Mobiles as access control tokens

Mobile Access Control: Exploiting the BYOD Trend (IFSEC Global)

With today’s mobile access technologies, smart devices can be used as universal credentials for accessing multiple buildings, IT systems and other applications using NFC and bluetooth. These devices provide users with extremely convenient vehicles for opening doors and performing other tasks that require the presentation of a secure credential.

There’s a lot of good information in the linked article and it’s written by the director of Strategic Business Development and Innovation at HID, and you’d expect that they’ve been putting a lot of thought toward what access control is going to look like after prox cards.

Yahoo allows for mobile-device-as-token to replace email passwords

Yahoo Mail Now Accessible Without Password (Latinos Post)

“You log into your Yahoo account using your normal passwords. In the security settings, you turn on on-demand passwords and register your phone. Next time you try to login, the password field is replaced by a button that says ‘send my password,’ and the company texts a four-character password to your phone.”

There are, however, critics of this approach. See Yahoo’s attempt to kill off passwords raises security concerns at Computer Weekly.

France: Banking group looks toward multifactor authentication

France’s national interbank network, Groupement des Cartes Bancaires CB, is currently evaluating the use of biometry in payment transactions (TMCnet)

The first CB approval will involve the association of biometry and a chip integrated into a keyfob. Integration of the chip into a micro-SD card of a mobile phone is also being studied. Highly convenient, the user keeps the keyfob or telephone on his or her person, for example in a pocket or handbag, without needing to present it physically to pay or withdraw cash.

You got biometrics in my NFC!

SmartMetrics incorporates NFC into biometric chip card

“This will enable institutions to offer a safer NFC solution than that which is currently available since the NFC Biometric Card will only be turned on allowing NFC communication to be inactive until the user touches the cards fingerprint sensor,” Chaya Hendrick, SmartMetric President and CEO said. “All other NFC technologies are inherently unsafe in that the device is always on providing hackers the ability to capture the NFC information even while the NFC product is not being used. Smartphones are a good example of ‘unsafe’ NFC systems.”