What is GOVPASS?
GOVPASS is the name given to the new UK government standard for card encryption on a physical access control card. Many government departments have already committed to moving to GOVPASS, and more are expected to follow soon.
Due to extensive experience working with central governments across Europe, including projects for the European Parliament, Nedap was invited to test and certify the first version of GOVPASS. As a result, AEOS became the first GOVPASS-certified access control system. And our card readers are among the first to be certified for use with this new standard.
High security access control standard for the UK government
Currently the government estate uses a variety of access control technologies and systems, with no single standardised access card format for its many departments and sites. This creates a series of challenges around card management, support systems, and end-of-life issues. Creating GOVPASS has enabled standardised access control that provides high security and can be used by any government agency. The government recognised that this would allow greater control over security and the opportunity could benefit from economies of scale as the cards could be centrally produced.
Where GOVPASS cards can be used
While GOVPASS is designed to allow a single card to be used across multiple departments, sites and applications, it doesn’t mean that cardholders have access to every government site. Or that the departments will all use the same access control system. Each UK government department will still manage the authorisations on their GOVPASS cards locally. This means the cards used by each department will only allow access to their specific sites and applications. If someone needs access to another UK-government location, however, their card can be enrolled locally by the relevant department.
An advanced approach to card reading
GOVPASS enables a complex, yet swift, way of reading a credential that isn’t available on any other card. It went through rigorous testing, which ensures a very high level of security. The government can now produce these high-security cards centrally, with a common set of applications and security keys. So every card is made in the same way to the same stringent standards and specifications. The cards are then distributed to government departments where they’re encoded further for use with their individual applications and access control systems.
Essentially, GOVPASS creates a template for government cards, rather than an access-all-areas master card. It offers all the benefits of central production and control with the flexibility and security of local encoding and enrolment.
Hardware and software requirements for GOVPASS
To enable government departments to use GOVPASS, their existing card readers need to be upgraded to GOVPASS-compliant firmware. If this isn’t possible, readers can be replaced with GOVPASS-compliant ones, such as Nedap readers. And if a department installs a new access control system, it’s recommended they choose one that’s certified for use with GOVPASS, such as AEOS.
End-to-end encryption for GOVPASS with AEOS Access Control System
A major benefit of using Nedap’s AEOS for the implementation of GOVPASS, is that AEOS controllers store keys and digital certificates in a SAM (secure access module) on the secure side of the door. It effectively makes our readers transparent, as GOVPASS cards are read and decrypted in the SAM rather than the reader. This end-to-end encryption protects against hackers overriding the access control system and has been certified for use with GOVPASS.
The implementation of GOVPASS will create new access control projects as government departments look to upgrade their systems or readers. Whether you bid, supply or specify for such projects, you have the assurance that the AEOS access control system and readers are GOVPASS approved and ready to go. AEOS fully system is GOVPASS compliant and we have the in-depth knowledge to provide any support you need.
Do you want more information regarding GOVPASS, don’t hesitate to contact our GOVPASS expert Michael Lee at email@example.com
Want to find out more about GOVPASS?
Please download our information sheet or get in touch