Enabling Compliance for Physical and Cyber Security in Mobile Devices. Chip Epps & Daniel Bailin HID Global

Transcription

1 Enabling Compliance for Physical and Cyber Security in Mobile Devices Chip Epps & Daniel Bailin HID Global 1

2 Agenda Managing Identities Traditional cards for PACS and IT Smart Devices Convergence & Compliance The Security Landscape Contextual Authentication Using Analytics 2

3 Smart Devices vs. Cards Easy to keep with you User desire for wide range of uses Increasingly user-owned and controlled Non-standardized platform Online via tethering Wide range of costs Smart Devices Not always convenient Typically deployed with limited set of uses Issuer controlled Mature processes to deploy and manage Always offline Low cost Cards 3

4 Credential Provisioning Centralized Remote 4

5 Smart Device Remote Provisioning 1 Admin enrolls use via portal this sends invitation 2 Open Invitation Contains download link and registration code Download App Google Play Apple Store Register Enter registration code and accept license policy 3 Admin assigns Mobile ID via portal 4 Admin assigns rights to Mobile ID (in ACS) 5 Start Using 5

6 Tap to Open or Login for Wearables Nymi Band Continuous authtechnology called HeartID Authenticate users via their electrocardiogram (or ECG) Secure communication channel Simply tap band to access cloud apps and doors 6

7 Contextual Authentication Examples Single vs. Multi factor Exterior doors Interior doors High security doors Windows logon VPN Banking 7

8 Convergence One credential for Secure Access to Cloud, Data and Door 8

9 Convergence Examples User Experience Single Card for PACS, Windows Logon and Network Access Mobile smartphones Policy Network access only allowed after authentication at the door VPN connection only allowed after GPS verified in sync with travel plans 9

10 Corporate ID Landscape is Rapidly Evolving.. More devices More Apps More Identity Data 10

11 Noun: criminal activities carried out by means of computers or the Internet The US Government proposes to spend $14 Billion in 2016 and $19 Billion in 2017 fighting cybercrime

12 Am I Really Dealing With My Bank? SMiShing Vishing Phishing Dear HSBC Customer Your account has been blocked due to suspicious activity. To restore access please Logon here. Copyright HSBC Bank 2015 All rights reserved. 12

13 Noun: the state of being protected against the criminal or unauthorized use of electronic data, or the measures taken to achieve this Sounds simple, but the activities required to be protected can be complex and costly Cryptography forms the basis for trust on line. - Bruce Schneier Fellow Berkman Center Harvard University 13

14 Cybersecurity is the result of applying consistent, coherent and connected identity and trust frameworks to the component parts of any given ecosystem If you solve the identity problem based on consistent trust, you dramatically reduce cyber risk Identity Cybersecurity Trust 14

15 Create Trusted Identities Once an identity is vetted, a Trusted Identity can be created Natural Identity Trusted Identity Digital Certificates A digital certificate is issued to employees and customers to establish and protect a trusted identity; that Allows that person to do the same things in the electronic world that they do in the physical world Trusted identities combat fraud and protect against cybercrime 15

16 Establish User Confidence Device Binding Digital Certificate Mobile Banking App Live Security Center If you suspect fraud, please contact our fraud team. Press for Help Hello Mr Smith, Please confirm your transaction request for funds transfer at ATM Las Vegas. Hello Mr Smith, Please sign your nameusing your finger so we can verify you. Digital Cert Live Security Center Push Behavioural 16

17 17 Future Trends

18 Deliver Frictionless Authentication Multi-modal biometrics Transactional Analysis Behavioural Analysis (What We Do Today) Multi Decision Factor Authentication Engine Contextual Analysis Threat Detection Predictive Analytics 18

19 & Continuous Risk-Based Authentication Multi-modal biometrics Continuous Risk Assessment Transactional Analysis Contextual Analysis Decision Step Up Engine Auth Behavioural Analysis Threat Detection Confidence Step Up Time Span Predictive Analytics 19

20 20 Trusted Services Dashboard

21 Empower Mobility with Trust and Confidence Authentication Service 21

22 Next Steps See HID Adjacent to ASSA ABLOY booth (#8061) Mobile Access on Android & Apple Wearables Biometrics Security Intelligence 22

23 THANK YOU Chip Epps, Daniel Bailin, 23