Autonomous Visitor Management with Biometric Enrollment

Autonomous biometric enrollment with DESFire and SSCP

Problem

In strategic environments, the security of visitor access must be highly reinforced while offering a smooth and autonomous experience. Within a highly secure site in Israel, the main challenges were:

• Ensure strictly controlled access for temporary visitors.
• Minimize operational load on staff, by promoting autonomous management.
• Protect the confidentiality of personal data, especially biometric data, by avoiding prolonged storage.

Solution provided by SSCP:

Autonomous visitor management with biometric enrollment

A complete and autonomous solution was deployed, combining secure DESFire badges, biometric authentication, and secure communication via the SSCP protocol.

Solution details

1. Reception and provision of secure equipment

• Upon arrival, each visitor receives a DESFire badge containing a unique ID and a certificate of authenticity.
• A unique PIN code is assigned to strengthen security from the initial stage.

2. Initial authentication and biometric enrollment

The visitor badges on a terminal equipped with a reader with a screen and biometric sensors.

• Step 1 – Validation of the DESFire badge: the terminal verifies the ID and certificate of authenticity of the badge using the SSCP protocol.
• Step 2 – Secure entry of the PIN code: the visitor enters their PIN code via a secure scramble pad, limiting fraudulent observations.
• Step 3 – Biometric enrollment: once the previous steps are validated, the visitor is guided to enroll their biometric templates.

3. Autonomous and secure access

The visitor accesses the site autonomously through two-factor authentication.

• Presentation of the DESFire badge
• Validation of recorded biometric data

4. Data retrieval and reset

• Upon exit, the visitor badges on a dedicated reader that automatically erases the biometric data stored on the badge.
• The badge is then immediately reusable for another visitor, with no risk of data leakage.

Results and benefits

1. Enhanced security

• The combination of DESFire badges, the PIN code, certificates of authenticity, and biometric authentication provides an exceptional level of security.
• The deletion of biometric data after each visit ensures total protection against misuse or leaks of sensitive data.

2. Operational autonomy

• Visitors manage enrollment, access, and exit autonomously, significantly reducing the workload on staff.
• Operational efficiency is optimized, even in environments with high visitor volumes.

3. Respect for confidentiality and standards

Biometric data is systematically erased upon exit, complying with personal data protection requirements (GDPR and international equivalents).

4. Sustainable reuse

DESFire badges are reusable, reducing operational costs and environmental impact.

Sectorial applications

This model of autonomous and ultra-secure management is applicable to various sensitive sectors:

• Government sites: Secure access for delegations and external collaborators.
• Sensitive research laboratories: Strict visitor control to protect critical information.
• Critical industrial sites: Prevention of intrusions through advanced biometric control.
• Airports: Management of professional or technical visitors in restricted areas.

Why SSCP V2 is the key to this transformation?

• Enhanced security: The SSCP protocol guarantees communication that is consistently protected in confidentiality, integrity, and authenticity.
• Total autonomy: Visitor management becomes smooth, secure, and independent, without the need for constant manual intervention.
• Guaranteed confidentiality: The protocol facilitates the temporary and secure management of biometric data, meeting the strictest standards.
• Durability and economy: Reuse of DESFire badges reduces costs and environmental impact.