FIPS-201 Improvements Reviewed

Author: Brian Rhodes, Published on Jul 19, 2012

A new version of FIPS-201 is being introduced, but does the update make it more relevant to the physical security industry? To a large extent, FIPS-201 has been responsible for issuing large numbers of new credential cards, but has failed to change physical access control systems. Does the update rectify this? In this note, we examine the draft update and analyze what it means for the physical security industry.

Key Changes

*** ** ****-***'* *********, *** ******** ********* ** ********* *** Technology(****), *** ****** ******* ******** *** ****** *********** *** ******* standard,***** ****-***-*. ** ****** *** ********* * ************ ** **** **** ******* *** ******** ******* **** ****** participants, *** ***** ** ****** ** ******* ** **** ******* were *********, ** ***** *** ****** **** ******** ** ******** security *****:

  • *********** *** ** ****** *** * *****, ******* ** *.
  • ********** *** ************ ********** (************) **** *** ***** *** *** included.
  • ********** *** *********** '*-**************' ** ********** ** ***** ******** ********** devices *** *** ********.
  • *** ******** **********-*** ********* ********** ******* ** * ******* ** ******* *** ** **** specifications

***** *** **** ****** ** ******** ******* ** ******** ********** process ** ***** *********, *** ***** ******* ** *** ******** any ********* ****** ***********.

******* ** ******: **** **** *** *** ********* ********** ** ****, *** focus *** ************* ** ************* ******* ****** *********** *****. ********** the *************** ** ******** ****** *********** **** ***** ****-*** *****, but *** ******** ** *** ****** *** ******* **** ******** focus. ** * ******, *** **********/************** ** ****-*** *** **** mixed ** *** ******** ****** ****, *** ** **** *** primarily ******* ** ******* *** '*** *********' ***********. **** ****** bridges **** ** *** **** ** *** ******** ****** **** by ********* ********** ** *** ** ******** ***** *** ************ biometric *** ********** ***********.

**********: **** ***** ******** ** ********** ************** ** ********** *** they *** **** ** '* ******' ************, ***** *** ******** describes **:

  • "********* *** ****": ******** ** ******
  • "********* *** ****": *********** ****** ** ********* ** ****** ***********
  • "********* *** ***": ********* ***********, **** *********** **** ***********

*** ***** ******** ******** ** ***** *** *********** ***** *** biometric ********. ***** *** ******** **** ******** * '****** *****', this ******* * ******* ***** *** *** **** ** ****** biometric *****. *** ********* *********** ** ** ** ********* ***** time * *** ********** ** ******, ***** ** * ******* of * *****.

*-**************:*** ******* ******** ***** *** **** *** ********* *** ***** PIV ***********. ***** *** ******** **** *** ************ ******** *** technology, * *** ******* ************'* '*-************** ********'******** ** ********. **** ******** ************** ******* ******* ********** *** issuing *-*********** **** '**** **** **********', ******* **** *** ******* level ** ********** *** ** ******** ** **** **********.

*********

**** ************* ***** ** ********:****** *** *******, * ******** ******** ****** ********** *** ********, claiming *** ********** ************* **** **** ********* **** *** ********* products. *** ****** ***** ***, *** *** ***** *********, **** the '******** ******* ****' *** **** *** ** ******* ** only * *** *******. ******* *** ************* ** ********* ** interpret *** **** *************, **** ****** ** ***** ********* ********* products. ********* **** ****** ****** ************** **** ** ** ********* in ***** *** **** ******** ******** ********* ** '***** *** game'.

Market ******

*** ****** **** ****** ** ****** ** ******* ************** ** FIPS-201, *** ******** ** *** ********** ********* ** ***********. ** does *******, ****** *** ******* ******** ** ******* ******** *********** technologies **** ***. ***** **** *** ******** *** *** ** be ******** ********, ** **** *** ****** ** ************* ****** physical ****** *******.

************* ****-*** ******* ******* *** ******** ****** ******* ******* * huge ********, ********** ** ** ********* ** ****** *******. ***** the *********** ********** ********** *** ********** *** *******, **** ***** does ******* ** ****** *** *** ******* ******* ****** *** physical ****** ******* *******. ** ****** **** ****** ** ** received ** * ***** ****** ** ******** ******** ******** *** executives.

