Biometric access control, a new way of authenticating?
Biometric access control was one of the hot themes among exhibitors at the recent c in San Francisco. Several companies showed off their wares, which include a back-end system for integrating biometric authentication into existing systems as well as readers for fingerprints and palms

Passwords are not the best of security solutions, as enterprises and individual users have found over the years. They can be cracked or stolen, and not necessarily by high-tech means either.
Often, passwords created by end users in corporations are simple, being based on numbers significant to them: their birth dates, wedding anniversaries, birth dates of their loved ones, their auto licenses plates or a combination of these.
Or, where the passwords are created by the system administrator, end users tend to leave them exposed. “You’ll see Post-it notes on users’ computer screens with their passwords, or the Post-its are stuck under the table,” Chris Collier, vice president, identity solutions, at IdentiPHI, told TechNewsWorld.
Increasingly, enterprises are looking to biometric solutions — fingerprint, palm or retina scanning among them — to secure access to their computers.
IdentiPHI’s Solution
IdentiPHI unveiled Version 5 of its SAFSolution product at the RSA Conference in San Francisco. This lets enterprises replace passwords with biometric authentication or smart cards.
SAFSolution 5 is tightly integrated with Microsoft (Nasdaq: MSFT) Windows Active Directory and other similar platforms, and “you can either use biometrics or smart cards or both,” Collier said.
The product provides a framework to replace network authentication, storing templates in the Microsoft Active Directory Server. It’s “the only technology that works with Citrix FastWorks Technology,” Collier pointed out.
SAFSolution 5 supports sensors from more than 40 vendors on the back end with a single install, and “you can take a biometric vendor’s product and plug it into our framework,” Collier said. Customers can select the authentication methods that best fit their needs.
The product also has a security framework built in for separation of duties under Active Directory so the enterprise can assign different roles to different people in the organization, a key aspect of internal control which prevents fraud and errors. “Other computers just use Microsoft Group Policy, which isn’t very secure,” Collier noted.
New features include last logon recall, drop-down logon customization, secret questions, SAFremote for Citrix (Nasdaq: CTXS) and Windows Remote Desktop.
SAFSolution 5 is in pilot deployments with several key customers, including a major telecom firm that has rolled it out to 60,000 users in a phase one deployment, and a tire maker, which has rolled it out to 89,000 users in the U.S., Collier commented.
It will be rolled out to the public in May.
Fujitsu’s Palm Reader
Securing your PC with your fingerprint isn’t enough for Fujitsu — it goes for your palm instead.
At RSA, it unveiled its PalmSecure PC log-in kit, which consists of a PalmSecure authentication sensor embedded in a PC mouse, and OmniPass Windows Log-in and Single Sign-On software .
Here’s how it works: The system administrator takes a print of the vein pattern in a user’s palm and stores it in a database. When the user takes hold of the computer mouse, PalmSecure generates a biometric template of the palm vein patterns and compares it to the stored version. If they match, access is granted.
The PalmSecure log-in kit will be rolled out to the public in June.
Privaris’ Solution
Privaris isn’t too fond of the fingerprint as a biometric security measure, either. “If you swipe your finger across the sensor at the wrong angle, you won’t get access,” COO Mike Kohonoski told TechNewsWorld.
His company offers what he calls a totally enclosed biometric system, the PlusID. This is a device about the size of two USB (Universal Serial Bus) drive sticks that has four programmable buttons, a built-in scanner and two rings for attachment to your keychain at the base as well as a USB port.
You hook it up to your PC with the USB port, through which the device’s battery is also charged.
All data is held on the device so the question of data privacy is not an issue. “Even though you administer it from the PC, your fingerprint template is stored on the device,” Kohonoski told TechNewsWorld. “And, if you lose it, it’s of no use to anyone else.”
System administrators program the device to accept any of the user’s 10 digits, but only this information is stored on the back end server; the actual finger- or thumbprint is stored on the PlusID itself.
Each of the four buttons can be programmed for a different credential. “If you have to access more than one system, you don’t have to carry separate smart cards,” Kohonoski said. The device can also be used to gain access to secure areas when programmed, “so you don’t have to remember key codes or carry another smart card for the door,” Kohonoski explained.
The PlusID works with native Windows Smart Card architecture, which is part of Windows Server 2000 and up. “You don’t need any middleware, just a mini smart card driver which installs into the system,” Kohonoski said. Users don’t have to make any changes to Windows’ revocation plans and backup schemes when their organizations use the PlusID.
Authentication certificates are obtained from Microsoft Active Directory’s Microsoft Certificate Services.
The PlusID supports Windows Smart Card and smart cards from three leading vendors: HID, Indala and Casi Rusco.
Privaris is looking to extend its reach to other operating systems: “We’ll be looking at products for Unix, Linux and its derivatives later this year,” Kohonoski said.
Source: TechNewsWorld
Presenting the EyeOS 1.6.0.0 web operating system
The eyeOS team and eyeOS Community are proud to present yet another great release of their popular eyeOS web operating system, version 1.6.0.0 (codename Gala Sync). This major release comes packed with new applications, new tools and significant improvements on the overall usability. But the most important feature of eyeOS 1.6 is the inclusion of eyeSync, an application that will automatically synchronize folders and files from your computer to an eyeOS system (available for Linux, Mac OS X and soon for Windows XP and Vista users).
Highlights of eyeOS 1.6 include:
- Synchronization with your local computer
- Drag and Drop between folders and groups
- New widgets
New applications, such as:
- eyeFeeds (RSS reader)
- Text Editor (with syntax highlighting for the most common programming languages and autocomplete features)
- eyeCode (Integrated Development Environment)
- eyeTetravex (a math game with a highscores system)
- Calculator (scientific calculator)
- some new games.
Last but not least, with Gala Sync, eyeOS developers will be able to build faster and better applications for this amazing OS!
About eyeOS
What is eyeOS? Imagine that you can have a virtual computer with all your important files and all you have to do to access it is to open a web browser and log-in into your desktop, that is exactly how you left it when you used it from another computer. This is eyeOS! A free, cross-platform Personal Content Manager System based on the style of a Desktop Operating System. It includes applications for your daily needs, such as a calendar, file manager, text editor, calculator or Internet browser.
All you need to run eyeOS is an Internet connection and a modern web browser, such as Internet Explorer, Mozilla Firefox, Konqueror or Safari. On the other hand, to install eyeOS, you will need to have a 24/7 web server with PHP4 or better.
Source: Softpedia News
Trick to grab the online streaming media without any link grabber!
A manual method

