20100309 - Sponsor Summary March 9, 2010

Attendees:

• Joyce Landreth
• Wayne Donald
• Karen Herrington
• Greg Kroll
• Kevin Rooney
• Rich Sparrow
• Dean Kirstein
• Mary Dunker

Meeting Notes

Discussions revolved around Kevin Rooney's One Time Password over SMS notes.

• EVDO card (Evolution Data Optimized - mobile broadband technology) for computer -  allows an SMS message to be sent to your wireless carrier from your computer as opposed to sending it to a gateway provider.
• If we had our own SMS (Short Message Service) gateway it could *not* replace VT Alerts (3N Emergency Alerts)
• HOTP (HMAC-based One Time Password algorithm) - a platform (standard) used by cell phone to generate a one time use password. Replaces a fob, the cell phone becomes the fob. This is a client on the phone.
• OPIE (One time Passwords In Everything) - an alternative to HOTP. Not easily installed as a service. Rejected by this sponsor group -- Does not buy us anything
• Vasco (fob used by Care Team) - VT already has this installed. This provides a one time use password, not an SMS gateway. Uses what they call a virtual digipass, however, VT did not purchase or use the virtual digipass.
• CONS regarding fobs
  • Would cost money to distribute.
  • Some losses would occur.
  • People would not carry them all the time.
• When calculating costs double the cost for implementation for the first year. Estimate 60,000 messages/users.
• Questions:
  • Do we need to generate a OTP, can we use a random number instead?
  • If we decide on an OTP, we currently do not have anything in place to do this.
  • Does whatever we use need to be encrypted?
  • Do we need a cost benefit analysis
  • Get Vasco cost for virtual digipass.
    
    

Action items: Rich Sparrow will investigate costs for using the Vasco service for an SMS gateway.

• Original comparison. Dated 03-16-2010, Cost and analysis.
• Updated comparison. Dated 03-17-2010. See comment below. Cost and analysis.