Organisations often avoid or delay change due to concerns about budget and the impact on productivity and workflow. This can be especially dangerous, however,in the access control infrastructure, where a combination of technology obsolescence and escalating security threats can quickly cripple an organization’s ability to protect its people, facilities and data assets.It is far more effective to be proactive, rather than reactive, about change. This requires building an infrastructure that presumes and prepares for ongoing change to support evolving access control needs, and enables the organisation to preserve investments in its current infrastructure as it moves to new technologies and capabilities.

By: John Fenske, Vice President of Product Marketing Identity and Access Management with HID Global

There are many reasons to embark on this path, including upgrading inadequate security, and enhancing investment value and user convenience with a platform that supports multiple applications on smartcards or, in the future, smartphones.The ability to embrace the positive aspects of change requires an access control platform that can meet today’s requirements with the highest levels of security, convenience and interoperability, while enabling organisations to adopt future capabilities without disrupting the ongoing business operations.

Legacy security solutions can’t deliver this future, because they often use proprietary technology that is static. This makes them easy targets for attack, and precludes their evolution beyond current abilities and security levels. Organisations should pursue solutions that are dynamic and adaptable to the changing needs of their organisation and the best practices in the industry.

Benefits of High-Frequency

Contactless Smart Cards

In contrast with legacy solutions, the latest high-frequency contactless smart card solutions are built for interoperability, as part of a larger identity ecosystem that is significantly more dynamic. These solutions also ensure that security is independent of hardware and media, making it much easier for organisationsto evolve their infrastructure to support tomorrow’s needs. Today’s solutions also enable smart cards to be portable to smartphones so that organisationswill have the option to use smart cards, mobile devices, or both within their PACS.

For instance, HID Global’siCLASS SE platform, powered by Seos, use a new Secure Identity Object (SIO) data model that represents many forms of identity information on any device that has been enabled to work within the secure boundary and central identitymanagement ecosystem of the company’s Trusted Identity Platform (TIP). Any piece of data can be supported, including data for access control, cashless payments, biometrics, PC logon and many other applications. The combination of TIP and SIOs not only improves security, but delivers the flexibility to adapt to future requirements, such as adding new applications to an ID card. Additionally, iCLASSSeos credentials can be carried inside smartphones in a managed access environment, delivering a more hassle-free experience for users, who can carry the credentials for many access control applications on a device they rarely lose or forget.

The latest solutions minimize disruption during migration through the use of multi-technology smart cards and readers that leveragethese extensible and adaptable platforms.Another advance is the availability of encoders that enable organisations to encode and instantly issue cards using a single device. Multi-technology encoders make it easier for organisations to migrate from current technologies to the security, adaptability and portability of new high-frequency contactless smart card platforms.

In the case of HID Global’siCLASS SE platform, an encoder is available that provides an entirely open solution for encoding multiple credential technologies, including both Genuine HID® and third-party credentials, so that users can upgrade their existing card populations for use with iCLASS SE platform readers. For maximum interoperability, the encoder solution supports Seos, iCLASS SE, standard iCLASS®, MIFARE® Classic and MIFARE DESFire® EV1, as well as 125 MHz HID Prox® for encoding Prox credentials, and for migrating from HID Prox® to high frequency technologies. Users can seamlessly and easily migrate from one technology to another by simply extracting access control data from an existing card and writing it to the new credential, without having to manually input data or being encumbered by encoding details. For even higher security, users can “wrap” their access control data within an SIO and then write it back to the same card. Based on open architecture, the encoder enables SIOs to be added to the full range of supported cards, including MIFARE and DESFire credentials.

With this type of forward-looking solution in place, organisations can achieve the highest possible security now, along with the flexibility to adapt to future requirements.

Future-Proofing Secure Issuance

In addition to an organisation’s foundational access control card-and-reader platform, it is also important to consider current secure issuance requirements with an eye for tomorrow. Today’s printers, card materials and software incorporate critical visual and logical technologies so that organisations can implement multi-layered validation. There are a number of available hardware choices, including monochrome direct-to-card (DTC) solutions and high definition printing (HDP) retransfer technology for contactless or contact smart cards. There are also high-throughput solutions that optimise performance and productivity. Today’s desktop card printer/encoder products also give organisations a single solution that can deliver the high-volume reliability and advanced credentialing features of large centralised printers, as well as the lower cost and smaller footprint required for the distributed printing model.

