Re: High Tech Student IDs

[GREGORY SEIBERT <gregs () KENT EDU>]

There are many vendors that work in this market space, but the two leaders
by far (particularly for larger schools) are Diebold (which bought Griffin)
and Blackboard (which bought Harco from AT&T who bought Harco originally).
Both systems will work fine in supporting off-campus vendors. The
technology can be very simple and very secure in that the same magnetic
stripe format and reader eqipment used for all credit card transactions can
be used for these systems. This includes Verifone credit authorization
terminals (CATs). We have a program of over 40 off-campus vendors and use
Diebold equipment. I'm aware of schools with well over 100 participating
vendors. I'm aware of pizza vendors that use Verifone readers connected to
cell phones to do mobile authorizations. As long as the verdor verifies the
photo on the id as being that of the customer, there has been very little
fraud that I am aware of.

As far as smart cards are concerned, there have been many attempts and
failures. The technology usually works, but the additional cost of the card
(especially when computed for a large customer base (> 10,000) does not
make the ROI work. Plus, the whole idea of smart cards for purchase of
goods has just never caught on in the US (especially compared to Euorpe).
The incredibly hyped Mondex trial in Manhattan was a dramatic failure. We
have shied away from values on smart cards because students tend to lose
cards so frequently. An on-line system can dramatically limit their
liability - particularly if you conform to Regulation E.  However, if a
student loses a smart card, they are out the entire value of the on-card
purse.

I think the real killer app for smart cards is coming right in our arena -
network and access authentication. Especially if more companies can
demonstrate that they have worked out the bugs in on-card finger/thumb
print verification.

If you would like to discuss this is greater detail off-line, please drop
me an email and we can talk on the phone. You can also take a look at our
campus card web page at    http://www.flashcard.kent.edu/.

      Greg Seibert
      Director of Security and Compliance
      Kent State University




                      Doug Sandford
                      <dsandfor () SEEBECK UA.        To:       SECURITY () LISTSERV EDUCAUSE EDU
                      EDU>                         cc:
                      Sent by: The EDUCAUSE        Subject:  Re: [SECURITY] High Tech Student IDs
                      Security Discussion
                      Group Listserv
                      <SECURITY () LISTSERV ED
                      UCAUSE.EDU>


                      10/06/2003 05:34 PM
                      Please respond to The
                      EDUCAUSE Security
                      Discussion Group
                      Listserv






We have a system here that covers much of what you're asking about.
I'm not familiar with the particulars but I do know it has been very
successful. You can get an idea of the system here:

http://actcard.ua.edu/

Happy hunting!

Date sent:              Mon, 6 Oct 2003 17:16:56 -0400
Send reply to:          The EDUCAUSE Security Discussion Group Listserv
<SECURITY () LISTSERV EDUCAUSE EDU>
From:                   Jim Moore <jhmfa () RIT EDU>
Organization:           Rochester Institute of Technology
Subject:                [SECURITY] High Tech Student IDs
To:                     SECURITY () LISTSERV EDUCAUSE EDU

I am always looking to avoid the pain of causing my own mistakes.  We
have vending, washer/dryers etc which will accept student IDs.  I
started to look around at other technologies, and was wondering what
people used.  I was also wondering if people also extended the
privileges to off-campus vendors, and the security constraints around
that.  What high tech IDs are out there, and how are they working out?
Anyone using smartcards?  Proximity readers (and how does that work with
vending machines)?  Experiences with USA Technologies, Diebold?

Thanks in advance?

Jim
--
--
Jim Moore, CISSP, IAM
Information Security Officer
Rochester Institute of Technology
13 Lomb Memorial Drive
Rochester, NY 14623-5603
Telephone: (585)475-5406
Fax:       (585)475-7950


The significant problems we face cannot be solved at the same level of
thinking we were at when we created them. -Albert Einstein-

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.
Doug Sandford
Information Security Officer
University of Alabama
Seebeck Computer Center
doug () ua edu

This email is intended only for the person to whom it is
addressed.  Any review or other use of this information by
persons or entities other than the intended recipient or any
retransmission without the consent of the sender is prohibited.

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.