QR Code for Access Control

Introduction:

In order for QR code to be used as access credentials, it must be dynamic and secured:

Dynamic means the QR Code presented via a smartphone is different every time based on a timestamp.

Secured means the QR Code is encrypted and can only be decrypted by the device accepting the credentials.

Advantages:

1. Contactless thus no hygiene concern

2. Low cost relative to physical card

3. People are less likely to lose their smartphone

4. Additional layer of security of unlocking smartphone

5. Issuance of access credentials can be done via network means

Considerations:

1. Additional IT infrastructure to centrally manage dynamics of QR code generations

2. The risk of credential sharing is increased

3. Additional provisions and ongoing maintenance effort in maintaining time synchronisation across all field devices.

4. The smartphone application must be brought to front screen in order for QR code to be shown; thus decrease traffic throughput

5. Smartphone device security, network connection, and battery level would affect the effectiveness of the access control setup

Bottom Line:

Whether QR code is suitable for your business depends on your unique business requirement. Speak to a trusted security consultant before investment is recommended.