

The first of these changes is BYOD (Bring Your Own Device) computing. BYOD is a much better term than “consumerization” and really portrays the meaning that many of us are buying smart phones, tablets or laptops to use them on a work network. The tension this creates is predictable.