Mobile Access is the Killer App The Path to Flexible, Secure Credentials Brandon Arcement Senior Director, Product Marketing April 8, 2019

Transcription

1 Powering the trusted identities of the world s people, places & things Mobile Access is the Killer App The Path to Flexible, Secure Credentials Brandon Arcement Senior Director, Product Marketing April 8, 2019

2 Do You Remember the First Time You Saw This?

3 It's a New World

4 Credential Requirements Security Applications Mobility Agenda The Status Quo Selecting the Right Credential Solution Mobile Access How to Upgrade

5 The Status Quo - Vulnerabilities NACCU 2018 Campus Profile Summary Report

6 The Status Quo - Vulnerabilities On secure smart cards: Unencrypted Card Serial Number Poor key management Unencrypted data payload Identifier marked on the credential Open, untracked format Reader configuration supporting legacy technology Unencrypted communication from reader to panel

7 The Status Quo Limited Multi-Application CSN:

8 The Status Quo No Path to Mobile Most technologies deployed today do not provide a path to mobile access Reader infrastructure not capable of transition Common cross-platform credential model not considered

9 Mobile Devices Cards Disparate Cross-Platform Credential Models UID: Reader Firmware Card ios App Android App ios ese Android ese Wearable 1

10 The Status Quo - Summary Vulnerabilities in Technology or Implementation Limited Multi-Application Support No Path to Mobile Access

11 Selecting the Right Credential Solution Security Applications Mobility

12 Selecting the Right Solution Security A Holistic, Secure Credential Program Lock the Back Door Remove the Weak Link Track the Format Keep Credential Number Private Strong defense has Layers The Key is Key Secure Technology is Foundational

13 Selecting the Right Solution - Applications Leverage technology that makes it possible to incorporate an increasing number of physical, logical, and extended applications: Building access Secure print authentication Time and attendance Cashless vending

14 Selecting the Right Solution - Mobility Evaluate solutions that offer the freedom to choose Device form factors - Card, Phone, Tablet, Wearable Semiconductor platforms - NXP, Infineon, EM Operating systems - ios, Android, Tizen Readers - Wall readers, Locks, USB readers, embedded devices Communications protocols - NFC, Bluetooth to address your future needs

15 Mobile Credentials The Next Frontier

16 Mobile Devices Cards Common Cross-Platform Credential Model UID:????????? Reader Firmware UID:?????????

17 Seos Credential Technology

18 HID Mobile Access Bringing the Magic Back to PACS

19 9 Years of Experience in a Dynamic Market Mifare4Mobile 1.0 is published. Only one card active simultaneously. Closed environment for managing credentials. Unusable specification NFC phones start to appear Slow uptake on NFC phones. Mobile operators struggle to launch SIM solutions NFC microsds and iphone sleeves are pushed in the market as bridge technologies BlackBerry starts working on an embedded SE solution with NFC Google wallet is launched on Google devices and embedded SE Samsung announces an embedded SE NFC solution with Visa. Basically no services have been launched Investigates SIM based NFC solutions. Blocks Google Wallet and embedded SE solutions Allegion tries iphone MIFARE sleeve, 3 years after ASSA ABLOY Mifare4Mobil e 2.0 is published. Only pilots exist Android 4.3 is released. Includes native support for Bluetooth Smart. Android 4.4 is released with NFC Host Card Emulation (HCE) Visa and Mastercard release specifications for payments with NFC Host Card Emulation (HCE) Apple Pay is launched. Based on NFC and ese ASSA ABLOY develops SIM -based MIFARE solution ASSA ABLOY starts world s first SIM -based Hotel pilot ASSA ABLOY creates solution with MIFARE and bridge technologies Starwood tries the microsd and iphone Sleeve solution and dimisses them Arizona State University pilots microsds and iphone Sleeves with HID. Lack of native phone support ends the pilot A platform independant technology is needed to be future proof. Seos is launched HID tests an iclass solution with embedded Secure Elements on BackBerry Lack of support on other devices and that mobile opetators blocked the solution made it unsellable HID runs a several SIM basedseos pilots with different MNOs ASSA ABLOY starts integrating with leading handset manufacturer embedded SE solution. ASSA ABLOY creates HCE proofof- concept. We can now emulate Seos in software on Android NFC phones ASSA ABLOY creates a Seos over Bluetooth Smart solution, providing native support for Android and ios HID Mobile Acces

