spaces they do require background $
M
12
odifica
5-150 pe
tions
r person per year. With
checks. What we’re trying to say is thousands of employees, they can
identity vetting and proofing should get down to 25-50% of that cost.”
occur only once and we should be Steve Howard referenced a recent
able to leverage that event, issue ID fraud incident that took place
the credentials, whether people are in Chicago. He said “In November
working at Starbucks or whether of last year there was an ID fraud
they’re working on the ramp. in Chicago O’Hare Airport. This
“We formed back in 2004 and involved access to the aircraft.
in addition to aviation we do a lot Airports are responsible for the full
in defense. We’re currently the ID proofing, vetting and issuance
only company doing this; that was of credentials to airport workers,
recognized by the US DoD and the including maintenance staff. They
FAA simultaneously. There are not too had a subcontract with another
many other companies that are doing organization which used illegal
credentials at the assurance level we’re aliens. This organization figured out
talking about and doing them in such how to scam the system. Because
a way that they can be interoperable. they were using illegals that were
Stephen Howard
“The DoD has said that it no not exactly inured with the security
but we also hand over some digital longer wants to issue Common mantras that go on at an airport;
credentials for the people who are Access Cards (CACs), their high they basically retained knowledge of
going to be doing the maintenance on stress credential, to anyone who those credentials.
the plane as well. doesn’t work for the DoD from the “They’d send a person in, they’d
“We see people at airports with end of 2010.” Mr. Howard continued, get a credential because the
badge necklaces or badges trees, “With the DoD CACs there’s a lot fingerprints had never been seen by
these giant weights around their necks relationships that are coming together the FBI, and ‘bought’ a new name
with all the different credentials, so because interoperable credentials are and social security number. They’d
another big opportunity is marrying becoming mandatory. pass all those checks, then they’d
the credential space that occurs On employee numbers Mr Nigriny give them a PIN with their credential.
around an airport. You have not only tells Aviation Maintenance “If you have And this organization asked that
the physical aspects of getting into 3,000 to 5,000 employees, it probably individual for their PIN. When they
restricted areas of the airport but also makes sense to have a credential were released from work, they
people who feel they have a really issuance capability of your own. We recovered the credential and didn’t
high set of credentials, so why they have a whole network of providers turn it back in.
are waiting in the same security line as that we call 3CPs (CertiPath Certified “So you had airport credentials
everyone else? Credential Providers). CertiPath itself that were still active with a PIN,
“There’s the issue of ‘I’ve got a does not issue credentials; we feel it’s so when they hired the next illegal
plane that’s coming into my airspace, important to maintain neutrality. alien, they’d hand over a box of
landing at my airport and then leaving, “But we also appreciate that not credentials and say ‘just pick one
and I’ve got a whole range of people everybody’s going to be able to that looks like you’. If it happened to
who need to interact with that plane.’ host their own identity management be a credential with a PIN they’d say
The ATA requested CertiPath to add infrastructure to issue these high level ‘Here’s your PIN’. That organization
a brand new type of credential that’s credentials, so we certify these people is in serious legal trouble.
essentially at organizational level, who issue on a commercial basis “What we’re really looking at with
precisely so that we can have airplanes individual people’s credentials. Those these high-assurance credentials is
authenticating themselves at gates. credentials, when you’re buying them to bind a couple of things together
There are all sorts of cases for identity. on a per see basis, are not priced – the identity assurance, the human
“If we’re not careful we will not only differently than any other credential in biometrics, to the credential and
have a hundred different credential the marketplace. that issuer. That’s how we’re able to
cards, but we will have duplicated the “There was a whole bunch leverage high assurance credentials
high cost of issuance. So what goes of legacy credentials out there and protect you. Otherwise people
into that cost? Well, there’s the card before we got to what we call a are going in and defrauding you –
itself but the process that you don’t convergence point. The vast majority you just don’t know it.”
see is what goes on before someone of people offering high assurance, The need for CertiPath is on the
actually hands me my credential. interoperable credentials have said increase, particularly in the sphere
There’s identity proofing, and on a that this whole pricing model has of maintenance people accessing
really secure credential there’d be already set the price point in the aircraft and being responsible for
the background check. In airport market. This is maybe in the range of their work.
AM
36 Aviation Maintenance |
avmain-mag.com | December 2009/January 2010
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44 |
Page 45 |
Page 46 |
Page 47 |
Page 48 |
Page 49 |
Page 50 |
Page 51 |
Page 52 |
Page 53 |
Page 54 |
Page 55 |
Page 56 |
Page 57 |
Page 58 |
Page 59 |
Page 60 |
Page 61 |
Page 62 |
Page 63 |
Page 64 |
Page 65 |
Page 66 |
Page 67 |
Page 68