IDCRAFT 用 ACS ACR1552U 与 DualBoost III 读写器实现员工卡门禁与 IT 安全登录

With HF-RFID and NFC, existing employee ID cards can be used not only for building access but also for digital authentication. With the ACS ACR1552U and DualBoost III readers, IDCRAFT demonstrates the technical requirements that must be met and how different card and credential technologies can be integrated.

In the morning, the employee ID card unlocks the front door. At the workstation, a password, additional token, security key, or another smart card is required to log in to IT systems. Many employees already carry a personal electronic credential with them.

For such applications, IDCRAFT first assesses which RF or NFC technology is available in the company and which functions the existing ID card supports. If the appropriate card and security architecture is in place, the same ID card can be used not only for building access but also for authentication on IT systems.

From Door Opener to Digital Identity

Simply recognizing an RFID card is not sufficient for secure login. In particular, a card’s serial number should not be used as an authentication factor. For security-critical login scenarios, protected card applications, cryptographic authentication, PIN procedures, and appropriate login software are combined instead.

Another component can be a Secure Access Module (SAM) built into the reader. The security module securely stores cryptographic keys and supports methods such as key diversification and mutual authentication. This eliminates the need to store the required keys unprotected on the workstation.

“The card’s serial number alone is not a login factor,” explains Patrick Kochendörfer, Managing Director of IDCRAFT GmbH. “It becomes secure when combined with a protected card application, a PIN, and appropriate login software. The better question, therefore, is not what additional token we need, but what credentials we already have and what we can securely enable with them.”

IDCRAFT distributes ACS readers for various card ecosystems

IDCRAFT is a distributor for Advanced Card Systems Ltd. (ACS) and sells its smart card and NFC readers. ACS develops readers and related technologies for smart cards, NFC, and identity, authentication, and payment applications.

For contactless employee ID cards, IDCRAFT offers, among other products, the ACR1552U NFC Reader IV. The desktop reader operates at 13.56 MHz and supports contactless cards compliant with ISO 14443 A/B and ISO 15693, as well as technologies such as MIFARE and FeliCa.

NFC-based FIDO security keys can also be used in appropriate authentication scenarios. The reader can be integrated into IT environments via PC/SC and CCID. A SAM slot is available for applications requiring the secure execution of cryptographic keys and authentication procedures.

However, companies do not always have a uniform card landscape. Contactless employee ID cards, for example, can be used alongside contact-based PKI smart cards. For such environments, IDCRAFT offers the DualBoost III (ACR1581U) from ACS. In addition to contactless cards, the reader also processes contact-based smart cards compliant with ISO 7816. PKI cards with certificates can be used, for example, for Windows login.

The parallel operation of different card technologies is also relevant for migrations. An existing smart card infrastructure does not need to be completely replaced when new contactless credentials are introduced. Old and new technologies can be operated side by side during a transition.

Check the Existing ID Card First

Before selecting the hardware, it must be determined which technology is actually embedded in the employee ID card. In addition to MIFARE DESFire, companies use technologies such as LEGIC, HID iCLASS, or older 125-kHz technologies. Not every card can be processed by every reader.

However, the radio technology alone is not sufficient for evaluation. It is also crucial to determine which card applications and credentials are present on the ID card, which security mechanisms are supported, and whether these can be used for the planned authentication. Added to this are the requirements of the login software and the existing IT infrastructure.

IDCRAFT therefore first assesses the existing card and credential environment. Based on this, it can be determined whether the existing employee ID card is suitable for additional digital authentication and which reader is required for this purpose. For example, LEGIC, HID iCLASS, or 125-kHz ID cards may require different hardware than a DESFire-based system.

Consulting and ACS Readers at IDCRAFT

IDCRAFT is an ACS distributor and your point of contact for selecting and ensuring the availability of suitable RF and NFC readers. Samples for evaluation are available upon request.

Further technical information, applications, and downloads for the ACR1552U can be found directly on IDCRAFT’s product page.

Discuss your specific application scenario directly with Patrick Kochendörfer—from evaluating existing employee ID cards to selecting the appropriate ACS reader.

IDCRAFT GmbH
Phone: +49 6236 4494 685

Find out more about the ACS ACR1552U at IDCRAFT here.