NEW PRODUCT INTRODUCTION CONEKT™ Mobile Smartphone Access Control Identification Solution June 2018

Conekt™? Conekt is Farpointe’s Mobile Smartphone Access Control Identification Solution Conekt consists of 3 elements: Smartphone wallet app Mobile credentials Mobile-ready contactless smartcard readers

Conekt is Simple Straightforward implementation And just 3 steps to gain access: Download Conekt wallet app from Apple App Store or Google Play Register the smartphone (requires only the device’s phone number) Then to add a mobile credential, enter a 16-digit registration key

Conekt Respects Personal Information Privacy maintained No requirement for end-users or project administrators to disclose sensitive information. With Conekt… No private information to disclose No intrusive on-boarding process No portal accounts 3

Conekt Supports the Channel Same ordering process as physical access credentials From Farpointe-to-OEM-to- Integrator-to-End User Instead of a box of cards, administrator receives an Order Summary and corresponding Registration Key Certificates Electronic or printed Administrator enters credential information in access control system from order summary Coding is identical to physical access credentials, i.e. format, facility code and ID. Then distributes Registration Key Certificates directly to individual users, just as they would traditional clamshell-style access cards Sample Order Summary Sample Registration Key Certificate 4

Conekt Leverages BLE Bluetooth Low Energy (BLE) BLE is a mainstream 2.4-GHz wireless technology standard BLE prevalent on all major smartphone brands BLE does not require pairing of devices Read range up to 15 feet (4.6 m) Read range is adjustable 5

Conekt is Secure Multi-Technology Reads mobile access credentials and contactless smartcards 2.4-GHz & 13.56-MHz Supports existing card user-base Supports users who don’t have smartphones Assists integrators and their customers with a seamless transition to a mobile solution Conekt™

Conekt is 2-Readers-in-1 Single reader mounts to both mullion and single-gang boxes Unique design is patent-pending. Provides flexible mounting options meeting the most common installation applications Metal mullion door frames North American single-gang wall switch boxes (metal or plastic) A flat surface

Conekt Offers Broad Support Interfaces Conekt readers wire just like a traditional proximity reader. Supports Wiegand The industry’s standard protocol Supports ABA Track II Magnetic stripe emulation, a venerable protocol Supports SIA’s OSDP Open Supervised Device Protocol Makes a growing list of security devices interoperable

Conekt Targets Security Common Criteria Certified EAL5+ Supports MIFARE® DESFire® EV1 and EV2, with advanced encryption

Conekt Provides End-to-End Security 2-factor-authentication during Registration Conekt Mobile App Mutual authentication. Session keys https with TLS and certificate pinning Hack Threats: False issuer Man-in-the-Middle App cracking BLE sniffing and replaying Firmware Hardware Conekt Reader End-to-end encryption Conekt Cloud Your µController LEGIC Connect Reader IC With SE Key derivation (unique keys per device) https with TLS Smartcard IC Host IF encryption (AES 128/256, 3DES) Key & Authorization Management

Conekt Addresses Hack Threats Conekt secures against False Issuer hacking Connections to mobile cloud services are verified using HTTPS with TLS, certificate pinning and API keys Conekt secures against Man-in-the-middle hacking Connections between mobile cloud services and mobile app are verified using HTTPS with TLS, certificate pinning. All file data is encrypted in the hardware secure modules (HSM) before being transmitted to the mobile app. Unique derived keys per smartphone are used. Encryption keys are only stored in HSMs. Conekt secures against App hacking No data encryption keys are stored within the mobile app software. Thus hacker attacks focusing on the mobile app will not be successful in compromising data encryption security. Conekt secures against Replay Attack hacking Through the use of mutual authentication and session keys between the mobile app and reader IC historic recorded session data cannot be replayed to the reader IC. Conekt secures against Lock/Reader Firmware hacking Data encryption keys are stored in physical tamper-resistant EAL5+ compliant hardware security module (SM) in the reader IC. The SM can detect physical attacks, such as IC shaving and electronic signals monitoring.

Conekt Thank you! © 2018 Farpointe Data, Inc. All rights reserved. Patent Pending. Specifications subject to change without notice.