Benefits of upgrading access control and identity management systems: • Offer a more convenient

end-­user experience

• Significantly reduce fraud

• Cut registration lines in half

• Provide student IDs that last an entire career

• Eliminate the need to support multiple cards for various campus needs

Smarter Identity and Access Control Solutions for Higher Education

Helping Universities Maximize the Value of a More Complete Access Control and Identity Management Solution

Overview

Educational institutions face increasing security threats along with shrinking budgets and intense pressure to cut expenses across all levels and departments. Colleges and universities must keep their campuses safe in as cost-­effective manner as possible. At the same time, each school has its own set of unique requirements and challenges, requiring flexible system architectures that satisfy today’s demands while providing the foundation to meet future needs. HID Global solutions and services for educational institutions are developed from the ground up to solve these challenges and give security officers the confidence that their infrastructure can protect students, staff and faculty for years to come.

Solving the Legacy Technology Problem

The majority of today’s colleges and universities use magnetic stripe cards as their primary technology. Unfortunately, magnetic stripe technology typically uses little or no security protections, and those universities who still use it continue to be plagued by fake student ID cards. While administrators may be tempted to upgrade only to low-­frequency systems, the almost 30 year-­old technology still leaves security vulnerable without delivering significant cost savings or an easy upgrade path to future capabilities when needed.

The best option in this rapidly evolving area is to upgrade to the most current technological innovation for the best return on investment over time. Contactless, high frequency systems that support both smart cards and devices, combine improved security with the convenience. The ability to use a single card or device for applications beyond access control, such as secure debit and payment capabilities, allow for more streamlined operations and a better end-­user experience. The initial expense of moving to today’s more robust contactless technology is outweighed by the long-­term cost savings from less maintenance, improved management efficiencies and an infrastructure capable of supporting innovative new features in future.

2

In a world where identity data has become black market currency, security and the protection of sensitive information is paramount. Systems that follow best practice ensure that sensitive identity data is encrypted, containerized and communicated in a highly secure manner.

Upgrading Your Approach to Access Control Don’t know where to start? Upgrading is easier than you may think. Moving outdated technology to a new system can be simple, affordable and manageable. Upgrading legacy technology readers with multi-­technology readers can limit disruption to the day-­to-­day workflow. Making incremental reader changes can facilitate other upgrades as budget and resources are available. This approach allows universities to retain their existing student ID and issue code numbering systems while moving gradually toward a new system supporting the latest contactless technology.

Another aspect that has become increasingly important over the past few years is user experience. We are quickly moving toward a mobile-­first world. Smartphone technology has become the nexus of our interaction with the world around us. Access control is no exception. Offering the choice and convenience of using a smart card, mobile device or both is highly desired and soon to be become expected, particularly with students. Adopting reader technology that is compatible with both traditional and mobile credentials can future-­proof today’s upgrade investment.

For even greater benefits, look for systems that securely support applications beyond the door. These applications can include cashless payments, biometrics, PC logon and more. These multi use functional credentials are typically referred to as “one card” systems. These systems realize a higher level of return and ease of management through the consolidation of disparate systems.

According to Ed Chandler, chairman of the independent security consulting and engineering firm Security by Design, Inc., this ability to support multiple data types is crucial for enabling systems to control utilization of many valuable assets – both today and tomorrow. For instance, in cashless vending applications, a monetary value added to a smart card or device can be adjusted each time the card is read during kiosk purchases. For more costly items, such as those purchases in a campus bookstore, the card can be tied to a debit system managed by a third party. In a cafeteria, cards can be configured so purchases can only be made up to an authorized maximum according to the user’s meal plan. They can also support other types of functionality, including accessing fee-­based document printing resources at a campus copy center.

Better Ways to Badge

Once a secure, reader platform is chosen, it is also important to consider smart card issuance. Today’s printers, card materials and software deliver the high levels of security required by incorporating visual and logical technologies to deter tampering and forgery. The latest software also makes it easy for card office administrators to synchronize card encoding information with the student enrollment database and encode the card while it is printing, thus eliminating the possibility of errors and simplifying the process of any updates that might be required.

A secure and efficient printer/encoder solution is critical for issuing student ID cards, especially during the busiest periods at the beginning of each term. Students

3

don’t want to stand in line for hours during registration, only to be told that they must come back tomorrow to get their badge. Onsite printing not only eliminates the need for students to revisit, but also saves precious staff resources during the busiest time of the year. Additionally, selecting cards that emphasize durability can ensure that students are not revisiting the card office during their time at the university.

