HID Launches Origo To Fix Mobile Credential Problems

Published Feb 05, 2019 17:21 PM

HID is releasing Origo, an overhaul of its mobile credential platform, this time drastically restructuring the way it is priced and packaged. HID's Origo app is the replacement for Mobile Identities Portal and is slated to include other access management utilities like HID's Reader Manager [link no longer available].

**** *********** *** ****** ***** *** new *******, *** ****** ** ******* what ** ** *** *** *** impacts *** *******'* ******** ** ****** credentials.

HID's ******** **** ******

***** *** ** ******** *** ** the **** ****** ***** ****** ****** vendors (*.*. *** *** ***** ******* in******** ****** ******* ****** ************ ****), *** ***** *******'* ****** *********** offerings ***** *** **********.

* ********* ** ****** **** ********* mobile-specific ********** *******:

  • "***** ***** ******* ******** *** ******* structure **** ** ****** ****** *** be ***** ***** *** *********!"
  • "*** ********* ******* *** *********** **** **** smoothing ***."
  • "********* **** ******* **** ****** *********** but *********** ******* *** **** *** easy ** ***."
  • "*** *** ***** ***** *** *** been ****, *** ****** *** *** readers **** **** **** * **** for ** [*********] *** ********* [*** users]."

***** ****** *********** **** ***** ** an ****** **************, *** **** *** have *** *********** ******-***** *** *********** the ******* *** **** *********** ***********, leaving *** ****** **** ** ********** from * ****** ** ********** ************* ****,******,********,*****,*****, *** ******** **** ********.

New **** ******* *****

*** ****** ******* ****** *********** **** *** ****** ******* *** credentialing **** ****** ********** ** *** credentialing ******** *****, ********* *** ***** devices, **** *** ****** ***.

*** ********* *** ****** ** ****:

*** *** ********, *** *****, ****** a ******* ***** **** ****** ****** unpredictability. ***, ** ************* **** * flat ******* *** ****/****. *** ************, credentials, *******, *** ********* ****** *** included ***** ******** *****. *** **** is ** **** ****** ** ***** a ******, *** ******** **** ******* customer ***** ****** ** ** ***** cost ** *********.'

*** ****** ********* *** ******** ***** single ***** ***** **** ** *** new ****** ***** *** **** ****** they *******, ** **** ****** ** change ******* ******* ****** ********, ********, or ******:

'** *** ****** ********, *** ******* was **** *** ** * *** credential ***** ** ***** *** ****** model **** *****. ********** *** ***** that ** ** ** ***** **** many ***** **** **** **** *** smart ******, ********* ******** ***********. ***, any **** *** ************* ******* *** credential, *** **** ******* *** ***, or *** ****** ** ******** ** a ***** *****, *** ********** ** destroyed *** * *** *** **** be *********. **** *** ****** *********** with ****** ** *********.'

*** ********** ******** ********* ***** '****' pricing, *** ********* **** **** ***** should ****** ** *** ***** $*/*** year. **** *********:

*** ********* ********, ***-***** *** ****** to *** **** **** $*.** *** user *** ***** *** *** *** Origo ****** ********** *******.

No ****** ****** ***-**-**** **** ***

************ *************** ***********, *** *** ******** ** ******** it **** *** ******* ** ******* for ******** *****. *** ******* ******:

'** **** *** ******** ************ * timeline ***... ** **** ******* ************ applied *** ********** ******* ****** * number ** ********* *** ** ******** to ****** ** ** **** *** migration ****** ******** *** ********* ** the ****** ********.'

*** ******* **** **** **** ******** provisioned ******* *** *********** **** ** preserved ****** ** ******** *******, *** that ***** ****** *** ****** ***********:

'*** *** **** ************* **** ********** from *** ****** ****** ** *** new ******** **** ******** *** *****, devices, *** *********** ****** ******* – it **** ** *********** ******** *** they ****** **** *** ****** *** transition ****** *** ** ******* **** interface *** ****** *********** **** **** login. ************, *** ********* **** ** credited *** *** *********** ****’** **** in *** ****** ******.'

************, *** ******* **** **** ***** apps **** *** **** ** ** replaced ** *** **** ******:

'***** ** ** ********* ** ******** change ** *** ****** ************ ** the ****** *********** ***’* -- **** are ***** ******** ********** **** *** Origo.'

Two ********* ** ******

*** *************** ** **** **** **** * replacement *** *** ******** ****** *********** platform, *** **** ******** *** ********* 'Reader *******' *** [**** ** ****** available] *** **** **** ** ******* other *********:

*** '****** *******' *** ** ** installation *** ******* ********** **** ******* installers *** ***** ****** ****** ** configure, *******, ** ******* ******* ** the *****. *** ***********, ******** ** 2018, ** ******** ** ***** ** launch.

