Secure ID Card Issuance: The First Step in Security

Apr 1, 2003 12:00 PM, By Jim Williams

Biometric approaches, smart cards, proximity cards, as well as overt and covert security features embedded in the manufacturing of ID cards will protect against counterfeit cards. However, none of these technologies will protect an organization against unauthorized/fraudulent ID cards produced from within an organization's existing issuance system. In the chain that represents a secure ID system, point-of-issuance may be the weakest link.

There are many elements in the chain of access security. The following checklist outlines the ID card issuance cycle and defines those points where a breakdown in security may lead to an exposure. This checklist will help evaluate an organization's system.

• Is the system used by internal, trusted employees only?

• Is the room containing the system controlled/locked?

• Does the workstation running the card personalization software have a hardware key/lock that can be removed and stored in a safe place?

• Does the card printer have a similar hardware key that may be removed?

• Can your system limit the operator's ability to issue ID cards based upon criteria such as departments, locations, ID card designs and job categories?

• Is the information encoded upon the ID Card (mag-stripe, barcode,smartcard, etc.) printed directly from the controlled database?

• Can the data the ID card was printed from (including images) be made read-only after the card is printed?

• Can you restrict the user/card issuer from doing local data entry or changing data that was already entered in an HR database?

• Are ID card materials purchased from a reputable bonded supplier?

• Do you control the disposal of ID Card production materials such as rejected ID Cards, ribbons or holographs?

Jim Williams is the product development manager with Lexington Technology, Huntington Beach, Calif., a firm specializing in ID card personalization software and related products.

Want to use this article? Click here for options!
© 2012 Penton Media Inc.

This month in Access Control

• Targeting The Customer
• Electronic Pedigrees
• One Hero Among Many
• Who? What? When? Where? Why?
• More from September's issue