DTC Versus HDP Printing

Two popular methods for smart card issuance are Direct-­to-­Card (DTC) printing and more recently, High Definition Printing (HDP) Retransfer Technology.

HDP printers print a high-­resolution image to a transfer film, which is then adhered to the card. This process not only provides for exceptional image quality with more accurate color matching, but

also eliminates the possibility of print head damage caused by direct contact with the card’s contact chip. HDP printers produce crisper, higher-­definition images than DTC printers. HDP units also feature high reliability and durability and faster print speed.

Efficient issuance combined with optimal card security utilizing visual and logical technologies for multi-­layered validation is the new standard. The goal is to make the whole experience as quick, painless and convenient as possible. Printing smartcards is no longer much different than printing magnetic stripe cards and have very similar workflow processes. By selecting the proper printer you can not only save time, but also lower the lifetime cost of ownership.

What to consider when choosing a printer/encoder solution:

• Make sure that it features a small footprint so it can be installed wherever needed.

• The trade-­offs of going with a low-­end printer vs. one that may cost more initially, but reduces waste and expense over time. Is the solution in line with sustainability initiatives?

• High-­throughput solutions can run operations in parallel, speeding issuance by encoding one student’s card while it’s printing another.

• Support for both centralized and distributed printing, allow two or more desktop units for large-­volume, centralized card runs, as well as individual units at locations such as residence halls alleviating long card pickup lines and improving student convenience.

• Ease of setup and use – card issuance should be intuitive and require little or no training.

• Printers should also be field-­upgradable so they can meet new requirements, as student ID system needs evolve. Upgradable units enable universities that already own a card printer to add an new encoder to leverage new smart card benefits as they come to market.

• Select a software application that supports multiple uses and features easy-­to-­use card templates that streamline the card creation process, including synchronizing all data used in the card with existing databases.

• Built-­in programmers/encoders, combining multiple processes into a single in-­line card personalization for greater speed, efficiency and reduction of human error.

4

Speeding Up the Issuance Process

One way of speeding up the issuance process is to use pre-­print cards with some of the required information ahead of time, either in-­house or using a service bureau. The remaining items can be printed at the time of issuance using faster, partial-­ribbon printing. The pre-­printed template can include the school seal, logo, mission statement and other visual security elements (VSEs) such as higher-­resolution images and holographic card over-­laminates, as well as permanent laser-­engraved personalization attributes that are difficult, if not impossible, to forge or alter.

By printing all static information on one side of the card ahead of time, the balance of printing can be done on one side only, further reducing print time as well as the expense and space required for installing a card flipper for dual-­side printing. Another method is to enable incoming students to upload photos in approved formats ahead of time. Some campuses upload card information while students are standing in line using tablets and other mobile devices.

Logistical enhancements are also important for the card services office. This can include positioning customer service reps inside the door and optimizing floor layouts for visibility and traffic flow. By implementing these and other best practices, card offices can reduce student lines and print hundreds of cards a day using just two highly efficient printers. You can turn today’s monumental campus ID badging process into a streamlined and error-­free experience for staff and students, alike.

Visitor Management and Temporary Access Control

Students, faculty and staff aren’t the only people on campus -­-­any university physical access control system platform must also support visitors. Proper visitor registration is one of several important security safeguards that all colleges should address, and protecting campus residence halls is of particular concern. Field-­proven, time-­tested visitor management systems keep students and staff safe, while reducing the cost of theft, vandalism and other risks associated with unauthorized guests.

Visitor security on campus begins with knowing who is visiting the different buildings and the purpose of their visit. How this is accomplished will depend greatly on the type of environment. For instance, managing visitors professionally and securely in an open campus environment is very different than in single-­entry environments, and yet just as important – if not more. And because most college campuses are open environments, with many people moving about the campus, it can be very challenging for administrators to monitor visitor and guest activity. Nevertheless, it is critical to control access to residence halls at all times, and to be able to set access restrictions during specified hours, or to implement campus-­wide access rule updates in minutes when needed. Hand-­written systems are simply not feasible, because they don’t offer adequate security, and they are not scalable enough to support campus expansion. Automated visitor management solutions can solve these problems. Six Benefits of Automated Visitor Management

1. Capture visitor data more quickly, accurately and automatically. Administrators optionally can have the system scan driver’s licenses and other government IDs before granting visitors entry.

5

2. Facilitate faster guest check-­in and check-­out by incorporating a simple barcode scan. 3. Simplify guest sign-­in and check-­out by creating long-­term, durable visitor badges for

family members and other authorized guests who will be visiting frequently through the school term.

4. Pro-­actively flag potential threats at the time of check-­in by screening through third party databases where allowed.

5. Issues alerts for visitors who, for instance, may have repeatedly violated check-­in procedures or stayed on premise longer than allowed.

6. Use for reconciliation at the end of visiting hours, so that campus administrators know which guests still are on campus and which have checked out.

Increasingly, visitor management is being integrated into the university’s access control system to provide a more complete security solution. This type of integration enables lobby attendants to easily and safely provide temporary access to guests through the visitor management partition of the system.

Integrated visitor management does not require a supply of live cards at the reception desk for those who have forgotten their permanent cards. It also ensures that the visitor system has a record of all visitors who have been provided an access card, so there is a complete audit trail, including information about the dates and times when cards were active.

One Device, So Many Applications

Upgrading to high frequency contactless technology offers not only efficiency and convenience but the added value of supporting applications beyond the door. The following are examples of applications that can increase the value of your contactless campus ID smart card or device:

Facility Access: Today’s smart card or device can be used to access dorm rooms, libraries, the media and fitness centers, cafeterias, on-­campus healthcare facilities, computer labs and to gain access to

entertainment and athletic events. Visitors can also be issued temporary cards, ensuring the campus is safe and protected.

Cashless Payments: Contactless technology provides the necessary security to support meal plan purchases, laundry, printing, copying and other campus services. Additionally, they can be used to redeem discounts, participate in loyalty programs and to make debit and other cashless payments in partnership with financial institutions.

Parking and Transportation: Contactless smart technology can help campus parking facilities function smoothly, safely and reliably. Electronic access control eliminates the need for guards at entrances. Students, faculty and staff can also use their cards to access bus, rail systems and other transportation services, as well as car and bicycle sharing systems.

Protecting Valuable Assets: The same card or device that is used to enter buildings can also be used to borrow items at these locations, such as library books or media center items. The card can also work with both wired and wireless locks installed on secure storage receptacles like cabinets and gym lockers. These locks can be connected to the building’s online access control system for near-­online and near-­real-­time control. Cards also can be used to protect and

6

monitor even higher-­value resources like fleet vehicles, and industrial, laboratory or other equipment.

Protecting High-­Security Areas: Contactless technology can support multi-­layered authentication where needed. Institutions with high-­security R&D labs, for instance, might wish to deploy biometric technology. It is important to note that biometric templates can be included directly on cards or devices, instead of storing all templates on all the biometric reader itself. Finally, new legislation or regulatory requirements might also prompt the need for this or other types of multi-­factor authentication.

Time and Attendance Monitoring: There is increasing pressure for universities to monitor and record student attendance. Attendance-­taking at classes, lectures or other events are much faster if students can use their cards to very quickly check in as they enter the room.

Cost and Sustainability Initiatives: Another important card application is secure document management and printing, which reduces paper, toner, maintenance and energy costs while ensuring that authorized users access resources properly. Cards can also be used for building automation programs to control access to lighting and HVAC systems, and they can be used to secure campus Electric Vehicle (EV) charging stations and service equipment, making it easy for eco-­conscious campuses to support these emerging clean transportation initiatives. See how HID Global access control, issuance and visitor management solutions are solving challenges for educational institutions at https://www.hidglobal.com/education.

### About HID Global HID Global is the trusted source for innovative products, services, solutions, and know-­how related to the creation, management, and use of secure identities for millions of customers around the world. The company’s served markets include physical and logical access control, including strong authentication and credential management;; card printing and personalization;; visitor management systems;; highly secure government and citizen ID;; and identification RFID technologies used in animal ID and industry and logistics applications. The company’s primary brands include ActivID®, EasyLobby®, FARGO®, IdenTrust®, LaserCard®, Lumidigm®, Quantum Secure, and HID®. Headquartered in Austin, Texas, HID Global has over 2,700 employees worldwide and operates international offices that support more than 100 countries. HID Global® is an ASSA ABLOY Group brand. For more information, visit http://www.hidglobal.com. © 2016 HID Global Corporation/ASSA ABLOY AB. All rights reserved. HID, HID Global, the HID Blue Brick logo, the Chain Design are trademarks or registered trademarks of HID Global or its licensor(s)/supplier(s) in the US and other countries and may not be used without permission. All other trademarks, service marks, and product or service names are trademarks or registered trademarks of their respective owners.

2016-­05-­10-­hid-­smart-­card-­higher-­ed-­wp-­en PLT-­02867