Financial Security Symposium 2012 Singapore
Identity Assurance Solutions - Establishing Trust in Online Identities LEE Meng Chuan Regional Sales Manager, ASEAN Identity and Access Management (IAM)
About HID Global Assa Abloy Global leader in door opening solutions Dedicated to satisfying end-user needs for security, safety and convenience Operations in more than 50 countries More than 10 percent of the world market Approximately 32,000 employees Sales of more than $5 billion USD HID Global Part of ASSA ABLOY s Global Technologies Division Global leader in secure identity solutions Top recognized brand in the access control industry worldwide More than 2,100 employees Over 1.5 Billion RFID products sold 3
HID Secure Identity Ecosystem HDP 8500 iclass SE Issuance PIV-I Services Enrollment Authentication Easy Lobby Enablement Secure Identity Solutions Management CMS Appliance UHF Technology 4
HID AI Interoperable With Popular IT Systems & Technologies Client Operating Systems Client Web Browsers Certificate Authorities Identity Management Systems and Directories Server Operating Systems Remote Access and Terminal Services Smart Cards, Readers and USB Tokens and many more! 5
IAM Solutions Customer Segments Government Enterprise FSI Issue credentials (mainly smartcards) to govt employees and citizens. Enable access control and management for authentication, encryption, signing and physical access Issue credentials (smartcards and OTP tokens) to employees Enable access control and management for authentication, encryption, signing and physical access Authenticate customers accessing internet banking, mobile banking... Fraud Detection Service New! 6 6
Customer References Government Enterprise Commerce 7 7
HID Global and ActivIdentity Converged Converged Identity Identity Assurance Solutions Solutions Tim Phipps Vice President Sales Logical Access, Asia Pacific 8 8
Common Security Concerns Convergence - " Our employees have to carry multiple badges and tokens to access different buildings and IT systems, it s a real pain. Why can t we deploy a single badge that gets us access to everything." Mobility - " We are moving to cloud-based computing. We want to give our employees and contractors remote access to applications and data, any time, any place, any where. But how do can I do this securely Compliance - " Our company wants us comply with government / industry regulations that require use of PKI cards how do I do that, it sounds complicated?" 9
Smart Employee ID Credentials 10
What can you do with a Smart Employee ID? 11
But Convergence Is Much More Than Using a Single Card For PACS and LACS 12 12
What happens with a single device? Issuance & Management Processes Digital Identity IT Access Rules & Auditing Issuance & Management Processes Physical Identity PACS Access Rules & Auditing 13
Convergence: the full picture Issuance & Management Processes Digital Identity IT Access Rules & Auditing Issuance & Management Processes Access Rules & Auditing Issuance & Management Processes Physical Identity PACS Access Rules & Auditing 14
What is True Security Convergence? Consolidate credentials for IT and physical access onto a single card. Connect the processes for granting and revoking building and IT access. Onboarding new hires, employee departures, temporary contractors Correlate security events across the physical and IT domains. Location-based authentication, anti-tailgating Unify the auditing of physical and IT rights and events. Compliance, investigations Source: Forrester 'Trends 2005: Security Convergence Gets Real 17
Benefits for the Organization Cost Reduction Only one identity device across the enterprise (physical and logical) Organizational Efficiency No duplication of tasks and processes to manage identities and devices for facility and IT access Employee Productivity Easier access to IT systems and applications (single sign on to improve productivity) Brand / Image Protection Reduce risks of security breach, limit negative impact to reputation Employee Privacy Credentials are secured in the card 18
The navigo Converged Solution Two-factor authentication using the same card employees use every day for facility access Seamless integration into existing infrastructure Fastest access to shared workstations running Citrix XenApp and XenDesktop and VMware View Auditable record of access on systems that were previously difficult or impossible to audit Rapid Return on Investment (Less than one month) 19
Open Doors. For the past two decades, over 400,000,000 users have enjoyed the ease of opening doors with HID cards Open Windows. PACS + LACS Solution HID now brings that same convenience to open Windows 20
LEVEL OF SECURITY Full Convergence Solutions PKI at the door Enables existing 400+M active HID cards to be used for system access - Windows login - Citrix login - VMware login Issue and manage certificates and keys on smart cards Dual interface cards Smartcard chip, with contactless interface Crescendo cards combine Prox/iCLASS with a contact chip pivclass PKI Prox cards iclass cards CAPABILITY 21
In a Nutshell... Complete Identity Lifecycle Management System (PACS+LCAS) 22
HID-IA: ActivIdentity Product Lines Versatile Authentication Authentication Devices Credential Management Security Clients Validation Access Control ActivIdentity 4TRESS AAA Server for Remote Access ActivIdentity 4TRESS Authentication Server ActivIdentity 4TRESS Fraud Detection Service ActivIdentity Smart Card and USB Token ActivIdentity OTP Token ActivIdentity Software Token ActivIdentity ActivID Card Management System ActivIdentity ActivID Batch Management System ActivIdentity Identity Registration System ActivIdentity ActivClient ActivIdentity SecureLogin Single Sign-On CoreStreet PKI Validation and Responder Appliance CoreStreet Desktop Validation Client and Server Extension PACS: ActivEntry, ActviEntry Mobile LACS: navigo, Crescendo, HOTD 23
Thank You. Email: mlee@hidglobal.com 24