Risk
4/15/2008
03:10 PM
50%
50%

L.A. Port To Use Unisys' Biometric Access Control

Unisys has integrated several other large-scale identity programs, including Australia's passport system with biometric passports.

The Port Authority of Los Angeles will use a biometric system for access control.

Unisys Corporation on Tuesday said it will design and manage the system, which includes smart cards and biometrics to control employee access to restricted areas in the Port of Los Angeles. The three-year contract falls under the federal Transportation Worker Identification Credentials (TWIC) program, overseen by the U.S. Transportation Security Administration (TSA) and the U.S. Coast Guard.

The program, established through the Maritime Transportation Security Act of 2002, aims to secure maritime transportation and manage security threats in U.S. ports.

In addition to planning, designing, and developing the system, Unisys will field test and provide terminal operators with support for integrating the TWIC-enabled access control systems with tamper-resistant smart cards. The cards will contain fingerprint templates and digital photographs.

Workers enrolled in the program will present cards at all pedestrian and vehicular entry points and readers will determine whether the cardholder should be granted access. An alert will notify security officers of attempts at unauthorized access.

"Unisys is proud to provide security advisory and integration services to its customers in the maritime and aviation transportation industries, delivering proven security solutions worldwide. The benefit to our customers -- and to the constituents they serve -- is their ability to mitigate and manage risk," Tom Conaway, managing partner in charge of homeland security for Unisys, said in a prepared statement.

Unisys has integrated several other large-scale identity programs, including Australia's passport system with biometric passports; Malaysia's nationwide smart card program called MyKad; a field trial for about 20,000 people applying for temporary visas through Canada's citizenship and immigration offices; and for the Port of Halifax' biometric credentialing and access control database system for about 4,000 workers.

Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
Register for Dark Reading Newsletters
Dark Reading Live EVENTS
INsecurity - For the Defenders of Enterprise Security
A Dark Reading Conference
While red team conferences focus primarily on new vulnerabilities and security researchers, INsecurity puts security execution, protection, and operations center stage. The primary speakers will be CISOs and leaders in security defense; the blue team will be the focus.
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: No, no, no! Have a Unix CRON do the pop-up reminders!
Current Issue
Security Vulnerabilities: The Next Wave
Just when you thought it was safe, researchers have unveiled a new round of IT security flaws. Is your enterprise ready?
Flash Poll
The Impact of a Security Breach 2017
The Impact of a Security Breach 2017
Despite the escalation of cybersecurity staffing and technology, enterprises continue to suffer data breaches and compromises at an alarming rate. How do these breaches occur? How are enterprises responding, and what is the impact of these compromises on the business? This report offers new data on the frequency of data breaches, the losses they cause, and the steps that organizations are taking to prevent them in the future.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.