The most common way to grab your favourite video from Youtube, Metacafe, and any video streaming network is to go to a link grabbing website or to use a link grabbing software. I agree with that, as it’s pretty easy and just a click away. But what can you do if you have already streamed a video online and you want to download it with ‘not’ wasting your time?
Ok. I have a simple trick that anyone can use to grab any kind of streaming media. When you play a online media, it actually gets downloaded in your ‘temporary internet files folder’. Finding it in the ‘temporary internet files’ folder could be a little work for you, depending on the browser you used as the file may be downloaded with a blank extention i.e ‘video’ and ’music’ and not ‘video.flv’ or ‘music.mp3′. Anyway, you ‘can’ distinguish the cached files by selecting the ‘Detailed view’ and arranging the icons by ‘Modified’ in the internet cache folder and with this you can find the most recent cache with the largest size. Now, try playing the file with the largest size on your FLV format supported player. If it plays, then you are done and copy the file to a safe destination! If not, then try playing the next largest file and you will surely get what you are looking for. The trick might sound complicated, but it’s not at all!
Following are the steps for Firefox and Internet Explorer:
Firefox users (Windows XP):After streaming the online video, go to
- My Computer>
- Your Windows Destination Drive>
- Documents and settings>
- Unhide the hidden folders>
- Open the user folder (if you are logged in to windows with name “Blahblah” then open the “blahblah” folder)>
- Local Settings>
- Application Data>
- Mozilla>
- Firefox>
- Profiles>
- Select the recently created folder, mostly located on the extreme right >
(click to enlarge)
- Cache >
- Arrange icons with ‘Modified’>
- Try playing the most recent cach file in your FLV supported player>
- Copy the video to the safe destination!
Internet Explorer users (Windows XP): - Go to
- My Computer>
- Your Windows Destination Drive>
- Documents and settings>
- Unhide the hidden folders>
- Default User>
- Local Settings>
- Temporary Internet Files>
- Content.ie5>
- Open the recently created folder>

(click to enlarge)
- Try playing the most recent cache file in your FLV supported player>
- Copy the video to the safe destination!
Sorry, I haven’t tried it on any other browser, but if you’ve understood the concept, then it’s gonna be a peice of cake for you, no matter what browser you are using.


