The State of Mobile Access & Identity

Transcription

1 The State of Mobile Access & Identity *Moderator: Terry Gold Panelist: Brandon Arcement (HID Global) Panelist: Jason Hart (SafeTrust) Panelist: Deon Chatterton (Cisco Systems)

2 Panel Overview Session Goals Mobile in context of physical security Applications and outcomes Approaches, considerations and practices 2

3 1Mobile Market Dynamics

4 Security Paradigm Shift OLD PARADIGM NEW PARADIGM Keep everyone out... Assume they get in 4 Secure physical asset & people... Based on past events.. Lack intelligence... Disconnected infrastructure..... Lax controls; system limitations... Rely on installed hardware/firmware... Token issuance data & operations Predictive and preventative Pre-requisite Services over connected devices (IoT) Organizationally defined, audited, accountable Dumber hardware; smarter services Devices previously distributed; Virtual credential issuance, OTA, efficiencies via automation and self-service.

5 End User Requirements Segmentation LEGACY ELEVATED ADVANCED Generally not seeking strategy. Security not in the forefront but rather seen as utility for Real Estate Operations (REO) and facility infrastructure. Security Program focus but adherence to industry common practices and reliance on relationships and closed ecosystems stifle advanced strategy. Seek outcomes that contribute to security and business stakeholder value. Departure from common to best practices driven by pressure to align with InfoSec and audit. Profile Profile Profile Lack security specialization Value cost and simplicity Rely on relationships Lack internal standardization Lack obsolescence planning No conformance to InfoSec Dedicated security dept. Department consensus Internal standards common Industry common practice Plans viable to 2-4 years out No/separate audit from InfoSec Ecosystem over neutrality Report or dotted line to CISO BU Stakeholder consensus Best practice driven (InfoSec) Competency vs. relationship Internal standards a priority Value efficiency & outcomes Viability plans 6+ to life Changing to comply w/audit Vendor neutrality priority Intel, controls & efficiency

6 Mobile Identification Applications Payments Transportation Healthcare HCE Applications Secure Devices Digital Wallets Mass Transit Passenger Ticketing Drivers License Patient ID Provider ID Payer ID Host Card Emulation Tokenization PROVISIONING Supplier (LR) Transportation Worker Continuity of Care Data EPCS BA ID Auth Encryption Signing P2P Verification Gov ID (National ID) Education Commercial (Enterprise & SMB) Gov ID (Employee & Contractor) Expanded Use Cases (café, vending, muster) P2P Verification Loyalty Membership Hospitality Citizen ID (egov) 2-Factor Verification Logical Physical Consumer

7 Deon Chatterton Cisco Systems Sr. Manager, Systems Technology and Services Safety Security & Business Resiliency 2 PANEL Jason Hart SafeTrust Brandon Arcement HID Global Director, Product Marketing Chief Executive Officer

8 Demands Areas & Opportunities SECURITY BUSINESS ENABLMENT OPERATIONAL EFFICIENCY NEUTRALITY Improve overall security that is aligned with validated security principles. Software Platform approach that enables a broad range of data to produce actionable intelligence for the benefit of stakeholders. Improved functionality and workflows for managing infrastructure, components, and lifecycle events with relevant operational controls. Ability for organizations to have better total control of vendor choice, function and integration.

9 Primary Solution Models HARDWARE-DEFINED Authentication dependent upon mobile device app and reader compatibility. Vendors focused on monetizing readers and user licenses Traditional controller throughput approach Requires latest version readers SOFTWARE-DEFINED Authentication primarily dependent upon mobile device app and server/service communication Vendors focused on monetizing server/service and user licenses Credential skips reader and controller Business for authentication Process Introduction of server/service for in-line authentication New opportunities while also new sets of challenges SYSTEM-DEFINED Authentication primarily dependent between mobile device app and Physical Access Control System. Vendors focused on monetizing PACS IT Infrastructure license, upgrades, retention. Varies on approach #1, #2, or blend Dependent on specific PACS Not focused on best-of-breed, impose homogenous environment Security 9

10 Current State Primary use cases Who are mobile solutions currently being designed for? Bluetooth Low Energy vs. NFC (Did NFC Lose?) Acceptance (end users; decision makers as to piloting, etc.) Lifecycle and issuance Technology used as protocol and compatibility with existing 10

11 Challenges Mobile Device Policy Infrastructure Upgrades License models / Costs SaaS vs. In-House Vendor Solution Maturity Function Maturity Device Battery / Power User Intent Integration of Events/logs Security Device/Network Connectivity Ease of Use 11 Visual ID

12 Best Practices 12 Start with defining specific organizational outcomes Make use of opportunity to engineer proper controls Seek stakeholders for input (and support) Identify mobile device policy owners and familiarize finer points Develop detailed solution definition and functional requirements Evaluate and measure solutions ability to meet requirements Discover dependencies and gaps with meeting device policy Contingency planning to overcome dependencies and policy gaps Executive, vendor, and solution delivery provider support Methodology: PoC, Pilot, candidate production and scale. Define success criteria for each phase. Investment commensurately.

13 13 Panel Predictions

14 Q & A Ask the Panel 14 Confidential & Copyright D6 Research