{"id":311,"date":"2020-11-24T00:00:00","date_gmt":"2020-11-23T16:00:00","guid":{"rendered":"http:\/\/localhost:8092\/prolink-mrq-pro-link-mrq-iso15408\/"},"modified":"2026-07-29T15:03:00","modified_gmt":"2026-07-29T07:03:00","slug":"prolink-mrq-pro-link-mrq-iso15408","status":"publish","type":"post","link":"https:\/\/www.twpro-link.com\/en\/prolink-mrq-pro-link-mrq-iso15408\/","title":{"rendered":"Smart Factories Need a More Secure Access Control Architecture!"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"311\" class=\"elementor elementor-311\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b5cd787 e-flex e-con-boxed e-con e-parent\" data-id=\"b5cd787\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-130a3a48 elementor-widget elementor-widget-text-editor\" data-id=\"130a3a48\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><img decoding=\"async\" class=\"aligncenter\" src=\"\/wp-content\/uploads\/2026\/07\/mq11_orig.jpg\" alt=\"\u5716\u7247\" \/><\/p><p>Cheng-Chieh Yu (Sales Director, Pro-Link Technology Co., Ltd.)<\/p><p>\u00a0<\/p><p><span style=\"color: #24678d;\"><strong><em>As technology continues moving<\/em><\/strong><em><strong>AIoT<\/strong><strong>in that direction,<\/strong><strong>corporate<\/strong><strong>access control<\/strong><strong>management<\/strong><strong>is facing growing challenges. In particular, as<\/strong><strong>manufacturers adopt smart<\/strong><strong>manufacturing<\/strong><strong>,<\/strong><strong>ensuring that production spaces are not exposed to any malicious intrusion during the process has also become<\/strong><strong>ISO15408<\/strong><strong>an important certification requirement.<\/strong><strong>\u3002<\/strong><strong>So,<\/strong><strong>\uff0c<\/strong><strong>ISO15408<\/strong><strong>what does this mean for access control systems \u2014<\/strong><strong>what<\/strong><strong>requirements are involved?<\/strong><\/em><\/span><\/p><p><br \/><span style=\"font-size: medium;\">Access control is a long-established type of security system, used primarily to manage personnel entry\/exit and attendance. It simplifies the management of people entering and leaving public and commercial spaces, and its logs effectively record the time of every entry and exit, further strengthening employee management.<\/span><strong>ISO15408<\/strong><strong>Access Control System<\/strong><strong>,<\/strong><strong>Requirements<\/strong><br \/><span style=\"font-size: medium;\">But as access control systems have been in use longer, more and more management-level issues have emerged in practice, including: (1) Buddy punching: because access cards can easily be handed to someone else, entry\/exit records can easily lose their accuracy. (2) Access card cloning: this is also a problem most businesses struggle to avoid, since managing a large number of access cards makes it difficult to effectively audit whether duplicate cards exist within the organization.<\/span><br \/><span style=\"font-size: medium;\">As technology continues to move toward the Internet of Things (IoT) and Artificial Intelligence (AI), corporate access control management has gradually faced growing challenges, especially as manufacturers, riding the wave of Industry 4.0, rapidly pursue digital upgrades and smart transformation. In the process of adopting smart manufacturing, ensuring that production spaces are not exposed to any malicious intrusion has become an important part of ISO 15408 certification. So what requirements does ISO 15408 place on access control systems? The main points are as follows:<\/span><\/p><ul><li><span style=\"font-size: medium;\"><strong>Wiring<\/strong>: EMT conduit must be used throughout, ensuring no section of the wiring is exposed.<\/span><\/li><li><span style=\"font-size: medium;\"><strong>Card Reader<\/strong>: Readers on entry doors must only provide card-reading functionality \u2014 no contact point may be able to open the door directly.<\/span><\/li><li><span style=\"font-size: medium;\"><strong>Encrypted Access Card<\/strong>: Must be able to meet EAL 5 certification.<\/span><\/li><li><span style=\"font-size: medium;\"><strong>Data Encryption<\/strong>: Access entry\/exit data must be stored encrypted.<\/span><\/li><\/ul><p>\u00a0<\/p><p><img decoding=\"async\" class=\"aligncenter\" src=\"\/wp-content\/uploads\/2026\/07\/iso-15408_orig.jpg\" alt=\"\u5716\u7247\" \/><\/p><p>\u00a0<\/p><p><span style=\"font-size: medium;\">Below, using HID Global as an example, we'll explain how an access control system can meet ISO 15408 requirements across four major areas, which can also serve as a reference when selecting or upgrading access control security for smart factories (such as semiconductor fabs).<\/span><\/p><p>\u00a0<\/p><p><strong>How to Provide Encrypted Access Cards?