{"id":"https://openalex.org/W4416993676","doi":"https://doi.org/10.3390/info16121073","title":"A Secure and Sustainable Transition from Legacy Smart Cards to Mobile Credentials in University Access Control Systems","display_name":"A Secure and Sustainable Transition from Legacy Smart Cards to Mobile Credentials in University Access Control Systems","publication_year":2025,"publication_date":"2025-12-04","ids":{"openalex":"https://openalex.org/W4416993676","doi":"https://doi.org/10.3390/info16121073"},"language":"en","primary_location":{"id":"doi:10.3390/info16121073","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16121073","pdf_url":"https://www.mdpi.com/2078-2489/16/12/1073/pdf","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2078-2489/16/12/1073/pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5117802759","display_name":"Rashid Mustafa","orcid":"https://orcid.org/0009-0007-2845-533X"},"institutions":[{"id":"https://openalex.org/I39854758","display_name":"Auckland University of Technology","ror":"https://ror.org/01zvqw119","country_code":"NZ","type":"education","lineage":["https://openalex.org/I39854758"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Rashid Mustafa","raw_affiliation_strings":["Computer and Information Sciences, Auckland University of Technology, Auckland 1010, New Zealand"],"raw_orcid":"https://orcid.org/0009-0007-2845-533X","affiliations":[{"raw_affiliation_string":"Computer and Information Sciences, Auckland University of Technology, Auckland 1010, New Zealand","institution_ids":["https://openalex.org/I39854758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113846173","display_name":"Themrise Khan","orcid":null},"institutions":[{"id":"https://openalex.org/I39854758","display_name":"Auckland University of Technology","ror":"https://ror.org/01zvqw119","country_code":"NZ","type":"education","lineage":["https://openalex.org/I39854758"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Toseef Ahmed Khan","raw_affiliation_strings":["Computer and Information Sciences, Auckland University of Technology, Auckland 1010, New Zealand"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer and Information Sciences, Auckland University of Technology, Auckland 1010, New Zealand","institution_ids":["https://openalex.org/I39854758"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086887823","display_name":"Nurul I. Sarkar","orcid":"https://orcid.org/0000-0003-2770-8319"},"institutions":[{"id":"https://openalex.org/I39854758","display_name":"Auckland University of Technology","ror":"https://ror.org/01zvqw119","country_code":"NZ","type":"education","lineage":["https://openalex.org/I39854758"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Nurul I. Sarkar","raw_affiliation_strings":["Computer and Information Sciences, Auckland University of Technology, Auckland 1010, New Zealand"],"raw_orcid":"https://orcid.org/0000-0003-2770-8319","affiliations":[{"raw_affiliation_string":"Computer and Information Sciences, Auckland University of Technology, Auckland 1010, New Zealand","institution_ids":["https://openalex.org/I39854758"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I39854758"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1782},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1782},"fwci":1.0798,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.80984355,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"16","issue":"12","first_page":"1073","last_page":"1073"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10986","display_name":"RFID technology advancements","score":0.147599995136261,"subfield":{"id":"https://openalex.org/subfields/2214","display_name":"Media Technology"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10986","display_name":"RFID technology advancements","score":0.147599995136261,"subfield":{"id":"https://openalex.org/subfields/2214","display_name":"Media Technology"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.09709999710321426,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.08649999648332596,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.5921000242233276},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5859000086784363},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5450999736785889},{"id":"https://openalex.org/keywords/physical-access","display_name":"Physical access","score":0.4657999873161316},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.4212999939918518},{"id":"https://openalex.org/keywords/sustainability","display_name":"Sustainability","score":0.40959998965263367},{"id":"https://openalex.org/keywords/mobile-device","display_name":"Mobile device","score":0.40290001034736633},{"id":"https://openalex.org/keywords/smart-card","display_name":"Smart card","score":0.40130001306533813},{"id":"https://openalex.org/keywords/replay-attack","display_name":"Replay