Study Demonstrates that the RIM Bluetooth-enabled Smart Card Reader Meets US Army Security Requirements
Test results will pave the way for secure wireless solutions.
McLean, VA, July 11, 2006 — Whether in the field or in the Pentagon, Army commanders want freedom of movement, and they want the technologies they use to increase their flexibility, not restrict it. Faced with restrictive connections between their BlackBerry devices and secure card readers, the Army turned to Booz Allen Hamilton to validate a secure solution for the Blackberry Smart Card Reader.
The US Army, a global organization with both warfighting and business missions, is a world leader in deploying leading-edge mobile technologies to enable rapid decision making to support its missions. One such technology is the Research in Motion (RIM) BlackBerry device, of which the Army deploys tens of thousands to enable mobile voice and data communications.
To further enhance the security of the BlackBerry device and ensure that digitally signed and encrypted emails are accessible anytime, many Army personnel physically connect Common Access Card (CAC) readers to their BlackBerry devices. The current physical connection between the two devices creates a cumbersome mobile solution that is susceptible to multiple failures, thus threatening mission-critical communication. This situation created the need for small, durable, and secure CAC readers that provide Army personnel with the highest level of security without bogging them down with physical connections between CAC readers and BlackBerry devices.
The RIM BlackBerry Smart Card Reader connects to the Blackberry through wireless Bluetooth technology to provide reliable, portable, and secure communication. This device is a potential solution to satisfy Army requirements, but it is not currently on the Army list of approved technology. The Army Materiel Command (AMC) Chief Information Office/G6 (CIO/G6) tasked Booz Allen Hamilton to perform security testing of the BlackBerry Smart Card Reader and to provide the necessary information to enable the Army to make an informed decision regarding future guidance and implementation of the device.
Booz Allen was tasked to perform a rapid 6-week evaluation of the BlackBerry Smart Card Reader and to focus testing on three primary areas: Bluetooth link between the Smart Card Reader and the BlackBerry device; potential attack vectors to the Smart Card Reader itself; and potential attack vectors to the Bluetooth-enabled BlackBerry device.
“By utilizing leading edge implementation of existing technologies AMC, through Booz Allen, has created a tidal surge, of which the Army much less the DOD has not experienced in decades. The ability to use untethered secure identity management tools will change the face of the DOD,” said Rick Walsh, AMC CIO/G6 Deputy Information Assurance Manager.
Booz Allen employed rigorous testing methodologies for this project that have been proven and validated at numerous Department of Defense (DoD) and intelligence agencies. By coordinating with DISA, NETCOM, Army CIO/G6 and other DoD agencies, AMC with the help of Booz Allen, was “able to create a secure mobile environment for its military and civilian executives enabling them to communicate at any time and at any place,” said Booz Allen Vice President Angie Messer.
“The BlackBerry Smart Card Reader test results will pave the way for secure wireless solutions across the spectrum from recruiting, to logistics and medical applications, to tactical communications and daily secure email and Web services,” said Edison Lewark, AMC CIO/G6 Division Chief Strategy and Technical Implementation Division.
