Secure Employee Credential System
Secure personalisation and central management of employee credentials based on DESFire EV3 with AES authentication.
Internal company solution – presentation abstracted for confidentiality reasons.
- Problem
- Employee credentials had to be personalised securely and assigned unambiguously.
- Solution
- Controlled personalisation process with AES authentication, individual number, company branding and central assignment.
- Result
- 250 personalised employee credentials, prepared for further applications.
Initial situation
A uniform credential was to be introduced for employees that can be personalised securely, assigned unambiguously to one person and used for further applications later on.
Problem
A credential without secure authentication and without unambiguous assignment would be viable neither for further applications nor for central management.
Goal
Secure, repeatable personalisation with central management and a technical foundation for future applications.
Solution
- DESFire EV3 with AES-based authentication
- Own personalisation process with supporting scripts
- Large memory capacity for further applications
- Individual number and company branding on the credential
- Central assignment to the employee, management and documentation
Result
250 personalised employee credentials with secure authentication, unambiguous assignment and central management.
Business value
One credential per employee as a secure, centrally managed foundation for existing and future applications – without an isolated solution per system.
My contribution
My part: personalisation process, supporting scripts, readers, AES authentication, technical integration and central assignment. Introducing the overarching application system was not part of my task.
Technical details
Architecture
Credentials are personalised in a controlled process, linked to the employee and documented centrally. Readers access the credential via the secured application structure.
- Blank (DESFire EV3)
- Personalisation (AES, application structure)
- Central assignment to the employee
- Readers · future applications
Technologies
Integrations, APIs and authentication
Readers and supporting scripts, central assignment and documentation; prepared for further applications.
Security
AES-based authentication instead of a plain serial number, a controlled personalisation process, unambiguous assignment and central documentation of issued credentials.
Technical highlights
- DESFire EV3 with AES authentication
- Own personalisation process with script support
- Individual number plus company branding
- Prepared for further applications