Credit Union tech-talk News

December 11 - December 15, 2006

• General News
• Hardware News
• Software Updates
• ATMs/Kiosks
• Biometric Digest Highlights
• Wireless World
• Security Section
• Leaders Roundtable
• Technology and Marketing
• Online Banking/E-Commerce/
  Website Design
• Internet Access
• Call Centers
• Conferences

* Code Green Networks Introduces Content Inspection Appliance 1500 
* ORCC Deploys Multi-Factor Authentication
* Netreo Launches Network Management SaaS Solution
* Quorum Federal Credit Chooses Source Technologies’ 7-Series Kiosks
* VantisLife Receives Award for Web-based Life Insurance Solution

Code Green Networks, a leading developer of solutions for protecting consumer data and intellectual property, announced the release of its Content Inspection Appliance 1500 (CI-1500) for small and mid-sized organizations. The appliance-based solution enables IT and security managers to easily monitor content flows, discover data leaks, and implement automated policies to prevent them. Washington Telephone Federal Credit Union (Signal Financial Federal Credit Union as of Q1 2007) is a user of Code Green Networks’ solution.

Online Resources Corp., a leading provider of Web-based financial services, announced it has successfully deployed its integrated security solution in advance of the year-end deadline set by the Federal Financial Institutions Examination Council (FFIEC). The deployment brings Online Resources’ Internet Banking and Bill Payment clients in compliance with the FFIEC’s authentication guidelines.

Netreo, a provider of IT management solutions for business, announced their OmniCenter OnDemand solution, a fully integrated suite of network management products specifically designed to meet the unique requirements of small and medium-sized businesses. OmniCenter OnDemand is deployed as a software-as-a-service (SaaS) suite that permits smaller organizations to implement complete device management, configuration management, performance management and real-time fault management without having to purchase or install new hardware and software.

Source Technologies, a leading provider of integrated solutions for managing financial transactions and other secure business processes, announced the availability of its reengineered 7-Series Kiosk featuring expanded banking and payment functionality. Quorum Federal Credit Union is using the kiosks, which can perform functions such as cash acceptance, cash and card dispensing, check imaging, and check printing. 

VantisLife Insurance Company, a national life insurance and annuities company with more than $800 million in assets, has been selected by A.M. Best Company as a recipient of its 2006 E-Fusion award for its web-based, straight through processing (STP) system. VantisLife has numerous credit unions using their insurance solution.  

Hardware News

Dell announced a premium "Energy Smart" line of rack-mountable servers that consume less power than regular models: the 1.75-inch thick PowerEdge 1950 and the 3.5-inch-thick 2950. The systems use higher-efficiency Intel processors, power supplies and fans; and include components to increase air flow in the chassis and have system settings to increase efficiency. The company said the models will cost about $100 more than mainstream Dell servers, arguing that they will earn their keep by saving about $200 per year in energy costs. Dell also said it is working on reducing power consumption of its business-oriented Optiplex desktops. 

Dell also rolled out a new storage system for file and application data that integrates their hardware with software from Microsoft. The system pairs Dell's PowerVault NX1950, a serial-attached SCSI (SAS) back-end storage array that can use up to 45 drives, with Windows Unified Data Storage Server 2003, a file server and package of management tools. The companies said the paired products are aimed at the midrange and include advanced management tools. The system starts at $17,000. Dell also announced a new member of its PowerVault line, the MD3000, which they claim is the first external RAID (redundant array of independent disks) SAS array from a Tier 1 vendor. Pricing for the MD3000 starts at $6,499.

Back to Top

Back to Top

ATMs/Kiosks

ATM security concerns continue to grow, especially in terms of card skimming which remains the number one ATM crime globally. We will cover what some credit unions across the country are doing to secure their machines in the January issue of Credit Union tech-talk - subscribe today.

Nashville-based Brown Investments is offering ATM deployers a 'Pinnacle Multi-Functional 10-in-1 kiosk.' This kiosk retails for $25,995 and the company claims that it is one of the only kiosks of its type on the market today. It's functionality includes:

- Bill Pay
- Wire Transfers
- Check Cashing
- Payday Advance
- Pre-paid and Wireless Phone Topup
- Pre-paid Debit Cards
- ATM Functionality
- Advertising

Looking to increase Brand Recognition and provide members with surcharge free ATMs?