<\/strong><\/p><p><span style=\"font-size: medium;\">The 125kHz low-frequency access cards used in the past are well known to have absolutely no encryption or anti-cloning mechanisms, which is why access card technology has gradually shifted to the high-frequency 13.56MHz standard, with Mifare being by far the most common \u2014 the best-known example being Taipei MRT's EasyCard. However, because today's computing power is so strong, and because Mifare's encryption is insufficient, cards can now be easily cloned using copier devices sold online. Even so, many businesses have still chosen Mifare as their access card upgrade, since it still offers some encryption protection. But as computer viruses, hacking, and other information security threats have grown more severe in recent years, Mifare's protection has proven inadequate \u2014 in short, its encryption level is too low, and it can now be easily cracked with today's technology.<\/span><\/p><p>\u00a0<\/p><p>Under the ISO 15408 standard, EAL 5-level encrypted access cards are required, which puts businesses in a dilemma when upgrading \u2014 how can they keep their existing system architecture while also adopting an EAL 5 encrypted access card solution? Generally speaking, vendors cannot provide both Mifare and EAL 5 high-frequency encryption technologies on a single card, and businesses are unlikely to replace their entire existing access control equipment with a higher-security solution just to upgrade their cards. HID Global's dual-frequency encrypted access card packages both 13.56MHz high-frequency encryption technologies onto a single card, allowing enterprise users to use a single card across different environments \u2014 using Mifare technology in general areas, and EAL 5 encryption technology in areas with ISO 15408 requirements \u2014 effectively solving the challenge of upgrading enterprise access control.<\/p><p>\u00a0<\/p><p><strong>How to Provide Encrypted Card Readers?<\/strong><\/p><p><span style=\"font-size: medium;\">Take the new Signo series of card readers as an example: they support simultaneous high\/low-frequency reading and offer a Bluetooth interface for configuring reader parameters, effectively resolving the complex configuration management issues of the past. In particular, businesses have often found that metal surfaces reduce a reader's effective read range when deploying a system, but this reader maintains normal reading and a good read range even when mounted on a metal surface. More importantly, the reader also supports reading EAL 5 encrypted cards, and offers E-lite and CP1000 card numbering mechanisms for enterprise users, protecting suppliers from having cards sold to unauthorized integrators. In addition, the reader itself features capacitive keypad buttons, allowing doors to be opened via PIN even while wearing gloves, and supports a duress code that, when entered, triggers the backend controller to issue an alarm \u2014 further strengthening access control security.<\/span><\/p><p>\u00a0<\/p><p><strong>How to Provide Encrypted Transmission?<\/strong><br \/><span style=\"font-size: medium;\">For the I\/O control modules that control various electric locks and door-position detection, the latest OSDPv2 transmission protocol can be used between them and encrypted card readers \u2014 in simple terms, encrypted RS-485 transmission. In the past, most readers used a Wiegand interface for transmission, or converted RS-485 signals to TCP\/IP via a converter. But these mechanisms share a common problem: plaintext transmission, meaning that anyone with bad intentions could tap into the wiring and attempt to intercept every card number \u2014 a long-standing problem at the physical wiring level. This is why securely transmitting card numbers within an access-controlled area requires OSDP (Open Supervised Device Protocol).<\/span><\/p><p>\u00a0<\/p><p><strong>How to Provide Encrypted Entry\/Exit Data?<\/strong><br \/><span style=\"font-size: medium;\">The access control module is the heart of the entire access control system's permissions. HID Global's access control module can store card numbers for up to 125,000 people on a single device, so even if the backend access control software goes offline, the system can continue granting access to 125,000 people while operating offline. This access control module communicates with the I\/O control module using AES (Advanced Encryption Standard) encrypted transmission, and also uses TLS (Transport Layer Security) encryption with the backend software, securing both the physical wiring transmission and network packet transmission. All devices storing data in the access control module also feature data protection mechanisms, ensuring data cannot easily leak out or be obtained by hackers through card number and permission data theft.