WebAuthn API heralds the end of password reliance

A truly comprehensive approach to data security can no longer rely on passwords and encryption, a leading door locking manufacturer has said.

Abloy UK was responding to the news that the World Wide Web Consortium (W3C) has approved a new standardWebAuthn – that authenticates users in web-based applications using a physical credential other than a password, such as a gesture, biometric reading or a key.

WebAuthn has been hailed as a “big step toward a password-free future.” Most major browsers have already incorporated support for the standard, which uses the credential management API extension to add a physical layer of security.

Abloy UK says it has long advocated supplementing passwords with physical keys.

Although passwords have become more complex and harder to duplicate, they may not be good enough alone.” Pip Courcoux, Abloy UK

 

“In many ways, security against cyber-attacks is similar to security against physical attack,” said Pip Courcoux, sales and product manager for CLIQ Systems at Abloy UK. “For example, a stolen password is a stolen credential, a phishing attack is similar to wireless credential cloning.

If you can get close enough to the individual and get enough data you can fill in the gaps and recreate the identity. Although passwords have become more complex and harder to duplicate, they may just not be good enough alone.”

Abloy provides a locking solution that adheres to these principles. Based on detainer disc cylinders and electronic identification, PROTEC2 CLIQ offers flexible key and access rights management, together with complete audit trails via a web-based management system.

PROTEC2 CLIQ can be combined with the CLIQ microelectronics platform to form an additional layer of security and flexibility through advanced encryption and time-based access principles.

As the big tech companies continue to develop artificial intelligence and quantum computer chips, the digital world will face new threats, so passwords and encryptions could be broken in milliseconds,” added Courcoux.

“But when electronic security fails, Abloy customers will sleep soundly knowing they are ahead of the curve, having chosen a balanced approach to their security where mechanical and digital work in harmony.”

Abloy UK is exhibiting at IFSEC International 2019, taking place 18-20 June 2019 at ExCeL London (stand IF644). Book your free ticket now.

Discover the latest in cyber security

Don’t miss the Future of Security Theatre at IFSEC International 2019

As Europe’s leading integrated security event, IFSEC 2019 is delivering a programme of education dedicated to innovation at the cutting edge of the security industry, courtesy of IFSEC’s education partner Tavcom.

Get your free ticket today to join the CPD-accredited sessions and presentations tackling the critical issues around advancing technologies.

The post WebAuthn API heralds the end of password reliance appeared first on IFSEC Global | Security and Fire News and Resources.

Leave A Comment?