Merging Security and Convenience with Seos® Credential Technology Brian Bloomingdale, Northeast RSM-PACS, HID Global

Brian Bloomingdale Introduction & Welcome HID Global Northeast RSM bbloomingdale@hidglobal.com 315-391-6689

Agenda - Todays Keys - Tomorrow’s Keys - Overview of Card Technologies (Evolution) - Why SEOS ? - How to Upgrade: Process and Best Practices - Q&A

Keys Today Each use case is a discrete ecosystem of readers/locks/ applications and access keys. Key formats have been specific to the individual ecosystems. RFID cards Metal Keys Passwords Visual Documents

Infrastructure for Tomorrow’s Keys Keys will no longer be bespoke pieces of hardware, such as brass keys or dedicated plastic cards. Instead there will be digital keys that can reside on a variety of smart devices – mobile phones, micro- processor cards, wearables. Microprocessor cards Smartphones Wearables Biometrics

Digitally Signed: E5L9KFD An Overview of Card Technologies 101111011001001101001 47 93 AF 1B ED 7D Card Format: 101111011001001101001010 + Unique Device ID: 356465 Digitally Signed: E5L9KFD And is then ENCRYPTED 101111011001001101001 47 93 AF 1B ED 7D 101111011001001101001 Magstripe Contact technology that stores the unencrypted credential within a magnetic stripe on the outside of the card. Prox Early contactless technology that stores the unencrypted credential inside the card. iCLASS® Genuine HID® contactless technology that stores the credential(s) inside the card behind a layer of encryption. iCLASS SE® Genuine HID® contactless technology that stores the credential(s), in an encrypted format called a Secure Identity Object ® (SIO®), inside the card behind a layer of stronger encryption.. Powered by Seos® Genuine HID® contactless technology that manages the storage and retrieval of credential(s) , including SIO’s, inside any smart device by leveraging encryption and communication standards for the highest level of trust, security and privacy. iCLASS: Overarching brand name for Genuine HID contactless smartcard readers and credentials. Secure Identity Object (SIO): Data model used on some credentials that adds a digital signature and encryption to validate authenticity and protect against cloning and forgery. Secure Identity Object Enabled (SE): Identifies a device or system of devices capable of storing, interpreting and/or encoding the SIO data model. iCLASS SE: Overarching brand name for contactless smartcard readers, credentials and encoders that use the SIO data model for stronger authentication. Seos: A small software application (or “applet”) designed to store and retrieve credentials in a secure, trusted, and private manner.

Seos Credential Technology More choice Seos is a breakthrough credential technology that powers secure identity solutions. Seos gives the freedom to use your device of choice for secure access to more applications with the confidence that identities are secure and privacy-protected. More applications More confidence

: Enabling your Freedom Hardware independent, allowing identification from smart cards, smartphones, tablets, wearables and beyond More choice

: Enabling your Freedom Not tied to a specific communication standard, enabling use of ISO14443 RFID communication, NFC, Bluetooth and more More choice

: Enabling your Freedom Can be loaded to a wide variety of smart devices, including both the popular iOS and Android operating systems More choice

: Enabling your Freedom Can be read by HID Global’s readers as well as a growing number of devices from other manufacturers More choice

: Enabling your Freedom Designed both for standard and Mobile Access Built-in One Time Password feature for secure data access in cloud Hundreds of solutions through HID Global partners for extended applications More applications

: Enabling your Freedom For your security with best-in-class security and privacy Based on proven, standard cryptography Evolving to meet end-user needs today…and for years to come More confidence

1 2 3 How to Upgrade Establish a Standard Upgrade Readers Three Steps to Upgrade 1 Experience tells us that, in the vast majority of cases, it is best practice to establish a standard of a multi-technology credential to accelerate transition. However, there are occasions where single technology cards are beneficial to reduce cost. Establish a Standard 2 Upgrade Readers 3 Replace Credentials

How to Upgrade Option #1 HF LF HF LF  HF LF HF LF HF LF HF LF

How to Upgrade Option #2 HF LF HF LF  HF LF HF LF HF LF HF LF

How to Upgrade Upgrade best practices Site survey and complete inventory of existing technologies as a first step Continue to support as few of the legacy technologies as possible Choose new solutions capable of mobile access Start small – execute successfully at one site, then repeat For rebadging projects, consider buying pre-personalized credentials

How to Upgrade Upgrade caution areas Don’t procrastinate: Set target dates for completion Consider and manage performance expectations Implications of multi-tech readers and multi-tech credentials Beware metalized environments Pre-educate users to changes in card read performance and mobile performance