Brivo Mobile Pass Opens Any Door by Smartphone

Author: Brian Rhodes, Published on Sep 25, 2015

One of the major trends in access control are 'mobile' credentials.

NFC and BLE have been fighting for the title but neither has really has taken off.

Now, Brivo has announced a new way of doing this that sidesteps the hassle, and claims to work with any door, any reader, and the majority of all smartphones in seconds.

In this note, we examine Brivo Mobile Pass, explaining how it works, what it costs and what potential security risks it has.

*** ** *** ***** ****** ** ****** ******* *** '******' credentials.

*** *** ******* **** ******** *** *** ***** *** ******* *** ****** has ***** ***.

***, ***** *** ********* * *** *** ** ***** **** that ********* *** ******, *** ****** ** **** **** *** door, *** ******, *** *** ******** ** *** *********** ** seconds.

** **** ****, ** ************ ****** ****, ********** *** ** *****, **** ** ***** *** **** potential ******** ***** ** ***.

[***************]

No ****** ******

****** ***** ****** *********** **** ******* ******* ******* *** ******** smartphones, ***** **** ***** * ***** **** ******** ***** ********** app.

***** ****** ***** **** ***** ****** ** ******** *** ***, connecting ** *** **** ********** ******* *****'* ***** *******, *** essentially ******* *** '****** ******' ******* ** *** **** ******* the *** *********. **** **** ** ** **** ********* ** operator ******* *** *** *********** ** ******* / ***** ** any ********** ****.

** **** ***, *** **** ******** *** ****** *** ***** entirely *** **** ********** ******* *** ********** ******** *******.

App ***** ********

*** ***** ***** ***** ***** *** ***** ********:

************

*** ******** **** ***** **** *****'****** ******* **.******** *** *** *** ***** *******.

***** ****** ******

************** *** ****** * ****** **** ** ** ********** **********. Passes *** ******* **** ****** ** ***** ** *** ******, and ***** *** ***** ***** ***** ** ******** ** ****** pass ** **********. * ****** **** ** **** *** *** number ** *****, *** *** ** ********* ** **** **** on ******* ***** ** ** ************* *****. *******, **** **** a ****** **** ** ****** (** *** ** ***** ****** from *****'* ********** ********), ** ******** * ****.

*********** ****

***** **** ****** ****** **** ** ********* ** *** *** Android ********* ******* *** *** ***** ****** ******* **** *******, Palm, ***.

Mobile **** **** **********

***** ***** ****** ***** **** * '****' ****** ******. ********** passes *** ********* ** $** *** ***. ***** **** **** is *********** ~** ***** *** ****, **** ** ****** *********** especially ******** ** ******* ****** ***** ***** *** *** ** more **** *** ****** ****.

Security *****

****** ****'* ******* **** ** *** **** **** *** **** to ** **** * **** ** ****** **, ****** *** and ***. *** *******, **** *****'* ****** ****, * **** could **** *** **** ** *** **** **** ******** **** they *** ********** ***, ********** ** *** *** **** **** are. ******* **** ******* ************* ** ** *******, *** ******* that ************ *********** *** **** ********** ****** ** * ********** risk.

*** ****** *** ** ***** **** ** *** ****** *** to ******* ***** ** ****** ***** ** *** ****, *** is ******** ** *** ** *****-******* ******* **** ********. ***** says **** *** ******* ** ****:

"** *** **** *******,*********** **** **** *********** ********** ******** ***** *** ******* *** mobile **** ** ** ****** * ********* ******** ** *** door (***** ***) ** ** *** ***** **** *******. "

*******, ***** **** ** *****, ***** ****** ** ********.

*** ***** **** ** *** ***** *** ** *** **** a ******** *** ***** *****. ** **** *****, ****** ******* or ******** ***** ***** ***** **** *** ***** ****** *** and ****** *** **** **** ***** *** **** **********.

****

Comments (31)

Thumbnail b

Billy Guthrie

| 09/25/15 05:58pm

** ******** **** ** ******* **** * ********** *** ** (Card ******) ********** ***********, * ***** **** *** *** ** the ********** ** ******* ***** **** *** *****. *********** *** alongside * ********* ****** ***** ** *** **** ** ** opinion. ***********, *** ***** ******* ** *** ** *** ***** that ***** ** ************* ****** *** ********** *******. *** *** would **** *** **** ****** *** ******* ** ** * CA **********. **** ** ***** ** *** *** *******, *** phone ***** **** *** *******; **** ********* * ****** ** inches ** *** ****** ** ***** *** ******** ****** ******** were ** ** ******** **** **** ** -**** ** ***** transmit *** ** ********** ********* *** ***.

