HID Global earns security printer certification from global standards body Instergraf

Editor / Provider: HID Global | Updated: 5/24/2013 | Article type: Security 50

HID Global announced that its card manufacturing operation in Rastede, Germany has earned the Security Management System for Secure Printing certification from Intergraf, the global standards body for the security printing industry. The certification validates the achievement of a strict security standard for security printers based on data security, print quality and processes as well as on-site facility security. HID Global is one of only a few card manufacturers producing identity credentials for the government-to-citizen market to hold this distinctive status in the world.

“Global security concerns are driving nations to invest in ultra-secure ID systems, which require dedicated security at every step of development and deployment, including the complex high-security printing phase,” said Rob Haslam, vice president of Government ID Solutions with HID Global. “While our highly skilled and experienced team has been delivering state-of-the-art printing at this facility for decades, this certification means that our customers can trust their ID credentials and equipment are built to the highest standards of printing within the card manufacturing market.”

The Rastede facility was accredited after a certification process that included screening, risk inventory and a security audit by an accredited certification body. The certification applies to Rastede's entire product line, including plastic cards, ID badges, ePassport datapages and chip cards (including RFID). Additionally, the auditors certified HID Global Rastede's ID production, access control and loyalty systems as well as its card production equipment and all related services.

“Our dedication to achieving maximum security in the manufacturing and printing of secure documents is evident in major Government ID programs worldwide, including the U.S. Green Card, Angola National ID Card, Italian Federal Police Card, Saudi Arabia National ID Card and Costa Rica Foreign Resident Card,” said Haslam.

HID Global's European manufacturing and R&D operations also includes a facility in Galway, Ireland that designs and produces electronic passport inlays and datapages as well as electronic ID components. The high-security facility is independently certified through the Common Criteria Standard EAL 5+ by the BSI and it complies with Quality Assurance System ISO9001: 2008 Certificate issued by SGS.

Telling industrial IP cams apart

Editor / Provider: Basler | Updated: 5/23/2013 | Article type: Tech Corner

Industrial (machine vision) cameras are used for a variety of industrial quality assurance and process control applications, according to a recent white paper written by Bjorn Webe, PM of IP Cameras at Basler. They give machines the power of sight, which is a major enabling factor for quality assurance in production processes. What many industrial camera users don't know: network cameras, also known as IP cameras, are also an effective tool for monitoring production processes.

Typical Characteristics of a Network Camera
With network cameras, the reproduced images are inherently optimized for human viewing as well as for long-term storage of the data. To ensure this last aspect, the image data is compressed while still in the camera. This is beneficial on the one hand because it cuts down on the amount of storage space needed to archive the videos. On the other hand it also reduces the necessary bandwidth overhead for video transmission and allows the cameras to be used even in budget-minded networks built around low levels of capacity. For this reason various cameras can run parallel to one another.

Network cameras compress the image data within the camera.
Advantage: requires less bandwidth and less storage space.
Network cameras have another major benefit: uncomplicated operation. Once the IP camera is connected to a network, any computer on that network can then access its images by entering the camera's IP address into a browser. This makes it easy for an electrician to mount and activate the cameras. While industrial cameras offer a very broad spectrum of configurations and are often more complicated, network cameras are relatively simple, with a viewing angle and focus factor all that's needed for immediate use.

Network cameras can be used effectively anywhere where production processes or movement sequences (of any kind) are to be filmed and monitored by a human observer. They are especially well suited for applications that require good image quality despite changing light, weather or temperature conditions. IP cameras are especially crucial if the image data is to be stored.

Ideal Uses for Network Cameras
Given their technical properties, network cameras are the perfect choice for use in monitoring tasks. These range from classical video surveillance to anti-theft and anti-vandalism applications, as well as controlling of production processes and workflows and traffic monitoring. IP cameras are also well suited for remote control of machinery, cars and robots. The different characteristics are decisive for achieving optimal results with the different applications:

