{"data":{"news":{"items":[{"title":"Tailored And Secure IP Video Solution","date":"2019-08-26 17:27:54","id":1762,"author":"","blurb":"","blurb_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/08/1566811925667_Image 2 Tailored And Secure IP Video Solution.jpg","blurb_expanded_image_uid":null,"article":"\n\t\n\n\n

Companies often install video systems without being aware of their impact on the corporate network. This is because a camera with a high resolution produces a very large amount of data. If the corporate network is not designed for this, performance or stability problems can quickly occur because the performance is insufficient. At the latest when several video cameras are integrated, the existing network often reaches its limits.

\n\n

What are my goals?

\n\n

For this reason, companies should first consider very carefully what goals they are pursuing with the integration of security cameras. Do I really need high-resolution images that can be used later in court, to identify a license plate, or to automatically control access to the company premises? Or is a lower image resolution completely sufficient to provide the necessary information with sufficient quality under the ambient and lighting conditions both day and night? In such an application, an IP camera with a resolution of 4K would be overkill.

\n\n

Video solution is part of the overall system

\n\n

At the same time, organizations must be aware that an IP video system is part of the overall system and must be integrated into the corporate network, especially if the information generated is to be used within the production systems. Therefore, before integrating a video solution, it should be checked whether the productive network is designed for the implementation, including the associated new specific requirements. Otherwise, a parallel network must be set up that ensures both network separation and the required performance.

\n\n

Protecting Video Infrastructure From Unwanted Access

\n\n

All video systems must also be installed in such a way as to not be in the direct access area of outsiders. Otherwise it would be easy for criminals to switch the camera off or manipulate it. The same of course applies to digital remote access. Therefore, the video systems should have integrated backup and configuration tools. This includes end-to-end data encryption during transmission. Video data is often inadequately protected. Especially low-cost systems usually have no basic protection or serious security gaps in their operating system. As a result, cybercriminals are able to penetrate the Local Area Network (LAN) with simple means and access data. This can have far-reaching consequences. This allows the cameras to be deactivated or other settings to be made via remote control. This endangers all users working in the corporate network. In addition, the devices themselves can be compromised and made part of a botnet, as in the case of Mirai or IoTroop.

\n\n

GDPR-Compliant Data Storage

\n\n

When setting up video security, data protection aspects must also be taken into account. Which areas should and may be monitored? How long is data stored? Who has access to the data? The General Data Protection Regulation (GDPR) provides very clear rules for action here. Companies are required to delete data that is no longer relevant. This archiving process can be automatically controlled with a high-quality IP video solution. As soon as a previously defined point in time is reached, the recordings are then automatically overwritten. At the same time, organizations must protect all data by assigning individual access rights. For example, the gatekeeper only needs access to live images, while other employees also need access to archived recordings.

\n\n

Specialized IT Service Providers Deliver Tailor-Made Solutions

\n\n

Since there are many aspects to creating and implementing the right concept, companies should seek the support of specialized IT service providers such as Konica Minolta. They use consulting workshops to show their customers the options offered by IP video systems. In addition, they work with them to develop operational requirements and acceptance criteria, as well as an appropriate concept. Such specialists take over all necessary operational tasks as well as maintenance and ensure the video security system’s continuous availability. With custom-fit cameras, integrated backup and configuration tools and some basic security measures, companies ensure that they reliably get exactly the images they need. And at the same time, they reduce the attack surface for hackers.

\n\n\n","article_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/08/1566811932867_Image 2 Tailored And Secure IP Video Solution.jpg","article_expanded_image_uid":null,"article_image_caption":"Article by: Christian Jourdan, Video Security Expert, Konica Minolta Business Solutions Deutschland GmbH","publications":"5","tags":"access control,video infrastructure,IP video solution","category":"Others"},{"title":"Why Mobile Credential Is More Secure than Card-Based Systems","date":"2019-03-29 20:56:32","id":1552,"author":"Scott Lindley, General Manager, Farpointe Data","blurb":"

Why mobile credential is more secure than card-based systems

\n","blurb_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/03/1553864847879_blurb.jpg","blurb_expanded_image_uid":null,"article":"

In recent years, integrators and customers have focused on ensuring that their card-based access control systems are secure.

\n\n

To give businesses extra incentive to address cybersecurity threats, the Federal Trade Commission these days holds the business community responsible for failing to implement good cybersecurity practices and has proceeded to file lawsuits against those that don't. The Federal Trade Commission filed a lawsuit against D-Link and its U.S. subsidiary, for instance, alleging that its inadequate safeguards on its wireless routers and IP cameras left them vulnerable to hackers.

\n\n

Even as companies are learning how to protect card-based systems, along comes mobile access credentials and their companion readers that use smartphones instead of cards as the vehicle for carrying identification information.

\n\n

Mobile Credentials: A Rising Tide

\n\n

Gartner suggests that by next year, 20% of organisations will use mobile credentials for physical access in place of traditional ID cards. Let’s rephrase that last sentence. In less than nine months, one-fifth of all organisations will use the smartphone as the focal point of their electronic access control systems. Not proximity. Not smart cards. Phones!

\n\n

Smartphone Credentials Are Inherently More Secure

\n\n

While many companies perceive that they are safer with a card, in my opinion, mobile access can be a far more secure option.

\n\n

Why are smartphone credentials more secure? To start, the smartphone credential is a multi-factor solution.

\n\n

Access control authenticates you by scrutinising three things. It:

\n\n

recognises something you have (RFID tag/card/key),
recognises something you know (PIN) or
recognises something you are (biometrics).

