FIPS-201 Failure

Author: Brian Rhodes, Published on May 28, 2012

The security market is hungry for money. With security budgets shrinking worldwide, any glimmer of untapped sales sends manufacturers and integrators scrambling. Nothing carries more impact that sweeping government regulations, and as a result, when FIPS-201 (PIV) demanded government entities reform their identity credential use, many providers jumped at the chance. Unfortunately, more than a decade later, the security industry is still waiting for race to begin.

In this update, we examine FIPS-201 intent, identify where it has gotten sidetracked, and discuss if it will ever be a significant source of security spending.

*******

****-*** **** ** *********** ******** *** ******* *********** **** * single ******:

  • ******* ** **** *.* ******* ******* ******* *** ***********
  • ******* ******** ******** ** ************ ******* ********
  • ** ** * ***** ** ********** ** ******** /***********

**** **********, *** ** ********** **** ******** * ***** ** comply. ***** **************** ***** *** ******, ******* *** *** **** *********** *******. **** **** *** ********: "**** **** *****?"

********

*** ********** ** ******* ******* ****-*** ******* ** *** *** to **** ** ********* ** *** ********** ******. ******, * host ** ***** ******** **** *********** ******** *******:

  • **** ********* ************* **** ****-*** *****:**** ****** *** ******* ** ** **** *** ** ** compliant.
  • ********** ********** ******** *** ******* **********:******* ******* ** ***** ** ********** ***** ** *****.
  • ******** ******** *********** **********:********* *********** *** ******* *** ** ** ******** *****.
  • ******** ********:******* **** ********** *********, ***** *** *** ******** ** **** changes.
  • ** *********** ****** *******:***** ******* *** ** *** ** ***-**********, **** ********* *** nonexistent.

Market ******

* ***** ********** ** ***-************ *** *** ******* ****** ** * ***** **** *** compliance ** *** ********** ********, *** ******* ******** ********* ** from ***** * **** ****** ******.

*** *******, * ********* '******' ******** ** ***** * '****** access *******' ****** ******* ** ****-*** ********* ** ******** *********** that **** ******** ************* *********. ** *** ******* ****, **** requires * **** ** **** **** ******** * '****' ***** under * ******. ** ********, ****-*** ********** ********** ******** * cryptographic '**** ****' ******* ******* ******-***. ** ******* ********** ******, **** ******** ***** ****** * full ****** ** ********** ********* ** '****' * **********.

***** ************ **** **** ********** ******** **** ******* *** ****** or **** ***** ********* ** ********* ********** ******* ********** ******* areas. ** ***** ** **** *******, **** ***** * **** percentage ** *** ********* **** ******* **** ** ********. **** does *** **** ******* *** **** ******** **** ********** ************ applicable ** *** ****** ******* ****** ******, ***** *** **** to ** ************* ******* ** ******** ******** ** ****** *********.

** ***** ** *** *** ******** ******, ****-*** ********** *** not ************ ******** ****** *********** ******* ** **** ********** ****** control *******. ** ** ********* ********* ** ***** *** ******* effectiveness ** ****-***. ***** *********'* ****** ** *****, *** **** can ** **** **** **** ************* *** ********* ***** ** the ******** ****** *** **** ******.

Future ****** ******?

*** ****** **: **, *** ** *** *** ** *** once ********. *** ****** ******* **** **** ** **** '*** cart ****** **** *** *****'. ** ****** *** ********* *** security ****** ** ** ********** ***** **********, ** ******* *** enforcement *** *** ************ **** ********* **** **** ** ********* into *** **** ** ********* ***********. ***** ******, ********** ******** will *** ****** ** ***** ***** ****** **** *** ****** to ** ***** * ******** ****** ** *** *******. *** many, ****-*** ********** ****** ******* ******* ***** *** ** *** '5-Year ********* ****' ** ** ********* ** * ***** ****.

