How secure is OVERS?
The online system is both faster and more secure than the current paper-based system. Security was a critical design consideration for OVERS. It uses secure Web protocols for communications to the server. Genuine two-factor authentication, with login/password plus encrypted biometric (fingerprint) readers are used to ensure the validity of signatures. The OVERS servers reside in the secure State Data Center along with other state mission-critical systems. The biometric device that reads the finger ‘signature’ does not copy the fingerprint. A reading of several fingerprint ‘markers’ is used to create a value known as a hash, which is then stored on the OVERS server. When a certificate is electronically signed, the markers from the user’s finger are read and then compared to the stored markers. See our project Web site at www.oregon.gov/DHS/ph/overs/ for more information about biometric security.