Secure validation is another important consideration. Most ID card issuance systems simply compare the person presenting credentials with identifying data that is displayed on the card. This two-dimensional identifying data may be a simple photo ID or sophisticated elements such as higher-resolution images, or it might be a laser-engraved permanent personalization attribute that makes forgery and alteration virtually impossible. Smart card chips, magnetic stripes and other digital components add an important third dimension of security. With expanded data storage, cards also can include biometric and other attributes to further enhance validation.

Another element to consider is speed and convenience. Printers with built-in programmers/encoders combine what previously were multiple processes into a single in-line card personalization step, significantly boosting issuance speed, convenience and efficiency. Users simply submit a card into a desktop printer equipped with an internal smart card encoder to personalize the card. This not only speeds issuance but also eliminates the risk of waste as a result of human error during manual entry. Opting for field-upgradable units enables organisations that already own a card printer to add an encoder in the field so they can leverage smart card benefits well into the future.

Transition to a New Platform

When is a good time to start the transition? There are many possible entry points from which to begin the migration process, including:

• Merger or acquisition: Mergers and acquisitions often involve rebranding and/or the merging of disparate administrative and other systems, technologies and processes. Usually at some point in the process, the organization will need to issue new credentials. With the cost of new technology being competitive with legacy systems, this would be a perfect time to migrate to a more secure, sophisticated and capable system.
• Standardise on a single card: Due to rapid growth, decentralised administration systems and/or multiple physical locations, an organisation may end up with several different access control systems. Since new technology offers the ability to issue or change credentials remotely, it’s now possible to integrate access control into one system that is centrally managed. Standardising all locations and employees on one system can increase security and improve resource management. Going a step further to mobile access control delivers the benefits of over-the-air remote provisioning and management of secure identity credentials.
• Facility consolidation: If a company is moving or adding a building, new credentials will have to be issued for that location. This is an ideal time to look at access control for the entire organisation. It may be time to standardise all locations into one system.
• Re-issuanceprocess: As new employees join, many organisations manage costs by purchasing additional cards that work with their old technology. Some organisations may also need to change their cards due to a new brand image or logo,at which point they can upgrade to newer technology.
• New card applications: Organisations that want to add new applications such as time and attendance, secure print management systems, or cashless vending functions will need to issue some type of associated card to users. They can migrate to a contactless smart card that combines access control with these other functions, enabling employees to carry a single card for many functions. Administration of these functions is centralised into one efficient and cost-effective system. Organisations also can seamlessly add logical access control for network log-on to create a fully interoperable, multi-layered security solution across company networks, systems and facilities. In the future, they can migrate to the convenience, flexibility and security of carrying digital keys and credentials on smartphones and other devices.
• Risk management improvement: Either due to insurance requirements or to improve risk-management costs by reducing liabilities, moving from an outdated system to a current one can dramatically improve the security in an organisation.
• Changes in security requirements: As a result of new legislation or regulatory requirements, an organisation may be required to increase its security. Similarly, if a company acquires a new client that requires a high level of security, it may need improved access control. A new building tenant may also trigger the need for greater building or campus security, either to protect the parent organisation or to comply with the tenant’s requirements. They also might want to add new visual security technologies to prevent counterfeiting.
• Security event: The reality is that sometimes it takes an unexpected event or security breach to move an organisation to make the investment in a new access control system. Ideally, an organisation should migrate before there is a problem, especially if the system is still low frequency, which can be easily cloned.

There is significant value that can be derived from shifting the traditional way of thinking about change, and looking at it as a leadership opportunity rather than something initiated in response to an adverse event. With the right approach, users can easily and inexpensively expand and upgrade their systems to meet changing needs while taking advantage of new technologies. By using dynamic rather than static technologies, security becomes independent of hardware and media, and the infrastructure can evolve beyond current abilities with the adaptability to combat continuously changing threats.Making the right technology decisions today will also help organisations meet new requirements with the confidence that they will be able to preserve investments in their existing infrastructure.

When is it ever a good time to upgrade your access control solution? Many organisations follow the policy of ‘if it isn’t broken, don’t fix it’ but this can be a risky situation in a world where technology and threats are changing so rapidly. The use of older, legacy access control systems exposes an organisation, a building, a server room, a computer to the possibility of unauthorised access and the consequences of this. But why should users upgrade?

Jaroslav Barton – Product Marketing Director, Physical Access Control, EMEA – HID Global

Data Privacy

One of the biggest drivers for updating legacy access control systems is the need for enhanced levels of data privacy. This could come about through the on-boarding of a client that requires high levels of security, new legislation being brought in for specific industries, or even new building tenants. The driver remains the same: data or the building itself is in some way exposed to or at risk and needs added protection. Yesterday’s technology is no longer sufficient for today’s access control and identity management challenges.