More ***** ********* *******

*** ***** **** **** **** ** expand *** ********* ******* ** *** platform, ********* ********** ************ *******'* **** *********** ** '********** ***' provider *********.

********* [**** ** ****** *********] ** a ***-******** ******** ****** ******, ***** Tracking, *** ********* ********* ********** ******** and *** ******** ** ********* **** Origo *** ******* *** **** ******* further ***********.

******, *** ******** ***** **** ********* will ****** ****** ******* *** ******* controllers ** **** ** ** * general ****** ******** *** ************* ***:

'***** **** ******* ***** ************ ** HID ******* *** *********** (***** **** select *****-***** ****** ******* *******) *** device *********** *** *********** *********** **********, offering ********** ******** * ****** ***** of *********** ** ****** * **** array ** ****** ******* *******.'

Does *** ******* **** ******* *********

*** ****** *** ***** ***** - any ***** ************* **** ** ******* incumbent *** ******* ********* *** ** not * *********** ***********.

*** *********:

'***** ** *** ******** ****** ******* software ** *** *********** *****.  ** cannot, *** **** ***, ******* ******* access ********** *******.  ******, ********** ******** will **** ****** ** ********* *** Origo ******** **** ***** ********, ******, market-leading ******** *********. ******, *** *********** will ******* ***** ************ ** *** and ****** *****-***** *******, ******** ********** partners * ****** ***** ** *********** to ****** * **** ***** ** access ******* *******.'

Origo ******* 

** ** ***** ****** *** *** emerged ** ****** ****** ***********, *** does *** ***** *********** ****** ***** nor ******** ********* **** **** *** segment ******** ** ******** ****/*** ***********.

** ***'* ******, *** ******* *** recognized *** *********** ********** ******* ****** have *** **********, *** ***** ** a ***** ** ******** ** ** alternative ******* *****.

*******, ******* ** *** *****, * new *** ******** ***, ** *** best ****** ****** ** ********* **** change ** *** ** ** ****.

 

Comments (26)
UI
Undisclosed Integrator #1
Feb 05, 2019

Hid is done for. Had a customer want the BLE and it was complete junk.

(2)
(6)
(1)
U
Undisclosed #2
Feb 05, 2019

I have a university that grows 30K credentials per year, old credentials are archived, however HID Mobile was too clunky to justify the cost for uplifting 2900 card readers.

(1)
(2)
U
Undisclosed #3
Feb 05, 2019

Yes, I am sure HID is about to close up their billion dollar business. 

(9)
UI
Undisclosed Integrator #4
Feb 06, 2019

Did they address the issue that you need an android device to configure the mobile-ready readers? 

(1)
Avatar
Brian Rhodes
Feb 06, 2019
IPVMU Certified

I'll ask HID to comment on this.  Thanks for bringing it up, as that's a big issue.

(1)
Avatar
Brian Rhodes
Feb 06, 2019
IPVMU Certified

HID responded, Origo on iOS is supported.  They also say the issue configuring BLE readers can be done via iOS as well:

HID Reader Manager, released last year, is available on both iOS and Android.  We addressed the issue referenced by your member.

Historically, our BLE Config App, contained a small subset of the functionality and was only available on Android.  This was the impetus for the question.

(3)
UI
Undisclosed Integrator #5
Feb 06, 2019

The good thing about HID is they acknowledge the short comings and problems their technology is having. It’s great to see a company proactively working on new ideas to adapt in a changing market. I believe HID, much like it’s parent company, will continue to lead and innovate well into the future.

(1)
UM
Undisclosed Manufacturer #10
Jul 30, 2019

Yeah, it's getting better. We're a software partner of theres and the process is getting better. Not quite perfect yet though. 

U
Undisclosed #6
Feb 06, 2019

I have asked a few companies offering mobile credentials why exactly the credential is so expensive. With cards you can kind of understand the price due to the physical card (though they are not very expensive to manufacture). But, a $7.00 street price for a mobile credential? That just seems ridiculous and like HID is trying to find any way they can to hang on to a legacy sales model of selling credentials.

While I know it is not exactly the same, I can use my mobile phone and BLE or NFC to pay for a variety of things, unlock things, and so forth. All without having to pay for any kind of "credential" to act as a unique identifier to me or my device.

Maybe if HID (and others) had some form of highly secure credential with other value-add features or functions the price would make sense, but it does seem that for the average user you should be able to do mobile credentials that are $0, and still more than secure enough for access control.

(1)
Avatar
Michael Maxsenti
Jul 30, 2019
Genea

Those mobile cards in your apple wallet or Android pay app are incredibly expensive. They just charge you interest fees and management fees rather than a charge for the card itself. 