• For video surveillance it is especially important that the cameras deliver good images despite changeable or poor lighting conditions. Casinos, for example, are typically set up with dim lighting yet have strict quality standards to ensure safety.
• Cameras for traffic monitoring and video surveillance are frequently subjected to outdoor conditions, which means that the cameras must be able to adjust automatically for a wide range of light conditions. They must also be robust enough to handle both moisture and large fluctuations in temperature.
• In the surveillance field it's a benefit to have multiple network cameras running simultaneously. An observer in a central location can use the cameras to gain an overview of the different areas — from building and traffic management to monitoring of production workflows, such as for the printing and courier industries.
• Network cameras are especially well suited for use in the logistics and transport fields, since they are easy to integrate into existing video management systems.
• No local PC is required to examine the image data from a network camera, allowing them to be used in difficult-to-access spots (such as tunnels), locations subjected to extreme conditions (heat, cold, hazards), or far away from the control center (traffic hubs, etc.).. Because network cameras compress their image data for better storage, they are an excellent choice for a wide variety of areas where “documented proof” must be stored for extended periods. This is particularly true for traffic violation cameras, events such as soccer matches and surveillance videos.

Identive discusses PIV impact on the private sector

Editor / Provider: Identive Group | Updated: 5/22/2013 | Article type: Security 50

Since launching the HSPD-12 (Homeland Security Presidential Directive 12, Policy for a Common Identification Standard for Federal Employees and Contractors) secure credentialing program in 2004, millions of smart cards have been issued to US Government employees, military personnel and contractors. As a result, the government has streamlined and standardized the process used to vet employees and process their identities and credentials, and has defined and implemented a standardized, single credential to grant access to physical and logical security applications.

Government employees across all federal agencies now are required to use a single, secure photo ID badge to authenticate themselves, gain access to doors, gates and portals at government buildings, carry biometric and other information in a secure manner, log on to their computers and mobile devices, digitally sign emails and encrypt disks, files and emails.

With this US Government initiative, for the first time, standards were applied to all elements of the identity, credential and access management ecosystem of an organization. Developed by NIST (National Institute of Standards and Technology), the Federal Information Processing Standard 201 (FIPS 201) governs the way in which federal employees provide their identities, and the workflows associated with capturing personnel data, processing credential requests, producing the credential and getting it to the employee are strictly defined. Following the FIPS 201-mandated process provides a high level of trust in the credential, which allows it to be accepted across different agencies, and to perform more functions than a typical, locally-issued proximity credential could be trusted with. These credentials are commonly referred to as PIV (Personal Identity Verification) cards. As of today, millions of PIV cards have been issued to federal workers, including both military and non-military government employees and contractors.

To produce the high volumes of smart cards the government requires for its PIV credentials, a number of agencies, including the GSA (U.S General Services Administration), established sophisticated identity and smart card management systems that not only print visually secure ID badges, but also encode the smart card chips with agency- and personnel-specific data, biometric information, encryption keys and digital certificates.

Government standards also aid enterprises
It took a lot of work by the government and industry, but the FIPS 201 standard that supports HSPD-12 has made real the promise of trusted, enterprise-wide credentialing and multiple applications on a single credential. Success at the federal agency level has stirred interest among government contractors and commercial enterprises, many of whom share the problems as the government –identifying all employees, and securely managing those identities and their credentials across multiple sites.

There are various forms of FIPS 201 credentials that are available to private and commercial organizations, allowing them to benefit from the research and data models that have been implemented and shown to be effective by the federal government. Examples include TWIC (Transport Worker Identity Card), use by workers at maritime facilities and ports, FRAC (First Responder Access Card) for police, fire and other local government emergency response personnel, and PIV-I (PIV-Interoperable Cards) for non-government personnel that may need to have access to US Government sites and data as if they were government personnel.

And there are CIV Cards. The Commercial Identity Verification Card provides a model for technical compatibility with PIV-based systems deployed by the federal government. The CIV card doesn't require the same level of identity proofing or issuance workflow required to obtain a PIV card, but does provide a framework that non-government organizations can use to issue very secure, multifunction smart card credentials. Technically, PIV-I and CIV are virtually identical; the difference lies in the issuing process. CIV issuers must follow the same enrollment, verification, separation of duties and full background checks that the federal government follows to issue a PIV card. CIV holders are then considered vetted to the same standards as a government employee or contractor, and their credentials are handled with the same levels of security as a government-issued card.

CIV cards for smaller organizations – issued through the cloud
But what if instead of millions, your organization consists of thousands, or maybe hundreds of employees? While high assurance, smart-card based credentialing programs would provide more secure physical and logical security tools and policies, the investment of hundreds of thousands of dollars required to implement such a card management system would likely be a challenge.

