FW: One card and self check

["Cindy Harper" <charper@xxxxxxxxxx>]

Hi All:

We at Colgate are (if all goes well) bringing up two new circ-related
initiatives this summer.  One is the move to a campuswide one-card, the
second is a 3M self-check machine.  Diebold is the vendor that has been
chosen for our one-card; the product is CS Gold. I was just disabused,
in a meeting with the one-card staff, of my impression that the mag
stripe devices we would purchase for our circ workstations would
interface live with the Diebold server and verify the cards as valid.
Evidently Diebold doesn't provide a product that's a kb-wedge reader
integrated with their server. The committee felt that all that was
needed was to use the existing barcode number with no up-to-the-minute
validation against lost cards, since the risk was low and circ staff
would check the photo for validity. But then I told them about the
self-checkout machine we're planning on installing this summer, and they
were astonished that such devices have no ability (to my knowledge) of
validating the patron mag stripe against the Diebold server before
sending the value to the III system for a circ transaction.  I told them
that the III system would have to be the database of record for patron
verification, so we would have to have daily downloads from the Banner
or Diebold system, which still would not achieve the goal of
up-to-the-minute verification.  I volunteered that we could manually
alter barcodes that were reported missing so that they could not be
used, but they thought that unacceptable as compared with having a
separate lost card field, and they thought that the user should not have
to notify the library as well as Campus Safety when a card was lost.

I'm now wondering: how do other users of one-card systems, especially
Diebold, deal with verification of patron IDs?  Are there any Diebold
users out there? Especially those who also use 3M self-checkout
machines?

Could we use LDAP to query the Diebold server (I don't know if that's a
possibility on the Diebold end, but will check into it)?  Is the LDAP
link available yet, and does it integrate with SIP2?  Or is there some
standard other than LDAP that the Diebold server is likely to use?

Are other users of self-check machines comfortable with the security
risk posed by lost cards?