Leveraging the full potential of NFC to reinvent physical access control. Friday seminar,

Transcription

1 Leveraging the full potential of NFC to reinvent physical access control Friday seminar,

2 NFC (Near Field Communication) A new radio communication technology for mobile phones Uses the same frequency band as modern contactless smart cards (13.56 MHz same as e.g. Mifare) Range approx. 4 cm Several intended applications: Alternative to bar codes, QR codes Pairing of devices Replace smart cards for payment, loyalty, public transportation, access control, etc.

3 NFC card emulation mode App X App Y Secure Element Phone OS NFC stack (tag reading, P2P) Antenna Card 1 Applet Card 2 Applet Telcred Applet SWP SIM Card OS (Java Card) NFC controller SE Secure storage + crypto HW

4 Typical way of using NFC card emulation mode Put several cards (in the form of Java Card applets) on the same secure element inside the phone Use an app ( wallet ) to select card for a transaction Interact with readers via the contactless interface Not so different from how cards are used today But we can do more after all the phone is a connected device!

5 Communication with the Secure Element through a TSM (Trusted Service Manager) Not limited to provisioning static card information!

6 Ericsson TSM demo with Telcred at MWC 2011 in Barcelona

7 Telcred leveraging communication with the Secure Element to enable an offline access control system Why offline? A large part of the cost of traditional access control systems is related to panels and wiring Offline is the only realistic alternative for some environments, e.g. Geographically distributed assets (e.g. mobile network sites) Tunnels and similar Rooms where there is no electricity Always less expensive than online. Relevant when there are many locks, e.g. Sectioning of hospitals, universities, airports, Lockers, drawers, and similar

8 The solution to offline: tickets instead of card-ids Traditional access control system Telcred Card ID Ticket with access rights List of card IDs Lock ID Requires updating when users or their access rights change Does not require updating

9 What about security? Telcred uses PKI / asymmetric cryptography, which is more secure than traditional systems based on symmetric cryptographic keys The tickets are cryptographically signed Cannot be cloned or changed Can be distributed over insecure channels (e.g. the public Internet) Challenge Response authentication of cards / phones The device s private key is stored on the secure element and cannot be read The device cannot be cloned Prevents replay attacks No secret crypto keys need to be stored in the lock controller No security problems related to distribution and configuration of controllers

10 With NFC card emulation mode, it is possible to mix NFC phones and contactless cards TSM Mobile network operator Internet Telcred administrative backend Internet connected PC with USB-reader Online reader

11 Multiple administrative domains in the same system System owner Organization A Organization B Users Locks Users Locks Access rights Access rights Organization A has shared some access rights with Organization B

12 For maintenance technicians: traditional keys vs. Telcred Traditional keys Telcred Physical keys need to be picked up and returned, leading to delays in business processes. This is especially true for organizations with geographically distributed infrastructure and / or many people who need temporary access to sites. Physical keys also tend to lead to poor security. They can be easily copied and it is difficult to maintain inventory lists, leading to keys getting lost over time.

13 Application example: Skanova Number of locks: > , all over Sweden Several administrative domains (contractors)

14 Application example: SL Number of locks: > Number of keys: > Number of administrative domains: > 100

15 Application example: shopping mall

16 Application example: logistics Sender hours 1 day 1. A truck is loaded with valuable goods and locked. No one has the key to open it, but the driver has an NFC phone with the Telcred app 2. The truck is stopped by customs who demand to inspect the cargo. The driver calls the sender who sends a temporary access right to his NFC phone 3. The truck arrives at its destination. The receiver informs the sender who creates an access right for the receiver. The receiver picks up the ticket on a card which is then used to access the cargo

17 More information Carlo Pompili, CEO Mail: Tel: