Feeds

Kaliski not convinced on electronic passports

Better but not perfect…

Intelligent flash storage arrays

RSA Europe 2005 RSA's cryptography guru Burt Kaliski has warned the US' planned introduction of electronic passports represents a long-term challenge for the security industry.

The US government will begin trialling the passports containing an RFID chip in December before the full introduction early next year. United Airlines staff have been testing one version of the technology since June.

Speaking at the RSA Security conference in Vienna, Kaliski, chief scientist at RSA Security, Kaliski told the Reg: “You have to look the whole deployment over its lifetime to make sure you don't introduce new problems and it must improve on the prior generation.”

“A passport obviously contains personal information so you need fine-grained access control. But with a chip you don’t know what information you are giving away. You don’t know where and what data you are giving away.”

Kaliski said: “There’s been good public dialogue – it’s good to see it getting this attention. But it’s important not to just stop with release number one.”

Kaliski said there was a tendency in the security industry to look at the early stages of any effort but then move attention on to the next “new” thing.

RSA began working with other companies on a specification for one time passwords in February. Workshops were held in May and earlier this week. The informal collaboration has one specification ready for formal acceptance and five more in draft form.

Looking back at the conference Kaliski said he enjoyed Dame Stella Rimington’s endorsement and appreciation of the industry because the intelligence services had initially been so suspicious of encryption technology.

More on Kaliski’s blog here.

Top 5 reasons to deploy VMware with Tegile

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.