Security Sales & Integration August 2022 - 12

ACCESS
ENTRY/EXIT
IDENTIFICATION LOCKS
Sentry Enterprises' SentryCard Platform
Earns FIDO2 Certification
▶ WEST CHESTER, Pa. - Sentry Enterprises
announces that its SentryCard
solution, a decentralized biometric platform,
is now FIDO2 certified.
The FIDO (Fast Identity Online) Alliance's
FIDO2 specifications allow users
to leverage common devices to authenticate
online services in both mobile and
desktop environments, Sentry says. The
Alliance is an open industry association
with a goal of promoting authentication
standards to help reduce the world's
over-reliance on passwords, according to
the company.
" Sentry's patented technology and proprietary
electronics, 'cracked the code'
necessary to bring to market a corporate
issued, privacy-centric, user-controlled
Sentry says its decentralized biometric
solution met FIDO protocol hallmarks
of ease of use, privacy and security, and
standardization.
biometric identity solution that operates
at the edge, " says Mark Bennett, CEO of
Sentry Enterprises. " Sentry's platform and
capabilities reimagines what proof-of-identity
and trust means across virtually every
sector and industry, including security,
payment and the cryptocurrency markets. "
To meet the FIDO Alliance's specifications,
Sentry notes, the industry group
HID Global Firmware Fixes
Recently Found Vulnerabilities
▶ SILICON VALLEY, Calif. - Cybersecurity firm Trellix recently announced
it discovered four zero-day vulnerabilities in HID Global
Mercury access control panels, as well as four previously patched
vulnerabilities that were not publicly disclosed.
The firm says the impact of these vulnerabilities is full system
control, including the ability for an attacker to remotely manipulate
door locks.
Trellix investigated the access control panels as part of its
ongoing research to discover critical vulnerabilities, saying, " We
chose this specific access control panel to research because of its
ubiquitous use, the volume and criticality of industries they are
used in, the security certifications the product has received and
overall position in the market. "
The firm was able to achieve root access to the device's operating
system and pull its firmware for emulation and vulnerability
discovery via physical access, network access and exploitation.
The vulnerabilities uncovered by Trellix allowed researchers
to demonstrate the ability to remotely unlock and lock doors,
subvert alarms and undermine logging and notification systems.
HID Global confirmed with Trellix that all OEM partners using
Mercury boards are vulnerable to the issues on specific hardware
controller platforms.
" HID Global is committed to open and transparent communication
with our partners to ensure the continued long-term
12
Security Sales & Integration AUGUST 2022
identifies three core directives that are central
to the protocol: Ease of use, privacy
and security, and standardization.
Sentry Enterprises says current authentication
models often rely on nonstandard
protocols, passwords, physical ID cards,
smartphone, fobs, PINs, and because of
this many existing biometric solutions are
vulnerable to theft, hacks, and spoofing.
Its FIDO2-certified
form,
however,
employs
SentryCard platstandardized
identity
protocols that are private, secure,
and easy to adopt by security professionals
and IT staffs.
The company adds the decentralized
biometric platform eliminates the need
for compromised solutions such as smartphones
and passwords.
success of our business together, " HID Global tells SSI. " We
were recently informed of cybersecurity vulnerabilities within
firmware running on Mercury LP and EP4502 Intelligent Controllers.
We then acted quickly to confirm and address all issues
reported, validated fixes externally, and posted new firmware for
our OEM partners to consume. These partners then communicate
with their channel to deploy the firmware fix based on their
individual timelines. "
SIA OSDP Verified Program
Surpasses 100-Devices Milestone
▶ SILVER SPRING, Md. - The Security Industry Association
(SIA) announces a major milestone in its SIA OSDP Verified
initiative. Over 100 device models have been named OSDP
Verified through its comprehensive program, which validates
device conformance to the SIA Open Supervised Device Protocol
(OSDP) standard.
SIA OSDP is an access control communications protocol standard
maintained by the association to improve interoperability,
add advanced functionalities and support an AES-128 encryption
for security.
The standard offers compliance with access control installations
that require advanced security or are used in government
per FIPS 201-3. Products that are OSDP Verified are displayed
in the OSDP Verified Product List and can use the SIA OSDP
Verified mark in their product marketing materials.
securitysales.com
http://www.securitysales.com
Security Sales & Integration August 2022

Table of Contents for the Digital Edition of Security Sales & Integration August 2022