 

U
Undisclosed #7
Feb 06, 2019

As a specifier, I would love someone to demystify the whole mobile credential workflow. I feel like it should be as easy as emailing someone the credential from the ACS software, they click a link, ready to go.

I do realize it is much more complicated than that, but I have yet to find a sales rep that understands it enough to explain or demonstrate it. 

 

(1)
Avatar
Brian Rhodes
Feb 06, 2019
IPVMU Certified

Integration of the workflow varies, and is an aspect Origo claims to improve. 

With that said, IPVM will test this later this year with our in-house equipment, and we will assemble findings in a report.

(2)
Avatar
Michael Maxsenti
Jul 30, 2019
Genea

Hey Brian, I'm one of the founders of Sequr (Sequr) we have fully integrated the Origo SDK into our mobile app and their provisioning APIs to enable one-click provisioning from our management portal. Would love to have you guys experiment/review. 

UM
Undisclosed Manufacturer #8
Feb 06, 2019

Undisclosed #7-

Re: Demystification of the mobile access credential workflow, my suggestion is to look deeper into how each of the incumbents mentioned in Brian's article above handle the process (i.e. Farpointe Data, Nortek, Wavelynx, Lenel, Brivo, and startups like Openpath).

Note I'm familiar with a few of the methods currently utilized and there are real differences in panel support, security and convenience.

I bet you'll be surprised with what you find!

(1)
Avatar
Brian Rhodes
Feb 06, 2019
IPVMU Certified

my suggestion is to look deeper into how each of the incumbents mentioned in Brian's article above handle the process

That's a good idea for an IPVM guide.  I'll add it to the queue.

Avatar
Brian Rhodes
Feb 07, 2019
IPVMU Certified

HID commented on pricing for Origo, stating the annual cost per user to be about $6:

End-users can expect to pay less than $0.50 per user per month for the HID Origo Mobile Identities service.

I am revising the report to reflect this.

UI
Undisclosed Integrator #9
Feb 08, 2019

Will HID still be offering the temporary 7-day mobile credentials?

Avatar
Brian Rhodes
Feb 08, 2019
IPVMU Certified

Hello.  I asked HID for a response and will post when I hear back.  Thanks.

Avatar
Brian Rhodes
Feb 11, 2019
IPVMU Certified

HID responded to this:

Not exactly but the temporary user (e.g. visitor) use case is accommodated in the new pricing model.  In fact, it is simpler and less expensive than before.  There is no need for a distinction in the credential type itself.

In HID Origo Mobile Identities, the Administrator has an unlimited number of credentials to issue across licensed users.  Since the licenses are transferable without restriction, a single license can be used for many visitors in the same day as long as they are not credentialed at the same time.  When all credentials are revoked from a user, that user becomes inactive and the license he/she was consuming instantly becomes available. 

(3)
Avatar
Attila Szűcs
Feb 18, 2019

Thanks for the report!

If we are talking about HID, I know it's not closely related to this topic, but what about HID and Apple NFC support?

I'ts working fine on android, and there were rumours that Apple will open the SDK not only for Apple Pay but also for access control.

For me it is an important topic.

Thanks

Avatar
Brian Rhodes
Feb 18, 2019
IPVMU Certified

Thanks Attila. l will ask HID about this. 

With that said, which features would NFC provide for Apple that BLE does not?

Avatar
Michael Maxsenti
Jul 30, 2019
Genea

NFC support on apple would greatly reduce the transaction time from BLE. NFC on Android has been a huge improvement for reliability and speed of credentialing. 

Avatar
Attila Szűcs
Jul 31, 2019

Wow, for some reason I didn't see your reply.

It is totally different from operational point of view. BLE is much slower, and NFC due to apple wallet is really fast, it is really like using a card.

On the other hand, you cannot use BLE if you are in a line of gates what offices usually have. BLE could be okay for a warehouse backdoor where there is no any door within a certain distance.

One more thing, NFC is built in all HID readers, but BLE is additional module, with additional costs.

Thanks

(1)
(2)
Avatar
Brian Rhodes
Jul 31, 2019
IPVMU Certified

 No worries. Interesting on this, just to make sure I understand:

On the other hand, you cannot use BLE if you are in a line of gates what offices usually have. 

Do you mean if you have 'layers' of openings where BLE potentially overlaps, it cannot work?

Avatar
Michael Maxsenti
Jul 31, 2019
Genea

Brian, what he means is that BLE can communicate up to ~50m away where as NFC must be within about half an inch. Therefore, if you have a reader in a parking deck scenario BLE allows you to communicate with the reader w.o rolling down the window or physically touching the reader. 

(1)
Avatar
Attila Szűcs
Jul 31, 2019

Yes, so if you have 4-6 readers close to each other the app cannot determine which one you want to authenticate on. NFC is more working like a card.

Just unfortunately apple still keeps locked the NFC, from this kind of application.