RiskUKDecember2017

Opinion: Mobile Technology and Access Control
The potential for the smart phone to evolve
is seemingly limitless. We’re talking about
a communications device that offers so
much more than just a talking facility. Apple
Pay, Android Pay and PayPal have rapidly
enabled the smart phone to replace many of
the functions of cash and cash cards, but
there’s also the possibility of replacing keys
and access cards as well. This is something
which the security industry needs to embrace
and promote more fully to its customer base.
As an industry, we are more than aware of the
potential for mobile device authentication.
Flexibility is a key benefit – smart phones can
easily receive authentication credentials
remotely and access can be confirmed or
denied instantly. At the same time, smart
phones already contain many secure options to
ensure they’re only used by the authorised user
– fingerprint and face recognition plus pattern
authentication and PINs being good examples.
Unfortunately, some security operators,
customers and members of the public in
general seem to be less aware of these exciting
benefits. There may even still be some
reluctance in certain quarters when it comes to
trusting a mobile device with physical security.
While it’s perhaps not that unusual for people
to mistrust ‘new’ technology, we security
professionals must demonstrate the
considerable benefits, security and convenience
of using those options now available.
No-one would deny that proving trust with
new security systems is essential. A badly
protected mobile device could present a huge
risk to the security of any network. For their
part, smart phones have had two key hurdles to
overcome. First, that they’re secure enough to
be trusted to work with a security network and,
second, that they can reliably identify the
phone and the authorised owner within a realworld
environment.
It’s common for smart devices to offer twofactor
authentication, which binds the mobile
device to the right person for security. This
makes it fully possible to combine a PIN code
with the authorised person’s face or fingerprint.
In high security areas, we can also implement
wall-mounted biometric readers (such as iris
scan, facial recognition or fingerprints) to add a
further level of security and ensure there’s no
fraudulent use of the mobile device, while also
maintaining convenience for end users.
Perfect for interaction
We all know just how many functions a smart
phone has and location tracking through GPS is
one of the most helpful. This is also perfect for
interacting with security systems. If you think
Going Mobile: Smart Phone
Technology for Access Control
If you think about one item that has revolutionised the way in
which we’ve all interacted with the world over the last ten
years, it has to be the smart phone. Given that it’s now a
decade since the first Apple iPhone was launched, and with
the smart phone becoming as essential a piece of personal
kit as our keys or wallet, what’s the potential for these
gadgets to both involve and fully embrace the security arena?
John Davies peers into the crystal ball
about any secure facility, there are often
different levels of access – from entry to the
canteen right through to secure doors around
potentially dangerous areas such as a plant
room (or even a nuclear reactor).
Traditional security tokens or cards are
rigidly programmed to allow access to certain
areas only, but a smart phone could either
grant or deny access depending upon the
location of the request by the individual.
With mobile devices so intrinsically linked to
our lives and lifestyles, they’re generally
guarded with the same care and concern as our
money. Many people carry their mobile device
wherever they go, so it’s fair to say they’re
relatively unlikely to be lost or left behind. Less
likely than a card on a lanyard, for example.
Think about how often you use or touch your
smart phone each day. I’ve read estimates
which suggest around 2,600 times. You’re
rapidly aware if it has been misplaced and very
wary because of the cost and potential
personal loss of both your data and ‘freedom’.
John Davies:
Managing Director of TDSi
13
www.risk-uk.com