Intercede Share Discussion Threads

[igoe104] 05/10/2006 17:17

an area, which the consortium could get into. online smart cards. REMEMBER it was mentioned by mr parris, in the wallstreetreporter interview.

[igoe104] 05/10/2006 12:57

latest press release. from p/r web news.

myID® PIV is the First Card Management System Certified under GSA FIPS 201 Evaluation Program
In order to comply with Homeland Security Presidential Directive 12 (HSPD-12), US Federal Government Agencies must purchase products that have been approved by GSA and that are listed on the approved products list. MyID® PIV is the first Card Management System (CMS) to be certified for Electronic Personalization and listed on the GSA FIPS 201 approved products list.

Lutterworth, United Kingdom (PRWEB) October 5, 2006 -- Intercede, a market leader in smart card and identity credential management systems, is pleased to announce that MyID® PIV is the first CMS to be certified for Electronic Personalization and listed on the GSA FIPS 201 approved products list. With FIPS 201 certification, Intercede's partners and US Federal Government agencies can immediately start using MyID PIV to comply with FIPS 201 and meet the October 27, 2006 deadline for issuing PIV cards and credentials.

"We are extremely pleased that MyID PIV is the first card and credential management system to be certified as FIPS 201 compliant by GSA. This validates Intercede's strong commitment to producing the best credential management software in the market." said Richard Parris, Chairman and CEO of Intercede. "Now that MyID PIV is on the GSA approved products list, Intercede and our partners will be able to take full advantage of the work that is already in progress with many Federal Government Agencies."

The CMS is the central piece that integrates all the technologies and the process required to comply with FIPS 201. The electronic personalization category is a crucial accreditation for any CMS or personalization bureau. The approval process validates the correct programming of all of the data structure elements that constitute a PIV credential. This verification guarantees the interoperability of credentials issued from different systems and underpins the entire FIPS 201 concept of mutually recognized and trusted identities. The testing process includes a 166 point examination of each of the data containers on a set of cards, validating the data content, headers, digital signatures and consistency of the entire credential. Successful completion of this certification means that MyID is fully compliant with the requirements specified in FIPS 201.

GSA FIPS 201 approved products can be found at the following web address:


About MyID® PIV
MyID PIV is a pre-configured card and credential management solution that addresses the challenges faced by agencies deploying FIPS-201 compliant PIV smart cards to their employees and contractors. MyID PIV provides both 'out-of-the-box' PIV card issuance and management capabilities and, a highly flexible and configurable integration platform for existing services, applications and processes.

MyID PIV provides cardholder registration and complete PIV card lifecycle management that is integrated with a variety of document, photo and biometric capture devices, card printing and production solutions, PIV II certified smart cards, PKI certificate providers and identity management systems. Each function within the MyID issuance process may use existing product features, or utilize external applications as appropriate.

Key Features and Functionality include:

- FIPS 201 Compliant Card Personalization

- PIV Cardholder Registration and Application Handling Including FIPS – 201 Defined Role Separation

- Integrated Card Design and Layout Tool for Graphical Personalization

- PIV Credential Authentication to MyID Management Portal

- API Toolkit for Identity Management System Integration


For more information on MyID PIV visit: www.intercede.com

About Intercede
Intercede Group plc is a leading developer and supplier of smart card and identity management software listed on the London Stock Exchange (IGP LN) (IGP.L). The Group's MyID software manages the secure registration, issuance and lifecycle of digital identities for a wide range of uses. This requires the integration of multiple technologies and products from many different vendors, including smart cards, USB authenticators, biometrics, digital certificates and Open Platform applets.

Intercede works with a number of market leading OEM, re-seller and technology partners that supply MyID technology including: Athena Smartcard Solutions, Gemalto, RSA Security, SafeNet, Thales, VeriSign and a variety of systems integrators and other security product and service providers.

Intercede and MyID are registered trademarks or trademarks in the UK, US and/or other countries.

[igoe104] 05/10/2006 11:49

cpi card group, look like being involved with my id (intercede)

new partner.


A High-Performance FIPS Certified Smart Card Solution for HSPD-12 Requirements

10/04/2006
LITTLETON, Colo., Oct. 4, 2006 -- CPI Card Group announced plans to deliver next generation identity management smart cards under the Federal HSPD-12 deployment program scheduled to be launched this year. In August of 2004 President Bush set in motion a program to establish personal identity validation smart cards for all Federal employees and contractors serving the government. The industry has been preparing for these new higher standards established by the National Institute of Standards and Technology [NIST] for the smart card 7816 ISO format.