20 Integrated Architecture You Choose: HID User Interfaces Cloud API & App SDK Your App API PACS / IAMS HID Platform Mobile ID Credential Admin

21 HID Mobile Access Two Original Modes of Operation TAP TWIST Tap Twist & Go Like with prox cards

22 Android Wear & Apple Watch

23 Swipe Right Press Firmly Widget & 3-D Touch

24 Supported Devices List 250+ Devices

25 NFC vs. Bluetooth NFC Card Emulation Supported by iclass SE readers Short Range Tap only Performance similar to card Android only Bluetooth Supported by iclass SE readers Short & Long Range Tap, Twist & Go, Wearables, Widget, 3-D Touch Less consistent than card Android & ios 25

26 Apple June Announcement ASSA ABLOY will leverage its expertise in mobile access to support Apple s efforts to make it easier to access dorm rooms with contactless student IDs Nico Delvaux CEO; ASSA ABLOY

27 Mixed Populations Mobile Devices with Legacy Credentials

28 Benefits of Mobile Access More User Convenience Greater Operational Efficiency Higher Security

29 Benefits of Mobile Access More User Convenience: Enable building occupants to use smartphone, tablet, or wearable to enter controlled areas Fewer items to carry Lost or forgotten cards no longer a problem Remote, over-the-air credentialing Extended read range for special applications Adds to perception of innovative environment No online connectivity required; Background operation

30 Benefits of Mobile Access Greater Operational Efficiency: Make physical access administration easier with digital, online processes Physical credential management transforms to digital experience Over-the-air credentialing of remote workers and visitors Streamlined operations with easy integration to PACS, visitor management, and other systems Sustainable process with reduced waste and lower carbon footprint

31 Benefits of Mobile Access Higher Security: Provide higher levels of authentication Seos technology used to secure credential Mobile devices are rarely forgotten, lost, or stolen Missing mobile devices are reported almost immediately Easily de-provision unauthorized devices; revoke credentials over-the-air Applications can be protected with biometric and/or passcode Vulnerabilities can be addressed quickly through remote update

32 Common Concerns About Mobile Access Won t Work with Dead Battery No Visual Authentication of Identity

33 Simple and Free to Register

34 How to Upgrade Steps to Upgrade Best Practices Cation Areas

35 Migration Options Pros/Cons Single Tech Cards Cost neutral credentials Reconfigure all readers More expensive readers Replace all credentials Multi Tech Cards Readers First Multi Tech Cards Credentials First Replace only remaining legacy credentials No reconfiguration of readers Less expensive readers Replace credentials only once Risk appropriate reader upgrades Reconfigure all readers More expensive readers More expensive credentials (temp) More expensive credentials

36 How to Upgrade Best Practices Site survey and complete inventory of existing technologies as a first step Support as few legacy technologies as possible Choose new solution capable of mobile access Build your own mobile app Start small execute successfully at one building, then repeat

37 How to Upgrade Caution Areas Don t procrastinate: Set target dates for completion Consider and manage performance expectations Use common, managed credential format Set expectation for reader hardware refresh cycle Validate service provider security assertions Ask about key management practices ISO27001 Certification

38 Invest in Solutions that Demonstrate Choice Supports: Cards and Mobile Devices Smartphones, Tablets, and Wearables Multiple Secure Element Hardware Platforms ios, Android, and Other operating systems NFC, Bluetooth, and beyond Independent of: Transaction System Access Control Host Reader/Credential service provider

39

40 For more information Brandon Arcement - barcement@hidglobal.com Brett St. Pierre - bstpierre@hidglobal.com