Manage HID Mobile Access IDs and Maintain Data Security

Using the HID Mobile Access App and Portal

The HID Mobile Access Portal features a user-friendly interface that allows for simple enrollment for end-users through HID’s intuitive App, unique transactions to ensure privacy, and easily managed access rights by an administrator at any time. In addition, the centralized, cloud-based management portal supports the entire lifecycle of the Mobile ID. The portal allows for secure over-the-air management and automatic configuration of mobile identities, as well as batch upload of multiple user profiles and batch notification features. Plus, managing physical badges is no longer an issue.

In the HID® Mobile Access Portal, access rights are managed by an administrator, and each transaction is unique to ensure privacy.

Simply add a user’s name and email address into the portal. This initiates the process to send an invitation email to the employee with instructions on how to install the App. When the App is installed and configured, the correct mobile identity is provisioned to the mobile device and the security administrator is notified when the process is complete. From there, how you manage Mobile IDs is dependent upon different factors: scope (physical access only or a unified access solution); users and roles; security levels; number of locations; and number of devices per user that need to be supported.

Security Considerations:

• Encryption - Mobile IDs as well as communication between the access control center, management portal, mobile devices, and readers need to be protected and therefore must be encrypted.
• Sandbox - Applications that manage Mobile IDs should run in a dedicated sandbox, ensuring no unauthorized apps can access or modify data. 
• Access Rights - If a provisioned device is lost, stolen or compromised, access rights for the Mobile ID should be easy to revoke. If a device is found or replaced, it should be just as simple to provision again. 
• Authentication - It is important to ensure your cloud-based management application is properly protected. A multi-layered authentication approach is highly recommended.