Re: High Tech Student IDs

[Theresa M Rowe <rowe () OAKLAND EDU>]

We are just starting to evaluate a system from "HigherOne" -
any comments out there?
T Rowe


---- Original message ----
> Date: Mon, 6 Oct 2003 18:23:10 -0400
> From: GREGORY SEIBERT <gregs () KENT EDU>
> Subject: Re: [SECURITY] High Tech Student IDs
> To: SECURITY () LISTSERV EDUCAUSE EDU
>
> There are many vendors that work in this market space, but
the two leaders
> by far (particularly for larger schools) are Diebold (which
bought Griffin)
> and Blackboard (which bought Harco from AT&T who bought
Harco originally).
> Both systems will work fine in supporting off-campus
vendors. The
> technology can be very simple and very secure in that the
same magnetic
> stripe format and reader eqipment used for all credit card
transactions can
> be used for these systems. This includes Verifone credit
authorization
> terminals (CATs). We have a program of over 40 off-campus
vendors and use
> Diebold equipment. I'm aware of schools with well over 100
participating
> vendors. I'm aware of pizza vendors that use Verifone
readers connected to
> cell phones to do mobile authorizations. As long as the
verdor verifies the
> photo on the id as being that of the customer, there has
been very little
> fraud that I am aware of.
>
> As far as smart cards are concerned, there have been many
attempts and
> failures. The technology usually works, but the additional
cost of the card
> (especially when computed for a large customer base (>
10,000) does not
> make the ROI work. Plus, the whole idea of smart cards for
purchase of
> goods has just never caught on in the US (especially
compared to Euorpe).
> The incredibly hyped Mondex trial in Manhattan was a
dramatic failure. We
> have shied away from values on smart cards because students
tend to lose
> cards so frequently. An on-line system can dramatically
limit their
> liability - particularly if you conform to Regulation E.
However, if a
> student loses a smart card, they are out the entire value of
the on-card
> purse.
>
> I think the real killer app for smart cards is coming right
in our arena -
> network and access authentication. Especially if more
companies can
> demonstrate that they have worked out the bugs in on-card
finger/thumb
> print verification.
>
> If you would like to discuss this is greater detail off-
line, please drop
> me an email and we can talk on the phone. You can also take
a look at our
> campus card web page at    http://www.flashcard.kent.edu/.
>
>      Greg Seibert
>      Director of Security and Compliance
>      Kent State University
>
>
>
>
>                      Doug Sandford
>                      <dsandfor () SEEBECK UA.        To:
SECURITY () LISTSERV EDUCAUSE EDU
>                      EDU>                         cc:
>                      Sent by: The EDUCAUSE        Subject:
Re: [SECURITY] High Tech Student IDs
>                      Security Discussion
>                      Group Listserv
>                      <SECURITY () LISTSERV ED
>                      UCAUSE.EDU>
>
>
>                      10/06/2003 05:34 PM
>                      Please respond to The
>                      EDUCAUSE Security
>                      Discussion Group
>                      Listserv
>
>
>
>
>
>
> We have a system here that covers much of what you're asking
about.
> I'm not familiar with the particulars but I do know it has
been very
> successful. You can get an idea of the system here:
>
> http://actcard.ua.edu/
>
> Happy hunting!
>
> Date sent:              Mon, 6 Oct 2003 17:16:56 -0400
> Send reply to:          The EDUCAUSE Security Discussion
Group Listserv
> <SECURITY () LISTSERV EDUCAUSE EDU>
> From:                   Jim Moore <jhmfa () RIT EDU>
> Organization:           Rochester Institute of Technology
> Subject:                [SECURITY] High Tech Student IDs
> To:                     SECURITY () LISTSERV EDUCAUSE EDU
>
> I am always looking to avoid the pain of causing my own
mistakes.  We
> have vending, washer/dryers etc which will accept student
IDs.  I
> started to look around at other technologies, and was
wondering what
> people used.  I was also wondering if people also extended
the
> privileges to off-campus vendors, and the security
constraints around
> that.  What high tech IDs are out there, and how are they
working out?
> Anyone using smartcards?  Proximity readers (and how does
that work with
> vending machines)?  Experiences with USA Technologies,
Diebold?
> Thanks in advance?
>
> Jim
> --
> --
> Jim Moore, CISSP, IAM
> Information Security Officer
> Rochester Institute of Technology
> 13 Lomb Memorial Drive
> Rochester, NY 14623-5603
> Telephone: (585)475-5406
> Fax:       (585)475-7950
>
>
> The significant problems we face cannot be solved at the
same level of
> thinking we were at when we created them. -Albert Einstein-
>
> **********
> Participation and subscription information for this EDUCAUSE
Discussion
> Group discussion list can be found at
http://www.educause.edu/cg/.
> Doug Sandford
> Information Security Officer
> University of Alabama
> Seebeck Computer Center
> doug () ua edu
>
> This email is intended only for the person to whom it is
> addressed.  Any review or other use of this information by
> persons or entities other than the intended recipient or any
> retransmission without the consent of the sender is
prohibited.
> **********
> Participation and subscription information for this EDUCAUSE
Discussion
> Group discussion list can be found at
http://www.educause.edu/cg/.
> **********
> Participation and subscription information for this EDUCAUSE
Discussion Group discussion list can be found at
http://www.educause.edu/cg/.
Theresa Rowe
Assistant Vice President
University Technology Services
www.oakland.edu/uts - the latest news from University Technology Services

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.