\n\n

Your smartphone will have all three of the above authentication parameters. This makes smartphone credential, by definition, a multi-factor solution. Your mobile credentials remain protected behind a smartphone's security parameters, such as biometrics and PINs. Once a biometric, PIN or password is entered to access the phone, the user automatically sets up a 2-factor access control verification - what you know and what you have or what you have and a second form of what you have.

\n\n

In addition, you can’t access the credential without having access to the phone. If the phone doesn’t work, the credential doesn’t work. The credential operates just like any other app on the phone. The phone must be “on and unlocked”. These two factors – availability and built-in multi-factor security verification – are why organisations want to use smartphones in their upcoming electronic access control implementations.

\n\n

Plus, once a mobile credential is installed on a smartphone, it cannot be reinstalled on another smartphone. Think of a soft credential as being securely linked to a specific smartphone. If a smartphone is lost, damaged or stolen, the process should be the same as for a card. It should be immediately deactivated in the access control management software, with a new credential issued as a replacement.

\n\n

Leading smartphone readers additionally use AES encryption when transferring data. Since the Certified Common Criteria EAS5+ Computer Interface Standard provides increased hardware cybersecurity, these readers resist skimming, eavesdropping and replay attacks.

\n\n

When the new mobile system leverages the Security Industry Association's (SIA) Open Supervised Device Protocol (OSDP), it also will interface easily with control panels or other security management systems, fostering interoperability among security devices.

\n\n

Likewise, new soft systems do not require the disclosure of any sensitive enduser personal data. Activating newer systems simply requires the phone number of the smartphone.

\n\n

A special word of caution here. Many legacy systems require the use of backend portal accounts. In addition to being rich caches of sensitive enduser data, a target of hackers, these portals can include hidden fees. What are these annual fees? Are they fixed through the life of the system? And who’s responsible for paying? It is best to simply avoid these types of systems.

\n\n

Smartphone Credentials Can Do Much More

\n\n

Plus smartphones offer many more features to be leveraged. What are these features? They include biometric capture and comparison as well as an array of communication capabilities from cellular and Wi-Fi to Bluetooth LE and NFC.

\n\n

Anything a card credential can do can be replicated by a smartphone credential. However, smartphone credentials can exploit new technologies in a way not possible with cards.

\n\n

As Suzi Abell of 3xLOGIC wrote in the September 14, 2018 issue of SIA newsletter, "a credential – supporting two-way communication with active notification capabilities – can be leveraged to send automated or ad-hoc notifications to users. Add location services and geo-fencing capability, and you can send notifications only to those people who are within a specific geographic area. And you can further target those notifications to specific people."

\n\n

She suggests, "Stop treating a smartphone like a legacy credential; no one should ever 'badge' a phone at a reader. By using location services, administrators will define how near to the door a person must be to request access. A mobile app that functions as the user’s credential and provides two-way communications with a central monitoring station will also provide a path for two-way emergency communications. For example, an employee leaving the building at the end of the shift on the way to her car can quickly and easily ask for assistance or notify security of a potential issue remotely via the mobile device in her hand.”

\n\n

Lower Installation Costs With New Generation Smartphone-Based Implementations

\n\n

Newer solutions provide an easier way to distribute credentials with features that allow the user to register their handset only once and need no other portal accounts, activation features or hidden fees. Users don't need to fill out several different forms.

\n\n

Some older mobile systems force the user to register themselves and their integrators for every application. Door access – register. Parking access – register again. Data access – register again, with each registration requiring the disclosure of sensitive personal information.

\n\n

By removing these intrusive information disclosures, these new solutions also get rid of privacy concerns that have been slowing down adoption of this technology. All that is needed to activate the credential is simply the phone number of the smartphone. When mobile credentials are sold from OEM to integrator to end user, it avoids setting up multiple accounts and eliminates sensitive personal information from being available for hacking.

\n\n

Bluetooth or NFC?

\n\n

Bottom line: both Bluetooth and NFC credentials are safer than hard credentials. However, read range difference makes a difference between the two.

\n\n

There are advantages to a closer read range. NFC eliminates any chances of the smartphone unknowingly getting read as can happen with a longer read range. There are also applications where multiple access readers are installed very near to one another due to many doors being close to each other. One reader could open multiple doors simultaneously. The shorter read range or tap of an NFC-enabled device would remove such problems. However, it must also be understood that Bluetooth-enabled readers can provide various read ranges, including tap range.

\n\n

There are advantages to a longer reader range capability. Since NFC readers have such a short and limited read range, they must be mounted on the unsecure side of the door. This exposure breeds problems. In contrast, Bluetooth readers can be mounted on the secure side of doors and kept protected out of sight.

\n\n

Also, you don’t want hackers listening in on your Bluetooth transmissions, replaying them and getting into your building. So make very sure that the system is immunised against such replays. That’s simple to do. Your manufacturer will show you which system will be best for your application.

\n\n

Research shows that Bluetooth-enabled smartphones are continuing to expand in use to the point where those that are not Bluetooth-enabled are already the exceptions. There is no doubt that Bluetooth-enabled smartphones are going to be a major force in physical and logical access control.

\n\n

Scott Lindley is a veteran of the contactless card access control industry.

\n\n

\n","article_image_uid":"https://dxfpracgmlczp.cloudfront.net/2019/03/1553864852058_main.jpg","article_expanded_image_uid":null,"article_image_caption":"","publications":"5","tags":"mobile credentials,card-based credentials,card-based access control systems,smartphone credentials,multi-factor solution","category":"Products & Technologies"}],"pageInfo":{"hasNextPage":false,"hasPreviousPage":true,"totalCount":12,"totalPages":1,"currentIndex":10}}}}