Smartphone replaces physical access cards
The smartphone is increasingly becoming the central identity and access medium in companies. Together with technology partners Nexus and Deutsche Telekom Security, Samsung has developed a mobile access solution that makes the smartphone usable as a digital corporate ID for access and identity control. The solution is intended to offer a digital alternative to physical access cards and ID badges.
The new technology enables far more than convenient unlocking: it allows data to be encrypted, verified and signed, can be managed centrally and uses modern authentication methods. The digital corporate ID thus marks an important step towards smart corporate security.
The technical details of the mobile access solution
The solution is based on three technological pillars, each provided by one of the partners:
- Samsung Knox Native: The platform forms the foundation and delivers data isolation and encryption directly at hardware level. With the embedded Secure Element (eSE), Samsung supplies the protected hardware base on the smartphone.
- Nexus PKI: The manufacturer provides the public key infrastructure, the technical and organisational infrastructure for managing the digital certificates on the ID.
- Deutsche Telekom Security TSMS: The Trusted Service Management System brings independent systems together on one device and maps the IT infrastructure.
Three levels of mobile identity
The mobile identity works on three different levels:
- Visual ID: The visual representation of the corporate ID (front and back) is available in the mobile app.
- Digital ID: The certificates for authentication, signing and encryption are stored in the secure embedded Secure Element (eSE).
- Physical ID: The NFC channel on the smartphone replaces the physical corporate ID.
The embedded Secure Element is the heart of the hardware-based security platform Samsung Knox Native, which was developed together with the German Federal Office for Information Security (BSI). The platform meets the strict requirements for use in security-critical environments.
Why this development matters
The mobile access solution offers several decisive advantages over traditional access media. The risk of loss is lower, because the smartphone is in constant use and, as a fixed part of everyday life, receives particular attention. Unlike an additional card that is only used sporadically, there is less chance of access credentials falling into unauthorised hands. This also reduces the risk of identity theft.
Administration is considerably simplified, as permissions can be granted, adjusted or revoked "over the air" at any time. Internal processes benefit too: when employees join or leave, the entire card handling process is eliminated, making procedures more efficient.
Comprehensive IT infrastructure integration
The mobile access solution handles not only secure access control to buildings via NFC or Bluetooth Low Energy, but also digital identity management. This includes logging in to a laptop or accessing networks, cloud services or internal applications. Authentication takes place conveniently via wireless communication between smartphone and computer; inserting a physical card is no longer necessary at all.
Practical applications
Individual permissions can be stored centrally on the digital ID in the smartphone and updated at any time. These include, for example, access rights for VPN networks, ERP systems or licensed databases. The mobile device thus becomes a flexible key to the entire IT infrastructure.
The solution is particularly attractive for organisations with high security requirements – whether legally mandated or strategically motivated. These include, for example:
- Banks and insurance companies
- Companies in the aviation industry
- Public administration and government agencies
- Critical infrastructure operators
These organisations benefit from high protection standards and a scalable, future-oriented architecture.
Market launch and outlook
Deutsche Telekom Security is launching the joint platform later this year exclusively with Samsung, offering all businesses a way to provide their employees with these mobile access and identity solutions. The solution is equally suitable for small, medium-sized and large companies.
For public authorities, the solution helps to meet rising security requirements at federal and state level while at the same time modernising administrative processes. This development shows how security technology is evolving and combining convenience, security and efficiency.
The digital corporate ID can help improve responsiveness in the event of security incidents and simplify administrative processes. The smartphone thus becomes the central element of a modern security architecture that puts both protection and user-friendliness at the heart of the design.