In The Access Control Report 2016: Legacy Infrastructure and Motivations for Upgrading, 44% of respondents stated they were planning on upgrading their access control solution. This is a strong indicator that end-users are acknowledging that the risk to organisations is evolving, and the need to protect their physical assets and consequently data assets is important.  It would take a security breach that exposed a flaw in the current system for 92% of respondents to consider changing their current access control system, but not beforehand.

On any site at any one time, in addition to regular employees, there are also individuals and groups that have access to various parts of a site for short periods of time. These could be visitors, maintenance teams or contractors. In the report, 75% of respondents have third-party members on site on a regular basis. Integrated visitor management solutions in modern access control systems significantly improve the distribution and use of temporary credentials but also safeguard various parts of the site to unwarranted access. Access control solutions, such as mobile access, make it easier for facilities and securities managers to track who is accessing what parts of the site to ensure nobody is in an area they shouldn’t be.

User Convenience

The continual development in consumer technology has spilled over into the business world with devices now being used for work and in our personal lives. Bring Your Own Device, mobiles and wearables are all common features of today’s office environment. Organisations can utilise this growing level of secure technologies that employees are carrying around with them on a daily basis. Instead of having several key cards or fobs that have a high chance of being left behind, users can now utilise, smartphones or smart devices, their closest pieces of technology for secure access control as well. Mobile access control is increasingly coming into the market and the benefits this brings are numerous.

Understanding the requirements from building occupants is an important step before undertaking an access control update. The report noted that 48% of respondents would like an easy-to-use access control system, with 32% requesting multiple levels of access depending on authority required. This added security element is clearly an important function, and one that can be easily designated with more modern technologies. Having mobile credentials that allows for multiple access levels, for instance, saves the users from having multiple access control devices that could lead to confusion or possibly misplacement. The survey also noted that 29% of respondents would like future-proof technology. This can easily be provided through mobile access solutions which grant users modern techniques for access control, but also a single credential for multiple access devices. Utilising smartphones are a very straightforward solution that solves three of the top concerns of employees looking for updated access control.

One of the largest stumbling blocks to updating an enterprise’s access control system is the perceived disruption that the upgrade will cause. 69% of respondents in the report believe that upgrading to a new access control system would be disruptive to their daily business, while 55% cite cost as the biggest misgiving about upgrading. Despite the perceived disruption, many sites can be retrofitted using existing access control hardware behind the scenes, with minimal replacements needed to upgrade technologies. Not having to start from scratch also helps to significantly lower the costs, making it a more cost efficient venture with minimal disruption.

Flexibility

A new access control solution must be flexible so users don’t just see it as an ‘expensive way of opening doors’. Open Supervised Device Protocol (0SDP) for secure communication between field devices in a physical access control system has gained increased importance allowing for standardization, more flexibility and freedom of choice for security managers.

Flexibility also supports multiple applications for managing not only physical access but also logical access applications, like computers and software logins. Additional access control systems, such as secure print management, require an associated card issued to users. This represents a prime opportunity for organisations to consolidate to a single access control device, such as a contactless wearable or smartphone that combines access control with other functions.

By exploiting modern technology, such as mobile devices and wearables, users are afforded the opportunity to simplify their access control devices: one device, with one credential providing access to multiple areas and requirements. It was found that nearly a quarter of respondents wanted to manage multiple credentials across a single device. With mobile access solutions, multiple credentials are rolled into one and stored on one device. The facilities or security manager is capable of controlling access and distributing credentials to those with the right security clearance. Technology such as the latest high frequency access control systems ensure security is independent of hardware and media. This makes it easier for organisation to support functionality and higher levels of data privacy.

Conclusion

Although, there are clearly several barriers to the adoption of more sophisticated access control systems, organisations are placing increasing importance to safeguard their physical assets as it supports in providing protection to their IT infrastructure as well.  This is mainly due to the belief that current systems in place are adequate enough until they are proven to have failed and the fact that a replacement system is perceived to be an unnecessary expense. Despite the technological advancements, users are still content with cards and fobs, regardless of the lack of sophisticated security and encryption contained in these when compared with mobile access control solutions. The change to a more sophisticated system is likely to come from employees themselves, rather than decision makers. Existing access control solutions are also easy to upgrade which provide minimal disruption and cost-efficient site retrofits. Facilities and security managers need to question whether it is more expensive to replace an outdated system, or recover from a site or data breach.

