{"id":1048,"date":"2009-06-01T21:41:44","date_gmt":"2009-06-02T02:41:44","guid":{"rendered":"http:\/\/www.coresecuritypatterns.com\/blogs\/?p=1048"},"modified":"2020-08-08T04:04:51","modified_gmt":"2020-08-08T04:04:51","slug":"fortifying-sun-ray-desktops-with-biometric-authentication","status":"publish","type":"post","link":"https:\/\/websecuritypatterns.com\/blogs\/2009\/06\/01\/fortifying-sun-ray-desktops-with-biometric-authentication\/","title":{"rendered":"Fortifying Sun Ray Desktops with Biometric Authentication"},"content":{"rendered":"

Lately I’ve been franctically busy with couple of my ISVs and an SI helping them out on a Citizen-scale National Healthcare Identity Infrastructure <\/em><\/strong><\/span>solution pilot for one of the populous countries in the Atlantic region – Sorry I cannot disclose the country’s name to abide their privacy laws and to protect my job :-). The solution aims to deliver an Unified Desktop\/Voice Infrastructure via Sun Ray environment and fortified by Biometrics and Smartcard PKI based authentication to access the exposed services.  Using Smartcard\/PKI and Biometrics for Sun Rays has been deployed in production (at few customers) and in practice for a while now… but in my current project the interesting thing is the complete Sun Ray solution will be hosted as a SaaS <\/a>environment (~Private Cloud) and other complexities are related to legal\/privacy issues with performing citizen’s biometric enrollment and storing the biometric information with a private organization  (Especially, when the Country’s privacy laws forbids storing citizen’s biometric samples). Keeping those nail biting legal issues aside, the Govt folks are still very enthusiastic and excited about adopting to Biometric authentication for Sun Ray based desktops to access their SaaS hosted Web-based healthcare applications.<\/p>\n

\"Biometric<\/a>

Biometric Authentication on a Sun Ray environment<\/p><\/div>\n

Looks cool, Is’nt it.  If you are curious to know the secret sauce of the Sun Ray biometric authentication solution, here is the bill of materials, to put together in place:<\/p>\n

    \n
  1. Sun Ray Session Server 4.x or above<\/li>\n
  2. Solaris 10 X64 or SPARC<\/li>\n
  3. Sun OpenSSO (Biometric SSO for Web applications)<\/li>\n
  4. Sun Identity Manager (Provisioning Biometric Samples during enrollment)<\/li>\n
  5. Sun Directory Server<\/li>\n
  6. Sun Secure Global Desktop (Support accessing Windows, Mac, Linux, Solaris Desktops)<\/li>\n
  7. Oracle 11g or MySQL 5.x database<\/li>\n
  8. BiObex Authentication Middleware (Advanced Biometric Controls)<\/li>\n
  9. Hamster Plus – USB Biometric Scanner (SecuGen) – For supporting Desktop\/Web authentication<\/li>\n
  10. CrossMatch Verifier E – Biometric Scanner for supporting Biometric enrollment<\/li>\n<\/ol>\n

    Shortly, I will update this blog entry with a detailed architecture and deployment cheatsheet… as soon as I wrap up my current project deliverables.  If you are a Sun Ray enthusiast,  I know you will be having some burning questions ! Feel free to send them, I will try to answer them quick…. otherwise please stay tuned<\/span> for my unofficial deployment guide.<\/p>\n

    This stateless infrastructure could be your next generation client for securely<\/strong> accessing your virtual desktops hosted on the cloud \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"

    Lately I’ve been franctically busy with couple of my ISVs and an SI helping them out on a Citizen-scale National Healthcare Identity Infrastructure solution pilot for one of the populous countries in the Atlantic region – Sorry I cannot disclose the country’s name to abide their privacy laws and to protect my job :-). The solution aims to deliver an Unified Desktop\/Voice Infrastructure via Sun Ray… Read more »<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2,15,5,6,8,9],"tags":[24,27,57,62,64,70],"class_list":["post-1048","post","type-post","status-publish","format-standard","hentry","category-biometrics","category-cloud-security","category-identity-management","category-main","category-pki-main","category-security","tag-biometrics-main","tag-cloud","tag-pki-main","tag-security","tag-smartcards","tag-sunray"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/posts\/1048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/comments?post=1048"}],"version-history":[{"count":1,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/posts\/1048\/revisions"}],"predecessor-version":[{"id":2835,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/posts\/1048\/revisions\/2835"}],"wp:attachment":[{"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/media?parent=1048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/categories?post=1048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/websecuritypatterns.com\/blogs\/wp-json\/wp\/v2\/tags?post=1048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}