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports on Access Control

Genetec Launches Cloud Access Control (Synergis SaaS) on Sep 21, 2017
Genetec's cloud everything expansion continues, with their announcement of Synergis SaaS edition, joining their cloud video offering Stratocast,...
Automatic Door Operators For Access Tutorial on Sep 20, 2017
Opening and closing doors might sound simple, but it takes a high-tech piece of door hardware to pull it off. Integrating automatic door operators...
HID Buys Mercury Security on Sep 19, 2017
One of the biggest access control deals in years. Mercury Security, the most widely used access hardware OEM, and partner to 20+ manufacturers,...
Cloud Guy Prints Book, Misses Irony on Sep 15, 2017
On-premise security systems are dead. But $75 print books are alive and well. Such are the lessons from Brivo's CEO new book "The Five...
Master Keying Tutorial on Sep 14, 2017
Mechanical keys are the most fundamental, albeit unsophisticated, form of access control. Like access control, Master Keying allows large scale use...
Fail Safe vs. Fail Secure Tutorial on Sep 13, 2017
Few terms carry greater importance in access control than 'fail safe' and 'fail secure'. Access control professionals must know how these concepts...
Axis: Use QR Codes Instead of Access Cards on Sep 12, 2017
Innovation in access may be hard to find, but Axis recently suggested an idea for credentials few have considered. Rather than using plastic cards,...
Dahua and Hikvision Entering Access Control on Sep 05, 2017
Until now, Chinese video giants Hikvision and Dahua have held back releasing access internationally. Both companies have now pulled the trigger,...
Vulnerability Directory For Access Control Cards on Aug 14, 2017
Knowing which access credentials are insecure can be unclear, especially because most look and feel the same. Even the most insecure 125 kHz types...
Competing Against G4S on Aug 09, 2017
G4S Secure Solutions is a global company, operating in multiple countries and offering a suite of products and services from guards to their AMAG...

Most Recent Industry Reports

Reseting IP Cameras - 30 Manufacturer Directory on Sep 22, 2017
Every camera has a reset button (well, almost) but it is not always clear what these buttons do, how long they need to be held, what settings they...
80+ OEMs Verified Vulnerable To Hikvision Backdoor on Sep 22, 2017
Over 80 Hikvision OEM partners, including ADI, Interlogix, LTS, and Northern Video, have been verified as having products vulnerable to the...
Genetec Launches Cloud Access Control (Synergis SaaS) on Sep 21, 2017
Genetec's cloud everything expansion continues, with their announcement of Synergis SaaS edition, joining their cloud video offering Stratocast,...
Genetec CEO Warns Against Insider Threats on Sep 21, 2017
With Dahua and Hikvision cybersecurity issues becoming indisputable, a new counter has emerged. Just put them behind a firewall, buy cheap...
New IPVM Calculator V3 Released on Sep 20, 2017
The New IPVM Calculator V3 is released. An entirely new architecture delivers the following benefits: Turbo The calculator is now ~50% faster in...
Automatic Door Operators For Access Tutorial on Sep 20, 2017
Opening and closing doors might sound simple, but it takes a high-tech piece of door hardware to pull it off. Integrating automatic door operators...
'Clowns' Allege Ubiquiti 'Completely Fraudulent' on Sep 20, 2017
A short seller has alleged Ubiquiti is 'completely fraudulent'. Ubiquiti's CEO has responded calling them 'clowns'. Here is the short...
Avigilon 'Blue' Cloud Entry Examined on Sep 19, 2017
Avigilon is moving to the cloud. The company announced their Avigilon Blue platform, designed to be a web-managed surveillance system, utilizing...
HID Buys Mercury Security on Sep 19, 2017
One of the biggest access control deals in years. Mercury Security, the most widely used access hardware OEM, and partner to 20+ manufacturers,...
Hikvision Backdoor Exploit on Sep 18, 2017
Full disclosure to the Hikvision backdoor has been released, allowing easy exploit of vulnerable Hikvision IP cameras. As the researcher, Monte...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact