AI 3: Library Card Numbers and Hand-Held Devices



Similar documents
A safe and easy way to use your food assistance stamp benefits! benefits!

Circulation Services

Banking made clear. Information pack for people with learning disabilities.

Banking made clear. Information pack for people with learning disabilities.

1.Requirements to apply for a new Smart ID Card?

Computer Security Self-Test: Questions & Scenarios

WISCONSIN IDENTITY THEFT RANKING BY STATE: Rank 15, Complaints Per 100,000 Population, 9852 Complaints (2007) Updated January 16, 2009

Custom Calling Features

Okay, good. He's gonna release the computers for you and allow you to log into NSLDS.

South Gloucestershire Council Department for Children, Adults and Health Direct Payments Card

General information about NFC technology

Credit Cards: Advantages & Disadvantages

ReliaCard THE RELIACARD FREQUENTLY ASKED QUESTIONS

VISA. Classic. Credit Card. Agreement and Disclosure Statement. Classic. Federally insured by NCUA

IMPORTANT ACCOUNT INFORMATION FOR OUR CUSTOMERS from

IDENTITY PROTECTION MEMBER. Protect Your Identity. Security of Personal Information is Our Top Priority

u.s. bank focus card Frequently Asked Questions The Focus Card What is the Focus Card? How does the Focus Card work?

USAA CREDIT CARD AGREEMENT USAA SAVINGS BANK

For more info visit or call

TOP TRUMPS Comparisons of how to pay for goods and services online

Direct Payments Card

Tired of running to the post office and the bank to get your customers payments

Tired of running to the post office and the bank to get your customers payments

How do I start a meeting?

Smart Ideas for Smartphone Security

Security Breaches. There are unscrupulous individuals, like identity thieves, who want your information to commit fraud.

Visa Debit Card Conditions of Use.

Take Charge of Credit Cards

Many of these tips are just common sense and others are tips to keep in mind when doing a transaction, at ATMs, restaurants and merchants.

AVOIDING ONLINE THREATS CYBER SECURITY MYTHS, FACTS, TIPS. ftrsecure.com

1. What you need to know about these conditions of use

Mid-Pacific Institute Debit Card FAQs Updated August 1, 2015

(C) Cardholder's Responsibilities The following are the cardholder s responsibility:

CONNECTICUT IDENTITY THEFT RANKING BY STATE: Rank 19, 68.8 Complaints Per 100,000 Population, 2409 Complaints (2007) Updated November 28, 2008

Application for Bank of Pontiac NetTeller Services Internet Banking and Bill Pay

All you need to know about the electronic residence permit (eat)

APPLE & ANDROID. User Guide BNC ONLINE BANKING

H I V. and Insurance YOUR LEGAL RIGHTS HIV AND INSURANCE 1

Store Use Only: Identification requires a valid driver s license and/or government issued photo ID

VISA CARDHOLDER AGREEMENT

Using your Encrypted BlackBerry

Consumer FAQs. 1. Who is behind the BuySafe initiative? 2. Why should I use a PIN? 3. Do all transactions need a PIN?

USAA CREDIT CARD AGREEMENT USAA SAVINGS BANK

The following information was provided by SANS and discusses IT Security Awareness. It was last updated in 2015.

0% Introductory APR* for 6 billing cycles % APR 0% Introductory APR for 6 billing cycles.

Security in an Increasingly Threatened World. SMS: A better way of doing Two Factor Authentication (2FA)

User Guide Veezi Loyalty. Vista Entertainment Solutions

Frequently asked questions.

1.4. Will my Social Security and Supplemental Security Income benefits be safe?

How 2D Scanning Can Benefit your Business

Learn to protect yourself from Identity Theft. First National Bank can help.

ONPOINT COMMUNITY CREDIT UNION International Prepaid Card Terms and Conditions

IMPORTANT INFORMATION ABOUT OPENING A NEW ACCOUNT:

Account Modification Form

IMPORTANT ACCOUNT INFORMATION FOR OUR CUSTOMERS from. First National Bank 729 W 7th (Home Office) SPEARMAN, TX (806)

identity theft: How To Safeguard Your Privacy and Keep Your Good Name

BlackBerry Link for Windows. Version: User Guide

BANKING BASICS WHY YOU WANT TO KEEP YOUR MONEY IN THE BANK

AT&T Voice DNA User Guide

Mobile Operating Systems & Security

Fraud Prevention Tips

Frequently Asked Questions About Mobile Banking/Deposit App

BANK OF BARODA (NEW ZEALAND) LIMITED (BOBNZ) VISA CLASSIC DEBIT CARD. User Guide

Multi-Factor Authentication

SCRIPT: Security Training

Take Charge of Credit Cards Note Taking Guide

Payment Card Industry - Achieving PCI Compliance Steps Steps

Checking Account & Debit Card Simulation. Understanding Checking Accounts and Debit Card Transactions

Islington ebooks Help / FAQs

Mobile Banking Applications Premier Members Mobile User Guide

Claverack Free Library CIRCULATION POLICY

Bank to Bank Transfer Application

Credit Card Contract

Identity Theft Prevention Provided by the Colorado Bureau of Investigation Contact us at

SEARS CARD DISCLOSURES. This APR will vary with the market based on the Prime Rate. Terms and Conditions of Offer

IMPORTANT ACCOUNT INFORMATION FOR OUR CUSTOMERS from

Today s mobile ecosystem means shared responsibility

1. Any requesting personal information, or asking you to verify an account, is usually a scam... even if it looks authentic.

Meridian 8009 Business Terminal User Guide

Telemarketing Scripting Information

ANZ Credit Cards CONDITIONS OF USE

David Jones Storecard and David Jones American Express Card Member Agreement, Financial Services Guide and Purchase Protection. Terms and Conditions

Spring Hill State Bank Mobile Banking FAQs

When life happens... Protect Against Identity Theft. Keeping personal information safe & what to do if it happens to you

Internet Security Priorities. Benenson Strategy Group and American Viewpoint December 20, 2013

A Parents' Guide to ConnectSafely.org

Managed Services in a Month - Part Five

Two Factor Authentication (TFA; 2FA) is a security process in which two methods of authentication are used to verify who you are.

Transcription:

AI 3: Library Card Numbers and Hand-Held Devices History: In May of 2010, the PINES Executive Committee discussed the use of scannable handheld devices to store library card numbers (for example, the KeyRing app for phones) in lieu of carrying a physical card (http://pines.georgialibraries.org/ec meeting 2010 may). At that time, some libraries were already allowing it. In September of 2010, the topic was reintroduced and the Executive Committee voted to disallow the use of handheld devices and to require a physical card to be present for library transactions (http://pines.georgialibraries.org/ec meeting 2010 september). PINES Policy Currently Reads: Page 1: Page 17: Page 17 18: A library card is required in order to check out materials [1999.05, 2010.09]. A patron must present a card in good standing to borrow materials. A patron s card will be blocked, and no services may be obtained with it if the patron owes $10 or more in unpaid fines and/or fees [2011.05]. Blocked services include renewals [2009.05, 2009.09] and hold request placement [2008.02]. Delinquent borrowers who have not reached these limits may still borrow materials; the system operator will be notified that the patron is delinquent. A PINES card is required at all times and at all libraries for all transactions [2006.11], with the following exceptions: when an item is in hand, no library card is required in order to renew the item [2007.02] when an item is in hand, no library card is required for payment of fines [2007.02] A card is required for renewals or bill payment if neither the cardholder nor the item is present [2007.02]. If a patron forgets his/her PINES card, he or she can: Return home to retrieve it. Materials may be held for the patron. Purchase a replacement card for $2. The procedure for Lost/Stolen Cards should be used in reissuing a card. Photo ID is not accepted in lieu of a library card in PINES.

Proposal: Update the policy to redefine the PINES card to include the card number as presented on a hand held device: A PINES card (defined as either the issued plastic card or an electronic facsimile on a hand held device scannable by the lending library s equipment) is required at all times and at all libraries for all transactions [2006.11], with the following exceptions: Question 1: Should the current PINES policy be changed to allow scanning of library card numbers that are stored on hand held devices? Yes 19 59% No 10 31% Undecided 3 9% Comments / Questions: We have a lot a patrons who try to use someone else's card and give an invalid card. They also lose cards and phones. This change would be risky here. Yes, given that it is "scannable by the lending library s equipment". (Or maybe PINES can look into an app that all patrons may download to make their cards scannable.) With self check units, and we're converting more and more of our stem to these, there is no way to monitor use of library card or scanned card without additional staff. We will not do this specific monitoring. I'm not sure that we need to be on the leading edge of something like this. It might be better to wait a little while and learn from other's mistakes. I thought the reason we decided not to go with it was because of a security issue of being able to create fake barcode numbers. I have no problem with using the phone app as long as we aren't required to purchase new barcode scanners, and we are sure that these are reflecting true cards. What's to stop someone from having and presenting multiple cards using the device? Do you think the current "proxy borrower" covers this? This would be similar to the mom with 5 cards on her key ring. It is just another way for us to provide convenience to our patrons. Is this legal "tender"? How can we ensure patron privacy in this age of identity theft? You can put a PIN number on your phone so only you can access it. You can set your phone up so after someone tries to hack your PIN number three times it is automatically locked down. On the latest release of the iphone, you can use a fingerprint to open it and soon a retina scan will be offered. You can pay credit card charges on your phone in places like StarBuck. You can access your bank account information and conduct stock transactions by phone. Library Systems

with self check have patrons using their phone to check out they just can't take it to the desk and let staff use the bar code to check out. If it is the sanctity of the card the PINES board is worried over, it was breached the first time a card was issued. We have so many people using our library, we generally are not aware they are using someone else card until there is a fine over $10, it is time to renew, a note is on the record or they came to pick up a hold. PINES needs to get with the times. First, let me say that I am all for allowing staff to look up a card number with a picture ID. But...if we are going to continue the archaic requirement of presenting a library card in hand, then we need to stick to it. No exceptions. We tell patrons that their library card is like a credit card since in using it they are accepting a responsibility to return or pay for items they check out. Do credit card companies allow their card numbers to be scanned into smartphones and used that way? (I honestly don't know but think not we're not on the cutting edge of technology out here in the boonies. I wouldn't want my credit cards to be scannable from my phone.) With other affinity cards that are on your key ring, there's really no responsibility involved just discounts and such. Can one have his driver's license in his phone now or do we still have to keep it on our person? I chose yes, but the patron will have to verify they are the person that is using the card. We give two sizes of library cards to all patrons. They should be able to bring in either the keychain size or the wallet size. I don't know of any store that will allow you to show a scanned image of a debit card or credit card to purchase items. Question 2: If the patron uses a hand held device, should the patron be asked to confirm their identity (for example, verifying their name or phone number) for additional security? If so, what would be the best approach? Do not require patron to verify identity 14 44% Require patron to verify identity 11 34% Undecided 7 22% Preferred Form of Verification: Same as for a library card. Using a handheld devise and having to confirm identity would require more staff time. IF required, the PINES pin number is as far as I'm willing to go. We don't verify their identity when they present the actual card. What is the difference? Unless the patron is a regular, we have no way of knowing if they are the actual card holder when they present a card. We just assume that they are unless the age or the name raises a question. Street number or PO Box number would be preferable to phone number, since if they've stolen the phone and the contents thereof, that one would be pretty easy to already know. If people are doing this on self checkout, how would you confirm? My understanding is that some self checkout libraries are already doing this. But asking for a phone number if you are concerned about a stolen card or phone seems silly.

But strongly prefer NOT to allow use of scanned barcodes on handheld devices If you're going to require identification, get identification. Reciting a name or phone number just confirms they know they know the card owner's name or phone number. Currently, we can tell someone "your card was presented to check out these items." The new version would be "your card or the equivalent on a scannable handheld device was presented to check out these items." Not quite the same message. Preferably picture id. Ask for their DOB. We don't require them to confirm their identity when using their physical library card. Proxy borrowing allows others to use someone else's card. Would this be allowable with the handheld device? Why? Do we do the same with a regular card? Scan the card on the phone. Somewhere there is a disconnect with self check equipment and this entire bar code issue. I would prefer that the physical card be shown, but if this is allowed, then the Patron's Name, address, and date of birth should be required to confirm identity Either allow lookups with picture ID or require the physical library card. No exceptions. We don't require them to show ID in conjunction with a physical card, so why would we do it with an electronic one? Their drivers license because anyone could have a copy of their card. Just remember to explain to the patron its for their own protection. Picture ID Question 3: How should a library respond if their scanners are not compatible and cannot scan the card number from a hand held device? Require patron to return with the physical card 5 16% Type in the card number that is displayed on the hand held device 16 50% Other 11 34% Other Suggestions: We think that the physical card should be required. No handheld devises. type in card number and verify ID with picture ID Do what staff usually do if a physical card wasn't readable, i.e. type it in or replace the card. In this case, staff can type it in or ask the patron to return with their physical card (and staff will hold their items for them). Group purchase option of new scanners? and software. People have this ability. The TSA accepts scanned tickets for airline use; we need to modernize! Strongly prefer NOT to allow use of scanned barcodes on handheld devices, but if it is approved, then we might as well type it in if it won't scan.

We shouldn't be able to limit the service because of our incompatible equipment. That's not fair to the patron. If they are allowed to present an image of the barcode on their device at one location, they should be allowed to present it at all PINES locations. Patrons who are relying on this technology will probably not have either their keyring or wallet card. If the Library's equipment cannot scan the number on the device (ours cannot), and we have to input the number manually, we will end up either listening to the patron read the number out loud or handing their device to the staff for us to read the number. Change the PINES policy on typing cards in and go back to allowing a patron to present an ID in order to have a staff member type the card number. I would prefer that the physical card be shown, but if this is allowed, it would be counterproductive to have the patron required to go home and get the physical card if the barcode numbers are clearly visible but our barcode scanners simply can't scan the data. If, however, the scanner can't read the data because the image is unclear or the numbers are unreadable or not fully visible, then the patron should be required to return with the physical card. But again, my preference is that the physical card be shown in the first place, in which case this scenario wouldn't be an issue. Either allow lookups with picture ID or require the physical library card. No exceptions. Actually, the second choice above; but point out what the policy is (.." scannable by the lending library s equipment." And since under this proposal, the facsimile on the device is by definition the equivalent of the plastic card, only type it in if that is what you do with an unreadable plastic card. Type the card number in but tell the patron they we will only do it this one time.