FIPS 201 credential validation your team doesn’t have to build.

A federal customer asks whether your panel supports PIV authentication at the door. Technically, it could. The distance between “could” and “does” is where these projects stall.

Time-of-access FIPS 201 validation is not one feature.

Let’s get reacquainted. FIPSlink is our APL approved software for Validation and Authentication of FIPS201 Credentials (PIV/CAC/TWIC). That’s the beginning.

The term “zero trust” was first used to describe a security model based on the principle of “never trust, always verify.” Over the last 15 years, IT professionals have embraced this model to never trust a user or device on the network by default, even if that user or device is already inside the network. This strategy ensures that every access request is validated.

Are you issuing a low assurance credentials in a high assurance access control environment? Examples of low assurance credentials are low security access cards like Prox, iClass, SEOS and MiFare Classic/Desfire.  What do you do for students, interns, and short-term employees who may only be on-site for 90 days but will not receive their PIV card until near the end of their time? What about long term contractors or employees who may not be eligible for a PIV card? Visitor badges are intended for short term use, but we know facilities are making exceptions and by doing so taking a big security risk. You can issue all of those people a high assurance credential controlled in your environment instead of taking that risk.

At the recent DEFCON 32 convention in Las Vegas, an interesting presentation (High Intensity Deconstruction: Chronicles of a Cryptographic Heist) was made outlining an approach to “stealing” the keys from certain HID encoders for the iCLASS SE platform.  While much of the talk goes way over my head, it seems like the standard keys for ICLASS SE & SEOS are vulnerable to the approach outlined.

The Cybersecurity Infrastructure Security Agency (CISA) released guidance on the topic of Convergence for federal agencies in 2019. Physical Security and IT departments are increasingly recognizing the reality of converged threats. The traditional separation between these two domains has often led to isolated management of vulnerabilities, which might seem manageable on their own. However, when malicious attacks or simple oversights bridge these gaps, the risks can escalate dramatically.

Next month will mark the 20th anniversary of President Bush signing into law Homeland Security Presidential Directive-12 (HSPD-12) on August 27, 2004. The directive transformed identity management for federal employees and introduced the Personal Identity Verification (PIV) credential.   A few years later FIPS-201-1 was established to meet the security and inoperability goals of HSPD-12.

One of the most critical, or at least most visible elements of TWIC validation revolves around the TWIC Cancelled Card List (CCL), a CSV file published by the TSA daily that defines which TWIC credentials have been cancelled (lost/revoked/etc.) that should no longer be considered valid for use.

Validation and registration of CAC /PIV / PIV-I / TWIC credentials into an access control system via FIPSlink has never been easier. Facility personnel can now register card holders with an Android based handheld device in addition to a windows-based PC or laptop.

Hello! I’m Shane Istre, the new North Region Sales Manager at Identity One. My region covers the Northeast, west all the way to Chicago and South to Maryland.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from April 9-12, 2024.

Visit our partners Genetec Booth #13062 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from April 9-12, 2024.

Visit our partners AMAG Technologies Booth #14089 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from April 9-12, 2024.

Visit our partners IDENTIV Booth #12089 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from April 9-12, 2024.

Visit our partners JCI Software House Booth #18033 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from April 9-12, 2024.

Visit our partners Napco Security Technologies Booth #12031 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from April 9-12, 2024.

Visit our partners LenelS2 Booth #18059 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from April 9-12, 2024.

Visit our partners Galaxy Control Systems Booth #4071 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from April 9-12, 2024.

Visit our partners IDEMIA Booth #15133 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from April 9-12, 2024.

Visit our partners Apollo Security Booth #18109 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

We recently installed a new port project in south central USA with one of our PACS partners. During the installation the end user was unsatisfied because the PACS supports integrated authentication using active directory but the FIPSlink PACS Service did not expose this functionality for the specific PACS. Because the sale was sold through a partner we didn’t know about this requirement but because the PACS supported this functionality the end user expected the overall solution would support this functionality.

Identity One’s FIPSlink Access has been tested & certified with OnGuard, bringing official support for OnGuard versions 8.2, 8.1 & 8.0. FIPSlink brings another option to FICAM & TWIC customers using the OnGuard platform. OnGuard customers can leverage FIPSlink for multiple use cases with FIPS 201 credentials (CAC/PIV/TWIC).

Identity One is exhibiting FIPSlink, our TWIC & CFATS Compliance Solution, at the Critical Infrastructure Protection and Resilience North America 2024 in Lake Charles, LA, March 12th to March 14th, 2024. Our Solution will be available for demonstration on the show floor. Stop by booth #18 to talk with Trent White about the many ways our solutions address your requirements.

Eliminate bottlenecks and streamline the check in/registration workflow with the FIPSlink Visitor self-service kiosk. FIPSlink Visitor automates the process through a self-service kiosk application that can register & validate an existing PIV, CAC or TWIC issued by another agency/department or dispense a high-assurance PIV visitor credential.

Federal Government departments and US armed forces can now upgrade high volume entries and doors to face PIV readers to complement their existing fingerprint PIV readers without having to rip and replace existing PIV readers.

FIPSlink now enables users of the IDEMIA VisionPass or MorphoWave series of contactless biometric readers with an additional choice of how they are integrated within your facility’s Physical Access Control System.

ATLANTA, GA., October 10, 2023 — Identity One, providers of the next generation FIPSlink software, announced today the release of a PIV-like credential to be used by visitors to US Government sites; the V-PIV card. V-PIV cards are shipped pre-configured to be electronically verified performing the same PKI authentication as a PIV at the door.

Identity One announces the successful testing and deployment of their joint FIPS 201 solution with Convergint Federal for a North Carolina military facility.

