Thursday, June 17, 2010

Giving Authentication the Finger

Having recently broken the thumb of my dominant hand it has become painfully clear that thumbs/fingers are an intricate part of who we are and something we take everywhere … even when they are a big PAIN.



Why bring it up?

  • Like many enterprise users, my corporate laptop comes equipped with a fingerprint scanner, and I have linked it to my desktop sign-on.
  • While the advantages to me were not obvious at first, losing the ability to authenticate this way makes me realize what a substantial usability advantage it is to me daily.
  • But the security advantages combined with cost savings on provisioning/replacing tokens is much greater.
  • Leveraging Oracle IdM & BIO-Key bio-metric authentication solutions offers Enterprise better security gives customers an substantially improved user experience.

  

How Does it Help?

  • Tokens & Passwords have limitations - Passwords have and token security policies have limitations are either ineffective or become a nightmare for both IT staff and users to manage from productivity and cost perspective.
  • Give me an Example - The George Washington Medical Center in Washington DC recognized that doctors and staff were becoming increasingly frustrated with having to remember and periodically reset their passwords in order to meet security requirements. So in May of 2007 the IT staff and Allscripts successfully integrated fingerprint identification software from BIO-key International into the Enterprise EHR Solution to protect access to patient medical records.
  • What was the result? - Privacy of patient records was vastly improved; Doctors quickly and conveniently now access needed information; System security is enhanced.
  • How does it work? - BIO-key International’s ID Director integrates with Oracle Access Manager  to enable user authentication to OAM protected Applications, based on fingerprint biometrics. This provides a more convenient, secure and cost effective alternative to passwords and tokens to establish an individual’s identity.
  • For more information - click here 
What about Identity Theft?

  • While it seems everyday in spy movies and gag shops, in reality cutting off someone’s finger and using it for authentication is far less likely to impact the Enterprise then tokens left in a taxi/plane.
  • Comparatively, the rises in traditional and emerging forms of identity theft highlight the current deficiencies of passwords and tokens used to establish user’s identity when accessing your databases and applications.
  • An article published in January, by the Identity Theft Resource Center states “The meteoric rise in social media use has also created a launch pad for identity thieves.”
  • The article predicts an increase in ID theft crimes and victims over the next two years unless significant changes are made in information security.
  • The article goes on to say “Our most important asset is our identity. And we are functioning under a completely antiquated system of identification.”
  • BIO-key International’s ID Director for Oracle Access Manager Applications, based on fingerprint biometrics, provides a more convenient, secure and cost effective alternative to passwords and tokens to establish an individual’s identity.
  • For more information- click here



Learn more about Bio-Key ID Director for Oracle Access Manager visit the solution page.