Break the Code

By Gary J. Beach, CIO |  Security, Network access control Add a new comment

ACCESS CODES AND PERSONAL IDENTIFICATION

numbers -- or PINs -- are becoming a major pain. Try to get through a day without using one. Sadly, it is nearly impossible. You need one PIN to get cash from the ATM, another to make long-distance telephone calls when you are away from the office and yet another to log on to your company's computer network.

With scores of numbers and codes to remember, many of my friends have resorted to using one code or PIN, such as a birth date, anniversary or pet's name. This, however, is throwing digital caution to the wind. If you use one code for everything, security pros warn, you jeopardize them all. If someone steals your PIN to your favorite online service they could potentially also get into your bank account. There is no end to the damage he or she could do.

To protect ourselves, experts advise using multiple codes of totally random numbers, letters or punctuation marks -- and they advise us to change these codes several times a year.

Life is already too complicated for all these numbers. I have codes recorded in my digital organizer, my daybook and the really important ones buried deep inside my wallet.

Maybe my friends who use one code are on to something, though. What if you could have one highly secure code or PIN that would be your digital persona for all your code-required tasks? Would that interest you?

Well, it doesn't interest technology researchers, who are strongly against such an idea. They say such an approach offers too much opportunity to build databases that would link enormous amounts of personal information with the PIN as the digital conduit.

But others are moving ahead. One group in California is calling for the issuance of digital smart cards to initially be used for commercial transactions and e-government activities like voting. And one of the world's largest credit card companies has tackled the problem from the polar opposite end of "one PIN per person" by assigning "use once and then throw away" codes for purchases made over the Internet. This seemingly wasteful approach underscores an important point: There are hundreds of billions of unique numbers available.

In the coming decade, more daily activities will become digitized, resulting in more access codes and PINS to remember.

If people like you and I want one PIN or code for our digital identity, technologists will have to figure out a way to make it happen -- and to keep those codes safe.

    Add a comment

    Post a comment using one of these accounts
    Or join now
    At least 6 characters

    Note: Comment will appear soon after you have activated your account.
    Obscene/spam comments will be removed and accounts suspended.
    The information you submit is subject to our Privacy Policy and Terms of Service.

    ITworld LIVE

    SecurityWhite Papers & Webcasts

    White Paper

    Overcome Top 7 Admin Challenges of Active Directory

    As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

    White Paper

    Insiders Can Ruin Your Company. Take Action.

    Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

    White Paper

    Top Solutions and Tools to Prevent Devastating Malware

    Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.

    White Paper

    Streamline Compliance and Increase ROI

    Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

    White Paper

    X-Ray of the PCI Process-4 Proactive Steps

    This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

    See more White Papers | Webcasts

    Ask a question

    Ask a Question