Cyber Security and You: The Future of Physical Access in a Digital World. Chip Epps & Daniel Bailin HID Global

Transcription

1 Cyber Security and You: The Future of Physical Access in a Digital World Chip Epps & Daniel Bailin HID Global 1

2 Agenda Role of Smart Devices in Access Control Access Controls & Industry Examples Managing Risk 2

3 Smart Devices and Access Control What are Smart Devices? Intelligent Wireless connectivity Convenient to keep with you 3

4 Smart Devices and Access Control Mobile phone as Card Mobile phone as End Point 4

5 5 Extended Use Cases

6 NFC vs. Bluetooth Smart Read Range User Experience Application Breadth Security 6

7 WORKSHOP #1 How could the use of smart devices help you address access control issues in your organization? 7

8 8 Review of Workshop 1

9 Smart Devices vs. Cards Usually kept with you User desire for wide range of uses Increasingly user-owned and controlled Non-standardized platform Online via tethering Wide range of costs Smart Devices Not always kept with you Typically deployed with limited set of uses Issuer controlled Mature processes to deploy and manage Always offline Low cost Cards 9

10 Credential Provisioning Centralized Remote 10

11 Remote Provisioning Experience 1 Admin enrolls use via portal this sends invitation 2 Open Invitation Contains download link and registration code Download App Google Play Apple Store Register Enter registration code and accept license policy 3 Admin assigns Mobile ID via portal 4 Admin assigns rights to Mobile ID (in ACS) 5 Start Using 11

12 Use Cases Opening Doors General Special (Labs, controlled substances) Printing (secure print release) Network Access Parking Ticketing Attendance Closed loop payment Cashless vending 12

13 Smart Devices More Examples Healthcare Mustering Fitness Center Data Access 13

14 Data Access: One Experience for Accessing Information at Work 14

15 WORKSHOP #2 If you were to deploy smart devices in your environment, what are some of the challenges you would expect to face? 15

16 16 Review of Workshop 2

17 Mobile Phone as a Credential Mobile phone as Card Mobile phone as Authenticator 17

18 Use Cases Employees accessing company buildings 18

19 Use Cases Employees logging to Windows and/or applications 19

20 Use Cases Remote employees logging into VPN from home / hotel / airport etc.. 20

21 Use Cases Employees signing an or encrypting a document 21

22 CONVERGENCE ONE CREDENTIAL FOR SECURE ACCESS TO CLOUD, DATA AND DOOR 22

23 23 What is Your Risk Profile?

24 Examples of Mobile Business Value Device Binding Digital Certificate Mobile Banking App Live Security Center If you suspect fraud, please contact our fraud team. Press for Help Hello Mr Smith, Please confirm your transaction request for funds transfer at ATM Las Vegas. Hello Mr Smith, Please sign your nameusing your finger so we can verify you. Digital Cert Live Security Center Push Behavioural 24

25 Examples of Mobile Security Risks SMiShing Vishing Phishing Dear HSBC Customer Your account has been blocked due to suspicious activity. To restore access please Logon here. Copyright HSBC Bank 2015 All rights reserved. 25

26 How Different is Mobile from Cards Establish Create Manage Use Vet Enroll Issue Bind Personalize Change Update Revoke Replace Validate Authenticate Verify/Approve 26

27 When Ready: Planning for Mobile Access Understand the corporate policy for Mobile Define your Mobile Access strategy for physical access Talk with your Compliance team Get to know your IT Team, and their Mobile strategy 27

28 WORKSHOP #3 Where are you on the Risk Profile, and what types of risk pose the biggest challenge to your organization? 28

29 29 Review of Workshop 3

30 Next Steps Other sessions of interest: End-to End Best Practices in Systems Integration Wednesday 11:15 am Are Physical and Virtual Doors Now the Same Wednesday 2:30 pm Making Sense of Security Without Data Demarcation Thursday 10:45 am See HID Adjacent to ASSA ABLOY booth (#8061) 30

31 THANK YOU Chip Epps, Daniel Bailin, 31