SOLUTI ON
OV E RV I E W
SO
ActivIdentity naviGO™ – Helping
Agencies Achieve CJIS Compliance
CJIS Advanced Authentication Security Policy Requirements
The Criminal Justice Information Services (CJIS) division of the Federal Bureau of
Investigation (FBI) requires organizations use strong passwords and more than a single factor
of authentication to gain access to CJIS information and systems when outside a secure area.
This means anytime police departments, criminal justice and other state and local agencies need to
access the CJIS fingerprint, criminal, sex offender and other databases from outside a secure area,
they must use more than a simple username and password to protect that connection; any client
machine over a VPN that’s being used to connect to a system accessing these databases must
use advanced authentication (AA), sometimes referred to as strong or two-factor authentication.
Advanced authentication requires the user authenticate using something they know (a unique
password or personal identification number (PIN)) and something they have (smart cards, tokens,
even a cell phone with a token on it). This requirement, which includes integrated reporting
capabilities to track the access, is designed to help protect the CJIS’s sensitive information outside
a secure environment and ensure it isn’t accessible to unauthorized individuals.
The Needs of the State and Local Agencies
How naviGO Delivers
When individuals from state and local agencies
need access to CJIS’s databases, it’s generally time
sensitive. Consider the law enforcement individual
who has just stopped someone on the street or is
in the middle of sorting out an incident – the CJIS
information can be crucial to the outcome of that
interaction or event. While access needs to be
secure, it also needs to be:
naviGO provides the easiest, most affordable solution
for CJIS compliance. For millions of organizations with
existing HID iCLASS®, HID Prox, MIFARE® or DESFire®
cards, naviGO™ software and OMNIKEY desktop
readers provide unrivaled simplicity for adding fast,
affordable advanced authentication.
•• Near-instant – delays to critical information can
put individuals in undue risk, so the information
must be quickly accessible.
•• Simple – limiting any disruption to workflow to
ensure individuals can get what they need, when
they need it, is an imperative. Solutions that require
people to carry something additional around with
them, such as a token, can add unnecessary
complexity - when people are the on-the-go, it must
be easy to connect and access the information they
need, from wherever they are.
•• Cost-effective – given the police department and
criminal justice agencies account for as much as
half of the government workforce in a typical US
city, it’s important all this access is secured in a way
that is affordable.
Any advanced authentication solution considered
by state and local agencies must quickly, easily and
cost-effectively authenticate the user and protect the
connection, so they can carry out their jobs.
The solution consists of three components:
1.Contactless Card – In most cases, individuals
can use the same card they already use for visual
identification to identify themselves for their facility
access to gain secure online access.
2.OMNIKEY readers – The readers that recognize
each user when they present their card can be
attached on any device that needs to be part of the
system – from a laptop to a patrol car terminal.
3.naviGO software – Software that will facilitate the
contactless authentication process is downloaded
on each device in the system. There is also a
server component that communicates with the IT
Directory, such as ActiveDirectory to manage the
identity and access policy for every user.
This makes it easy for the organization to control
access for each user and device, as well as configure
exactly how the authentication process should go
(how will people log in and out, when will the access
time out, etc.).
The naviGO Experience
With just a few steps, a device can be up and
running – it usually takes less than 10 minutes
for a user to complete the one-time set up. Once
provisioned, law enforcement and local and state
individuals have the quick, easy, secure access
they need to the CJIS databases to go about their
daily activities.
For example, an officer can use the same ID
badge they use to get into restricted parts of
the station to access what they need from their
patrol car terminal. They simply touch the card
to the reader and put in a pin to gain immediate
access to the criminal and other records they
require – there’s nothing extra to remember
or carry. In addition, some HID Global Identity
Assurance partners have added the ability
to enable this same process to automatically
establish a secure VPN connection and launch
all the applications they will need to enhance the
workflow of the patrol officer.
There are also contingencies for those times
when things don’t go exactly as planned. If a police
officer is chasing someone and their access card
falls off, they can still authenticate to get the
information they need. naviGO provides Emergency
Access authentication and self-service password
reset options that allow users to gain access by
answeing the knowledge-based questions they
provided during the enrolment process. As a
result, they can quickly sign on and get secure
access to the resources they need to do their job,
without having to call and involve the help desk.
The naviGO Difference
naviGO provides the advanced authentication
that local and state agencies need, in a way that
is convenient and affordable to help them achieve
CJIS compliance, security and true peace of
mind. Authentication is at the foundation of
everything ActivIdentity does with their Identity
Assurance solutions; drawing on decades of
experience, naviGO was designed to deliver an
authentication solution that is:
•• Secure – two-factor authentication that meets
the criteria for Advanced Authentication as
defined by CJIS.
•• Fast – optimized to provide immediate
authentication to the resources users need
when they need them.
•• Simple – easy to use solution that seamlessly
integrates with existing infrastructures and
workflows to deliver increased security, without
increasing complexity.
•• Affordable – leverages existing capital
investments in the cards organizations are
already using for visual identity and physical
access thus delivering a rapid return on
investment.
Contact us to learn more about how police
departments, criminal justice and other state and
local agencies have deployed the naviGO Identity
Assurance solution to meet their advanced
authentication compliance requirements and
protect access to CJIS information and systems
when outside a secure area.
About ActivIdentity
Americas +1 510.574.0100
US Federal +1 510.574.0100
Europe +33 (0) 1.42.04.84.00
Asia Pacific +61 (0) 2.6208.4888
Email [email protected]
Web www.actividentity.com
ActivIdentity, a global leader in identity assurance, enables customers to prove and establish
trust in a person’s identity when accessing resources on the network. The business’s strong
authentication and smart card solutions are relied upon by more agencies, including the
U.S. Department of Defense, than any other provider, and has issued more than 100 million
credentials to enterprise, government and commerce customers. ActivIdentity is headquartered
in Silicon Valley, California. ActivIdentity is part of HID Global, an ASSA ABLOY Group brand.
For more information, visit www.actividentity.com
Follow Us On:
Copyright © 2012 ActivIdentity. All rights reserved. ActivIdentity and 4TRESS are trademarks of ActivIdentity. All other trademarks,
trade names, service marks, service names, and images mentioned and / or used herein belong to their respective owners.
SO0512V01-B