Device-bound
The credential cannot be copied to and used on another phone.
Standard assurance
Fast for everyday workflows. Uncompromising on the evidence chain.
Without claiming cryptographic distance over classic BLE, Standard proves that an enrolled device completed a live, authenticated transaction with the correct gateway.
BLELive local interaction
1×Single-use challenge
2Mobile evidence + field witness
FCFail-closed
Mechanism
Trust the verified transaction, not signal strength.
Gateway selection is not left to RSSI ranking. The mobile app finds the gateway assigned to the relevant entry point, signs its fresh challenge, and the gateway submits the transaction to the decision authority with its own witness.
Fresh
Old evidence cannot be replayed as a new transaction.
Context-bound
Attempt, entry point, purpose, policy, and gateway bindings are preserved.
Authority-bound
Neither the phone nor gateway can issue a final allow decision by itself.
Suitable use
Where speed and strong device evidence must stay in balance.
Office entrances, factory attendance points, controlled shared spaces, and everyday turnstile flows are natural use cases for the Standard profile.
Attendance
An attendance event from live local evidence instead of location or a shared QR code.
Access
A mobile credential and gateway witness evaluated under entry policy.
Additional verification
Per-transaction local user approval can be added to Standard proximity evidence when needed.
Need stronger assurance of physical proximity?
Combine secure UWB ranging and transaction approval in the same decision.