This is where cloud-based credentialing, or “identity as a service” can play a role. These services allow users to bypass the smart card infrastructure investment and to create, manage and distribute secure, certificate-based smart card credentials such as CIV cards through the cloud. ‘Pay-as-you-go' models offers one fixed price so you pay only for the users you need, as you need them, eliminating the complexity and operating costs associated with managing and deploying an internal smart card identity project. This approach offers significant savings by avoiding upfront capital and ongoing management costs of replacing, installing, maintaining and managing onsite servers and systems.

Typical identity as a service solutions allow an organization to define its own credentialing workflows, badge designs and encoding data for physical access, logical access, digital signing and encryption. Badges can be printed by the service in bulk, one at a time, or even at the customer's facility, if they prefer to have printers and the associated supplies and support mechanisms on site. Remote employees can log onto the service, follow the predetermined workflows, and create their own badges, which are then mailed to them in a secure envelope.

By taking the complexity out of designing smart card data models, encryption, encoding, printing and issuance, cloudbased credentialing services make true, secure smart card functionality and deployments available to all organizations.

Outside the U.S., there are similar programs starting or already going on all over the world that use smart card-based credentials issued via the cloud. The underlying technology that creates secure, trusted identity credentials is gaining momentum. And we can be curious what the future will bring.

Assa Abloy/Traka launches mobile key management

Editor / Provider: Traka | Updated: 5/21/2013 | Article type: Security 50

Traka, the intelligent access management systems company, has launched Traka Web, a web-based administration suite that allows businesses to control key management systems from mobile devices. Complimenting Traka's existing access management solutions, Traka Web will help improve security and protect assets across organisations with simple administration and the ability to grant/restrict access to multiple items quickly and efficiently.

Traka provides organisations such as the Ministry of Justice with secure key cabinets to store Traka iFobs connected to physical keys. To access iFobs, staff identify themselves at the automated cabinets via PIN, biometrics or smartcard. Each iFob contains authorisation information; thereby ensuring keys are used by authorised personnel only and with full integration capability we can ensure they are returned before staff leave site.

The system also improves auditing – with reports showing which staff accessed which keys, when they were taken and when they were returned. Traka Web will enable managers to monitor key usage from their mobile devices, rather than needing to be on-site.

“Despite the boom in electronic door access, in most organisations, access management for keys is a manual process with keys kept in a box and audited using a paper log book,” explains John Kent, President of Traka. “This relies too much on employee diligence, is time consuming for management and simply doesn't ensure watertight security. Traka Web works with our access management system to help businesses control key usage from anywhere at anytime. Managers can see who has what key and produce auditing reports that can be read on any mobile device - boosting security and efficiency in one sweep.”

Wisconsin electronic parts manufacturer eyes remote security management as marketing and profit-generating tools

Editor / Provider: Matrix Systems | Updated: 5/20/2013 | Article type: Commercial Markets

Norstan, a US electronic parts manufacturer based in Wisconsin, replaced its legacy security system with an advanced security system consisting of biometric time-clock auditing, plus Matrix Systems' mobile surveillance and access control systems to improve profitability and secure doors. Matrix also upgraded the resolution of seven existing Ganz analog cameras, which helped Norstan save US$3,000. The analog cameras were integrated with Geovision software and hardware, and another 10 Geovision high-resolution cameras were added to cover the 3,716-square-meter (30,000-square-foot) facility.

Many CEO's think their security systems are just for opening doors, but John Nordigian, CEO of Norstan, envisioned video monitoring of his plant from anywhere in the world with his mobile phone, and state-of-the-art security technology to  reduce insurance costs, attract and retain Fortune 500 clients. One of the technological challenges during installation was finding a solution that could integrate with its existing five-door HID format key fob door reader system, which would cost approximately $2,800 to replace and install.

Matrix Systems enterprise-based access control system, which uses Mercury and HID access controller subsystems and its open architecture features allowed integration of third party technology. For larger views in remote locations, Nordigian can use a notebook computer, or unlock doors, respond to alarms and most other security functions via mobile apps that connect to the plant's access control system security workstation server from remote locations.