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

Access Control Course Winter 2018 on Jun 11, 2017
The Winter 2018 IPVM Access Control Course is now open; save $50 on early registration. IPVM offers the most comprehensive access control course...
RMR Integrator Importance Statistics on Jun 08, 2017
How do integrators feel about offering RMR / recurring revenue services? For many, their business revolves around RMR, while others see no...
HID Edge EVO Tested on Jun 07, 2017
HID Edge controllers have been one of most common offerings in IP door controllers for years. The new generation is called Edge EVO. We tested...
Access Control AHJ Nightmares on Jun 01, 2017
For access control jobs, a single person can be the difference between finishing a job, costing thousands in extra dollars, and being profitable...
US States Security Licensing Guide on May 30, 2017
In the US, many states require integrators to be licensed to install burglar alarms, CCTV, electronic access control, or all three, and...
Anti-Hack Access Card Shields Tested on May 26, 2017
Keeping your access control card information secure is becoming a big priority, especially since cheaper copiers can hack details easily. Multiple...
Hackable 125kHz Access Control Migration Guide on May 19, 2017
Despite being one of the most popular credentials, 125 kHz credentials are easily copied and insecure as we showed in our test results, video...
Smartphone Controlled Kevo Lock Tested on May 04, 2017
Smartlocks are a growing market, with millions sold. Kwikset's Kevo is one of the most common choices, using the Unikey smart phone access control...
Hack Your Access Control With This $30 HID 125kHz Card Copier on May 01, 2017
You might have heard the stories or seen the YouTube videos of random people hacking electronic access control systems. The tools that claim to do...
IPVM First Dean's List W2017 - Thomas Atkinson, Matt Hurly and Fredrik Lundqvist on Apr 24, 2017
IPVM is happy to congratulate and celebrate our first "Dean's List", the top students in our courses. For the Winter 2017 IP Networking course...

Most Recent Industry Reports

Uniview Low-Cost Bullet PTZ Tested on Jun 21, 2017
Uniview is offering a HD zoom bullet camera, the IPC742SR9-PZ30-32G, with an integrated pan / tilt positioner, for the price of a low-cost...
QSR Video Surveillance Best Practices on Jun 21, 2017
Fast food restaurants or QSRs (quick service restaurants), are frequent victims of crime and fraud. Because they are open late, deal with cash, and...
45 Drives 'Lowest Cost' Enterprise Storage Company Profile on Jun 21, 2017
45 Drives claims the "lowest cost per Hard Drive Slot in the industry." But who or what is '45 Drives'? What started as a product design to...
No Hack, Still Liable, Court Finds ADT on Jun 20, 2017
Recently, ADT has been in the news for a $16 million settlement for a cyber security vulnerability class action suit. One of the most important...
Resolver / PPM 2000 Incident Management Platform Profile on Jun 20, 2017
You might have seen the company whose employees wear hockey jerseys at trade shows and wondered "what do they do?" PPM 2000 has been active in...
Axis P3225 Mk II Tested Vs. Original on Jun 20, 2017
Axis has released a number of 'Mk II' versions of their cameras, which are the same fundamental camera but with specific improvements. We tested...
Directory of 40 IP Camera Manufacturer Discovery Tools on Jun 19, 2017
Locating the IP address of a DHCP client or factory defaulted device on a network is often a difficult task.  In another report, we discussed...
Dahua Demotes USA CEO on Jun 19, 2017
Dahua has demoted their USA CEO Tim Wang. Inside this note, we examine the move, Dahua's challenges and what lies ahead for the...
Avigilon Increases Prices In Canada, Europe and UK on Jun 19, 2017
While many video surveillance companies are racing to see who can cut prices the fastest, Avigilon is taking a contrary approach, actually raising...
VMS UI - Light vs Dark Preferences on Jun 16, 2017
Several VMS manufacturers have the ability to choose a user interface with either a light or dark color theme. 150+ integrators told us which they...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact