WaveLynx Technologies Corporation - Experts & Thought Leaders

Wavelynx Technologies, a trailblazer in advanced, secure, and versatile reader and credential solutions, showcases its Wallet solution at the Global Security Exchange (GSX) trade show in Orlando, FL, September 23-25, 2024. Wavelynx Wallet transforms mobile devices into secure credentials, bringing access control into the mainstream and paving the way for future credential management. The system enhances security across various facilities and introduces a new level of convenience, reflecting society’s shift toward wallet and mobile-based solutions for all aspects of daily life. Rapid consumer adoption In 2021, over 7.1 billion people used mobile devices; in 2022, 3.4 billion users (42%) utilised digital wallets. This trend projects to continue, with digital wallet users expected to reach 5.3 billion by 2026, highlighting the global shift towards a mobile-first culture. This trend projects to continue, with digital wallet users expected to reach 5.3 billion by 2026 This rapid consumer adoption, driven by the security, convenience, and improved usability of digital wallets in everyday transactions, underscores the need for universal and pervasive wallet solutions in the access control industry. “Mobile wallets have become mainstream, allowing users to pay for lunch, present concert tickets, and navigate airport security, yet the access control industry has been slow to adapt,” said Rob Lydic, President of Wavelynx Technologies. Simplifying credential management “By leveraging mobile wallet technology, we’re not just catching up, we’re leaping ahead. Our wallet solution significantly bolsters security by verifying individuals’ identities and instilling confidence while simplifying credential management and scalability. Our recently launched Configure by Wavelynx app provides cutting-edge encryption and real-time management features, making the transition to wallet-based access control seamless for installers and end users.” Wavelynx Wallet has been deployed with end users across four continents—North America, India, the UK, and Australia— at some of the world’s largest financial and technology institutions. Mobile wallet platforms Key features of Wallet includes: Seamless Integration: Wallet enables access to doors, elevators, parking garages, lockers, printers, and more, through major mobile wallet platforms. It is fully compatible with Wavelynx Ethos™ readers, ensuring a cohesive and user-friendly experience. Additionally, Configure by Wavelynx facilitates effortless setup and management of digital wallets in the field, eliminating the need for physical configuration cards. Enhanced Security: Wallet offers robust security features, including the ability to instantly deactivate credentials if a mobile device is lost or stolen. This capability significantly reduces the risks associated with lost or compromised physical access badges, ensuring continuous facility security. Convenience and Simplicity: Wallet streamlines operations by removing the need for card printing and physical distribution. Credential management and issuance can be handled remotely by simply providing a link to download their credential, enhancing efficiency for both employees and visitors. Scalability: Designed with flexibility in mind, Wallet supports a variety of physical reader manufacturers, integrating seamlessly with existing security systems and adapting to a range of facility needs. Operational efficiency and security Wavelynx successfully deployed digital wallets for NFC access at Stream Realty Partners' RiverSouth in Austin, Texas. This implementation enabled employees and tenants to access the building and amenities securely and conveniently using their company badges in their respective digital wallets. Integrated via SwiftConnect’s AccessCloud platform and supported by credential readers from rf IDEAS, Wavelynx’s advanced readers, and Vecos smart lockers, the solution significantly improved both operational efficiency and security across the facility. The Wavelynx Wallet Solution is poised to set new benchmarks in access control with its focus on security, convenience, and scalability. Discover the future of secure access and meet with Wavelynx at GSX 2024.

The Physical Security Interoperability Alliance (PSIA) has announced its Secure Credential Interoperability (SCI) initiative and a working group to advance its development.  “The physical access control industry has demonstrated a need for a universally compatible secure credential and we believe that we have found a simple, yet elegant solution to address this with SCI,” said Mohammad Soleimani, CTO of Kastle Systems and Chairman of the SCI Work Group.  SCI Work Group Mohammad Soleimani adds, “The specification will leverage the security, flexibility, and convenience of Public Key Infrastructure (PKI) and negate the need for investment in the infrastructure.” PSIA member companies involved in the SCI work group include, Allegion, ASSA ABLOY, dormakaba, Farpointe Data, IDEMIA, Kastle Systems, LenelS2, Tyco and WaveLynx Technologies.  “We are fortunate to already have a strong group of leaders in the access control and building management systems industries involved in the SCI Work Group,” said David Bunzel, Executive Director of the PSIA, adding  “They have been able to come up with an effective solution to an issue which will have broad application in the market.”  SCI specification with NFC and Bluetooth support The group has already prepared a draft specification for apps, readers, and locks featuring BLE compatibility The SCI specification supports NFC, ISO14443, and Bluetooth (BLE), and therefore, can accommodate all device types including cards, mobile devices, and wearables. The group has already prepared a draft specification for apps, readers, and locks featuring BLE compatibility.  “Mobile credentials are rapidly gaining in popularity with many commercial and institutional customers, but the diversity of offerings can often present interoperability and management issues,” noted Peter Boriskin, Chief Technology Officer for ASSA ABLOY Americas.  Enterprise credential management Peter Boriskin adds, “The SCI proposal aims to increase interoperability and reduce the barriers to portability, supporting enterprise credential management across multiple device manufacturers.” The SCI Work Group recognised that the proximity credentials, currently in widespread use, are not secure and organisations are actively migrating to secure credentials.  Solving interoperability issues of smart cards “Smart cards, one of the most commonly used access control mediums, are secure, but pose extremely challenging interoperability issues,” noted Hugo Wendling, the CEO of WaveLynx Technologies, adding “The PSIA’s SCI Initiative is a perfect complement to address this need.” The SCI leverages off existing standards and commercially available technology. For example, most smartphones enable the public/private key to be created by the device. This is compatible with nearly all smartphones, which have been produced over the last five years, including Android and iOS devices, which represent a significant installed base. The SCI Work Group is finalising its technical draft of the specification and any companies interested in being part of this process are invited to join the PSIA.  