The main challenge, though, was integrating Nordigian's iPhone and Droid-X mobile apps, and his laptop computer into the upgraded video surveillance system.  Nordigian can now monitor any of the company's 17 video surveillance cameras anywhere within seconds through the access control security software using iPhone or Droix-X mobile apps. Matrix Systems built in functionality such as PTZ for closer looks. The CEO finds the iPhone's AT&T network more reliable abroad than the Droid-X's Verizon network, while domestically the iPhone's DGI software loading time and functionality, such as remote operating PTZ capabilities on surveillance cameras  outperformed Android GDA. The remote mobility feature is also capable of temporary access authorization, such as allowing an industrial service contractor into a secure area to repair a particular stamping machine. Future video improvements will include a conversion to IP to integrate into the access control system and add video voice-over to add audio capabilities for instant feedback and communication.

New cameras and digital recording capabilities through the access control system gave Norstan a hedge against illegal dumpers who potentially place illegal materials in the facility's dumpster, which could result in fines or recycling fees. Videos are stored on a NVR for 60 days.The mobile devices are also invaluable for afterhours alarm situations where Nordigian can go online within seconds after receiving an alarm phone call and inspect the entire plant from home or abroad.

Besides lowering operational costs, the new system is also attracting and retaining clients. "After we supplied the detailed plans of the installed the access control and GeoVision systems, a client was impressed with our system and commitment to protecting their on-site assets,” said Nordigan. “As a result, they chose to retain our services versus going to a competitor." Insurance carriers also took notice of the upgraded security system, which enabled Nordigian to negotiate a 10-percent insurance cost reduction.

Adding more functionality to Norstan's security was the impetus for replacing the prior access control system, which stopped providing updates for Microsoft SQL platforms and also crashed periodically. For example, many employee subgroups have been created for various authorization levels. Sensitive area access, such a precious metals inventories, tool areas and IT rooms are now accessible to employees authorized by the system with full audit trails provided by the new access control system. Employees see benefits as well, such as improved protection for personal property such as tools, autos and lockers. The system offers a safer work environment because of its capabilities of terminating potentially disgruntled former employee access just moments after dismissal.

Identive/Multicard launches integrated smart card and NFC school admin solution

Editor / Provider: Identive Group | Updated: 5/20/2013 | Article type: Security 50

Multicard, a supplier of credential solutions, identity management and system integration, and a business unit of Identive Group announced an integrated smart card solution that allows schools, universities and other educational institutions to verify student identities, track and report attendance, manage access to campus services and validate students' exam papers. The new student ID solution is based on the latest NFC and MIFARE DESFire EV1 contactless card technologies, ensuring the highest level of security and data validation capabilities, as well as significant ease of use for administrators and students alike.

“Our new Student Identification and Tracking Solution enables educational institutions to upgrade their existing identity management systems and benefit from the greater power, security and ease of use of contactless smart cards,” said Ross Head, MD of Multicard Australia. “We have been working with a number of universities that have assisted and guided us through the key issues that affect them most. The result is an integrated, comprehensive solution that encompasses registering students; issuing personalized student smart ID cards; verifying those ID cards at the door, at the library and for payment, parking and events; and validating exam results.”

Multicard's Student ID and Tracking solution allows educational institutions to interface to their existing student databases, retrieve student data and produce new student IDs based on secure contactless smart card technology. The new student IDs can be verified and logged with a quick tap to an NFC-enabled mobile device loaded with Multicard's mobile application – a portable verification station that can be located anywhere on campus, for example outside an exam room or sporting event. These information logs can be used to collate data for ongoing education credits, to verify attendance or for other purposes. To reduce testing fraud, the student ID cards can be visually confirmed and then scanned along with NFC tags attached to exam papers to track and validate the authenticity of the exam to the identity of the student. All data captured on the local NFC verification devices can later be securely transferred to a central web server where Multicard's management software can generate administrative reports. The solution is flexible and educational institutions can select the features they want initially and add to the system over time.

Swedish water management agency opts for intelligent access

Editor / Provider: Assa Abloy | Updated: 5/17/2013 | Article type: Government & Public Services

The Swedish Agency for Marine and Water Management (SwAM) in Gothenburg, recently deployed an access control system consisting of Assa Abloy's access control system and door leaf readers that were integrated with Galaxy Control System's fire and intruder alarm systems to secure its 3,800 square meters office from unauthorized access.