Undisclosed 1

| 09/25/15 06:22pm

********** ****** *** ********* ** $** *** ***. ***** **** this ** *********** ~** ***** *** ****, **** ** ****** inexpensive ********** ******** ** ******* ****** ***** ***** *** *** or **** **** *** ****** ****.

** ***** *** *** **** ** **** ** "***********", ** "rather ****** *** ******** ** ***** ****".

Thumbnail pp 5

Brian Rhodes

IPVMU Certified / IPVM Admin | In reply to Undisclosed 1 | 09/25/15 06:27pm

***** *** *****.

John Honovich

IPVM Admin | In reply to Undisclosed 1 | 09/25/15 07:12pm

****** **, **** **** ******* **** **** ******** *** ****? :)

Undisclosed 1

In reply to John Honovich | 09/25/15 08:21pm

****** **, **** **** ******* **** **** ******** *** ****? :)

***.

*** *** ****** ******** ** ****.

*** ******* ****** ******** ** ****.

*** ****** *** ** ****.

*** ****** ******* ******* ** ****.

*** *****-***** ****** *** ******** ***** ** ****.

John Honovich

IPVM Admin | In reply to Undisclosed 1 | 09/25/15 08:25pm

"** ****"

*** ** ******* ****. "** ******** ** *** ***** ** the ******** *******."

** *** ***********, ******** ***** ******* *** ******** **** ******** physical ******* (** **** * ****) ** **********.

Vlad Craciunescu

| 09/25/15 06:24pm

***** ** **** ****** ****** *********** ***** **** **** *** *** *** , *** **** sell * ****** *** ****, ****** *** **** ********* ***...** just ******* **** **** *** ** ***** **** ** ***.

Undisclosed 3 Integrator

In reply to Vlad Craciunescu | 09/26/15 01:05am

****** *** **** ** ******

Undisclosed 2

| 09/25/15 08:10pm

***, ***** *** ********* * *** *** ** ***** **** that ********* *** ******, *** ****** ** **** **** *** door,any ******, and the majority of all smartphones in seconds.

*** ******, ** **** *** **** **** *** ******* ********** into *****?

John Honovich

IPVM Admin | In reply to Undisclosed 2 | 09/25/15 08:13pm

"*** ******** **** ***** **** *****'****** ******* **.******** *** *** *** ***** *******."

Undisclosed 2

In reply to John Honovich | 09/25/15 09:36pm

* ****'* **** ***** **** * ******.

Thumbnail pp 5

Brian Rhodes

IPVMU Certified / IPVM Admin | In reply to Undisclosed 2 | 09/25/15 09:39pm

****** **** *****'* *** * ****** ** ****.

John Honovich

IPVM Admin | In reply to Undisclosed 2 | 09/25/15 09:40pm

*** ****** ****** ** ********** ****. ****'* *** *****.

Undisclosed 2

In reply to John Honovich | 09/25/15 09:44pm

****** ****.

** **** ***, *** **** ******** *** ****** *** ***** entirely *** **** ********** ******* *** ********** ******** *******.

Keefe Lovgren

IPVMU Certified | 09/25/15 08:58pm

* ** ****** ********* ** *** ******* ** *** ****, over **** **** **** ****** ********** ** * *** **** is ***********. * ***** ** ******* ** **** *** **** people **** ** ** * *** **** **. **** ****.

*********** *** **** ** * ******* *** **** **** *** and ** **** ******* ***** **** ******* ** *** **** it...

John Honovich

IPVM Admin | In reply to Keefe Lovgren | 09/25/15 09:02pm

*****, **** ********!

*****'* **** ** ***** ** *** ** *** ***** ** be ************* **********. ** *** **** **** *** ** ***** split *** ******* **** ***** **** *********** **** **** *** 50 - ** *****.

Thumbnail pp 5

Brian Rhodes

IPVMU Certified / IPVM Admin | In reply to Keefe Lovgren | 09/25/15 09:08pm

****** *****. ******* ** ** **** ** *****, *** **** the ******** ********, *** **** ** ** ****** ** * local **** ******* **** *** *********** *** **** **, *****?