Nationwide Money Services, Inc.’s Branded Cash Program is the answer. Fully endorsed by the VA Credit Union League and the CU 24 Network, our Branded Cash Program provides the ATM equipment, great locations, processing, maintenance, insurance, marketing rights and surcharge free transactions for your members, you only provide the cash and cash services for the ATM just as you would if you owned them. The ATMs look and act like your own, extending your reach or filling out your current market.

Our current CU partners include: AEDC, Beacon, Bronco, Carolina Collegiate, Educators, Freedom First, Food Lion Credit Association, Heritage Trust, Martinsville Dupont, NSWC, Old Hickory, Peoples Advantage, Southeast Financial and US Courthouse.

NMS also offers their ‘ATMs Made Easy’ Program for full service ATM management and placement services if you like the idea of having ATMs, but don’t want the hassle of day to day management and the associated costs for maintenance and unplanned expenses like triple DES.

For more information about the Branded Cash Program contact Bob Colabrese, EVP of Sales & Marketing at:

904-395-1147 or

bob.colabrese@GLXS.biz

Back to Top

Diebold has selected SecuGen's fingerprint reader for their branch-based biometric system. Diebold identiCenter is an integrated system for identity verification and branch traffic management and will rely on SecuGen's Hamster III USB fingerprint reader. Upon enrollment, members' fingerprint images are converted into numerical results of complex algorithms called templates. For additional security, the images are not stored, and the templates cannot be converted back into fingerprints. Members can then verify their identities by scanning a finger with the Hamster III at a kiosk or at the teller line. 

Safeguard Internet Banking against Authentication Attacks and Phishing

Today's consumers are demanding financial institutions, and for that matter any organization of any size that provides a logon page to personal and business information, deliver unquestionable security whilst maintaining an ease of use balance.

myBiometrix efficiently meets and exceeds these criteria and that of FFIEC and NCUA guidelines through our proprietary interface that addresses the needs of both Consumer and Provider in securing transacting online:

   • Authenticating the consumer (verifying who is accessing information by who they are not what they have)
   • Verifying the providers site (ensuring a Phishing episode is not being perpetrated).
   • Confirming the source of the transaction (originating PC)
In other words, all aspects of the transaction are secured.

myBiometrix leverages an array of foreground and background technology presented through an intuitive user interface that provides multi-factor “personal trait” authentication.

   • irrefutably authenticates “personally” to a website using traits including
   • prevent others from falsely using the owners credentials to log on
   • eliminating the growing incidence of Phishing and Pharming attacks
   • eliminating Key Logger exposure as the keyboard is not used
   • eliminating the need to remember or write down pass-phrases

myBiometrix authenticates through a range of methods including:

   • Finger recognition
   • Voice recognition
   • Face recognition
   • Biometric Smart Card
   • Geometrical code
   • Others…

myBiometrix is a scaleable solution that can be hosted by us as a Managed Service or run In-House. Delivering irrefutable authentication and security and monitoring mechanisms, whilst maintaining a practical usability balance, myBiometrix conveys a holistic approach that is a world leader in irrefutable Authentication and Verification.

Collaboration and Reseller enquiries are welcomed for our range of proprietary Biometric solutions.

LEARN MORE ABOUT myBiometrix:

 www.myBiometrix.com

OR CONTACT US DIRECTLY AT:

busdev@myBiometrix.com

Back to Top

New Jersey-based Provenir announced the availability of their Interaction Manager for multi-channel banking. The Interaction Manager, (a component of Provenir’s software platform), enables members to directly interact with the credit union through virtually any Internet ready mobile device such as a mobile phone or PDA. Members can use their mobile devices to conduct a variety of banking activities such as accessing account information, transferring funds, making bill payments, applying for loans, checking credit card balance, and receiving NSF and fraud alerts. 

