Smart Card Talk : September 2009 : Article |
||

Secure Card Personalization
In addition to incorporating smart card technology, the design of a secure credential must also focus on the personalization of the plastic to ensure that the visual identity badge is tamper-proof and cannot be copied. Many visual technologies are available in the market that can be specified to increase the integrity of the ID card.
The technologies described below are complementary to the use of smart card technology, and are in no way meant to replace the incorporation of an integrated circuit chip to create a secure credential.
Producing ID cards or badges is quick, easy and economical for schools, businesses, membership organizations and government facilities. The purpose of the ID card is to verify that the cardholder is actually a person who is authorized to be in that particular location, therefore protecting the location’s contents and people.
ID card printers are now widely available and can be purchased from a variety of sources including IT distributors, security solution resellers, and Internet resellers. These specialty printers use thermal technology to transfer dyes from the color ribbon print media directly onto a blank white PVC card, Polycarbonate or other technology cards. The ID card printer typically connects to a personal computer, and a printer driver is loaded in the same way a laser or ink jet printer is installed in a business or home office. The card design template and database are generated using various Windows-based software applications, and a person’s picture is captured by a webcam or digital camera and imported into the software: simple!
One threat to an ID card security solution is centered on the visual authenticity of the ID card itself. Counterfeiting ID cards using easily accessible equipment and software is a concern to many organizations. For simple ID cards, all it takes is a “borrowed” or stolen ID card, a scanner, a card printer and print media. With the help of some basic software, the original photo on the ID card can easily be replaced with “another person’s picture” to create a fake ID that is visually the same as an authentic card.
Solutions Available to Protect against ID Card Duplication and Fraud
Numerous high-tech solutions are available to prevent ID card duplication and fraud, including embedded micro-chips and antennas which store ID numbers or even a biometric such as a fingerprint. The use of such cards with access control card readers and fingerprint scanners will give users a high level of protection.
If this route is open to you, a photo of the authorized user must still be printed on the card to allow the card status to be easily checked. This is especially important in non-biometric situations where the card becomes an anonymous “key to the door” if not personalized.
In many situations, security guards rely on the printed photo on the ID card to verify the cardholder’s identity and their authorization to be in a particular facility and location. This is where counterfeiters can most easily strike. Simple printed ID cards can be scanned and reprinted with “the bad guy’s” portrait. Even portraits on most wireless access control cards can be compromised, using chemicals to erase the image and then reprinting the card with another person’s photo. As a result, many organizations that rely on visual ID card verification require an additional layer of protection.
Holograms
The use of hologram (or optical variable device) technology is one option to improve ID card security. A built-in hologram is supplied either in the printable card stock or as an over-laminate patch material which is applied on top of the printed image on the card. The hologram can easily be seen when the card is visually examined and used to validate the authenticity of the card. Holograms are popular for cards such as corporate employee ID cards, campus cards, driver’s licenses, or other government-produced cards. Custom holograms can prevent ID card forgery because the production costs are extremely high and availability of such cards and media could be restricted.
Unfortunately, criminals can be very resourceful. In some cases, this kind of counterfeit protection has been defeated when criminals obtain hologram cards or over-laminate patches, either from an inside accomplice or from the badging-station trash can–which might easily contain some misprinted cards or partly used rolls of over-laminate carrying the all-important hologram.
To avoid this type of security compromise, the badging station must be made physically secure, the badge issuers must be scrupulously vetted, and all hologram media must be accounted for down to the last card or patch.
Despite the high initial cost of custom hologram preparation and the required minimum order quantity, this technology can be ideal for high-ticket badging applications such as airports, government, and military installations.
Security Watermark
A simpler and more economical anti-counterfeiting solution is available on select ID card printers which use unique technology to incorporate a security “watermark” on the surface of the card at the time of printing. This process works by using the clear overcoat panel on the standard dye-sub ribbon to “frost” or apply a desired logo or stamp on the card. This process does not require any special cards, films or other consumables, so there is no need to safeguard any pre-designed and pre-printed stock.
Users can specify their own unique logo or mask, which is step-repeated over the card face. The frosted security mark is easy to see when the card is examined, from 1 to 3 feet away. Card stock can also be manufactured with a gold foil square to highlight one watermark location on the card for longer-range visual inspection. Custom watermarks produced in this way provide an economical visual security solution for ID cards.
The watermark method provides varying levels of security. To ensure authenticity of the printed watermark, the printer hardware must not be accessible to anyone with ill intentions. Some printers hold the watermark information or logo in the driver. Although this is relatively safe for some, it may pose a threat to others if someone can gain access to the printing station, or the printer itself. Some printers offer an extra level of security by storing the logo design in an encrypted digital “key” which cannot be electronically copied. This key is then attached to the printer that applies the watermark onto every card. When the key is not plugged in, cards can still be printed for test and training purposes but no watermark will be incorporated.
Finally, the printers that offer this very secure method of encrypting the customized logo inside a separate security key can also be disabled from printing if the key is not present. When the key is programmed with a lock code, the associated printer will print cards only when the key is physically attached or connected. When the key is removed, the printer will not be able to print any cards until the key is reinserted–helping to lock down the card issuance process to protect it from criminals!
How Does the Watermark Look on the Card?
Typically the customer’s logo is “etched” in a step repeat grid pattern across the face of the card in the clear overcoat panel while printing the card. The background card design, photo and text are clearly visible, yet the card has a subtle watermark-like surface layer that can be inspected to authenticate the card.
In some cases a single larger-format watermark logo is preferred; this can be specified during the custom watermark ordering process.
Summary
ID card security does not have to be costly and is an important component of any badging application. They say a chain is only as strong as its weakest link. Criminals can easily create “fake IDs” if your ID design and badging system doen’t include countermeasures. Secure ID card solutions must be specified in your badging programs. A secure ID badge that can easily be verified by authorized personnel provides assurance that the people in your building really are who they say they are.
Luis de la Cruz
Americas Sales Manager
954 812 7109 CELL
425 636 7014 DIRECT
425 556 9708 Ext 7014
877 236 0933 TF
425 556 3962 FAX



