Hirsch has earned its fourth consecutive CSPN certification from ANSSI for its MICROSESAME and TILLYS CUBE HIGH SECURE access control system, which incorporates the SSCP protocol. Previous certifications were held by TIL Technologies.
MICROSESAME and TILLYS CUBE: an access control solution with end-to-end security
MICROSESAME provides centralised access management, while TILLYS CUBE controllers process access permissions locally and control physical access.
The evaluated scope comprises several complementary components:
- MICROSESAME V2025.2.1 software for configuring and operating the access control system.
- TILLYS CUBE V8.0.1 controllers for processing access permissions and managing access.
- MLP2 V8.0.1 modules for managing readers and protecting badge keys within a hardware security module (HSM).
- Readers and keypad readers, supplied by STid, also a SPAC Alliance member, for badge authentication, optionally combined with a PIN.
The certification covers the access control configuration specified in the full security target:
SSCP: protecting communications end to end
In the certified architecture, the SSCP protocol secures communications between the MLP2 modules and the readers. Its use in transparent mode separates badge presentation from the storage of the badge’s cryptographic keys: these are stored in the MLP2’s hardware security module (HSM), within protected equipment. Readers located at access points therefore do not hold these secrets, in line with the architectural principle recommended by ANSSI.
SPAC Alliance congratulates the Hirsch teams and everyone who contributed to this latest certification!