*** ***** ******** **** *** **** ****/ **** * ******** network ***** *** ********** ****** **** ** '*** *****', *** on * ***** ******.

Keefe Lovgren

IPVMU Certified | In reply to Brian Rhodes | 09/25/15 09:27pm

*****,

** *** ** ****** *** ** ***. * ********** **** only ***** ********* ** *** ****** *** ***** ***** **** have *** ** *** ****** *** *****.

Keefe Lovgren

IPVMU Certified | In reply to Keefe Lovgren | 09/25/15 09:31pm

**** *********** ****** ********** ****:

****** ********** ***** **** ******** *******-* ****** *.* (** ******) software ** ******* * ********** ***** ********** **** *** ** used ** *** ** *** **** ** * ****** ** person *****. ****** ** ********* *** ********** ** ** *** corporate ******* ******** *** ****, **** ********* ********* ** *** building, ** *** *** ******** ********** ******** *** ** ****** Credential **** ******** * **** ********** *** ** **** **** the **********. ** *** ************, **** ****** *** ** ******** to ** ** ********* ** *** ******** (****** **** *****) while ****** *** *** ***** ****** ********** **** ******** ** the *************’* **********.

Thumbnail pp 5

Brian Rhodes

IPVMU Certified / IPVM Admin | In reply to Keefe Lovgren | 09/25/15 09:44pm

***********. ****** *** ******** ** **!

Undisclosed 2

| 09/25/15 09:59pm

*** *******, **** *****'* ****** ****, * **** ***** **** any **** ** *** **** **** ******** **** **** *** authorized ***.

* ***** *** **** ***** **** **** ****** *** ******** as ****, ** *** ****** **, ******* ** ***** ** meet ****. ******* **** ** ********* ** ******* ******.

********* **** *** *******/*********** ****** *** **** *** ******** *** the ***** ****. ***** ****** ******* * ******** *** *** length ** **** ******* *** *****/******** ********** ** **** * imagine ** * ********* *** **********.

** ****** **** **** **** ***** **** ***** ******* *******, but *** **** *** ****** ******* ******** ******** ********** **** 4G ** *** ***.

Thumbnail profile pic

Ethan Ace

IPVM Admin | 09/25/15 10:04pm

********* **** *** *******/*********** ****** *** **** *** ******** *** the ***** ****. ***** ****** ******* * ******** *** *** length ** **** ******* *** *****/******** ********** ** **** * imagine ** * ********* *** **********.

** ****** **** **** **** ***** **** ***** ******* *******, but *** **** *** ****** ******* ******** ******** ********** **** 4G ** *** ***.

**** ** *** **** **** **** **** ***** **** ******* systems? **** *****?

Undisclosed 2

In reply to Ethan Ace | 09/26/15 12:43am

* ******* ***** *** ** ***** **** **** ** ************* in ***** ******* ***** ***** ******** *** ** ******** ** cloud ******* **************.

*** * *** *** **** ** ** ****** ****** ** the **** ** **** * **** *******'* ****** ******* *********** are ****** *******.

** *** *** *******, **** *********** ***** ** ** ******** new ***** *** ****.

Wayne Jared

| 09/27/15 04:53pm

********' ****** ********** *** ******** ** **** **** *** **** that ***** *** * ****** *** ** *** * ********** for ****** ******* **** **** *********** *** *** ****/****** ***********, we ***** **'* ***** **** ***** *** ****** **.

*** ******* ****** *** *** ** * '****** ******', *** it's **** **** ** *** **** ** ********* *** **** the *** ****. ***, ****'* *** **** ** **, **'** been **** ******* ** **** **** **** *** ********** ** secure **** **** ** ********** *********** *** **** **** ** the ***** ** ** ****** ** *******. **** ****** ********** the ***** *****'* **** *** ** ** * ****** ******, it **** ***** *** ** ******* * ********** ** *** system *** *** *** ****** ** *** *** ******** ******. I ***** ******* ***** *** **** ********* ******* ** ****.

*** ************* ****** ** ********, ** ** ******** ************, *** can ****** ** **** **** ***** *** ******** ** *** limit **** ** **** ********* ** *** ******** (**** ******), and ****** * ****** **, ******** **** ** ***** ****** from ********. ** *** ***** ******** **'** ********** ** ****, this **** ** ****** **** **** *** ****** ** ******.

