Security through Badge Migration with DESFire and SSCP

Migration from 125 kHz badges with confidence

This project, carried out in Luxembourg, demonstrates how a gradual migration, supported by the SSCP protocol and DESFire badges, can effectively address the most demanding security challenges. By combining technological innovation, ease of use, and adaptability, this solution serves as a model for other sensitive environments around the world

Issue

In a context where threats to sensitive sites are increasing, the shift to advanced technologies is essential. In Luxembourg, a strategic site equipped with an old 125 kHz technology, known to be vulnerable to cloning and intrusion, has undertaken an upgrade to meet heightened security requirements. The objective:

• Strengthen access security to prevent any risk.
• Facilitate user experience for authorized personnel.
• Ensure a gradual transition without disrupting operations.

Solution provided by SSCP:

Hybrid Migration (125 kHz to DESFire)

The solution was based on the integration of readers compatible with a dual technology and the addition of a second authentication factor during identification on obsolete technology (125kHz):

• Maintaining compatibility with 125 kHz badges, while securing them with a PIN code authentication for a gradual transition.
• Migration to DESFire, using advanced encryption standards for enhanced security.

Solution Details

1. Differentiated Management Based on Badge Technology

• 125 kHz Badges (non-secured):
  • When presenting a 125 kHz badge, the keypad automatically lights up, requesting additional authentication via a PIN code.
  • This step mitigates risks associated with the vulnerability of these badges while allowing their use during the transition.
• DESFire Badges (secured):
  • When a DESFire badge is used, the reader immediately recognizes the advanced and secured technology.
  • The keypad remains inactive, allowing for a smooth and fast access without an additional step.

2. Security Enhancement via the SSCP Protocol

The SSCP protocol ensures authenticated, signed, encrypted, and bidirectional communication between readers and the central system.

Results and Benefits

1. Enhanced Security

• The strengthened authentication for 125 kHz badges significantly reduces risks associated with their vulnerability.
• DESFire badges, with banking-level encryption, make cloning nearly impossible, setting a new security standard.

2. Optimization of User Experience

• Users equipped with DESFire badges enjoy frictionless access, improving their comfort and productivity.
• The hybrid compatibility ensures a smooth transition, avoiding a sudden upgrade or immediate replacement of all badges.

3. Long-Term Adaptability, an Economic and Sustainable Solution

• The SSCP protocol offers modularity and scalability, allowing the site to meet future needs without fully replacing infrastructure.
• This solution ensures future-proof security, ready to integrate new technologies.

Sectoral Applications

This hybrid approach is ideal for environments where security is a priority, but a gradual transition is necessary:

• Data Centers: Protecting critical digital infrastructures while ensuring fast and secure access.
• Airports: Smooth access for staff while maintaining high-security levels.
• Defense: Preventing intrusions into highly sensitive areas.
• Financial Sector: Securing access to banking buildings and infrastructure

Why SSCP V2 is the Key to this Transformation?

• Exceptional Flexibility: Allows a seamless transition between old and advanced technologies.
• Enhanced Security: Advanced encryption and bidirectional communication ensure optimal protection.
• Scalability and Durability: Compatibility with future technological advancements makes this solution sustainable and adaptable.
• Improved User Experience: Smooth access for secured users, without compromising vigilance.