classic | mobile
Follow us on:
Follow us on Facebook  Share via Twitter  Share via LinkedIn
 

Search...
Hi-Tech Security Solutions Business Directory
Residential Estate Security Handbook 2018


Department of Agriculture tills local technology
May 2009, Access Control & Identity Management

The Department of Agriculture has implemented a converged biometric physical and logical access system.

The Budgets and Reporting Directorate at The Department of Agriculture’s Head Office in Pretoria is responsible for managing the organisation’s financial system control functions, including the logging onto PCs and secure applications used by the finance, HR and supply chain management directorates.

In order to ensure that its applications are secure, the Department – as in the case of all government organisations – applies a strict password management policy for all staff who log onto its computer systems.

For years, managing these passwords had been a thorn in the system controller’s side. With logon credentials for the Government’s transversal systems, including BAS, Persal and LOGIS, changing every 15 to 30 days, the incidence of forgotten passwords was significant, resulting in lockouts and associated downtime. Resetting forgotten credentials placed an unnecessary admin burden on the relevant helpdesks, distracting the technical support team from more pressing tasks.

An audit of password procedures and risks revealed a number of significant security concerns. Not only were staff writing their passwords down, but the close proximity of workstations to each other meant it was relatively easy for users to see each other’s passwords when they were being entered. In addition, frailties in the physical access control system securing the workspace used by many key system users, raised a secondary concern – that non-authorised individuals could gain access to the area.

Following an RFQ process in 2008, the Department commissioned Praxis to implement secure sign-on solution to replace the need for passwords to be entered manually. Praxis proposed that the Department purchase SuperSignOn, a secure password management solution developed in South Africa by SuperVision Biometric Systems and Sybu Data.

The initial phase of the project saw a biometric solution, which operates with the Sagem MSO1300 desktop fingerprint reader, installed on more than 100 PCs. This replaced all passwords, from the initial PC log on to credentials for each application thereafter, with a fingerprint logon.

To resolve the access control requirement, Sagem MA500 biometric terminals running SuperVision’s physical access control software were installed at the entrance and exit doors leading to the workspace for LOGIS users.

As all SuperVision applications are fully integrated, this ensured that the Department was able to deploy a truly converged access control policy through which staff could only log onto their PCs if they had first been authenticated at the physical access point. Similarly, when staff left the building their PCs would automatically be logged off when they passed through the door.

The Department was particularly impressed that SuperSignOn was able to integrate with most of the applications used, including the emulator and disconnected logins with no custom scripting or development.

Active Directory is being used as the primary authentication engine, eliminating the need to build a separate repository to store credentials and other data needed to validate users’ logon requests.

The solution’s automated password change facility allows the system to automatically generate new strong passwords when old ones expire, reducing the likelihood of passwords being hacked by guesswork or brute-force. With users not even knowing the password, there is no chance that post-it notes with confidential logon credentials will be left lying around the office.

As well as enhancing security, SuperSignOn significantly reduced lockouts stemming from confusion over which password goes with which application, and has virtually eliminated password complaints for enabled applications.

Furthermore, time masking rules applied to the physical access control solution mean that staff could only be granted access to their workspace during designated office hours, eliminating the opportunity for people to be in work areas when not properly supervised.

According to Praxis’s Wikus Englebrecht, having a single point of take on for PC and physical security systems is a significant value-add insofar that access rights can now be removed centrally in the event of staff leaving the organisation.

The entire solution strengthens the Department’s application security and more importantly, adds a level of non-repudiation to the process. Fingers (unlike passwords) cannot be transferred between individuals creating a stronger, more accountable environment. A further advantage is that it is a homegrown South African solution, which is consequently able to quickly and proactively react to the changing local market.

Engelbrecht says that he sees the usefulness of this system for many other departments. “It is the first of its kind we have implemented in the country and solves many of the security issues which trouble large organisations. This solution directly addresses problems which are typical headaches for organisations such as the lack of integration between physical and logical access control, user problems of having to remember multiple passwords, ensuring users create strong passwords, managing forgotten passwords, and the impossibility of controlling borrowed passwords.”

Security and access control can be streamlined and automated, alleviating some of the current challenges these departments feel. “When you come to work all you have to remember to bring with you is your finger!”

Fact file

Sector: Government – Department of Agriculture.

