Page 16 - Security Today, January/February 2019

Advancing on Two Fronts
Smartcard issuance pushes forward with cloud solutions and significantly faster printing options
BTy Robin Tandon
he way that smart cards are is- sued has changed dramatically in the last several years with the advent of cloud-based sys- tems that enable the entire pro-
cess to be managed and executed remotely, and with printer/encoder breakthroughs that significantly boost throughput, reliability and energy efficiency. Government, corpo- rate and university customers have many more options for improving their issuance operations.
Moving to the Cloud
In the past, a PC had to be connected to a printer so that someone could use it to cre- ate an ID card. This included designing the card, using the ID database to encode data onto it, and then sending the card to a printer. Now, the advent of true cloud-based platforms enables the entire process to be handled remotely.
Everything required for secure issuance is in a centralized and integrated system, from design and encoding to printing that can be accessed by an administrator in a card office at the main campus or any satellite facility or other remote location. They can seam- lessly create new cards, read data on them, issue replacements and manage print queues using a tablet, laptop or any device with a web interface.
The move to cloud-based model also im- proves the user experience. It is no longer necessary to require people to visit the main card office and stand in long lines in order to pick up an ID. Card printers can be de- ployed anywhere to enable instant issuance wherever it is needed including remote offices and satellite campuses. Each printer becomes a smart, secure, web-enabled edge device in the Internet of Trusted Things (IoTT) and each can take advantage of all platform functionality.
The cloud model also improves security and privacy protection through end-to-end, banking-level encryption of all sensitive data in transit or at rest. Digital certificates are used to establish a trusted relationship between the cloud and the issuance console, and after each card is printed all personally identifiable information (PII) disappears. As an additional security measure, all encryp- tion keys are stored in tamper-proof hard- ware, and the use of unique firmware with the
printers means they will only work with the cloud-based issuance system software. Plus, a card reader can be added to ensure the is- suance console cannot be used to release ID card print jobs without presenting an autho- rized card or credential for validation.
The cloud-based model also simplifies for administrators, streamlining high-vol- ume card issuance management and deliv- ery while increasing control and security. Administrators no longer must manage all of the elements typically required for card issuance, including software and other IT resources. They also don’t have to maintain printer software updates and security patch- es since there is no longer the need for local computers connected to printers, and they eliminate the capital expenditures associated with deploying printers in order to achieve a best-in-class card issuance implementation.
Cloud-based issuance also creates new economic models by enabling the entire ID card issuance process to be delivered through a service model that is billed in annual or monthly installments. Hardware, software and service can all be bundled into one offer- ing to cut multiple layers of program costs. The service can include auto-replacement of cards and other consumables when needed and delivers all the benefits associated with
centralized control and visibility along with distributed or batch printing. With a service model, it is easier to scale the card office to accommodate future technology capabili- ties or support growing card volumes. This is especially valuable during periods of peak demand, enabling large batches of cards to be produced and dispatched by commercial printing bureaus.
Cloud issuance services also substantially reduce the typical annual expenses associ- ated with card stock, laminates and ribbons. Also reduced are the costs of service, main- tenance and hardware and software updates.
Cloud-based issuance services also cut the staff time required for traditional issu- ance and reordering supplies, as well as the IT resources that would otherwise be re- quired to support the operation and periodic replacement of obsolete equipment. Admin- istrators can convert their budget for ID card issuance into an operational expense—it be- comes a service fee covering all ribbons, pre- printed cards and mag stripe encoding. This reduces what previously were very unpredict- able costs associated with owning and man- aging hardware and software, including the costs of managing inventory and labor, and potentially the capital expenditure related to purchasing printers.
16
JANUARY/FEBRUARY 2019 | SECURITY TODAY
SMARTCARDS
Nixx Photography/Shutterstock.com