CPI Card Group, based on Atmel(R) Corporation's secure silicon platform and with technologies assembled by TecSec(R) Inc., will provide 144K of Flash memory at a per byte cost advantageous to competing solutions. This next generation CKM Enabled(R) Smart Token(R) includes the following: Atmel's Flash AT90SC144144CT+ mini PIV with AT90SC12872RCFT single-interface, dual-interface contactless and contact chip. This Smart Token solution includes a CKM Enabled JAVA(R) operating system PKI authentication, PIV2 and Precise Biometrics Match-on-Card(TM) technology. TecSec's CKM(R) technology serves more than ID cards as it is integral to an ID access and data management system solution that can provide persistent protection to data. This is enhanced by accessing multiple applications (silos) upon this same trusted Smart Token platform thereby serving as a true federating device.

This Smart Token federating device is designed to be interoperable with other PIV2-compliant cards and to become the preferred workhorse for not only this HSPD-12 requirement, but for Homeland Defense and other applications (e.g., first responders, border control and state government programs). Various card issuers will find their requirements met by this high capacity uniform platform with multiple silos.

TecSec Inc, a leading high-grade security solutions provider, brings its CKM technology to protect content as well as to enforce permissions and functions, including discrete access rules and various permissions that allow for numerous silos on their Smart Token. Each silo contains a distinct service application, the access to which is under the control of the respective application provider. Access permissions may vary and they are assigned to cardholders by the application provider. In this manner "roaming" on the card is denied, privacy is assured and the liability exposures of the Smart Token issuer are substantially curtailed.

Overall system installation and ongoing operating costs for this Smart Token are significantly lower than traditional Java smart card solutions. This is because the content protection of CKM and the multiple discrete application silos, permit highly-secure network-independent updates (loads and deletes) to intended segments of the memory of the ATMEL secure chip. In this manner, fixed facilities needed for cardholders to update smart cards are no longer needed, obviating a major cost. Furthermore, given the discrete and protected nature of each application silo, the Smart Token issuer has the opportunity of gaining "cost offsets" or rental income, from application providers paying for silo space on the issuer's card platform. This Smart Token establishes a new, more favorable, business model for the card issuer.

The Smart Token's contactless RFID feature is designed with a secure close-proximity range limitation, guarding privacy and thwarting vulnerabilities.

Precise Biometrics' use of the secure smart card environment to match the cardholder's stored fingerprint against the cardholder's finger is another example of the next generation nature of this Smart Token solution. Conventional biometric solutions match the fingerprint against a remote data base, involving additional off-card processing and costs while exposing the stored templates to potential compromise. The Precise Match-on-Card(TM) solution is a clear step ahead, increasing security while enhancing user privacy. This Smart Token solution is interoperable with the efficient MyID(R) card life cycle management system of Intercede(R).

CPI Card Group will manufacture this Smart Token. The FIPS and NIST certifications are in place or scheduled to be completed in a timely fashion. A long-life composite card material base, providing heightened durability, is also available that delays normal card replacement costs well into the future.



About CPI Card Group

A world leader in plastic card manufacturing for over 20 years, CPI offers a single source for plastic cards from foil cards and holograms, to translucent and smart cards. CPI's two ISO 9001:2000 certified sites include CPI Card Group -- Colorado, Inc. in Littleton, Colorado and CPI Card Group -- Nevada, Inc. in North Las Vegas, Nevada. CPI Card Group produces high-quality, general-purpose, magnetic stripe and smart cards for many applications. Certified to produce contactless products, our facility specializes in distinctive cards and we offer the largest production capacity in North America. FOr more information visit www.cpicardgroup.com

[igoe104] 05/10/2006 11:36

(partner)oberthur picks up another deal. thats three in the last week or so.

[topvest] 04/10/2006 21:44

Yes, interesting news. All bodes well!

[igoe104] 04/10/2006 19:16

latest news from the consortium.