Find out more about the key benefits of upgrading to new, more dynamic technologies that will help you to consider the right approach for your organisation –  Three Reasons to Upgrade Your Access Control Technology.

London, October 2018 — Following publication of “The Wireless Access Control Report 2018”, we hear from leading security professionals in a range of industries about how they see the market, and the future, for wireless access control.

Why demand for wireless continues to grow

Figures from the 2018 edition of “The Wireless Access Control Report” show continued strong growth for wireless vs. wired solutions. Why do you think security and facility managers are “cutting the wires” more and more?

Russell Wagstaff, Director for Commercial Access Solutions, ASSA ABLOY EMEA: “Among the many advantages of wireless discussed in the report, I would highlight two. Firstly, removing the need to cable every door makes it much easier and more economical to bring many more doors into your access system. So, wireless technology can upgrade your building’s security in an instant. Secondly, the energy-efficiency of wireless doors delivers significant cost savings. The standard batteries locks use have long lives, and only fully ‘power up’ when there’s a credential to read. Wired doors are generally connected to the mains 24/7.”

The new report forecasts growth in wireless locks for “non-door” applications (lockers, servers, and so on) to outgrow those for doors. Why is wireless technology especially suited to these “non-doors”?

RW: “Partly it’s about convenience. The more applications that can be secured and unlocked with a single credential, the better for site users. Facility managers benefit from the wider scope of their access system, which gives them more control. In addition, because these ‘non-door’ devices are wireless, access control can easily extend outdoors. Padlocks for gates, machinery locks, storage lockers. With the right lock, these can all be secured within the same access control system as your front door.”

Wireless access control for small to medium-sized businesses

What specific problem did SMARTair® solve at ULab?

Enrique Burgos, Director at ULab: “In addition to regular daily traffic [of around 100 staff], weekly traffic can almost multiply by ten if an event is held. We needed an access control system as flexible and convenient as SMARTair®.”

One of Spain’s newest co-working spaces, ULab’s vision incorporated the latest in security, accessibility and design to create a 21st-century business centre. Wire-free SMARTair® delivered real-time access control to accommodate both regular daily traffic and busy one-off events.

Wireless access control in large or complex businesses

How does the flexible access management offered by CLIQ® impact on your day-to-day security?

Christophe Nublat, Head of Study & Works Division, Eau de Valence, France: “All the energy is in the key. There is no power supply to the lock, and therefore very little maintenance. Also electronic and mechanical cylinders are managed by the same key.”

The municipal water authority of Valence supplies safe drinking water to 65,000 local residents. It also manages 4 boreholes, a storage unit and 300km of water pipes. With CLIQ® key-based access control, audit trails for every lock, key and padlock are available on demand, so monitoring contractor visits is easy. Weekly mandatory key revalidation provides another layer of security. Five of their keys are equipped with CLIQ® Remote technology, so supervisors can also update access rights on the move, via Bluetooth.

Integrating wireless access control

The new report picks out “integration” as a growing trend — with an overwhelming majority of survey respondents saying integrated systems are “important” or “very important” at a site. How does integration with ASSA ABLOY Aperio® wireless locks benefit AXIS Entry Manager customers?

Stephanie Hensler, Business Development Director at Axis Communications: “Axis completed integration of the Aperio® RS485 hub with our AXIS A1001 Door Controller. AXIS Entry Manager is our web-based access control system, built into the A1001 Door Controller. Because most users value real-time access, we chose to integrate with an Aperio® online hub. Users appreciate how intuitive it is to manage this integrated solution.”

How wireless access control saves companies money

Can switching to Aperio® wireless access control deliver concrete budget benefits?

Magnus Svensson, Infrastructure Manager at Lund University: “Aperio® has proven to be very cost effective. We have been able to reduce the time we spend on user management and system administration radically.”

After 20 years, Lund University’s Faculty of Law was looking to upgrade its access control system. Aperio® battery-powered escutcheons and cylinders with card readers are now fully integrated with Pacom’s Unison system. Aperio® locks work with the existing MIFARE® smartcards, so there was no need for 42,000 students and 7,500 staff to return their smart-cards for reprogramming, or even to visit update readers to reactivate their permissions. Every door or card is still managed centrally from a single admin interface.

You can download a FREE copy of “The Wireless Access Control Report 2018” now at https://campaigns.assaabloyopeningsolutions.eu/wacreport2018