The Florida Department of Transportation's Motor Carrier Compliance program needed to comply with FBI regulations for applications connecting to criminal justice databases, requiring advanced authentication methods. They implemented Imprivata OneSign for single sign-on and fingerprint biometrics authentication to meet these FBI CJIS requirements without changing their Active Directory, allowing over 500 employees distributed statewide to securely access computer-aided dispatch software from any shared workstation.

1. Florida Department of Transportation Achieves CJIS
Compliance with Imprivata OneSign®
THE BUSINESS CHALLENGE
The Motor Carrier Compliance (MCC) program in the Florida Department of
Transportation is responsible for enforcing safety and weight regulations for
commercial vehicles in the state of Florida. To meet this mission, more than500
sworn law enforcement officers and regulatory weight inspectors work on the
highways and in weigh stations throughout the state.
As with any law enforcement agency, the Motor Carrier Compliance group within COMPANY
the DOT must comply with the FBI’s regulations for applications connecting with its • Florida Department of
Criminal Justice Information Services (CJIS) systems. These include: Transportation: Motor
• 1 (In 2010): Enforce unique IDs and strong passwords
Carrier Compliance
• 2: Use advanced authentication’ methods like fingerprint biometrics, smart cards or • 500 employees
proximity cards to secure authentication distributed
throughout state
Law enforcement agencies have until September 2013 to implement advanced
authentication unless they are making significant changes or upgrades to the APPLICATIONS
systems that access the CJIS databases, in which case strong authentication must be
implemented prior to the upgrade. • CTS computer-aided
dispatch (SmartCAD)
The MCC agency was facing two major changes to its law enforcement applications:
• MCC had to move its data center to a primary state data center by mid-2012, as part of a CHALLENGES
broad data center consolidation initiative in the state of Florida. • Employee frustration
• The group was rolling out new computer-aided dispatch software (SmartCAD) from CTS with multiple logins
systems.
• Needed to comply
Either of these initiatives trigger the accelerated CJIS deadline for advanced with CJIS ‘Advanced
authentication. Authentication’
requirements
THE IMPRIVATA ONESIGN SOLUTION
• Widely distributed
MMC felt finger biometries was the best option for their agency, so they began to workforce
investigate solutions that would meet the following requirements:
• Support for fingerprint biometrics RESULTS
• Single sign-on with complex passwords (phase 1 CJIS compliance) • CJIS compliant
authentication
• No changes required to Active Directory
• Single sign-on to
Although many solutions were available, most required significant changes to Active multiple applications
Directory. Says Tom Trunda, District IS Manager for the Law Enforcement Office
of the MCC group, “Keeping our directory in tact without changing it was very • Fast user switching on
important to us. Imprivata OneSign let us meet the CJIS authentication requirements shared workstations
without modifying our Active Directory.”
• Rapid statewide
deployment

2. BEFORE IMPRIVATA ONESIGN USING IMPRIVATA ONESIGN
Single sign-on eliminates frustration with managing multiple
Multiple logins created frustration among inspectors and officers
accounts
Complex password requirement created hardship, potential security Fingerprint biometric authentication meets CJIS advanced
exposure authentication requirements while simplifying login
Lack of visibility into user activity on networks Audit and access reporting
RESULTS: RAPID STATE-WIDE DEPLOYMENT
Law enforcement
The IT team spent approximately seven weeks at the end of 2010 deploying Imprivata
agencies will find
OneSign and fingerprint biometrics and enrolling its users’ fingerprints throughout the
state. Because of the distributed nature of the MCC staff, the team traveled through that 2013 comes
the state, training sergeants in field offices. Those sergeants then traveled to the weigh around very quickly
stations to enroll the weight inspectors and other staff with the fingerprint technology.
—and the real
As part of the Imprivata OneSign roll-out, the IT team provisioned each user with deadline is sooner
a unique login, and each kiosk with a fingerprint reader. The users can now switch
between accounts on the shared computer using a single touch of the fingerprint reader, if you’re upgrading
increasing security and application access speed. systems. We’re
Although the MCC division implemented OneSign primarily for CJIS compliance reasons, ahead of the game
the combination of strong authentication and single sign-on has delivered several with Imprivata
benefits to the MCC staff.
OneSign, and now
Eliminating password frustration: The complaints from staff about managing I don’t have to
multiple different accounts have disappeared. Says Trunda, “Imprivata OneSign has
clearly eliminated a major frustration for our officers and inspectors.” worry about CJIS
authentication
Better visibility: Using single sign-on with fast user switching on the shared kiosks has
given the department better visibility into individual network access and behavior, and requirements as we
eliminated the potential exposure of the shared login. Imprivata OneSign provides an move our systems
instant audit log of who is accessing which applications at what time, which is important
to the state primary
for ongoing governance.
data center.”
The biggest benefit has been the department’s full compliance with CJIS advanced
authentication regulations today. Says Trunda, “ Law enforcement agencies will find that
Tom Trunda
2013 comes around very quickly—and the real deadline is sooner if you’re upgrading
District IS Manager
systems. We’re ahead of the game with Imprivata OneSign, and now I don’t have to Florida DOT
worry about CJIS authentication requirements as we move our systems to the state
primary data center.”
1 877 ONESIGN | 1 781 674 2700 | www.imprivata.com
Copyright © 2010 Imprivata, Inc. All rights reserved. Imprivata and OneSign are registered trademarks of Imprivata, Inc. in the U.S. and other countries.
The Application Profile Generator and OneSign Agent are trademarks of Imprivata, Inc. All other trademarks are the property of their respective owners.
MKT-SS-FLDOT-Ver1-03-2011