Notebook Security: New IBM Smart Card Security Kit Protects Data On Notebook PCs - Product Announcement

Edge: Work-Group Computing Report, Oct 26, 1998

IBM Monday announced a new smart card security system that prevents unauthorized users from accessing information on a notebook computer. With the IBM Smart Card Security Kit, comprised of security software, a smart card and a smart card reader installed in a notebook Type II PCMCIA slot, users simply insert a personalized smart card to authorize access. To disable access, the user simply removes the smart card, which prevents access to the system until it is replaced.

Offered as part of the IBM SecureWay portfolio of products and services, the IBM Smart Card Security Kit is an integrated hardware and software offering that provides advanced access protection for notebook PCs. The kit includes a personalized smart card and smart card reader/writer incorporating Gemplus GemSAFE technology, security software application based on world class RSA cryptographic technology, support for Security Dynamic's SoftID(1), digital signature capability, a security luggage tag, and Norton's anti-virus protection program.

"Protecting sensitive data with a mobile workforce is a great concern for many companies today; the IBM Smart Card Security Kit applies advanced security technologies to enable companies to protect their data, even when it is located on portable computers," said Kevin R. Barry, general manager, PC Options and Peripherals, IBM Personal Systems Group. "With the IBM Smart Card Security Kit, users benefit from enhanced security capabilities that are virtually tamperproof, because the user's personal electronic identification is stored on a personal smart card rather than on the system. And, because it's so small, users have peace of mind literally in their pocket."

According to a March 4, 1998 study by The Computer Security Institute (CSI) in conjunction with the Federal Bureau of Investigation (FBI) International Computer Crime Squad's San Francisco Office (2), computer crime and security breaches are still on the rise and the cost is increasing. Based on responses from 520 security practitioners in U.S. corporations, government agencies, financial institutions and universities, the study provided intriguing information: Sixty-four percent (64%) of respondents reported computer security breaches within the last twelve months. This figure represents a dramatic increase of 16% over the 1997 survey results in which 48% of respondents reported unauthorized use. If only incidents of reported computer virus or laptop theft are included, the number rises to 88% of all respondents.

The IBM Smart Card Security Kit is among the first smart card solutions to offer transparent encryption and decryption software capabilities. Users benefit by having both encryption and decryption capability on files (e.g., individual, directory and subdirectory) done automatically without requiring any action by the user. This is done using an encryption key that is stored on the smart card. Additionally, a secure file transfer function allows encrypted files to be transferred to non-secure systems. To decrypt the file, the recipient need only supply the correct passphrase.

With the IBM Smart Card Security Kit, users enjoy a level of protection against theft not provided by traditional passwords. Many companies are more concerned about unauthorized access to sensitive data stored on their PCs' hard drives, than the actual theft of the notebook computer. This is especially true for companies needing to secure sensitive data, and is extremely useful for road warriors in service industries, such as finance and insurance. The IBM Smart Card Security Kit also provides users increased web and e-mail security when using either Netscape Navigator or Microsoft Internet Explorer.

Complete, Easy-to-Use Security Solution The Smart Card Security Kit offers a complete security solution for mobile PC users, including secure system access, hard disk encryption, secure screen saver, and encrypted data exchange. Advanced functions also include digital signatures to access secure web sites and e-mail activities, and Security Dynamics' SoftID support to positively identify network and system users. The Smart Card Security Kit works with IBM ThinkPad models and IBM-compatible notebook computers. It is fully compatible with Windows 95 and Windows 98, and requires a Type II PCMCIA slot with version 2.1 PCMCIA software, a 3.5' diskette drive and access to a CD-ROM drive. No operating system or BIOS changes are required.

In order to access their systems, users simply plug the smart card reader into the notebook's PCMCIA slot, insert their personal smart card and enter a private PIN code. The combination of a smart card and PIN code prevents an unauthorized user from accessing the system and the computer's files. The Smart Card Security Kit also includes advanced functions for additional levels of security, should users require it.

Pricing and Availability Available late October, the IBM Smart Card Security Kit has an estimated reseller price $199(3). A one-year limited warranty(4) with IBM's service and support available 24 hours per day, seven days per week(5) is included. FMI: www.ibm.com/pc/us/accessories.