campus identity roadmap · mobile technologies nfc – near field communication •secure element...

CAMPUS IDENTITY ROADMAP

1

Your roadmap to a unified campus

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

AGENDAColorID – A Glance

Campus Identity RoadmapWhat is it?Why do we need it?Technology TrendsSteps of Creation

2© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

ABOUT

3

About ColorID


EDUCATION -- CUSTOMERS1200+ Universities and Colleges

• Northwestern University• Harvard University• Stanford University• University of Georgia• North Carolina State University• University of Cincinnati• University of Notre Dame• University of Southern California• UCLA• Vanderbilt University• Massachusetts Institute of Technology• University of Nebraska-Lincoln• University of Auckland (NZ)• Waterford Institute of Technology (IRE)


GOVERNMENT -- CUSTOMERSFederal Government

Department of Commerce, FBI, NIST, NASA, Tennessee Valley Authority, White House, Both Houses of Congress

Military The Pentagon, Davis-Monthan AFB, Fort Huachuca, Andrews AFB, Bolling AFB, Camp Lejeune, SPAWAR, Cape Canaveral Air Station

Large Government Integrators MC Dean, ManTech International, SAIC, DynCorp International, General Dynamics, American Systems


WORLDWIDE CUSTOMERS

6

Customer Locations


PRODUCT & SERVICES -- MIX


BEST IN CLASS PARTNERS


CREATING YOUR IDENTITY ROADMAP


MANAGING PEOPLE ROADMAP


SILOS ACROSS CAMPUS


CAMPUS IDENTITY ROADMAP

What is it?


AN INCLUSIVE PROCESS

Strategic Identity Technology Plan

Stakeholders Engagement

Unique to your Campus.

Created & Managed by the Institution.


WHY DO WE NEED IT?

© 2017 -- IDENTITY ROADMAP -- ColorID, LLC 15

WHY DO WE NEED IT?

Unify and Enhance Campus Services and Security

Establish Implementation Guidelines & Channel

Establish Standards, Policy & Priorities

Establish Strategic Goals & Objectives16© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

WHY DO WE NEED IT? Best Practices & Benchmarks

Technical Independence and More Control

Inventory Existing Identity Infrastructure.

Evaluate Solution Providers, Contracts, etc.

Identify “Blockers” – Technology or Human.


TECHNOLOGY TRENDS

Contactless Cards Mobile Credentials Biometrics New Service Delivery Paradigms The Cloud


CONTACTLESS MIGRATIONS

HID SEOS or SIO on DESFIRE, DESFIRE EV1, EV2


HID SEOSHID SEOS

•Standards Based Cryptography•Micro-Processor Card•Available for many device

platforms•Built-in OTP Engine•Seos Vault on Card•Software Based – Can be upgraded

to combat future security threats•Can use DESFire emulation


DESFIRE EV1Secure Multi-Application Platform

• AES-128 Encryption• PICC Master Key – Card Level• Flexible application and file system• Each application like a folder in

Windows• Applications and files defined during

creation• Each application manages its own keys• Access rights defined per file


DESFIRE EV2DESFire EV2

• Released 2016, still slow adoption

• Can be backwards compatible with EV1

• Increased Read Range and Speed• New Features

• Derived Master Keys• Key Rolling

MISMART APP

Derived master keys for secure

application deployment


MOBILE IDENTIFICATION

Smart phones for POS, PACS, and Logical Access


MOBILE TECHNOLOGIESNFC – Near Field Communication

•Secure Element (hardware, often the SIM) communicates through Radio Frequency (NFC) antenna in phone, to reader•Uses existing reader infrastructure•Host Card Emulation - NFC data communicates with mobile device operating system rather than Secure Element•Apple slightly opening the door on NFC use

BLE – Bluetooth Low Energy (aka Bluetooth Smart)

•Available on most current handset models•AES-128 encrypted data•Likely Requires reader upgrades

Barcodes

•2-Dimensional Barcodes Generated on Mobile Screen•One-Time User Barcode•Barcode reader at POS locations

Geo-Location

•Uses phone location as validation for service•No Readers Required

Software

•Direct Communication with Backend Systems


CURRENT MOBILE USE CASES

Physical Access – with Reader

MfgPoint-of-Sale Supplemental

Credential

Revenue Generation –

Additional Fees


MOBILE SHORTCOMINGS

Lack of visual identification

Sense of belonging with ID card

Legacy Mag and Barcode Systems


MOBILE SHORTCOMINGSStability across

Handset Platforms

Apple Use of NFC

Upgrade Costs can be High


CONSIDERATIONS WITH MOBILE ID

In many cases, mobile credentials can be more expensive than a traditional card

Current hardware decisions MUST be made with mobile in mind

Determine which solutions and technologies work best in your environment


BIOMETRICS

Who Are You?


BIOMETRIC MODALITIES

Fingerprint•Most Familiar•Early Systems didn’t work well

•New Sensors –Multispectral, Light Emitting Film

•Smart Phone adoption•1/10,000 FAR Normal

Iris•1:N up to 100,000 < 1s•Non-Contact•Lowest FAR 1/1,200,000•10x Unique Points of Fingerprints

Vein Pattern•Infrared scanners –blood absorbs light

•Not really non-contact•1:N up to ~4,000•ATMs, Healthcare (Patient ID)

Facial Recognition•Emerging Technology•Surveillance/ Border Control

•Current sensors/algorithms good 1:N for ~1000 users

•Newer systems emerging for access with better accuracy


CAMPUS USE CASES

Rec Centers•Convenient•Sanitary•Fast

Dining / POS•Fast•Can still eat if card lost

•Avoid Fraud

Athletics•Can’t carry a card

•More secure•No Contact

Medical•Pharmaceutical Cabinets / Safes

•Cadaver Labs•Irradiator Rooms•Research

Data Centers•Very Secure•2 & 3 Factor Available


NEW SERVICE DELIVERY PARADIGMS

Enhancing the customer experience


BANK TELLER MODEL


MIT – BEFORE


APPLE STORE MODEL


MIT - AFTER


THE CLOUD

Cloud based applications provide increased functionality for distributed campuses


CARD ISSUANCE - CURRENT MODEL

Current ID Production

•Printers connected to individual workstations

•On-Premise Card System Database

•Remote & Onsite Support


CARD ISSUANCECloud Card Printing

• Eliminate the printer PC, enroll cardholders with devices via web interface

• Manage from anywhere• Eliminate software install and

maintenance• Utilize all available resources by

auto print queueing

1 2 n


REMOTE PRINTER MONITORING

Reduce Service Calls

Technicians can monitor printers from remote locations

Direct access to tech support, apply firmware to entire fleet

Minimize downtime, increase operational efficiency


AUTO-REFILL CONSUMABLESAnnual Service Fee

Printer consumables automatically shipped before needed

Save money on unused inventory

Eliminate out of stock issues

Minimize wasted staff time


SUBSCRIPTION BASED

Single annual or monthly fee

covers everything

Simplified billing

Increase efficiency of

current budget

Scale on demand


PHYSICAL ACCESS

Wiegand wiring vulnerable IP Based Readers or Panels OSDP Connected campuses


PIAM Physical identity and

access management Manage identities

among multiple PACS Automate key processes Ensure each identity has

the right access, to the right areas, for the right length of time


Advanced analytical risk profiles (BIG DATA) combining physical and logical activity

Prevent security threats in advance (normal patterns) Maximize productivity of people, facilities, processes Continuous risk assessment

PREDICTIVE ANALYTICS


CREATING YOUR IDENTITY ROADMAP


HOW DO WE DO THIS?Collaboration + Education =


MANAGING UP – CREATING SUPPORTSenior Leadership Buy-In

Existing challengesCampus Service Demands vs. ResourcesConsequences of not having PlanBenefits and Pathway to Adopting Emerging

Technologies


MANAGING ACROSS - COLLABORATION

Stakeholder Buy-In

Be Inclusive Technical DiplomacyCreate The Process Identity the Obstacles


STAKEHOLDER MEETINGS

Credential or Identity Managers

Current & Emerging Identity Technologies & Trends

Create Advisory Committee - Guidance on Policies, Standards & Priorities


IDENTITY STRATEGIC PLAN

51

I. EXECUTIVE SUMMARYII. SCOPE OF DOCUMENTIII. EXISITING TECHNOLOGIES & INFASTRUCTUREIV. OPPORTUNITIES for IMPROVEMENT

V. EMERGING TRENDING AND TECHNOLOGIES

VI. CAMPUS IDENTITY ROADMAP

VII. MOVING FORWARD © 2018 -- IDENTITY ROADMAP -- ColorID, LLC

OUTCOMESOutcomes

Unified Campus(s) Interoperable Credentials Enhanced Campus Services Enhanced Service Delivery Improved Security Costs Savings


MANAGE DOWN - LEADERSHIP

Demonstrate Vision - Staff & StudentsMake a DifferenceRewarding Experience


CAMPUS IDENTIFICATION SOLUTIONYour roadmap to a unified campus and credential


Thank You!


WHY – WE HAVE TO LOOK FORWARD


IDENTITYING PITFALLS


campus identity roadmap · mobile technologies nfc – near field communication •secure element...

Documents