Scale of project: Phase one of a broader project entailed installing secure sign on solution on over 100 PCs and providing physical access control to one work area.

Key elements: SuperVision PC Log On and Secure Sign On Modules operating in conjunction with Sagem MSO1300 fingerprint readers for desktop and application access and SuperVision Physical Access Control Module in conjunction with Sagem MA500 terminals for physical access control.

Benefits: Securing physical access to work areas to restrict access to authorised staff only; Restricting access to PCs and applications to enhance security while removing the requirement for staff to remember passwords, thus improving efficiency and reducing opportunity cost of re-issuing logon credentials.

For details contact Charlie Stewart, SuperVision Biometric Systems, +27 (0)21 913 6075, www.supervision.co.za


  Share via Twitter   Share via LinkedIn      

Further reading:

  • IDEMIA introduces the MorphoWave Compact
    November 2018, IDEMIA , Access Control & Identity Management
    IDEMIA has released its new MorphoWave Compact by IDEMIA, its new contactless 3D fingerprint biometric terminal.
  • 2D barcode scanners
    November 2018, Excellent ID, Products, Access Control & Identity Management
    The latest-generation eSkan 2D barcode scanner from EXID includes a touchscreen that enables users to manually enter additional details.
  • Centurion hosts second Access Automation Expo
    November 2018, Centurion Systems, News, Access Control & Identity Management, Perimeter Security, Alarms & Intruder Detection
    Centurion Systems has taken its Access Automation Expo national, visiting Durban and Cape Town for the latest events.
  • MorphoWave Compact launched in SA
    November 2018, IDEMIA , This Week's Editor's Pick, Access Control & Identity Management, News
    IDEMIA South Africa recently invited partners, consultants and end-users to the official local launch of its touchless fingerprint reader, the MorphoWave Compact.
  • Smart city concepts
    November 2018, ZKTeco, Access Control & Identity Management
    The smart city concept integrates information and communication technology (ICT), and various physical devices connected to the network to optimise the efficiency of city operations.
  • A wave at biometrics
    November 2018, IDEMIA , Access Control & Identity Management, Products
    MorphoWave technology scans all four fingers in 3D with a simple wave of the hand, capturing 30% more data per finger than with traditional systems.
  • Suprema Xpass D2
    November 2018, Suprema, Access Control & Identity Management, Products
    Suprema’s latest access control trio, Xpass D2 series, for tough environments and outdoor installations, is optimised for centralised access control systems such as Suprema’s CoreStation.
  • Suprema CoreStation
    November 2018, Suprema, Access Control & Identity Management, Products
    CoreStation is an intelligent door controller that also manages fingerprint matching and biometric data storage under a secure location, providing greater flexibility when designing your security systems.
  • Suprema BioLite N2
    November 2018, Suprema, Access Control & Identity Management, Products
    Suprema BioLite N2 ticks off all the boxes when it comes to choosing a fast, accurate and robust access control and time attendance terminal that is suitable for just about anywhere.
  • Under-vehicle inspection
    November 2018, ZKTeco, Access Control & Identity Management, Products
    High performance business video system enables customers to do more with less, driving down the total cost of solutions.
  • Secure, wireless access control
    November 2018, Paxton Access, Access Control & Identity Management, Products
    Paxton has announced the launch of the PaxLock Pro, the latest addition to its range of wireless access control solutions, in conjunction with the new and improved Net2Air bridge, the connector to the Net2 wireless range.
  • ATOM T&A
    November 2018, Powell Tronics, Access Control & Identity Management, Products
    ATOM is a user friendly, intuitive, web-based time and attendance and biometric management solution available in four variants to suite customers’ requirements.

 
 
         
Contact:
Technews Publishing (Pty) Ltd
1st Floor, Stabilitas House
265 Kent Ave, Randburg, 2194
South Africa
Publications by Technews
Dataweek Electronics & Communications Technology
Electronic Buyers Guide (EBG)

Hi-Tech Security Solutions
Hi-Tech Security Business Directory (HSBD)

Motion Control in Southern Africa
Motion Control Buyers’ Guide (MCBG)

South African Instrumentation & Control
South African Instrumentation & Control Buyers’ Guide (IBG)
Other
Terms & conditions of use, including privacy policy
PAIA Manual
         
    Mobile | Classic

Copyright © Technews Publishing (Pty) Ltd. All rights reserved.