CAMPUS IDENTITY ROADMAP

1

Your roadmap to a unified campus

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

AGENDAColorID – A Glance

Campus Identity RoadmapWhat is it?Why do we need it?Technology TrendsSteps of Creation

2© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

ABOUT

3

About ColorID

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

EDUCATION -- CUSTOMERS1200+ Universities and Colleges

• Northwestern University• Harvard University• Stanford University• University of Georgia• North Carolina State University• University of Cincinnati• University of Notre Dame• University of Southern California• UCLA• Vanderbilt University• Massachusetts Institute of Technology• University of Nebraska-Lincoln• University of Auckland (NZ)• Waterford Institute of Technology (IRE)

4© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

GOVERNMENT -- CUSTOMERSFederal Government

Department of Commerce, FBI, NIST, NASA, Tennessee Valley Authority, White House, Both Houses of Congress

Military The Pentagon, Davis-Monthan AFB, Fort Huachuca, Andrews AFB, Bolling AFB, Camp Lejeune, SPAWAR, Cape Canaveral Air Station

Large Government Integrators MC Dean, ManTech International, SAIC, DynCorp International, General Dynamics, American Systems

5© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

WORLDWIDE CUSTOMERS

6

Customer Locations

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

PRODUCT & SERVICES -- MIX

7© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

BEST IN CLASS PARTNERS

8© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

CREATING YOUR IDENTITY ROADMAP

9© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

MANAGING PEOPLE ROADMAP

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

SILOS ACROSS CAMPUS

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

CAMPUS IDENTITY ROADMAP

What is it?

13© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

AN INCLUSIVE PROCESS

Strategic Identity Technology Plan

Stakeholders Engagement

Unique to your Campus.

Created & Managed by the Institution.

14© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

WHY DO WE NEED IT?

© 2017 -- IDENTITY ROADMAP -- ColorID, LLC 15

WHY DO WE NEED IT?

Unify and Enhance Campus Services and Security

Establish Implementation Guidelines & Channel

Establish Standards, Policy & Priorities

Establish Strategic Goals & Objectives16© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

WHY DO WE NEED IT? Best Practices & Benchmarks

Technical Independence and More Control

Inventory Existing Identity Infrastructure.

Evaluate Solution Providers, Contracts, etc.

Identify “Blockers” – Technology or Human.

17© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

TECHNOLOGY TRENDS

Contactless Cards Mobile Credentials Biometrics New Service Delivery Paradigms The Cloud

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC 18

CONTACTLESS MIGRATIONS

HID SEOS or SIO on DESFIRE, DESFIRE EV1, EV2

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

HID SEOSHID SEOS

•Standards Based Cryptography•Micro-Processor Card•Available for many device

platforms•Built-in OTP Engine•Seos Vault on Card•Software Based – Can be upgraded

to combat future security threats•Can use DESFire emulation

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

DESFIRE EV1Secure Multi-Application Platform

• AES-128 Encryption• PICC Master Key – Card Level• Flexible application and file system• Each application like a folder in

Windows• Applications and files defined during

creation• Each application manages its own keys• Access rights defined per file

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

DESFIRE EV2DESFire EV2

• Released 2016, still slow adoption

• Can be backwards compatible with EV1

• Increased Read Range and Speed• New Features

• Derived Master Keys• Key Rolling

MISMART APP

Derived master keys for secure

application deployment

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

MOBILE IDENTIFICATION

Smart phones for POS, PACS, and Logical Access

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

MOBILE TECHNOLOGIESNFC – Near Field Communication

•Secure Element (hardware, often the SIM) communicates through Radio Frequency (NFC) antenna in phone, to reader•Uses existing reader infrastructure•Host Card Emulation - NFC data communicates with mobile device operating system rather than Secure Element•Apple slightly opening the door on NFC use

BLE – Bluetooth Low Energy (aka Bluetooth Smart)

•Available on most current handset models•AES-128 encrypted data•Likely Requires reader upgrades

Barcodes

•2-Dimensional Barcodes Generated on Mobile Screen•One-Time User Barcode•Barcode reader at POS locations

Geo-Location

•Uses phone location as validation for service•No Readers Required

Software

•Direct Communication with Backend Systems

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

CURRENT MOBILE USE CASES

Physical Access – with Reader

MfgPoint-of-Sale Supplemental

Credential

Revenue Generation –

Additional Fees

25© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

MOBILE SHORTCOMINGS

Lack of visual identification

Sense of belonging with ID card

Legacy Mag and Barcode Systems

26© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

MOBILE SHORTCOMINGSStability across

Handset Platforms

Apple Use of NFC

Upgrade Costs can be High

27© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

CONSIDERATIONS WITH MOBILE ID

In many cases, mobile credentials can be more expensive than a traditional card

Current hardware decisions MUST be made with mobile in mind

Determine which solutions and technologies work best in your environment

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

BIOMETRICS

Who Are You?