When SwAM was formed on July 1, 2011, so that a single authority could assume responsibility for environmental and fisheries issues, it was necessary to find a new headquarters capable of hosting about 230 people. Pagoden (the Pagoda), an old heritage-listed warehouse at Gullbergsstrand, next to the Gota Alv river in Gothenburg, was selected as the ideal site. It was actually just a shell at the time, but its owner was in the process of converting it into a modern workplace while maintaining the special character of the building. Today SwAM occupies two floors of the seven-floor building, and is home to staff including biologists, sociologists, attorneys, economists, oceanographers and five employees from the Swedish Coast Guard.

"Openness is appreciated and works very well, but of course it requires a different type of security when visitors can essentially walk right in,” said Helena Schmidt, Security Strategist at SwAM. “We arrange quite a few workshops and conferences here, and there are a lot of practical considerations.” The agency prioritized securing perimeters, since having an alarm inside the building would not work because there are personnel on-site 24/7.

The access control system is operated by the personnel who answer the phones, who say it is both simple and convenient to use. They can create new staff access cards using the photo ID system, add or change information about who can access the building at which times, block individual cards and increase or decrease authorization levels.

After some time passed, SwAM staff discovered that it would be useful to lock conference rooms, so that visitors could safely leave their bags and other belongings there. Assa door leaf readers were installed because they can be integrated well with the access control system.

Milestone VMS integrated into Tdsi access management platform

Editor / Provider: TDSi | Updated: 5/17/2013 | Article type: Security 50

The new EXgarde 4.1 version of integrated security solutions manufacturer TDSi's access control software features integration with Milestone's Enterprise and Corporate VMS. From a single IP-enabled access portal, security operators are able to use EXgarde 4.1's Explorer to directly monitor CCTV feeds via Milestone's XProtect Corporate or Enterprise software range, tagging events and using video verification whilst also controlling the physical access control of automated doors. EXgarde 4.1 also integrates directly with Microsoft Active Directory, so physical security systems can be directly synchronized with logical security and the central business facility database can provide an overall view of any situation.

TDSi's MD, John Davies, commented, “EXgarde 4.1's integration with Milestone's software means security operators can take advantage of its wide scope of video surveillance solutions to provide exactly what they need. With our software at its heart, any business can directly link and manage its entire security enforcement from one place. With direct links to CCTV feeds (through Milestone's software or TDSi's own VUgarde2 CCTV management software), along with input from Texecom's alarm systems, EXgarde 4.1 can then collate this information and rapidly advise security staff. At the same time, as users gain access their location is logged with Microsoft Active Directory, which is the keystone to many modern build control systems. Any security breach can also trigger IT system protocols that control the level of access available in certain areas, to minimize the possibility of unwarranted removal of data. This offers a superb way to integrate physical security with the IT security systems to provide a total picture of organizational security”

EXgarde 4.1's integration with both Milestone's XProtect Enterprise and Corporate VMS is part of a wider drive to unite traditionally disparate components of business security. Recognizing the power of compatible systems, TDSi and Milestone's systems are designed to be highly complementary to one another, providing excellent results and superb value for money. In the case of the CCTV integration, users can view live video from any camera within the EXgarde Explorer window, so an incident reported by the access control system, for example, can immediately be investigated visually.

This is further enhanced by the ability to use Video Verification, whereby when specific events are generated (e.g. access is denied on a reader) a window will pop-up displaying live video from a chosen camera. The operator can then choose to unlock the door from the pop-up window if they are certain access should be granted.

Integration with Milestone's systems is also ideal for event tagging and compliance. Specific events can be tagged as they occur (or during playback) so an incident can be thoroughly investigated. This makes the review of recorded footage simple when the tagged events occur in the event list the recorded video can be played back corresponding to the event timestamp.

Bosch introduces integration partner program

Editor / Provider: Bosch Security Systems | Updated: 5/17/2013 | Article type: Security 50

With the presentation of its Integration Partner Program (IPP) at the security trade fair, Bosch Security Systems moves to a whole new level in terms of providing interoperable solutions that fit any application's specific needs. The web-based platform assists customers in effortlessly identifying compatible video surveillance hardware or software solutions that will seamlessly interoperate with the existing Bosch installation. Furthermore, the program helps developers and other experts to design compatible solutions by ease of use integration tools and samples. All third party solutions already listed in the portal have successfully undergone stringent quality checks by Bosch.

