RSA SecurID® two-factor authentication solution helps law enforcement professionals achieve cost-efficient, secure access to extensive statewide criminal history database
BEDFORD, Mass.— RSA Security Inc. (NASDAQ: RSAS), the most trusted name in e-security®, announced today that the Kansas Bureau of Investigation (KBI) is using the RSA SecurID® two-factor authentication solution to help safeguard and prevent unauthorized access to sensitive criminal data. A key security component, RSA Security technology is helping the KBI protect the integrity and confidentiality of information, reduce administration time and costs and more effectively track crimes and criminals.
Headquartered in Topeka, Kansas, the KBI maintains multiple branch offices across Kansas and manages extensive crime and criminal databases — with 300,000 crime incidents added every year. Because of the level of its data security, the KBI is one of only two agencies in the country to receive approval from the FBI to make this information accessible via the Internet to all state and local law enforcement agencies, prosecutors and court officers.
According to Ron Rohrer, chief information officer at the KBI, ease of access to such a vast amount of sensitive data meant a critical need for identity and access management. “Because we’re using the Internet to transmit extremely sensitive criminal records, it was essential that we find a security solution that provided strong user authentication and data protection to prevent unauthorized access,” Rohrer said. “Without an effective identity management system in place, there was little chance of obtaining FBI approval to utilize the Internet to transmit Kansas criminal history data to local criminal justice agencies.”
KBI enlisted the aid of FishNet Security, a Kansas City-based security systems integrator that recommended and managed the implementation of a Check Point VPN for secure remote access, and the RSA SecurID authentication solution to help protect their network and validate the identity of remote users logging into the database. The RSA SecurID system is a two-factor user authentication solution that is as simple to use as entering a password, but significantly more secure. Used in conjunction with RSA ACE/Server® software, a RSA SecurID authenticator functions like an ATM card for a company network, requiring users to identify themselves with two unique factors — something they know (a password or PIN), and something they have (in this case, a RSA SecurID key fob token) — before they are granted access to secure business information.
Members of the criminal justice system, including police officers, sheriffs, judges and prosecutors now have immediate access to a person’s complete rap sheet — including criminal history, sentencing, custody, etc. — from their office, home or patrol cars. By accessing the system with RSA SecurID authenticators, what once took up to six weeks to obtain, now takes seconds. “The KBI is dedicated to providing our members with accurate criminal justice information to promote public safety and help prevent crime. With the implementation of the RSA Security solution, we now have the ability to securely, quickly and effectively access crime and criminal information, while at the same time, protect the integrity and privacy of the people who are in the system,” Rohrer said.
The ability to use the Internet while maintaining data security gives the KBI significant cost savings. Prior to the new system, the KBI leased lines into every Kansas county at a cost of $13,000 a year per line. Now with everything online, criminal justice professionals anywhere in Kansas can purchase a token and use an ISP to gain access. The KBI figures the state is saving approximately $2.5 million in costs annually by utilizing the Internet. Moreover, the lower access cost makes it easier for any agency, regardless of size, to use the system. This results in easy, immediate access to rap sheets that help criminal justice professionals do their jobs more effectively. In its first year of operating the internet-based system, KBI issued more than 4,000 RSA SecurID tokens, and currently has more than 9,000 registered users.
In addition to providing secure access to criminal databases, the new system enables the KBI to track who is seeing the data, as required under FBI auditing procedures. The old manual system was built on static, reusable passwords that were difficult to manage and track. Now, all administration and management is accomplished easily through RSA ACE/Server software, the management arm of the RSA SecurID solution, which helps administrators issue user rights, track access and revoke user privileges if necessary.
“Security is no longer just about risk mitigation and compliance,” said John Worrall, vice president of worldwide marketing at RSA Security. “It’s also about opening online applications to achieve other key business objectives such as streamlining operations and reducing costs. As such, identity management can have a direct, quantifiable effect on any organization’s bottom line.”
About the Kansas Bureau of Investigation
The Kansas Bureau of Investigation (KBI) was established in 1939 by the Kansas Legislature to combat the increasing magnitude and complexity of crime in general and bank robberies in particular. The KBI is a division of the Office of Attorney General and is headed by a director appointed by the Attorney General. The KBI is dedicated to providing professional investigative and laboratory services to criminal justice agencies, and the collection and dissemination of criminal justice information to public and private agencies, for the purpose of promoting public safety and the prevention of crime in Kansas.
About FishNet Security
FishNet Security is a global network security solutions company that is uniquely qualified and experienced with "best-of-breed" network security products. FishNet Security is focused exclusively on network security and provides enterprise security solutions and security products to large corporations, small businesses, as well as federal, state and local governments.
Founding in 1996, FishNet Security has become one of the country's leading and most respected innovators in the network security industry. For more information, contact FishNet Security at (816) 421-6611 or www.fishnetsecurity.com.
About RSA Security Inc
With more than 14,000 customers around the globe, RSA Security provides interoperable solutions for establishing online identities, access rights and privileges for people, applications and devices. Built to work seamlessly and transparently in complex environments, the company’s comprehensive portfolio of identity and access management solutions - including authentication, Web access management and developer solutions - is designed to allow customers to confidently exploit new technologies for competitive advantage. RSA Security’s strong reputation is built on its history of ingenuity and leadership, proven technologies and long-standing relationships with more than 1,000 technology partners. For more information, please visit www.rsasecurity.com.