As more and more organizations consider wireless local area networks, a new breed of consultants is available to assist them with configuration and security issues. Because many network administrators either don't have the skill sets or the time to manage WLANs, these wireless network consultants can setup client, access point and perimeter security, and handle single sign-on integration with Active Directory. They can also accurately do a site survey of your branch to determine exactly how your wireless APs should be laid out. Plus, they are sophisticated enough that they can vary antennas and signal strength per access point enough that your signal won't bleed over into other offices, while maintaining a steady signal strength for your employees.

Back to Top

Some security experts believe that a network risk assessment should include four phases: discovery, device profiling, scanning, and validation. We will cover all four in the January issue of Credit Union tech-talk - subscribe now.

Security firm eEye has launched the Zero-Day Tracker, a website where the company will post and archive information on vulnerabilities hit by zero-day exploits. Citing consumer demand, eEye launched the Zero-Day Tracker to meet the need for more information about the exploits that can plague a system administrator on any size network. Currently the site has seven active unpatched vulnerabilities listed, plus 17 more that have been patched and archived. 

McAfee announced its top 10 predictions for security threats in 2007 - in no particular order, McAfee Avert Labs' top 10 security threats for 2007 are: 


1. The number of password-stealing websites will increase using fake sign-in pages.
2. The volume of unsolicited e-mail will continue to increase. 
3. The popularity of video sharing means that MPEG files will be used to distribute malicious code. 
4. Mobile phone attacks will become more prevalent as mobile devices become "smarter" and more connected. 
5. Adware will go mainstream.
6. Identity theft and data loss will continue to be a public issue.
7. The use of bots, computer programs that perform automated tasks, will increase as a tool favored by hackers. 
8. Parasitic malware that that modifies existing files on a disk will make a comeback. 
9. The number of rootkits on 32-bit platforms will increase, but protection and remediation capabilities will increase as well. 
10. Vulnerabilities will continue to increase despite efforts by developers to minimize them.

We don’t just offer a world of authentication choices. We offer a world of experience.

Take the anxiety out of choosing an authentication solution by turning to the provider that offers the proven solutions, practical experience, and resources to make your deployment successful. With RSA Security, you can rest assured you’re implementing the same solution being used by more than 50 leading institutions — large and small. You have the backing of a well-resourced company committed to supporting you along the way — from technical integration to end-user experience. And, you benefit from the widest selection of authentication methods, including:

• Transparent risk-based authentication—Thanks to the industry’s lowest false-positive rate legitimate users are protected, but not bothered. That means fewer calls to your care centers and less drain on your bottom line.
  
• Visible site-to-user authentication– Widely-deployed “shared secret” technology increases your members’ confidence in transacting online by assuring them that they’ve logged on to your legitimate site.
  
• Tangible one-time password authentication — time-synchronous technology provides peace-of-mind to members who are more prone to risk, and those who prefer more tangible security.

For more, download the Tower Group Report: Doing the Right Thing: Bank of America Voluntarily Implements Strong Online Authentication

Back to Top

CORE SYSTEMS: 

Getting Upgrades and Conversions Right

AFTECH - http://www.aftech.com   Read Joseph Antellocy's comments: http://www.cunews.com/roundtable/AFTECH.pdf

COCC - http://www.cocc.com   Read Marco Bernasconi's comments:   http://www.cunews.com/roundtable/COCC.pdf

CU*Answers - http://www.cuanswers.com   Read Randy Karnes' comments:     http://www.cunews.com/roundtable/CUAnswers.pdf

Enhanced Software Products - http://www.espsolution.net   Read Matt Lefler's comments:     http://www.cunews.com/roundtable/ESP.pdf

GalaxyPlus - http://www.galaxyplus.com   Read Vince Francone's comments:     http://www.cunews.com/roundtable/GalaxyPlus.pdf

Harland Financial Solutions - http://www.harlandfinancialsolutions.com   Read Patricia Stark's comments:     http://www.cunews.com/roundtable/HFS.pdf

IntegraSys - http://www.integrasys.fiserv.com Read Albert J. Ku's comments: http://www.cunews.com/roundtable/IntegraSys.pdf

Open Solutions - http://www.opensolutions.com   Read Michael D. Nicastro's comments: http://www.cunews.com/roundtable/OSI.pdf