ACRE, a globally renowned provider of security products and solutions for the access control, intrusion, smart traffic and video surveillance markets, has announced that the ACRE brands – RS2, Vanderbilt and Open Options – will launch ACT ID, a new cloud-based mobile credential application that enables organisations to utilise both iOS and Android smartphones with existing WaveLynx multi-technology readers for secure access to doors in office buildings, government facilities, healthcare institutions, schools, residences and a growing variety of enterprises.  ACT ID cloud-based mobile credential solution ACT ID features zero-touch, cloud-issued credentials for enrollment into a user’s access control system. The application does not require any subscriptions or fees, making it an extremely flexible and affordable solution that allows organisations to transition to mobile access at their own pace.   “ACRE and its brands provide some of the industry’s most sought-after access control systems and solutions for customers across a variety of markets,” said Laurie Aaron, Executive Vice President, WaveLynx Technologies. Risk-free mobile access solution Laurie adds, “Through this integration, we’re able to provide additional functionality and risk-free mobile access solutions for end users to adopt as they update and expand their access control systems.”  “Mobility is an integral part of the goal of forward-thinking enterprise organisations, as more organisations look for way to leverage more touchless access control and seamless visitor management tools,” said Kim Loy, Chief Product Officer, ACRE. Touchless access control solutions Kim adds, “Partnering with WaveLynx across the ACRE organisation allows our brands to capitalise on this demand from the market and diversify their ability to provide secure, convenient mobile security options to partners and customers alike.”

Can a smart card be used securely for multiple applications (and among multiple manufacturers )? End users are demanding such interoperability, and they also want openness to switching out components of their access control systems in the future without being “locked in” to one vendor. Those are the goals of the LEAF Identity consortium, a collection of companies that share and support end user-owned encryption keys stored securely in smart cards with MIFARE DESFire EV2 chips and are used to authenticate access control credentials and read the data required to access multiple applications secured by multiple vendor devices. Smart card systems - more secure Almost everyone in the industry now knows that low-frequency (125 kHz) “prox” cards are not secure; in fact, low-cost cloning equipment is readily and inexpensively available. As the industry transitions to encrypted cards, challenges of interoperability persist. Keeping smart card systems more secure are AES 128 encryption keys encoded onto the card chips. Information is exchanged via radio frequency (RF) in a challenge-response interaction when a card is presented to a reader. The most recent LEAF EV2/EV3 cards allow up to 16 devices to be individually accessed using 16 unique keys, respectively that are stored in the smart cards (and among a variety of manufacturers). LEAF Identity Consortium enables interoperability with encrypted Smart Cards LEAF Memory Model specifies a standard EV2 (EV1 backward compatible) smart card data format and application access protocols that ensure each manufacturer’s devices can interface with a card chip in the same way. Specifically, each card has a “common data structure” based on the LEAF Memory Model, which means that the location of information is arranged on a card chip in a predictable and consistent manner. Each end-user application (for door readers, secure printing, vending, etc.) stored in the card is secured with their own cryptographic key. Member companies adhere to that structure in order to be interoperable with a single credential. There are no license fees or intellectual property rights involved. Keysets The approach involves a LEAF Custom Cryptographic Keyset (LEAF Cc Keysets) owned by the end-user. “When we present these concepts to integrators, they realize that, first, they need to get their clients to pay attention to the risks around proximity cards and to migrate to encrypted card technology,” says Laurie Aaron, Executive Vice President, WaveLynx Technologies Corp. “Then we explain the benefits of customer-owned keys and of the LEAF data structure. Then integrators can differentiate themselves by selling the value of the end-user staying in control and having unlimited interoperability.” WaveLynx Access control manufacturer WaveLynx is implementing the LEAF concept, which is the brainchild of CEO Hugo Wendling, who saw the advantages of leveraging the ability of an EV2 chip card to authenticate access to multiple applications by multiple manufacturer’s devices. WaveLynx set up the specification, maintains the website, and is involved when a manufacturer wants to become LEAF Enabled. They provide a key management service (for life) to end-users based on LEAF capabilities. End-users “own” the keys and can submit a request to WaveLynx to have us securely share them with any other manufacturer. Sharing a key involves two key custodians from WaveLynx Technologies and the Vendor who is receiving the customer’s keys, each of whom only has access to half of the encrypted key in order to keep it secure.  Keys are shared via a “key ceremony”. Combining capabilities The LEAF consortium provides a way for manufacturers to work together to provide an ecosystem of devices that are compatible with a single encrypted smart card without the need to embed proprietary reader modules in their devices or license another manufacturer’s technology, thereby making it possible for them to increase their market share. Working together, independent manufacturers can assemble a group of devices to compete more effectively with larger manufacturers. In effect, they combine their capabilities in order to offer the end-user viable options and to compete. LEAF Consortium partners include Allegion, ASSA ABLOY, Brivo, Eline by DIRAK, Linxens, RFIDeas, and Telaeris. Biometric partners include Idemia and IrisID. Biometric devices may either store their biometric on the card or on a central database and access it through the badge number. The LEAF standard continues to evolve. Although the standard does not currently offer mobile credentials, a common mobile credential standard is currently being discussed and designed by the Consortium.