I am concerned about giving out personal information during the registration process. What type of security is used locally? What type of security is used web-based?

I am concerned about giving out personal information during the registration process. What type of security is used locally? What type of security is used web-based?

The security provided by the RAPTOR system is dependent on many factors outside of the control of Advance Response Concepts . Once RAPTOR is implemented the authority having jurisdiction must be aware that the overall security of any effective identification system relies on –

• Assurance provided by the issuer/validator of an identity credential that the individual in possession of the credential has been correctly identified.
• Protection provided to an identity credential stored within the RAPTOR card and transmitted between the card and the issuance and usage infrastructure.
• Protection provided to the identity verification system infrastructure and components throughout the entire life cycle.
• Although it is the intent of this explanation to specify the structure and mechanisms by which the RAPTOR system may provide high assurance personal identity verification, it is still dependent on the AHJ, working closely with Advance Response Concepts technical experts, to ensure that the components, interfaces, communications, storage media, managerial processes, and services used within the Jurisdiction that has deployed RAPTOR are used and maintained in a secure manner.

Advance Response Concepts uses the Hypertext Transfer Protocol Secure (HTTPS), a combination of the Hypertext Transfer Protocol and a network security protocol. HTTP operates at the highest layer of the TCP/IP Internet reference model, the Application layer; but the security protocol operates at lower sub layer, encrypting an HTTP message prior to transmission and decrypting a message upon arrival. HTTPS has also been known as "Hypertext Transfer Protocol over Secure Socket Layer", but now HTTPS may be secured by the Transport Layer Security (TLS) instead of Secure Sockets Layer (SSL) protocol. HTTPS connections are often used for payment transactions on the Web and for sensitive transactions in corporate information systems.

Advance Response Concepts leverages the strengths of its strategic partner WidePoint/ORC in support of the RAPTOR hosting requirements. ORC offers several hosting services for use within this program. Their secure data center currently provides digital certificates to the Federal government and their employees under the Shared Services Provider Program certified, accredited and audited by the General Services Administration. In addition, ORC is a certified ACES Certificate Authority which issues digital certificates to citizens who wish to exchange electronic information with the Federal government through a variety of web-sites and/or email exchange. ACES is also accredited by GSA. These services are cross certified with the Federal Bridge and should be accepted across the Federal Government as legitimate credentials for use in web site authentication, digital signature of email and documents as well as encryption of email and documents. In addition, ORC offers a Managed Validation Service, certified by GSA that enables their users to validate all certificates that they come in contact from cross certified Federal Bridge certificate authorities. These services operate out of a secure facility in Fairfax, Virginia. The services have either load balanced service or warm/cold spare redundancy in a Baltimore, MD facility depending upon requirements.
Advance Response Concepts encourages, and will voluntarily comply with system audits requested by our clients. VUANCE will also voluntarily submit to independent audits by organizations such as the Defense Cross-Credentialing Identification System and Federated Identity Cross-Credentialing System (DCCIS/FiXs) Enrollment and Identity Verification

The Medical, skills and licensure information written to the smart cards is encoded using a proprietary methodology. You must be running a Advance Response Concepts application, logged in using a RAPTOR Smart Card with the appropriate administrative rights to match the information to the definition files in order to read any of the Data. The PIV (identity) Data set is encoded using the RSA 1024 encryption standard. Information residing on the Database is initially encrypted using Triple DES is the common name for the Triple Data Encryption Algorithm (TDEA) block cipher defined in each of:

• ANS X9.52-1998 Triple Data Encryption Algorithm Modes of Operation[1]
• FIPS PUB 46-3 Data Encryption Standard (DES)
• NIST Special Publication 800-67 Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher
• ISO/IEC 18033-3:2005 Information technology — Security techniques — Encryption algorithms — Part 3: Block ciphers

It is so named because it applies the Data Encryption Standard (DES) cipher algorithm three times to each data block. Triple DES provides a method of increasing the key size of DES to protect against brute force attacks, without requiring a completely new block cipher algorithm. The use of TDES is a legacy holdover from earlier versions of RAPTOR. Today we take the encryption one step further by encrypting the data yet again using AES 128 encryption. Advanced Encryption Standard (AES) is an encryption standard adopted by the U.S. government. The standard comprises three block ciphers, AES-128, AES-192 and AES-256, adopted from a larger collection originally published as Rijndael. Each AES cipher has a 128-bit block size, with key sizes of 128, 192 and 256 bits, respectively. The Data Encryption Standard AES was announced by National Institute of Standards and Technology (NIST) as U.S. FIPS PUB 197 (FIPS 197) on November 26, 2001. As of 2009, AES is one of the most popular algorithms used in symmetric key cryptography. It is available in many different encryption packages. AES is the first publicly accessible and open cipher approved by the NSA for top secret information

What are our customers saying about us?

"Our department was a little hesitant to change to the Raptor I.D’s, but now we are very happy that we did. The software is user friendly, even for cops who break everything, and the support staff is phenomenal. Call for help and the problem is solved.

The Raptor I.D’s are very secure, professional in appearance, and the officers truly appreciate the built in personal benefits of the Smart Card technology.

In today’s world you need identification with guaranteed security that offers more than a photo and a couple of generic descriptors. The Raptor ID with the smart card technology is it. This card tells the right people who you are and what you’re qualified to do. And when things go bad it also carries your personal medical and contact information for you and your family, so if you can’t speak for yourself the card has the answers. Everyone in public safety should carry these cards"

Lieutenant Walter Crickard
Executive Lt
Mansfield Police Dept