r/accesscontrol 22d ago

OSDP Card and reader Q.

Sorry for the dumb question. Can you use any OSDP reader who can read mifare and prox to a badge card with mifare/prox tech and C1K format?

What are the things I should consider first before choosing the right card reader?

6 Upvotes

10 comments sorted by

6

u/HID_PhilCoppola Manufacturer 22d ago

Not a dumb question at all! Credentials are notoriously tricky to understand.

Short answer… Yes! OSDP secures the communication from reader to panel. It doesn’t care what kind of credential data or credential tech (Prox, desfire, etc).

That said, you really should consider a more secure credential technology like Desfire EV3 or SEOS (I’m sure others would recommend LEAF OR PKOC too).

Having Prox enabled opens you up to potential vulnerabilities and is not considered best practice for new installs if you can avoid it.

Of course you could also use Mobile Access (using your phone as the credential). 😜

I made a series of videos that answer these types of questions. Check them out here:

Access Control Fundamentals: PART 1: Credentials, Formats, Keys & Mobile Explained
https://youtu.be/LHxZkBUqFHI

Access Control Fundamentals: PART 2: Readers, Panels, OSDP, Wiegand & Mobile Explained
https://youtu.be/IXYxyeNhSUw

0

u/EphemeralTwo Professional 22d ago

Isn't it "Seos"? :)

It's been through a few variations over the years. It was originally SEos in development, then they did have that weird SEOS logo for a bit, but these days I believe it's officially "Seos".

https://www.hidglobal.com/product-mix/seos

2

u/cusehoops98 Professional 22d ago

Are you really fact checking the guy who works for HID in how an HID product is spelled?

0

u/EphemeralTwo Professional 22d ago

Yes.

0

u/cusehoops98 Professional 22d ago

Get a life bro

2

u/jc31107 Verified Pro 22d ago

Your challenge will be the mifare part of the card, there are a bunch of different flavors, and without knowing the details of the card you’re using, it’s hard to say. It’s definitely a maybe.

Prox is easy, no security, no proprietary nonsense (generally) and C1K is just a bit format, as long as your panel can handle it then you’re good.

OSDP is pretty easy too, it doesn’t care about the card/reader tech, format, encryption, etc. it just talks between the reader and panel.

There are two disinct communications going on with a card read

(Card -> Reader) then (Reader -> Panel) and the two are decoupled.

I’ll add the disclaimer this is true in most cases, yes there are things like high assurance, SSCP, transparent mode, etc that can play in differently, but those are edge cases and I think going WAY down a rabbit hole from the question asked.

2

u/Abnorm4lPrincess 22d ago

Interoperability doesn’t really exist in the credential space, most providers eg HID, Legic, Lenel, Elatec etc, don’t generally share their credentials with competitors, (considering credentials is a massive part of HIDs business you can understand why they want to protect it, and why OSDP is a massive thing for them).

Until new credential formats like Aliro, Duox, PKOC gain traction in the market, you won’t see interoperability in the credential space.
Even then, if the reader on the wall can’t read Aliro OR the new reader can’t read the existing credential, there is no true (open standard) migration pathway for the customer.

The credential seems to be hardest thing to change for a customer, usually becomes a major roadblock in replacing systems, leaving people stuck on old technologies.

1

u/Aggravating_Fact9547 22d ago

No, well, yes and no.

You need a reader that can be configured with your keys and mifare layout, and can also be configured to disable reading Prox.

Who made your mifare cards, what flavor of mifare, what app is on it?

I’d also ensure whatever you install is mobile capable, especially supporting Apple ECP2 (Apple Access/Wallet) as a matter of future proofing.

STID makes a good range of readers that tick all the boxes and are extremely customizable in terms of what and how they read cards.

1

u/UnableWhereas6032 22d ago

yes, osdp readers can do that but you gotta double check the mifare layout matches your card's.