Avatar photo

Contributor

Author Bio ▼

Adam Bannister is a contributor to IFSEC Global, having been in the role of Editor from 2014 through to November 2019. Adam also had stints as a journalist at cybersecurity publication, The Daily Swig, and as Managing Editor at Dynamis Online Media Group.
March 25, 2019

Download

Whitepaper: Enhancing security, resilience and efficiency across a range of industries

CYBERSECURITY

WebAuthn API heralds the end of password reliance

A truly comprehensive approach to data security can no longer rely on passwords and encryption, a leading door locking manufacturer has said.

Abloy UK was responding to the news that the World Wide Web Consortium (W3C) has approved a new standardWebAuthn – that authenticates users in web-based applications using a physical credential other than a password, such as a gesture, biometric reading or a key.

WebAuthn has been hailed as a “big step toward a password-free future.” Most major browsers have already incorporated support for the standard, which uses the credential management API extension to add a physical layer of security.

Abloy UK says it has long advocated supplementing passwords with physical keys.

Although passwords have become more complex and harder to duplicate, they may not be good enough alone.” Pip Courcoux, Abloy UK

 

“In many ways, security against cyber-attacks is similar to security against physical attack,” said Pip Courcoux, sales and product manager for CLIQ Systems at Abloy UK. “For example, a stolen password is a stolen credential, a phishing attack is similar to wireless credential cloning.

“If you can get close enough to the individual and get enough data you can fill in the gaps and recreate the identity. Although passwords have become more complex and harder to duplicate, they may just not be good enough alone.”

Abloy provides a locking solution that adheres to these principles. Based on detainer disc cylinders and electronic identification, PROTEC2 CLIQ offers flexible key and access rights management, together with complete audit trails via a web-based management system.

PROTEC2 CLIQ can be combined with the CLIQ microelectronics platform to form an additional layer of security and flexibility through advanced encryption and time-based access principles.

“As the big tech companies continue to develop artificial intelligence and quantum computer chips, the digital world will face new threats, so passwords and encryptions could be broken in milliseconds,” added Courcoux.

“But when electronic security fails, Abloy customers will sleep soundly knowing they are ahead of the curve, having chosen a balanced approach to their security where mechanical and digital work in harmony.”

Abloy UK is exhibiting at IFSEC International 2019, taking place 18-20 June 2019 at ExCeL London (stand IF644). Book your free ticket now.

Related Topics

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments
Topics: