re:ID Podcast

Released in early June, the Homeland Security Presidential Directive 24 (HSPD-24) mandates that U.S. government agencies use a standardized approach in the "collection, storage, use, analysis, and sharing of biometric and associated biographic and contextual information of individuals." The stated goal is to better enable cross-agency sharing of biometric data to identify known and suspected terrorists (KSTs). Host Chris Corum discusses the implications of the new directive with the International Biometric Industry Association's Walter Hamilton.

Airport workers and air carrier employees require access to secure areas in sensitive airport locations. Currently there is no standard for a strong authentication credential to identify these workers as they move within and between airports. The Transportation Security Administration is investigating such a credential through its Aviation Credential Interoperability Solution (ACIS). Avisian Publishing's Chris Corum and the TSA's ACIS Program Manager Chris Runde provide insight into the potential biometric solution in this edition of the re:ID Podcast.

Yubico CEO and founder Stina Ehrensvärd talks with host Ryan Kline about the Yubikey, a new authentication solution, designed for web 2.0 applications. It works by having the user insert it in any computer with a USB port on any platform or browser without having to install any client software. The user then presses the YubiKey button to generate a one time passcode. Listen as they sidcuss topics about the Yubikey such as cost, implementations and the open source nature of the device.

Cryptomathic’s Mike Bond talks with host Chris Corum about the efforts to secure e-Passports with the new Extended Access Control (EAC). Bond explains the foundations of EAC and describes how it builds upon the earlier security techniques of Basic Access Control (BAC) to protect the biometrics on the contactless chip. Explore how EAC creates a worldwide PKI, how it impacts issuers and vendors, and whether it will make lines longer or shorter at immigration points.

With Chip and PIN in full well established across the UK, fraud figures are painting an interesting picture of its impacts. Is it really making a difference when it comes to the never-ending battle against fraud? Consult Hyperion's Richard Allen discusses card fraud in an EMV world with AVISIAN Executive Editor Chris Corum.

Around the globe, government ID leaders struggle with the myriad of standards determining which are key to their implementations. Host Chris Corum speaks with Kevin Gillick, Executive Director of the GlobalPlatform to learn how this not-for-profit industry group is helping agencies navigate these waters. International standards such as ISO, industry standards including GlobalPlatform specifications, and application standards like FIPS 201 are investigated.

Editor Zack Martin talks to Jeremy Grant, senior vice president and identity solutions analyst at the Stanford Group Company, about the Digimarc selling its identification business to competitor L-1 Identity Solutions. Digimarc had the majority of driver licenses business in the U.S., with L-1 in the second spot. With Real ID around the corner why did Digimarc choose to sell now? What does this mean for the driver license market? Listen and find out.

Editor Zack Martin examines the missing links in protecting and authenticating online identity for social networking sites, especially for minors. With sites like MySpace and Facebook having millions of users, some younger than ten years old, people want to talk about how to protect the children. But at what cost? And will strong authentication ever become mandated by the government for social networking sites much like new strong authentication requirements for financial institutions? All this and more during a discussion between Zack and host Ryan Kline.

In this episode, the publicized Mifare Crypto-1 hack is examined. Interviews with the researcher that uncoverd the alleged vulnerability, Karsten Nohl, as well as NXP representative Manuel Albers and Smart Card Alliance's Randy Vanderhoof delve into the topic from all sides. Albers reports that between 1 and 2 billion of these chips have been issued to date and are in use in transit systems and security and access applications. Nohl stated that he would wait until next year to make the complete nature of attack public, suggesting "if you are relying on Mifare security, you should start migrating." When asked if the intent was to give the issuers time to migrate or if he was holding the industry ransom, he replied, "I would acknowledge that we are playing along in the obscurity game ... we want every one of these systems to wake up and realize how insecure they are ... to convince the last ones that are still claiming we have not found it, we will have to release it."

An innovative new technology that strengthens PINs and passcodes with one-time grids and Personal Identification Patterns (PIP) is explored. Executive Editor Chris Corum speaks with the technology's inventors and corporate leaders from GrIDsure on their new pattern-based unique IDs.