Security: Crayonic KeyVault, the accessory of tomorrow
· Michel Aguilera
In a previous article, we discussed the concepts of security for one’s digital identity. Today, we are going to look at a product which, by its very design, is ahead of the market, with some innovations in the field of security but also in the way it can be used. Discovering the KeyVault, from the company Crayonic.
The key… to security!
Nowadays, there are several products, notably around the FIDO2 platform. We are going to take a closer look at the KeyVault from the Crayonic brand. This company, which specialises in cyber-security, developed the product with the idea of a perfect symbiosis between design, technology and easy integration.
As you can see in the illustration, this device is packed with various sensors and a display located on the top. The chassis is metal, with a very elegant design. You can note a fingerprint reader on the top, as well as a sort of button on the side (touch-sensitive). It is equipped with an NFC and bluetooth chip, which allows a connection with practically any PC or mobile. In addition to being usable as a FIDO2 security key, it can also be used as a storage medium (currently limited to 64 MB).
Here is a video outlining the main functions, presented by Peter Kolarov:
While it was still in the production phase, we were able to test the product on both MacOS and Windows 10. The results are really impressive. Besides its versatility of use, the way you navigate the KeyVault interface is devilishly efficient. Short demonstration video:
Some functions will become available soon, as firmware updates are integrated into the device. For pairing to manage your identification, you can use either the bluetooth connection or mini-USB (a connector is present on the KeyVault). It is also possible to use the KeyVault together with the Bitwarden password manager, in order to unlock access to the software interface (via Web):
As you can see, the operation is exactly the same as for any FIDO2 device, with the possibility of using it very easily in several use cases when identifying a user. The advantage is that the password is no longer necessary! You can use BitWarden in local mode on your computer or through a BitWarden server, which will store the KeyVault’s identification information so that it can recognise it during remote use.
Here is a video by Peter Kolarov (Crayonic), presenting the use cases in detail:
In addition, there is the possibility of using a gateway to centralise the management of several KeyVaults (either implemented within your own network or via a subscription, in the Crayonic Cloud). This makes it possible to bring together the various usage rules and to back up sensitive information.
The gateway makes integration easier at various levels of authentication, according to the needs of companies:
With the idea of allowing companies to store and manage KeyVaults, this could in the future represent a new type of managed service that could be taken up by partners. Crayonic aims to offer this possibility, both for in-house corporate management and for cybersecurity companies, which could offer the service on a managed basis to small and medium-sized customers. This vision offers the possibility of managing our governance, in terms of controlling digital identities, within the various markets wishing to protect sensitive access. One use to imagine would be for staff who have access to sensitive data and may potentially work on systems that do not have strict security control. Logging in or accessing protected environments would then be done without running the risk of identity theft.
Here is an interview (in English) that I conducted with Pavol Schmitzer (Crayonic), who tells us in more detail about the company and the possibilities that KeyVault can offer:
In short, this key really “turns heads!”
Although not all the functions of this solution are available yet, those we were able to test convinced us that this is a cutting-edge product. A password-free future is emerging as self-evident, with the upsurge in cyber attacks on digital identities. It is becoming essential to protect yourself and to inform users of all kinds that this kind of solution can undoubtedly prevent unpleasant surprises in the future. I would like to take this opportunity to thank Crayonic for their help in preparing this article, as well as for providing me with the necessary equipment.