<\/span><\/p><p>\u00a0<\/p><p><strong>Conclusion<\/strong><br \/><span style=\"font-size: medium;\">Taking these four areas together, it's clear that meeting ISO 15408's information and communication security requirements means introducing a securely encrypted access control architecture into application environments such as manufacturing. And as the Internet of Everything and artificial intelligence continue to mature, hackers' capabilities are advancing just as quickly. How businesses use these encryption mechanisms to ensure access control security \u2014 without letting their digital upgrade and smart transformation efforts be easily breached, or even suffer massive losses \u2014 is a serious issue every business owner must carefully consider.<\/span><\/p><p>\u00a0<\/p><p><img decoding=\"async\" class=\"aligncenter\" src=\"\/wp-content\/uploads\/2026\/07\/1661913044_orig.jpg\" alt=\"\u5716\u7247\" \/><\/p><p>\u00a0<\/p><p><strong><span style=\"color: #3387a2;\">Introduction to HID Global Access Card Types<\/span><\/strong><\/p><p>\u00a0<\/p><p><img decoding=\"async\" class=\"aligncenter\" src=\"\/wp-content\/uploads\/2026\/07\/hid-global-tw_orig.jpg\" alt=\"HID Global\u9580\u7981\u5361\" \/><\/p><p>HID Global Access Card Types<\/p><p>\u00a0<\/p><p><span style=\"font-size: medium;\"><span style=\"color: #a82e2e;\">This article was simultaneously published on the global security technology website <\/span><a href=\"https:\/\/www.asmag.com.tw\/mobile\/article_detail.aspx?aid=11793\" target=\"_blank\" rel=\"noopener\">https:\/\/www.asmag.com.tw\/mobile\/article_detail.aspx?aid=11793<\/a><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc1b2c6 elementor-widget elementor-widget-spacer\" data-id=\"fc1b2c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-930875d elementor-post-navigation-borders-yes elementor-widget elementor-widget-post-navigation\" data-id=\"930875d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-navigation.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-post-navigation\" role=\"navigation\" aria-label=\"Post Navigation\">\n\t\t\t<div class=\"elementor-post-navigation__prev elementor-post-navigation__link\">\n\t\t\t\t<a href=\"https:\/\/www.twpro-link.com\/en\/prolink-mrq-dos-and-ddos\/\" rel=\"prev\"><span class=\"post-navigation__arrow-wrapper post-navigation__arrow-prev\"><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-angle-left\" viewbox=\"0 0 256 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M31.7 239l136-136c9.4-9.4 24.6-9.4 33.9 0l22.6 22.6c9.4 9.4 9.4 24.6 0 33.9L127.9 256l96.4 96.4c9.4 9.4 9.4 24.6 0 33.9L201.7 409c-9.4 9.4-24.6 9.4-33.9 0l-136-136c-9.5-9.4-9.5-24.6-.1-34z\"><\/path><\/svg><span class=\"elementor-screen-only\">Prev<\/span><\/span><span class=\"elementor-post-navigation__link__prev\"><span class=\"post-navigation__prev--label\">Previous<\/span><span class=\"post-navigation__prev--title\">Understand DoS and DDoS Attacks in Seconds<\/span><\/span><\/a>\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-post-navigation__separator-wrapper\">\n\t\t\t\t\t<div class=\"elementor-post-navigation__separator\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"elementor-post-navigation__next elementor-post-navigation__link\">\n\t\t\t\t<a href=\"https:\/\/www.twpro-link.com\/en\/prolink-mrq-cctv-ai-acms-access-comtrol-management-system\/\" rel=\"next\"><span class=\"elementor-post-navigation__link__next\"><span class=\"post-navigation__next--label\">Next<\/span><span class=\"post-navigation__next--title\">When Access Control Combines with CCTV and AI, Are You Ready for the Contactless Economy?<\/span><\/span><span class=\"post-navigation__arrow-wrapper post-navigation__arrow-next\"><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-angle-right\" viewbox=\"0 0 256 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M224.3 273l-136 136c-9.4 9.4-24.6 9.4-33.9 0l-22.6-22.6c-9.4-9.4-9.4-24.6 0-33.9l96.4-96.4-96.4-96.4c-9.4-9.4-9.4-24.6 0-33.9L54.3 103c9.4-9.4 24.6-9.4 33.9 0l136 136c9.5 9.4 9.5 24.6.1 34z\"><\/path><\/svg><span class=\"elementor-screen-only\">Next<\/span><\/span><\/a>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Cheng-Chieh Yu (Sales Director, Pro-Link Co., Ltd.) - As technology continues to advance &#8230;<\/p>","protected":false},"author":1,"featured_media":307,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_angie_page":false,"page_builder":"","footnotes":""},"categories":[111],"tags":[],"class_list":["post-311","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mrq"],"_links":{"self":[{"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/posts\/311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/comments?post=311"}],"version-history":[{"count":3,"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/posts\/311\/revisions"}],"predecessor-version":[{"id":1979,"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/posts\/311\/revisions\/1979"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/media\/307"}],"wp:attachment":[{"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/media?parent=311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/categories?post=311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.twpro-link.com\/en\/wp-json\/wp\/v2\/tags?post=311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}