The Identity One team, in partnership with IDENTIV and an unnamed US government department recently completed a Factory Acceptance Test for FIPSlink Handheld Access Control of PIV an Desfire cards.

Identity One is excited to announce that we are exhibiting at the SIA GovSummit 2023 in Washington DC May 16th to May 17th 2022. Our Next Generation FIPS 201 Solutions will be shown with our PACS and hardware partners and available for live demo’s.

NextGen Security, LLC announced the deployment of Identity One FIPSlink for a Houston-based manufacturing facility of plastics, tires and gasoline.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from March 28-31, 2023.

Visit our partners Genetec Booth #20045 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from March 28-31, 2023.

Visit our partners IDENTIV Booth #13089 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from March 28-31, 2023.

Visit our partners AMAG Technology Booth #14089 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from March 28-31, 2023.

Visit our partners IDEMIA Booth #15121 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

To learn more about what we do, meet with Identity One’s team at the ISC West trade show in Las Vegas, Nevada from March 28-31, 2023.

Visit our partners Jonson Controls Booth #18033 or contact Trent White trent.white@identityone.net or 470.338.7453 to schedule a time and place.

How integrators can leverage the upcoming TWIC compliance deadline, as well as PIV and CAC programs, to find success in the government and critical infrastructure markets.

This article originally appeared in the March 2023 issue of Security Business magazine. When sharing, don’t forget to mention Security Business magazine on LinkedIn and @SecBusinessMag on Twitter.

In 2022, HID Global announced that March 31, 2023, would mark the end of support for HID’s pivCLASS Mobile Validation software. Many HID mobile solution users have since explored the impact of the announcement on their operations.

In light of this news, Identity One has announced that their FIPSlink software is available as a replacement for users who previously relied on HID’s pivCLASS Mobile software for handheld verification of TWIC, PIV and CAC (FIPS 201 credentials).

TWIC isn’t dead. The affected industries indicate they’re in favor of sticking with the secure TWIC credential, but there’s a need for clear and definitive rules around security of those with TWIC accessing secure areas of TWIC facilities and a precise detailing of the facilities who are actually affected by the regulations.

Security Informed Virtual Round Table: What Will Be The Biggest Surprise For Security In 2023? – From the desk of David Smith. Identity One recently participated in a virtual round table on what we expect will be the biggest surprises in 2023. Like any year, 2022 was full of surprises

Identity One continues to innovate our FIPSlink product with new hardware & technology included in our end-of-year update including support for IDEMIA’s latest contact fingerprint readers.  The newly supported readers include MorphoSmart 330, MorphoSmart 1300 e3 and MorphoSmart 1350 e3. The marquee feature of the new MSO 330 is an increased capture area (FAP30).

As a port/terminal operator, how do I increase #TWIC security at my gates without increasing staff? It’s a question we have been asked more than once. If you are currently using visual only inspection the number of guards is directly linked to the number of gates and throughput at the those gates. #IdentityOne and #Genetec now have a solution. Remote TWIC Validation/Registration is the newest feature in FIPSlink.

The scientists at NIST may have been anticipating this post COVID reaction when they released FIPS 201-3 in January of this year. This new standard allows the use of Facial Recognition, the most frictionless technology, to be used as an authentication mechanism in a FICAM complaint access control system. Just as Codebench fulfilled a need a decade ago, Identity One developed FIPSlink, an innovative next generation touchless solution that adds facial recognition to an access control system that uses CAC/PIV credentials.

AMAG Technology and Identity One are proud to announce that their joint solution has been approved by the Federal Identity Credential and Access Management (FICAM) conformance program. Now featuring Identity One’s FIPSlink software as a validation system, AMAG’s Symmetry Access Control platform has been added to the Government Services Administration’s (GSA) approved product list (APL), making it available to all Federal Agencies for procurement. For more information, refer to AMAG APL listing 10134 and Identity One APL listing 10144.

Learn about the latest new FIPS 201 features for CAC, PIV and TWIC in FIPSlink and how they benefit customers, installers and access control businesses. Trent White will be attending ISC East with the ability to demonstrate and discuss these new features.

Identity One is proud to announce FIPSlink support for Coppernic’s latest handled series, the Access-ER. Coppernic’s next generation of handhelds bring new levels of performance and convenience to end-users all within a much smaller form factor – more than 40% by volume, and 50% by weight.

With Identity One’s FIPSlink Validator, not only can you validate a TWIC card and the identity of the person holding the card, but you can add an extra layer of security and functionality with our Access Check and Access Control features. The Access Check feature validates TWIC cards and then performs an access check on the credential using PACS areas and time periods assigned to the credential and area to grant or deny access. The Access Control feature adds the functionality for access control requests to be sent to PACS to open doors and vehicle gates etc. after the access check to the PACS has granted access to the area.

SIA has named Peter Boriskin, CTO at ASSA ABLOY Opening Solutions, as the new chair of SIA’s Standards Committee! In this role, Boriskin will lead and work with committee members to develop, promote and advocate #securityindustry #standards in a coordinated effort with other standards and specification writing bodies. Additionally, SIA would like to thank outgoing SIA Standards Committee Chair Steve Van Till – co-founder, president and CEO of Brivo – for his 11 years of service and leadership as chair.

The newest version of FIPSlink is now live. Using the same technology stack Identity One now offers FIPSlink via a subscription model with no on premises infrastructure needed.

Identity One is excited to announce that we are exhibiting at the SIA GovSummit 2022 in Washington DC May 24th to May 25th 2022. Our Next Generation FIPS 201 Solutions will be shown with our PACS and hardware partners and available for live demo’s.