Skip to main content

ID card and credential software issuance systems must infuse security into their DNA

Jun

08

2021

Time to read

Read so far

Written by: 

Bret Gens

Time to read

Written by: 

Instant-id-security

Secure ID cards and financial credentials like credit and debit cards have a lot in common.  Both are plastic cards infused with sophisticated technology designed to secure, protect and confirm the holder’s identity for high value access – whether to bank accounts, financial credit, or access-controlled locations.

This makes it critical to secure the systems that produce these credentials – any compromise creates risk and erodes the trusted access these credentials provide. So the software used in these systems can’t look at security as an afterthought – the key to successfully securing employee ID cards and credentials is to adopt a software solution that has infused strong security practices into its DNA.

Testing and third-party scanning. It’s important that the solution has been third-party tested, and that the provider is proactively and regularly testing for potential vulnerabilities. Not only that, but the provider should communicate any vulnerabilities they find, providing a pathway for a fix.

Securing data at all stages. Modern ID card and credential systems should be encrypting data both when at rest and when in transit.

Authentication and authorization. Use of passwords as the primary –or only -- security tactic is flawed. Authentication mechanisms must extend beyond the human users into service endpoints to prevent insider attacks. Additionally, administrators need the ability to fine-tune permissions for each user type to help prevent unauthorized issuance of ID cards and credentials.

Auditing and attack identification. Audit logs provide information for keeping tabs on questionable activities including failed login attempts. Having access to these logs allows the administrator to identify potential attacks on the system.

Looking to upgrade your instant ID card and credential system? Consider the Entrust Adaptive Issuance Instant ID software solution.

For more information on the Entrust ID software solution security features, read our security sell sheet here. You can also visit our ID issuance page to learn more about our ID issuance solutions.

Brett-Gens-headshot
Bret Gens
Brett Gens, is the Sr Product Manager for Entrusts Adaptive Issuance – Instant ID Software Product. He is responsible for helping partners grow their business in On-Prem Credential Access. Brett is a Certified Scrum Product Owner and has 23+ years’ experience in Agile Product Management, and Agile software practices across many domains including, SaaS, Healthcare, Financial, and Retail verticals. Brett resides in the Twin Cities where he lives on a hobby farm with his family tending Horses, Goats and too many dogs.
View all of Bret's Posts