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

BIOMETRIC MODALITIES

Fingerprint•Most Familiar•Early Systems didn’t work well

•New Sensors –Multispectral, Light Emitting Film

•Smart Phone adoption•1/10,000 FAR Normal

Iris•1:N up to 100,000 < 1s•Non-Contact•Lowest FAR 1/1,200,000•10x Unique Points of Fingerprints

Vein Pattern•Infrared scanners –blood absorbs light

•Not really non-contact•1:N up to ~4,000•ATMs, Healthcare (Patient ID)

Facial Recognition•Emerging Technology•Surveillance/ Border Control

•Current sensors/algorithms good 1:N for ~1000 users

•Newer systems emerging for access with better accuracy

30© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

CAMPUS USE CASES

Rec Centers•Convenient•Sanitary•Fast

Dining / POS•Fast•Can still eat if card lost

•Avoid Fraud

Athletics•Can’t carry a card

•More secure•No Contact

Medical•Pharmaceutical Cabinets / Safes

•Cadaver Labs•Irradiator Rooms•Research

Data Centers•Very Secure•2 & 3 Factor Available

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

NEW SERVICE DELIVERY PARADIGMS

Enhancing the customer experience

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

BANK TELLER MODEL

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC 33

MIT – BEFORE

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC 34

APPLE STORE MODEL

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC 35

MIT - AFTER

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC 36

THE CLOUD

Cloud based applications provide increased functionality for distributed campuses

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

CARD ISSUANCE - CURRENT MODEL

Current ID Production

•Printers connected to individual workstations

•On-Premise Card System Database

•Remote & Onsite Support

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

CARD ISSUANCECloud Card Printing

• Eliminate the printer PC, enroll cardholders with devices via web interface

• Manage from anywhere• Eliminate software install and

maintenance• Utilize all available resources by

auto print queueing

1 2 n

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

REMOTE PRINTER MONITORING

Reduce Service Calls

Technicians can monitor printers from remote locations

Direct access to tech support, apply firmware to entire fleet

Minimize downtime, increase operational efficiency

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

AUTO-REFILL CONSUMABLESAnnual Service Fee

Printer consumables automatically shipped before needed

Save money on unused inventory

Eliminate out of stock issues

Minimize wasted staff time

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

SUBSCRIPTION BASED

Single annual or monthly fee

covers everything

Simplified billing

Increase efficiency of

current budget

Scale on demand

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

PHYSICAL ACCESS

Wiegand wiring vulnerable IP Based Readers or Panels OSDP Connected campuses

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC 43

PIAM Physical identity and

access management Manage identities

among multiple PACS Automate key processes Ensure each identity has

the right access, to the right areas, for the right length of time

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC 44

Advanced analytical risk profiles (BIG DATA) combining physical and logical activity

Prevent security threats in advance (normal patterns) Maximize productivity of people, facilities, processes Continuous risk assessment

PREDICTIVE ANALYTICS

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC 45

CREATING YOUR IDENTITY ROADMAP

46© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

HOW DO WE DO THIS?Collaboration + Education =

47© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

MANAGING UP – CREATING SUPPORTSenior Leadership Buy-In

Existing challengesCampus Service Demands vs. ResourcesConsequences of not having PlanBenefits and Pathway to Adopting Emerging

Technologies

48© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

MANAGING ACROSS - COLLABORATION

Stakeholder Buy-In

Be Inclusive Technical DiplomacyCreate The Process Identity the Obstacles

49© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

STAKEHOLDER MEETINGS

Credential or Identity Managers

Current & Emerging Identity Technologies & Trends

Create Advisory Committee - Guidance on Policies, Standards & Priorities

50© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

IDENTITY STRATEGIC PLAN

51

I. EXECUTIVE SUMMARYII. SCOPE OF DOCUMENTIII. EXISITING TECHNOLOGIES & INFASTRUCTUREIV. OPPORTUNITIES for IMPROVEMENT

V. EMERGING TRENDING AND TECHNOLOGIES

VI. CAMPUS IDENTITY ROADMAP

VII. MOVING FORWARD © 2018 -- IDENTITY ROADMAP -- ColorID, LLC

OUTCOMESOutcomes

Unified Campus(s) Interoperable Credentials Enhanced Campus Services Enhanced Service Delivery Improved Security Costs Savings

52© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

MANAGE DOWN - LEADERSHIP

Demonstrate Vision - Staff & StudentsMake a DifferenceRewarding Experience

53© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

CAMPUS IDENTIFICATION SOLUTIONYour roadmap to a unified campus and credential

© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

Thank You!

55© 2018 -- IDENTITY ROADMAP -- ColorID, LLC

WHY – WE HAVE TO LOOK FORWARD

© 2017 -- IDENTITY ROADMAP -- ColorID, LLC 56

IDENTITYING PITFALLS

© 2017 -- IDENTITY ROADMAP -- ColorID, LLC 57

© 2017 -- IDENTITY ROADMAP -- ColorID, LLC 58