Security expert Abloy UK has highlighted the importance of physical security to protect against digital data breaches following the recent approval of a new standard that offers the ability for end users to add tangible authentication to secure online accounts.
WebAuthn, which has now been approved by the World Wide Web Consortium (W3C), standardises an interface for the secure authentication of users in web-based applications and services.
An extension implemented in this standard is the Credential Management API, which allows users to authenticate using ‘something’ other than a password, such as a gesture, a biometric reading or a key.
Most of the major browsers have already implemented support for this standard in anticipation of its approval, which is something that Abloy UK has welcomed in line with its own view that having something physical to rely on as well as electronics is inherently more secure.
Pip Courcoux, sales and product manager for CLIQ Systems at Abloy UK, explained: “In many ways, security against cyber attacks is similar to security against physical attacks. For example, a stolen password is a stolen credential, while a phishing attack is similar to wireless credential cloning. If you can be close enough to the individual and garner enough data you can fill in the gaps and recreate the identity. Although passwords have become more complex and harder to duplicate, they may just not be good enough alone.”
With this in mind, Abloy now offers PROTEC2 CLIQ, a state-of-the-art locking solution based on detainer disc cylinders and electronic identification. PROTEC2 CLIQ provides mechanical security and allows for flexible control of keys and access rights, as well as complete audit trails via a web-based management system.
This system’s mechanical key has been developed over generations to be one of the most secure mechanical platforms in the world. Combining this with the CLIQ microelectronics platform introduces an additional layer of security and flexibility through advanced encryption and time-based access principles.
Courcoux added: “As the big tech companies continue to develop Artificial Intelligence and Quantum computer chips, the digital world will face new threats. Passwords and encryptions could be broken in milliseconds. When electronic security fails, Abloy UK’s customers will sleep soundly knowing they’re ahead of the curve, having chosen a balanced approach to their security where mechanical and digital work in harmony.”