3. What is a smart card?
Where can they be used and how can it establish trusted identities.
4. Prevent Counterfeiting or alteration
Protect stored information
Secure network connections
Digitally sign transactions
Smart cards,
Designed for maximum security
5. 90% cell phones / smartphones
> 5 billion
Credit / debit cards
>1 billion
e-Passports
> 100 Countries
Smart cards: trusted, proved for maximum security.
Where is smart card technology used?
Smart card technology is used to protect identities and transactions.
6. Smart card two-factor authentication for cybersecurity
+ =
Smart cards restore trust and protection for online identities
Why is this so secure?
Even if someone steals a username and password they cannot log in or pretend
to be you without the smart card.
7. 1
2
3
Server Sends, Cryptographic challenge
Transaction data + random number
Smart card responds
Uses unique keys, algorithm
Server verifies response
Proves card authentic and present
How smart card security works
8. Mutual
authentication
Smart card
verifies server
Server verifies
smart card
Prevents man-in-the-middle attacks
Thwarts phishing, logging, URL redirects
Smart cards can confirm a server is authentic
The smart card chip can also authenticate the server.
9. Known Threats
Protected
Smart Cards PC’s
Phishing
Malware
Botnets
Data Breaches
Man-in-the-middle
Keyboard Logging
Account Hijacking
Evil Twin
Spoofed Sites
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
Yes
No
No
No
No
No
No
No
No
No
Smart cards are separate from the PC
The smart card is not a part of the PC and has its own computer and software, an
important factor in why it is so secure for protecting identities and access
10. To use,
plug it in
Easier than managing digital id Credentials (PKI certificates),
keeping pc’s free of spyware and trying to spot hackers websites
Card and PIN: A familiar approach
11. Smart card with fingerprint verification.
The future of smart card technology
12. Personal identity verification (PIV) card for all federal
government employees and contractors
Interoperable PIV-I card for government subcontractors.
First responder authentication card (FRAC)
To strongly identify all first responders and emergency
Transportation worker Identification credential (TWIC)
To securely identify individuals in airports and seaports
Electronic passport, a global program supported
By more than 100 nations
Government smart card programs.
An Identity system that includes smart card technology as an identity medium for high-assurance
online identity transactions will provide an easy to use, secure, privacy sensitive and proven solution.
14. Biometric SSL Security
by
Biometric technology, Web-based security at the touch of your fingers... literally!
Replace passwords with biometrics, let your fingers do the talking!