Risk
4/15/2008
03:10 PM
50%
50%

L.A. Port To Use Unisys' Biometric Access Control

Unisys has integrated several other large-scale identity programs, including Australia's passport system with biometric passports.

The Port Authority of Los Angeles will use a biometric system for access control.

Unisys Corporation on Tuesday said it will design and manage the system, which includes smart cards and biometrics to control employee access to restricted areas in the Port of Los Angeles. The three-year contract falls under the federal Transportation Worker Identification Credentials (TWIC) program, overseen by the U.S. Transportation Security Administration (TSA) and the U.S. Coast Guard.

The program, established through the Maritime Transportation Security Act of 2002, aims to secure maritime transportation and manage security threats in U.S. ports.

In addition to planning, designing, and developing the system, Unisys will field test and provide terminal operators with support for integrating the TWIC-enabled access control systems with tamper-resistant smart cards. The cards will contain fingerprint templates and digital photographs.

Workers enrolled in the program will present cards at all pedestrian and vehicular entry points and readers will determine whether the cardholder should be granted access. An alert will notify security officers of attempts at unauthorized access.

"Unisys is proud to provide security advisory and integration services to its customers in the maritime and aviation transportation industries, delivering proven security solutions worldwide. The benefit to our customers -- and to the constituents they serve -- is their ability to mitigate and manage risk," Tom Conaway, managing partner in charge of homeland security for Unisys, said in a prepared statement.

Unisys has integrated several other large-scale identity programs, including Australia's passport system with biometric passports; Malaysia's nationwide smart card program called MyKad; a field trial for about 20,000 people applying for temporary visas through Canada's citizenship and immigration offices; and for the Port of Halifax' biometric credentialing and access control database system for about 4,000 workers.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8893
Published: 2015-01-28
Multiple cross-site scripting (XSS) vulnerabilities in (1) mainpage.jsp and (2) GetImageServlet.img in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CVE-2014-8894
Published: 2015-01-28
Open redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the out parameter.

CVE-2014-8895
Published: 2015-01-28
IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.

CVE-2014-8917
Published: 2015-01-28
Multiple cross-site scripting (XSS) vulnerabilities in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3) dojox/av/resources/audio.swf, and (4) dojox/av/resources/video.swf in the IBM Dojo Toolkit, as used in IBM Social Media A...

CVE-2014-8920
Published: 2015-01-28
Buffer overflow in the Data Transfer Program in IBM i Access 5770-XE1 5R4, 6.1, and 7.1 on Windows allows local users to gain privileges via unspecified vectors.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If youíre a security professional, youíve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.