The need for compatible partner products and systems
“The security market has become extremely diverse and complex, especially since the switch to IP solutions,” says David Lenot, Business Development Manager EMEA at Bosch Security Systems. “Different applications can have very heterogeneous surveillance requirements and customers are increasingly asking for unique solutions. In addition to this, comprehensive systems also have to be expandable at any point in time, which is why their composition needs to be a flexible one. With the help of IPP, owners can at once identify compatible partner products and systems that are a perfect match for installed Bosch equipment while adding unlimited features and services.”

Easy access to technical resources
IPP benefits partners and customers alike by providing just the right information in one place. It gives all development partners wishing to build integration tools, samples and solutions transparent and easy access to relevant resources, from documents to training. The program provides assistance across the portfolio, covering all features for integration purposes.

Customers can use the web-based “Solution Advisor” search engine to scan through existing applications, geographies or specific features to identify the right solution for the respective system. IPP helps multiply the solutions and guides the client to the matching result. Users can combine products from Bosch with leading video management devices from Genetec, Milestone, Nice and many other companies. Similarly, data storage solutions are available from a range of providers, such as NetApp, EMC and Iomega. Intergrativity is simplified by application and task-related code samples, as well as preconfigured integration packages. Additionally, the program provides a variety of technical support contacts for members and premium partners to optimize combining Bosch features or products with third-party devices and vice versa.

Beneficial partnerships for future development
Allowing a simple integration of third-party solutions has always been part of Bosch's principles. Solutions by the company are designed to be integration friendly. For example, all IP cameras and encoders run one firmware. Partners therefore can support dozens of products at the same time. With IPP, the company continues to open up its business and presents its video products in the most transparent way possible. “It is essential that innovative and technically competent suppliers of development services and series products are involved early and systematically in devising new solutions,” says Rudolf Spielberger, Head of IPP at Bosch Security Systems. In line with this philosophy, Bosch Security Systems, together with Axis Communications and Sony, also founded the international product standard ONVIF in 2008. The aim of ONVIF is to enable the integration of network video devices from different manufacturers. “IPP is thus a continuation of this way of thinking into the second decade of the 21st century.”

EverFocus partners with Digiever for better networked solutions

Editor / Provider: EverFocus Electronics | Updated: 5/17/2013 | Article type: Security 50

EverFocus is pleased to announce their new partnership with Digiever. For almost 20 years, EverFocus has been a leading integrated security solution manufacturer of CCTV cameras, DVRs, HDcctv, IP surveillance solutions, access control systems, as well as surveillance and access control peripherals. With Digiever DIGISTOR NVR series' support, EverFocus' network cameras can now satisfy various surveillance scenarios requests, and users can easily adapt the operation under more circumstances.

Established in 1995, EverFocus has been working diligently in the security business for almost 20 years now, with branches in the US, Germany, UK, Japan, India and China, EverFocus provides rapid response with optimal solutions to meet customers' satisfaction. The skilled R&D team works diligently to bring safety to our life through innovative ideas and advanced technology.

"We are pleased to gain an innovative partner in Digiever. This corroboration helps us to provide robust and powerful solutions for a wide range of applications. Digiever's platform is able to maximize benefits of the full lineup of EverFocus cameras, and allows us to bring value to an even wider customer base." said Joe Jen, Manager at EverFocus. The integration of EverFocus and Digiever is exciting, as it is the first cooperation for both parties. It will bring better service and more satisfied solution for more customers.

"We are excited by the integration between Digiever and EverFocus, as the integration has been smooth and successful. The integration with EverFocus provides users of both parties with solid surveillance bundle solution” said Allen Tseng, Product Manager of Digiever. "As the most reliable and ideal provider of Linux-based standalone NVR solution, Digiever keeps working on expanding the compatibility of IP cameras from reputed global brands and continues to support IP camera partners. Digiever devotes to giving users experience of more efficient network surveillance solutions. "

EverFocus works closely with third party technology partners to satisfy customers' needs in vertical markets such as mobile, city surveillance and banking solutions.