Decreasing Physical Access Bottlenecks through Context-Driven Authentication

Part 3: Evolving Threats and Attacks International audience Despite advancements made to improve the effectiveness and efficiency of access control mechanisms deployed in cyber-physical environments, their controlling logic-driven systems may remain heavily dependent on user interaction during the authentication process. In instances where elevated security requirements are warranted, the authentication methods may be multi-factored in nature, leading to bottlenecks that become more pronounced during peak traffic hours. Logical access control has considered location and time for authentication and re-authentication for some time now and context-driven authentication is fast becoming a standard feature of enterprise-class publicly available products and is used in financial technology (fintech), and eCommerce solutions. This paper focuses on the prototype implementation of context-driven authentication in a cyber-physical access control environment, deployed in a large organization that makes use of information typically collected in the course of the organization’s business operations to uphold security requirements while maintaining efficient access control.