Physical Access Control New Technologies for the DataComm Industry Mance Harmon CEO and Founder BlueWave Security

ACCESS CONTROL FOR THE DATACOMM INDUSTRY The Changing Face Of Access Control Customer Cost $$ Low High Manageability & Flexibility Low High Standard Locks & Keys Stand-alone keypad locks PC-managed stand-alone locks Panel-based Access Control (manageable, not flexible) Network-based Access Control WiFi / Ethernet-based Access Control WiFi-based stand-alone locks RF-based Access Control RF-based stand-alone locks Concept and Market Overview

Stand-Alone Locksets Pros –Relatively Inexpensive –More manageable than standard locks and keys –Can be mounted in most doors in less than an hour Cons –No central management or alarm notification –Requires Sneaker Net to update credentials and download audit Market Size: $3.5B, U.S. Only

ACCESS CONTROL FOR THE DATACOMM INDUSTRY The Changing Face Of Access Control Customer Cost $$ Low High Manageability & Flexibility Low High Standard Locks & Keys Stand-alone keypad locks PC-managed stand-alone locks Panel-based Access Control (manageable, not flexible) Network-based Access Control WiFi / Ethernet-based Access Control WiFi-based stand-alone locks RF-based Access Control RF-based stand-alone locks Concept and Market Overview

ACCESS CONTROL FOR THE DATACOMM INDUSTRY Intelligent Control Panels Company Overview: Products Network Interface ROM (Firmware) CPU RAM (Database) Reader / Lock Interface RS-232

ACCESS CONTROL FOR THE DATACOMM INDUSTRY Door Peripherals Locking DevicesReaders Sensors and Other Peripherals

ACCESS CONTROL FOR THE DATACOMM INDUSTRY The Changing Face Of Access Control Customer Cost $$ Low High Manageability & Flexibility Low High Standard Locks & Keys Stand-alone keypad locks PC-managed stand-alone locks Panel-based Access Control (manageable, not flexible) Network-based Access Control WiFi / Ethernet-based Access Control WiFi-based stand-alone locks RF-based Access Control RF-based stand-alone locks Concept and Market Overview

ACCESS CONTROL FOR THE DATACOMM INDUSTRY Intelligent Control Panels Company Overview: Products Network Interface ROM (Firmware) CPU RAM (Database) Subnetwork Interface Ethernet LAN / WAN Reader / Lock Interface Subnetwork Interface Reader / Lock Interface Subnetwork Interface Reader / Lock Interface Subnetwork Interface RS-485

ACCESS CONTROL FOR THE DATACOMM INDUSTRY Proprietary Converged Solutions Schlage – Bright Blue –Master panel manages both traditional doors and proprietary wireless doors –Requires additional communications networking infrastructure –Authentication is performed on master panel / or server –Maximum of 32 doors Stanley / OSI –Proprietary wireless stand-alone lock solution

ACCESS CONTROL FOR THE DATACOMM INDUSTRY The Changing Face Of Access Control Customer Cost $$ Low High Manageability & Flexibility Low High Standard Locks & Keys Stand-alone keypad locks PC-managed stand-alone locks Panel-based Access Control (manageable, not flexible) Network-based Access Control WiFi / Ethernet-based Access Control WiFi-based stand-alone locks RF-based Access Control RF-based stand-alone locks Concept and Market Overview

ACCESS CONTROL FOR THE DATACOMM INDUSTRY Company Overview: Products Network Interface ROM (Firmware) CPU RAM (Database) Reader / Lock Interface The New Architecture for Access Control: IP Door Controllers Ethernet LAN / WAN

ACCESS CONTROL FOR THE DATACOMM INDUSTRY Open Standards Converged Solutions

ACCESS CONTROL FOR THE DATACOMM INDUSTRY Thin Client vs. Thick Client When is thin-client useful? Cons –Webservers present additional security risk –Requires the purchase of special-purpose hardware appliance –System is more difficult to manage (must be patched by exception) –System can be harder to integrate with 3 rd party databases and applications Example: Bloomingdales

ACCESS CONTROL FOR THE DATACOMM INDUSTRY Why Proprietary Wireless is Evil! Security Is Not Auditable –Security Through Obscurity doesnt work –Wi-Fi security created and peer reviewed by the worlds experts Stuck with limited vendor toolkit –Is my network under attack? Or is it just broken? –Lack of a rich toolset for troubleshooting communication problems IT Administrators Want Standards-Based Solutions! Concept and Market Overview

ACCESS CONTROL FOR THE DATACOMM INDUSTRY Contact Info Mance Harmon (512) BlueWave Security Research Blvd., Suite Austin, TX 78750