**** *****'* **** *** **** **** **** ********, *** ** need ** *** ****** ** *********** ****, ** **** *** can ********* *** ***** ** ***** ************* ******* *** ******** mobile ********** *** - **** ****, ***** **, ******, ***. via *** ***** ******, **** ** ***** ** ***** *** certified **** ** ********.

John Honovich

IPVM Admin | In reply to Wayne Jared | 09/27/15 05:09pm

"**** ****** ********** *** ***** *****'* **** *** ** ** a ****** ******, ** **** ***** *** ** ******* * credential ** *** ****** *** *** *** ****** ** *** the ******** ******."

*****, *** **** ******** ****** **** *** ****** **? ** other *****, ** * ** ** ******** ** * ******* who **** ******** *** *** ****** ********** ******* ** ** phone. * ***'* ** ** ******?

Wayne Jared

In reply to John Honovich | 09/28/15 02:27am

****,

**'* * *** ***** ********* *** ** *********. '********* ******' typically ***** * ****** ******, ******* **** *** ********** ********. But **** **** ***** *** **** ******* *** **** ** effectively *********. ** (*** *'* ***** ******** ****) **** **** someone ******** *** ********* ****** *** **** ** *** ** knowing *** ******** **** ******* *** ****. ** ********* ****** in **** ******* ** *** ****** **** ******. ***** *** been ***** ****** ** *** ** *** *********** (*** *****) on ******* ******* * ********** **** **** ********* ******* ***** door ** * ******, ** *** ****** ** ****** ***** a ******** ****** ********* ***** ** *************.

**** *** ***** **** ** * **********, **** * ********** is *********, *** ****** ** ******* ***** ** *** *******. i.e. '**** **** **** ****** ** **** **** ** **** time?'. **** *******/***** ** ****** ** *** **** *** **** through *** ****, ** ** ***** *** ********* ***** **********. There ** ******* ** *** ***** ** ***** ****** *** credential. ********* ** ******** *******'* *********** ** ********* *** ****'* on ***** ********** ******* ******** *** ** ** *********** ******* any **** ** **** ** **** ******** ** *** **********.

** **** **** ****** ******* ** *** **** **** ** one *** ***: **** ***** ** ****** ********** **** ** rights ** *** **** *** ******** *** ********* ** ****** to ******* *** ******* ** *** ****** ***** **** *** their **********. **** ** ***'* ***** *** **********-**** ******** **** it.

John Honovich

IPVM Admin | In reply to Wayne Jared | 09/28/15 11:31am

*****, * ***** ***'* ********** **** *** *** ******** ** do. *** ** *** ****** **** *** ****** *** '********* unlocks' * **** ***** * ****** ********** ** ** *** door ** **** ***** ****?

Undisclosed 2

In reply to John Honovich | 09/28/15 03:30pm

*** ** *** ****** **** *** ****** *** '********* *******' a **** ***** * ****** ********** ** ** *** **** at **** ***** ****?

****, **'* ****** **** ****** ********** *****'* ** * "********* unlock".

*******, *** ****** **** * ************ ****, **** ** ***** with * **** ****, *** **** ********** ***** **** *** credenditial **** **** *** ***** ** *** ** *** ****** instead ** *** ******.

* "********* ******" **** *** ********** ********, ** *** ***** hand, **** **** *** ******** *** ******** ********* *** ******, not *** ** *** ****** ***. ** **** **** *** require **** *** ****** *** ********** ******* ****** ****** ** granted ** *** *********.It's * **** ******** "****-**".

******* ****** ****** "******* **** *** ****** *** '********* *******' is ** *** **** ** **** ***** ****.", ***** **** using *** ****** ******* *** ***** ** ******** ****** *** world, ***

**** *******/***** ** ****** ** *** **** *** **** ******* the ****,or ** ***** *** ********* ***** **********.

**;**

'********* ******' **** **** *** ******** ********** *** ****** *** does *** ******* *** ****** ********* ******* ****** ****** ** granted ** *** ****** *********. ** "** *** ** ******* who" ** **** ****.

