Nedap AEOS security solution wins GIT Award in D Access Control category

Nedap Security Management has won a GIT Award in the D Access Control category for their high-end AEOS end-to-end security solution. This new end-to-end security solution is the first to offer digital protection for access control by unifying best practices from both IT and physical security.

On the 27th of September, Dr. Heiko Baumgartner, Chief Editor of GIT Security, handed out the award to Mr. Sieger Volkers, Managing Director of Nedap Security Management.

According to Sieger Volkers, this award proves that companies realise that they need to protect their access control system. Mr. Volkers said, “Nedap is the very first manufacturer to unify IT and physical security best practices into one end-to-end security solution. Thus far, IT principles of secure systems have not been applied to physical security systems. Consequently, physical access control systems are vulnerable to cyber-attacks.”

Optimal secure communication from card to server

In contrast to other manufacturers, Nedap offers a complete end-to-end security solution where both DESFire keys and digital certificates are stored in the Secure Access Module inside door controllers. This is unique in the market and ensures that all elements of the access control systems can be trusted and communication between all elements of the system is secured.

Consequently, high levels of protection against both physical and digital threats is achieved. It requires much more efforts for hackers to obtain DESFire keys. Moreover, strong authentication ensures that door controllers cannot be replaced by manipulated ones and it is impossible to connect alien devices to the network and send commands to door controllers.

Secure key updates

On top of that the combined storage of DESFire keys and digital certificates in the SAM enables instant recovery when keys have been compromised. Incidents will not go unnoticed and AEOS allows to securely update keys when they have been compromised without the need to physically attend each card reader.