Centralizing Credential Management with Biometrics

Sept. 5, 2012
An enterprise single sign-on (ESSO) system, used in consort with the latest generation of biometric sensors, provides a better, more convenient and secure solution.

Would your customer like to have a system that offers quick, easy access for authorized users to enter specific locales or use particular data sets and which can also enforce and document compliance with their policies and procedures?  How about a system that would also include use by their customers?  That would be a massive improvement in today’s complex world where authorized users are forced to remember multiple passwords and carry different forms of credentials for various applications. 

An enterprise single sign-on (ESSO) system, used in consort with the latest generation of biometric sensors, provides a better, more convenient and secure solution. Organizations realize that security is a must but security solutions cannot interfere with employees doing their jobs effectively, efficiently and safely.  With a biometrically-enabled ESSO, one simple enrollment allows multiple uses across the whole enterprise. This holistic view of enterprise security is vital and provides an integrated identity management system that is much more reliable and cost-effective as it eliminates the problems of having multiple identities tracked over an ever-increasing number of disconnected access points.

A biometrically-enabled ESSO eliminates end-user frustrations with multiple passwords and lost tokens. Investing in an ESSO with a biometric both consolidates multiple applications into one location and completes a facility’s enterprise security by merging all authentication needs to a single finger.

Biometrically-enabled electronic software suites further leverage the advantages of biometrics. With the simple touch of a finger, users can log into data systems, sign charts, “break glass” on specially-designated records and provide an irrefutable audit trail allowing for a wide range of applications.

For many years, the promise of biometrics has not been fully realized because performance in the lab is not representative of performance in the field.  The core problem is that conventional biometrics technologies rely on unobstructed and complete contact between the fingerprint and the sensor, a condition that is elusive in the real world, a world that is wet, dry, or dirty.

Multispectral imaging is a sophisticated technology developed to overcome the fingerprint capture problems conventional imaging systems have in less-than-ideal conditions.  This more effective technology is based on using multiple spectrums of light and advanced polarization techniques to extract unique fingerprint characteristics from both the surface and subsurface of the skin.

Interestingly, the fingerprint ridges seen on the surface of the finger have their foundation beneath the surface of the skin, in the capillary beds and other sub-dermal structures. The fingerprint ridges we see on our fingertips are merely an echo of the foundational “inner fingerprint.”

Unlike surface fingerprint characteristics, which can be obscured by moisture, dirt or wear, the “inner fingerprint” lies undisturbed and unaltered beneath the surface. When surface fingerprint information is combined with subsurface fingerprint information and reassembled in an intelligent and integrated manner, the results are more consistent, more inclusive and more tamper resistant.

Now biometrics — which determines that you are you, not what you carry or know — can be used in more places and more applications for sophisticated, economical credential management.  More than 40 million people are already enrolled on multispectral imaging-based systems at locales ranging from the classic door access control situation to the gates of the world’s favorite theme parks. 

Healthcare Applications

Biometrics access to drugs, medical records and devices allows doctors, nurses and caregivers to move seamlessly throughout the hospital, do their jobs and not be burdened by multiple logging in and logging out that only wastes valuable time and effort.

For example, 2,000 clinicians and staff at Genesis HealthCare in Ohio are currently leveraging multispectral imaging sensors to establish their identity to order, verify or administer medications.  A challenge with fingerprint biometrics in this environment is that health care workers frequently wear latex gloves. They must remove the gloves to present the biometric and the ongoing use of the gloves can dry out the skin making it difficult to get a good fingerprint scan.  Since multispectral technology captures the fingerprint data from beneath the surface of the skin, it can read the fingerprint through the latex glove.

University Recreation Facilities

In addition to applications requiring the greatest level of security, biometrics ESSO is responding to growing demand for IT administration and controls. Free Amsterdam University (VU), one of Europe’s most prestigious colleges, uses multispectral imaging sensors in fingerprint readers used by approximately 8,000 students, faculty and staff to enter the schools’ multiple recreation facilities spread throughoutAmsterdam. 

“Eliminating the opportunity for students to pass their cards to others was only part of the reason we upgraded to biometrics,” explains Wouter Kropman, director of facilities at VU.  “The system gives us a very professional look plus, in the long run, it saves us money.  Within three to five years, the biometric solution becomes a break-even with plastic cards because of their associated costs, including cartridges, printers, support and management.  Fingerprints provide a sustainable solution.”

Converged logical and physical access control

Beyond the obvious advantages of biometrically-enabled ESSO for securing access to data, an even greater potential for enterprise security is realized when enterprises combine building access with IT security. No longer are the boundaries between physical access to buildings and data access a rational strategy for protecting corporate assets.  A centralized, holistic approach to credential management eliminates the inefficiencies of multiple digital identities, multiple databases, multiple credentials and multiple organizations managing enterprise access.

Multispectral Readers

Today, locksmiths can choose among a range of multispectral imaging readers from approximately 20 different companies.  They come in various form factors and fit a myriad of applications from door access control to time and attendance.  Some are created for outdoor use, including extreme conditions such as in TWIC (Transportation Worker Identification Credential) applications at ports, military bases and airports – even meeting the rugged, IP65 standard with full anti-vandal casing.  Others serve as front ends for biometrics-enabled common meter reading instrument (CMRI) systems or touch screen electronic key management solutions.

Biometrics, formerly confined to the back room can now confidently be put in front of the customer.  Security has been increased with a simple, easy, intuitive touch of a finger.  Banks are putting multispectral imaging fingerprint readers on their ATMs.  Governments use them at border crossing.  You’ll even find them at the entrances to the world’s favorite theme parks.  Making them the centerpiece for your customer’s ESSO is a logical consideration for locksmiths on the cutting edge.

Phil Scarfo is vice president, worldwide sales & marketing, for Lumidigm, www.lumidigm.com.