Summit Information Systems - http://www.summitsite.com   Read Kevin Sparks' comments:   http://www.cunews.com/roundtable/Summit.pdf

Symitar - http://www.symitar.com   Read Kathy Hooker Burress' comments:   http://www.cunews.com/roundtable/Symitar.pdf

USERS - http://www.users.com   Read Terry Murphy's comments:   http://www.cunews.com/roundtable/USERS.pdf

XP Systems - http://www.xpsystems.com   Read Janet Wall's comments:   http://www.cunews.com/roundtable/XPSystems.pdf

Back to Top

The ultimate goal of Business Intelligence is to drive better business performance through providing the right data at the right time. Yet implementing BI software can be costly and complex. Traditional BI solutions are often only used by a small proportion of users, but Microsoft is looking to change this with Office 2007 and make BI tools available to a wider audience. Learn how in the January issue of Credit Union tech-talk - subscribe today.

Back to Top

VISA USA announced that they will be testing cards with digital displays. Initially, the battery-powered cards will show single-use passwords, but the technology can also display other information such as account information like balances, or real-time marketing messages. There are many details to be worked out, but VISA plans to pilot them first in Latin America.

USAA Federal Savings Bank has launched a new service that enables customers to deposit checks into their accounts using a home scanner and an Internet connection. USAA members who qualify to use the Deposit@Home service download and install a simple software program available from usaa.com. Once the checks are scanned with a scanner that provides resolution of at least 200 dpi, the USAA members have immediate access to their money.

Some electronics payments experts think that card-issuing has become an over-saturated market, and that the real growth area is in merchant acquiring. They point out that as consumers continue to seek easier and more convenient ways to pay, this should translate into more business for merchant acquirers through various prepaid cards and gift cards, online payments, health saving accounts, micro-payments, and other emerging electronic payment tools. 

Back to Top

TalkSwitch, a telephone systems manufacturer, has two new products: the 280VS and the 284VS. Both are fully hybrid IP- PBXs that accommodate two incoming telephone lines and provide eight local extensions that the user can configure as IP or analog, and ten remote extensions. The 284VS also includes support for four VoIP trunks. The new systems are designed for small businesses that want a feature-rich telephone system with a large number of extensions, but with minimal investment in incoming telephone lines. 

TalkSwitch is also partnering with Covad Communications to offer smaller organizations their 480vs self-installable phone system. The 480vs can handle four incoming lines and eight local extensions, which can be either analog or IP. The system is also designed to be able to easily scale to 32 users per location. The Covad/TalkSwitch solution starts as low as $459 monthly for a 25-seat office.

A company called WhiteVault is looking to help consumers and small businesses in times of disaster with their EvacuTrack system. EvacuTrack assigns members a personal ID card with a number and code that allows them to set up a network of family, friends and business contacts. In the event of an emergency, users can send a message to their entire network of contacts with just one call to the EvacuTrack emergency dispatch number. The messages are automatically distributed via e-mail, phone or SMS as indicated by the member’s selection.
 

Back to Top

Some people are confused about the differences between a call center, a contact center, and an IP contact center. The main difference between a call center and a contact center is that while a call center is focused on incoming and outgoing voice calls, a contact center is able to manage consumers with both voice calls and data applications like e-mail, Web-based chat/instant messaging, and in some cases the capability to share Web pages sent to and from an online visitor. Typically a contact center also uses a “blended agent” who can manage multiple forms of voice and data-centric customer communications. Meanwhile, the IP contact center takes advantage of the inherent benefits of IP communications including the fact that both voice and data communications can be efficiently routed to any agent who has access to a (broadband) IP connection. This can eliminate the need for a centralized call center, support agents working from home, and allow for a widely distributed agent pool across multiple locations.

Back to Top

Catch Tom and Bill Rogers, Associate Editor of Credit Union tech-talk at the following conferences in 2007:

Feb. 27-28, Miami Beach - Winter Biometric Summit

June 7-8, Las Vegas - Credit Union InfoSecurity Conference

October 10-13, Albuquerque - Firefighters' National Credit Union Summit

Back to Top