[Reader-list] News Items posted on the net on Multipurpose National Identity Cards-82

[Taha Mehmood]

http://www.thehindubusinessline.com/ew/2006/12/25/stories/2006122500020100.htm

One key to many locks

Preethi J

A single swipe is all it takes to unlock several applications. Smart
cards promise faster and safer access to work spots and work systems.
But the market is not too sold on them, yet.

t's the ID badge of the future — minus the passport photo, company
logo and a signature. Oops, unless you are thinking of a digital
signature.

The smart card is ready to make your life faster and smarter. Soon,
the card will be your key to the office, food coupon, debit card and
insurance.

The smart card will be a digital identity store that will hold
photographs (images), biometric data (fingerprints), personal
information numbers (PIN) as well as other electronic credentials
stored on the card, such as digital certificates and e-money. The card
will allow a corporate user to use a single sign-on from any branch of
his enterprise using a secure ID. These cards, when used with
appropriate data collection systems, will allow their bearers to be
identified in several standard ways.

What it contains

A smart card is a credit-card sized credential with a microprocessor
chip embedded in it. Smart cards are used in conjunction with a smart
card reader and access security software when used with a desktop or
server.

The contact-less ones have a chip embedded within, which is invisible
to the user. This chip communicates with physical access readers over
a wireless protocol to permit or deny entry into premises or sections
within premises. The chip runs on Java Card operating system using
cryptography for security. The 32-bit processor, running at 25 to 32
MHz, is encased by tough plastic to ensure it doesn't get scratched.
These are the new kind of cards, called contact-less smart cards.

Their predecessor, contact smart cards, or `proximity' cards, have
been in existence for more than 20 years. The contact cards had a slow
data transfer rate, the communication was not secure and the card
could only launch a single application. The reader for such a card
would continuously sweep the room for a card transmitting information
at a particular frequency (125KHz). The card would respond with the
card number when in the proximity of the reader.

The new contact-less smart card does more than that. After responding
to the reader's sweep request with a serial number, it requests an
encrypted communication over the 13.58 MHz frequency. The reader
authenticates and initiates a secure communication. The card then
transfers data stored on it. It uses encrypted security, and can store
up to 16 Kb of data.

Since it is based on a processor, it can launch multiple applications.
It is also much faster at 424 KB/sec.

Smart badging

According to the Smart Card Alliance, identity theft is the fourth
most common threat to companies today, after viruses, `denial of
service' attacks and spam. With smart badging, which is the
combination of physical and logical access capabilities on a single
card, organisations can ensure this threat is mitigated.

Organisations can manage and monitor their employees' movements both
in reality (across the office) and virtually (in the company network).
Smart cards can be used for both physical access (such as entry to
buildings) and logical access (such as access to computer systems and
networks). When a user walks up to his desktop, the chip on the smart
card transmits the information on it to the reader, which reads,
stores and identifies the biometric template of the individual, before
granting access to the desktop.

The card can also store digital certificates, which are used to send
secure e-mails and for accessing sensitive content on the Intranet.
According to IDC, 60 per cent of identity threats are internal, people
with privileged access. Smart cards are part of the solution to this
issue.

Examples of application

Surat-based Mahindra Brothers, a jewellery store, uses smart cards to
manage its employees and sub-contractors. The jeweller relies on smart
cards to restrict admission to its jewellery polishing and design
houses, says Krishna Prasad H.S., Product Marketing Manager, Systems,
Security Technology Division, Bosch.

A tuition provider for engineering studies in Mumbai is also taking
the smart route. It has issued smart cards instead of ID cards to
students availing of tuition. Previously, the provider faced
discrepancies and defaulters. Many students would attend the wrong
classes, or pursue extra tuition without deigning to register
themselves.

With smart cards, professors could keep a check on the attendance and
the students, too, were able to manage their tuitions better. It also
saved the tuition provider from further losses, says Anil Makhija,
General Manager - Projects, CA Satyam ASP.

Why it hasn't matured yet

The perception of smart cards is that it is difficult or too costly to
make changes to systems or to implement cost savings strategies.
However, according to RSA Security, a provider of smart cards, they
can be deployed throughout the organisation just as you would any
other ID badge, without requiring process changes.

There is a clear lack of information and tools to support decision
making by Facility Managers, says T.V. Chandrashekar, Head - Sales
(South India), Honeywell Building Solutions.

"There is a high ongoing cost for maintaining installed systems,
keeping up with technology and training staff, and integration of
systems is also difficult. Systems don't operate in a way that
supports how users want to run their business," he says.

However, the advantages of installing them now are many, say early
adopters. The backbone is established for future expansions, and
integration with other building sub-systems such as Video Surveillance
& Physical Security can be done easily.

The tech road map is also established for subsequent expansion —
Canteen, Library, E-Purse, RFID Systems, ERP Integration, etc. These
are besides the primary advantage of smart cards enabling enterprises
to assure their employees of enhanced safety and security.

The use of smart card for access in office buildings is now a Rs
250-crore market in India. Applications of smart card in e-Governance
(national ID card project) and credit cards are being hit by various
challenges and issues, including bureaucracy and legacy
infrastructure, says Makhija.

It is learnt that the Bangalore-based ITI is bidding for the National
ID card project, which will assign every Indian citizen a smart card
for identification.

Says Sourabh Kaushal, Industry Manager, ICT Practice, Frost & Sullivan
India, "In 2005, the smart cards market was $66.6 million, showing a
growth of 40.3 per cent over 2004, and is expected to reach $248
million by 2009."Also, industry reports indicate that India's
installed base of smart cards is about 70 million, estimated to cross
400 million in 2012.

preethij at thehindu.co.in