PKOC 2.0.1 Specification Strengthens Interoperability

Posted by Jay Bartlett 10:47 am Categories: Access Control, Corporate News, Physical security, Technologies Tags: , , , .

Update Strengthens Interoperability While Maintaining Backward Compatibility

The Physical Security Interoperability Alliance (PSIA) has announced the release of version 2.0.1 of its Public Key Open Credential (PKOC) specification. The update incorporates implementation experience and extensive application, reader and card testing while maintaining backward compatibility with existing PKOC implementations.

PKOC is an open, royalty-free specification for secure, interoperable credentials based on public-key cryptography. Because the credential proves possession of a private key rather than presenting a shared secret, PKOC eliminates the need to store credential secrets in readers or control panels — reducing the risks associated with traditional credential architectures and giving manufacturers and end users greater flexibility in how they source and deploy credentials.

PKOC 2.0.1 Enhancements

PKOC 2.0.1 introduces:

  • A new information command that allows a reader to determine a credential’s supported PKOC version, profile and message-size capability before beginning a transaction
  • Clarified profile detection and version handling, giving developers predictable behavior across mixed-version deployments
  • Defined handling for credentials that do not support extended Application Protocol Data Units (APDUs), so readers can select a compatible transaction path rather than encountering failures in the field
  • Improved terminology, formatting and implementation guidance throughout the document

“PKOC 2.0.1 reflects what we have learned from implementing and testing the specification in working applications,” said Jason Ouellette, Head of Product Management and Strategy, ELATEC, and Chairman of the Board of the PSIA.

“The testing confirmed that the updated specification functions properly while remaining compatible with existing PKOC cards and readers. That is important for manufacturers and end users that want to adopt stronger credential security without disrupting current implementations.”

The specification was reviewed and tested by members of the PSIA PKOC Working Group using PKOC-enabled applications, physical credentials and readers from 4 member companies. This practical validation was an important part of ensuring that the changes addressed real implementation requirements while preserving interoperability.

“One of the primary objectives for PKOC v 2.0.1 was to simplify the migration from legacy systems to PKOC,” said GW Habraken, Managing Director, Taglio LLC.

“This release introduces PKOC Validated mode which provides optional functionality that enables Enterprises to include legacy identifiers together with the core PKOC Credential.”

The release represents another step in the maturation of PKOC as an open credential framework for physical and logical access control applications, supporting both smart card and mobile credential form factors.

“PKOC was developed to give the security industry an open and interoperable alternative to proprietary credential technologies,” said David Bunzel, Executive Director, PSIA.

“Version 2.0.1 strengthens the technical foundation of the specification and makes it easier for manufacturers, integrators and end users to evaluate and deploy PKOC-based solutions.”

PKOC 2.0.1 Specification

The PKOC 2.0.1 specification is publicly available from the PSIA at https://psialliance.org/securecredentials/.

The Physical Security Interoperability Alliance is a global consortium of physical-security manufacturers, integrators, consultants and end users. The organization develops open specifications that promote interoperability among security systems and devices.

PSIA specifications are developed collaboratively by industry participants and are available for use by the security community.

Internal Links

https://security.world/psia-announces-release-of-pkoc-explainer-video/

    External Links
    https://psialliance.org/securecredentials/
    https://psialliance.org/

      FAQs

      1. What Is PKOC 2.0.1?

      PKOC 2.0.1 is an updated version of the Public Key Open Credential specification developed by the PSIA. It strengthens interoperability and implementation guidance while maintaining backward compatibility with existing PKOC implementations.

      2. What Does PKOC Do?

      PKOC provides secure, interoperable credentials based on public-key cryptography. It proves possession of a private key rather than relying on a shared secret, eliminating the need to store credential secrets in readers or control panels.

      3. What Are The Main Updates In PKOC 2.0.1?

      The update adds an information command, clarifies profile and version handling, defines handling for credentials without extended APDUs, and improves terminology, formatting and implementation guidance.

      4. Does PKOC 2.0.1 Support Legacy Systems?

      Yes. PKOC 2.0.1 introduces PKOC Validated mode, providing optional functionality that enables enterprises to include legacy identifiers together with the core PKOC Credential.

      5. Where Is The PKOC 2.0.1 Specification Available?

      The PKOC 2.0.1 specification is publicly available from the Physical Security Interoperability Alliance through its Secure Credentials resources.

      Source: psialliance.org
      0 Comments