Vendor consortium formed to guide agencies in HSPD-12 compliance and operation
Wednesday, October 4 2006

By Andy Williams, Contributing Editor

Lots of questions ... too many places to go to seek answers. Wanting to lend assistance in solving that problem is a key purpose behind a new consortium established to help integrators and federal agencies deal with the many nuances of HSPD-12 compliance. Called, predictability enough, the HSPD-12 Interoperability Consortium, it was founded by smart card, authentication and encryption solutions provider SafeNet and now includes eight other companies, some of them SafeNet competitors.

According to Safenet, the Consortium's goals are: to provide an industry perspective to government agencies and system integrators; to offer an end-to-end interoperable HSPD-12 (Homeland Security Presidential Directive) solution; to build a testing lab to demonstrate preconfigured and pre-tested solutions; and to create solutions flexible enough to meet the needs of the consortium members' customers.

The HSPD-12 Consortium's other nine founding members include Consul Risk Management, security audit and compliance; CoreStreet, provider of certificate validation infrastructure and application software; Entrust, certificate Authority, shared service provider, and encryption solutions; Forum Systems, secured systems architecture; Precise Biometrics, biometric solutions; Probaris Technologies, secured business process solutions; Intercede, smart card management; and Omnikey, smart card readers.

"We're in active discussion now with other people. We want this to be a truly open consortium," said SafeNet's Andy Solterbeck, vice president and general manager, Commercial Enterprise Business Unit. "Our intent is to bring in people who can contribute to solutions, such as business processes, credential management capability and hardware. There's no point in building a locked-out consortium."

Put another way, he added, "Unless you leverage" the products and solutions provided by consortium members, "it would be a pointless enterprise. This is how we ensure the right people are members of the consortium. The best way to describe (consortium members) is that they are people we have worked with in the market, but whom we also compete with in the marketplace."

So, why the consortium? "It's really interesting in that there's a fairly good understanding in what HSPD-12 is, an interoperability standard for a piece of plastic and what the card needs to be able to do," said Mr. Solterbeck. "But all the stuff that surrounds that card; what am I going to do with it; how do I use it for physical and logical access, identity management...what's going to be different after HSPD-12 is implemented...we were getting all those questions. So we put together this consortium (to show federal agencies and integrators) how that card could be leveraged to be more efficient in the implementation, from certification, to deployment."

Commented Phil Saunders, general manager of SafeNet's Borderless Security Business Unit: "Our goal is to remove confusion about the many pieces of HSPD-12 and make the job of system integrators and government agencies easier."

The consortium is designed to provide assurances of compliance and of interoperability between the many components required to meet the HSPD 12 mandate including smart cards, PKI, middleware, card credential management systems, biometrics and physical access systems.

He said the consortium is "in the process of building a lab (in Roslyn, Virginia) where the agencies can come in and see the various solutions and we're doing seminars to allow the government to share its expertise. We're also putting up a web site they can come to as an information resource."

The HSPD-12 card, he said, has a couple of components, the logical access part which holds the certificates and physical access which grants you access to the building. "There's the ability for that card to become your authentication device for lots of different applications. The hot topic now is disk and file encryption. That card could be integrated to the solution that protects the laptop. The card could be used for things like signing and authentication."

He added: "We're going from the very specific to the very broad. Unless you're actually enabling a business process, the card isn't all that useful. For example, the OMB directive that said any agency that allows data to leave its premises must be encrypted is now a presidential edict."

That falls right into one of SafeNet's areas of expertise. "We've been a cryptographic supplier to the federal government for 20 plus years. Over 60% of our business is with the federal government," he said.

Even after the Oct. 27 deadline has passed, there will still be plenty of work for the consortium. "The real question is how do we help the agencies and integrators once they have met the requirement," said Mr. Solterbeck. "Basically as long as the agency has issued one PIV Card by October 27th they are in compliance, so the real question is what will they do with the cards once they are issued? The consortium will help with showing real business applications of the card, such as disk encryption, two factor remote access etc."





--------------------------------------------------------------------------------


Additional resources:

Visit the consortium online at www.hspd-12.org.



Subscribe to access articles more than sixty days old.




Online Marketplace



Visit the other Avisian publications: Contactless News, RFID News and SecureID News.HomeLibraryEventsVendor ProfilesAdvertiseAboutSign InSubscribe Bookmark this site!
Ads by Avisian
Mobile ID Solutions

Barcode and magstripe, age verfication to ID card verification, TokenWorks has the solution for you.

Find us at www.idscanner.com Place your ad here for just $200

Text ads on CR80News bring 40,000 impressions each month.