****** ********** **** *** ****** ********** *** ****** *** ******* they **** ********* * ***** **********. **** *** **** ** least *** ********* *** ******** *******, ****** *** ***'* ** sure **** *** ******** ** *** **** ** ****** **** the **** ** *** ******.

Brad Silvernail

| 09/27/15 04:59pm

********** - ** *** * ***** ******. ** ***** ***** Mobile **** ** ****** *********. * ***** *** ******** ** very ********** *** ******* ** *** * *******. *** ***** performance *** ****** ************* - ****** ** ***. ****, *** entry ** *** ******** *** ******** **** *** ** ******.

**** ** ***** ** ** ******** - ***. ********* ******* for *****-****** ********** - **** ** ***** - ***** *** having ** *** *** **** * ******** ****** ***** ** beneficial. ** ******* ** ***** *******. ***** *** ***** ********* with "******" ******** ********, ***** **** *** ***-******* ******* ** available.

*** ******* * **** ** *** ****** ** ***** *** and ********* ** ** ***** *** *** **** - **** one **** ******* ******.

* ***** ***** * ***** ************ ** **** ***** ** the ****** ***** ** ****'* **** *** **** ******* ** all *** *****!

Undisclosed 2

In reply to Brad Silvernail | 09/27/15 05:04pm

**** ** ***** ** ** ******** - ***. ********* ******* for *****-****** ********** - **** ** ***** - ***** *** having ** *** *** **** * ******** ****** ***** ** beneficial. ** ******* ** ***** ******.

******* ******* ** ***** **** *** ***-***** ******* *:**** *** 1:30PM ** ***********.

Bill Sowar

In reply to Undisclosed 2 | 09/30/15 04:31pm

**** ******** **** **** ******** **** *****/******** *********. *** ** someone ***** ** *** *'* *** ****** ** ******** * can **** ** *** ****** ***, ****** ** ***** **** are ******** ** *** **** *** *** **** ** ** not. (* ***** **** **** **** ** ***** ****** ** limit *********** *** ***- *******)

- **** **** *** *** ********* *** **** *****/******/***** ** they **** ***** *** *** ****.

- ********** ****** ** ** ****** *** * ***********. ** I ** ** ***** ** ** * ****** ** **** to **** * **** ** *****. *** **** **** *** opened *** ****, ** ***** ** ***** ** ***** ***** if ****** *** **** ******** ******* ***** *** **** *** world.

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Most Recent Industry Reports

Axis Secretly Paid Anixter Sales People To Push Axis NVRs on Sep 26, 2016
Internal Axis communication shows how Axis paid Anixter and Tri-Ed sales people with secret bonuses to push Axis NVRs. In this report, we examine...
VLANs for Video Surveillance on Sep 26, 2016
Many people confidently say to 'use VLANs' as an answer to IP video networking problems and as a way to signal expertise. But how should VLANs be...
Ambarella CEO Admits H.265 and 4K Not Popular on Sep 26, 2016
Ambarella is the main chip provider for high-end surveillance cameras driving higher resolution and new CODECs. While Ambarella has been pushing...
Nest Cam Outdoor Tested on Sep 23, 2016
After years of claiming an outdoor model was "coming", addressing their biggest user demand, Nest has finally released their Outdoor Camera, an...
ACTi Refuses Race To The Bottom, Shifts To Solutions on Sep 23, 2016
The original low cost IP camera disruptor was ACTi. Back in the 2008 - 2010 time frame, Taiwanese manufacturer ACTi challenged the Western and...
You Get Robbed, Canary Will Pay You Up To $1,000 on Sep 22, 2016
Canary is trying to break the status quo in DIY security, first by raising over $40 million, and now a revamp of their monthly services package...
Milestone Ends Development of "Enterprise" VMS on Sep 22, 2016
Milestone 'Enterprise' was one of the first enterprise video management software offerings, selected by many early adopters of IP video. However,...
History of Video Surveillance on Sep 22, 2016
This is a concise history of video surveillance covering the past decade.  The goal is to help professionals newer to the industry understand...
Access Control Course Fall 2016 on Sep 22, 2016
IPVM offers the most comprehensive access control course in the industry. Unlike manufacturer training that focuses only on a small part of the...
Totally Wireless IP Camera (IPVideo Corp NomadHD) on Sep 21, 2016
Wireless battery powered cameras have been a surveillance pipe dream for years, limited by camera power consumption, battery technology, and...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact