IBM and four partners on Wednesday announced what they call a "major breakthrough" in identity management designed to help business and government agencies protect assets, including IT systems and physical facilities, from unauthorized users.
IBM's Kent Blossom, director of the company's safety and security services, called the new smart card-based system a "first-time-ever" combination of a variety of physical and virtual security measures during a press briefing in Washington, D.C.
The new system -- using IBM's Tivoli ID management software and products from ActivCard, Bioscrypt, ImageWare Solutions, and VeriSign -- allows clients to link biometric security, such as fingerprint scans, with applications and networks. In a demonstration, IBM employees created a smart card within minutes that could be used with a fingerprint scan for a company employee to gain access to a building and to the employee's computer. The card can also be used as a traditional swipe card to gain access to a lunchroom meal plan or a company parking lot. The smart card could contain several other applications, including digital certificates.
Instead of an employee entering passwords to gain access, the smart card contained the passwords. Each smart card can be programmed to give individual employees access to facilities or networks they need, Blossom said.
The new ID management suite allows customers to simplify identity management and authentication processes, according to IBM.
Lost employee passwords can cost up to $40 per help-desk call, and password problems can take up 30% to 50% of a company help desk's time, Blossom said. "There's a big cost for this whole password management issue that we haven't been able to get our arms around, and that's lost productivity," he added.
U.S. government regulations such as Sarbanes-Oxley are requiring companies to adopt new security measures, Blossom said. The White House has also required all government agencies to issue "secure and reliable forms of identification" for their employees and contractors, he noted.
On Tuesday, IBM also announced a new laptop with a fingerprint scanner built in, the new T42 model.
Information about pricing and availability for the ID management suite wasn't immediately available.
The IDG News Service is a Network World affiliate.
RELATED LINKS
Network World on Security
Network World on Security
Sign up for our free e-mail newsletter.
Breaking identity-management news
The importance of context
Nov. 06, 2009
Context is important. I know I say that a lot, but I'll keep saying it until you all agree. That is to say, you're entitled to your own opinion but if your opinion is that context isn't important then your opinion is ...
Privileged user management: Who is watching the watchers?
Oct. 05, 2009
Companies such as BeyondTrust, Cloakware, Cyber-Ark, e-DMZ and Lieberman Software offer products that helps security managers put safeguards in place so no one administrator holds too much power in the IT environment.
Social Networking a Tool for More Secure ID Management?
Sep. 16, 2009
At Digital ID World 2009, a Facebook platform engineer says social networking sites can be used to actually improve identity and access management. Why wasn't he laughed off stage by the skeptical security crowd before ...
Canada tackles trust framework
Aug. 18, 2009
Last issue I was talking about the U.S. General Services Administration's recent efforts to develop a trust framework for identity in the federal government. Not to be outdone, our neighbors to the North are embarking ...
How to stop IT managers from going rogue
Oct. 05, 2009
Nearly half of all data breaches come from inside an organization, which is why industry watchers say enterprise IT departments need to invest in technology that ensures no one person has all the power.