Click to learn more

[igoe104] 04/10/2006 19:02

tryed to post a link, but couldn,t. so i,ve had to copy the whole consortium write up.

ps i like the bit that says.

even after the oct 27th deadline has passed there is still plenty of work for the consortium.

[igoe104] 04/10/2006 16:18

i,ve also been in-touch with ian, he,s says they are all buzzing at intercede, at the moment.
also asked him about the future usa driving licenses upgrades. he said he can,t go into specifics, but intercede are looking to attack most things , in the amercian market.
very bullish outlook for the company, its starting to look.

[wjccghcc] 04/10/2006 14:54

Spoke to Ian Lowe, the marketing manager, who was very helpful and prompt in returning my call.

Biometric facial recognition is optional for FIPS and therefore MyID wasn't submitted for validation in that category.

The other comment was that the validation did not occur using PKI certificates from a live site - Ian said that was the way all card management software would be tested.

[taurusthebear] 04/10/2006 14:50

Just call me Sherlock! ;0)

[taurusthebear] 04/10/2006 14:47

It's just boredom, I reckon igoe. Look at the size - about 25k in the last 2 days - big deal! In fact it looks as if someone moved in sharpish to snap up 10k at 29.75p just after the news appeared... :0)

[igoe104] 04/10/2006 14:26

YEP it looks like that wjcc. here the list.

ps still can,t work out, why a seller, has suddenly decided to sell in october, with on-coming positive news. must be in the dark, as far as information goes, or short of cash.

[carly2] 04/10/2006 13:18

Thanks for that. I still can't understeand why the price is unchanged - and there are 2 sellers today?!!
By the way WJCCGHCC, thanks for all the info you dig out and post..

[rambutan2] 04/10/2006 13:02

wjcc, so are you saying that although myid is certified as fips compliant, it's still being validated?

[smartmoney100] 04/10/2006 12:47

rambutan, thanks for the link to the new thread. I must keep up!

[wjccghcc] 04/10/2006 12:45

Does look promising although there was caveat on the FIPS approval (biometric facial recognition not validated) though I expect they'll sort that out shortly.

If you look at the status of the FIPS evaluation programme, it's clear the electronic personalisation category is a tough one. Currently there are two products going through validation testing (of which I assume MyId is one) while five have been rejected and none approved. Hopefully RSA card manager is the other one still outstanding. There are three personalisation services also going through testing which hopefully includes Verisign.

[wjccghcc] 04/10/2006 12:42

Does look promising although there was caveat on the FIPS approval (biometric facial recognition not validated) though I expect they'll sort that out shortly.

If you look at the status of the FIPS evaluation programme, it's clear the electronic personalisation category is a tough one. Currently there are two products going through validation testing (of which I assume MyId is one) while five have been rejected and none approved. Hopefully RSA card manager is the other one still outstanding. There are three personalisation services also going through testing which hopefully includes Verisign.

[rambutan2] 04/10/2006 12:41

guys, everyone seems to have switched to a new thread...

[smartmoney100] 04/10/2006 12:41

About time too! It's been very quiet of late. I liked:

"Now that MyID PIV is on the GSA approved products list, Intercede and our partners will be able to take full advantage of the work that is already in progress with many Federal Government Agencies."

Sm

[rambutan2] 04/10/2006 12:40

it's official...

Lutterworth, United Kingdom - October 4th, 2006 - Intercede, a market leader in smart card and identity credential management systems, is pleased to announce that MyID® PIV is the first CMS to be certified for Electronic Personalization and listed on the GSA FIPS 201 approved products list. With FIPS 201 certification, Intercede's partners and US Federal Government agencies can immediately start using MyID PIV to comply with FIPS 201 and meet the October 27th 2006 deadline for issuing PIV cards and credentials.

"We are extremely pleased that MyID PIV is the first card and credential management system to be certified as FIPS 201 compliant by GSA. This validates Intercede's strong commitment to producing the best credential management software in the market." said Richard Parris, Chairman and CEO of Intercede. "Now that MyID PIV is on the GSA approved products list, Intercede and our partners will be able to take full advantage of the work that is already in progress with many Federal Government Agencies."

[taurusthebear] 04/10/2006 12:37

Very promising, good spot Smart! :0)

[smartmoney100] 04/10/2006 12:32

New on the website today:

[igoe104] 04/10/2006 10:13

partner ( oberthur) in us deal.