attack","score":0.3343999981880188}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6620000004768372},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5921000242233276},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5859000086784363},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5450999736785889},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4848000109195709},{"id":"https://openalex.org/C1304207","wikidata":"https://www.wikidata.org/wiki/Q7189582","display_name":"Physical access","level":3,"score":0.4657999873161316},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4212999939918518},{"id":"https://openalex.org/C66204764","wikidata":"https://www.wikidata.org/wiki/Q219416","display_name":"Sustainability","level":2,"score":0.40959998965263367},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.40290001034736633},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.40130001306533813},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.3343999981880188},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3237999975681305},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2994999885559082},{"id":"https://openalex.org/C105446022","wikidata":"https://www.wikidata.org/wiki/Q445962","display_name":"Legacy system","level":3,"score":0.2939999997615814},{"id":"https://openalex.org/C59519942","wikidata":"https://www.wikidata.org/wiki/Q650665","display_name":"Drone","level":2,"score":0.29280000925064087},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.2761000096797943},{"id":"https://openalex.org/C95491727","wikidata":"https://www.wikidata.org/wiki/Q992968","display_name":"Mobile telephony","level":3,"score":0.27309998869895935},{"id":"https://openalex.org/C98025372","wikidata":"https://www.wikidata.org/wiki/Q477538","display_name":"Systems architecture","level":3,"score":0.2687999904155731},{"id":"https://openalex.org/C19527686","wikidata":"https://www.wikidata.org/wiki/Q1665453","display_name":"System integration","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C144543869","wikidata":"https://www.wikidata.org/wiki/Q2738570","display_name":"Mobile computing","level":2,"score":0.267300009727478},{"id":"https://openalex.org/C2776157020","wikidata":"https://www.wikidata.org/wiki/Q851598","display_name":"Physical security","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C60952562","wikidata":"https://www.wikidata.org/wiki/Q6887246","display_name":"Mobile technology","level":3,"score":0.2621000111103058},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C160949748","wikidata":"https://www.wikidata.org/wiki/Q1365703","display_name":"Mobile payment","level":3,"score":0.25780001282691956},{"id":"https://openalex.org/C198783460","wikidata":"https://www.wikidata.org/wiki/Q629173","display_name":"Management system","level":2,"score":0.2551000118255615}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/info16121073","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16121073","pdf_url":"https://www.mdpi.com/2078-2489/16/12/1073/pdf","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:ad987861442a463ab9e75d4703ed4ee1","is_oa":true,"landing_page_url":"https://doaj.org/article/ad987861442a463ab9e75d4703ed4ee1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Information, Vol 16, Iss 12, p 1073 (2025)","raw_type":"article"},{"id":"pmh:oai:openrepository.aut.ac.nz:10292/20338","is_oa":true,"landing_page_url":"http://hdl.handle.net/10292/20338","pdf_url":null,"source":{"id":"https://openalex.org/S4306401809","display_name":"Tuwhera (Auckland University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I39854758","host_organization_name":"Auckland University of Technology","host_organization_lineage":["https://openalex.org/I39854758"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":{"id":"doi:10.3390/info16121073","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16121073","pdf_url":"https://www.mdpi.com/2078-2489/16/12/1073/pdf","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416993676.pdf","grobid_xml":"https://content.openalex.org/works/W4416993676.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W2034527334","https://openalex.org/W2411736285","https://openalex.org/W2478441362","https://openalex.org/W3167920155","https://openalex.org/W3199741782","https://openalex.org/W4210374281","https://openalex.org/W4285732805","https://openalex.org/W4309785929","https://openalex.org/W4313327596","https://openalex.org/W4317727226","https://openalex.org/W4319317939","https://openalex.org/W4319442567","https://openalex.org/W4378907523","https://openalex.org/W4389311581","https://openalex.org/W4394602733","https://openalex.org/W4396952825","https://openalex.org/W4400364097","https://openalex.org/W4400902109","https://openalex.org/W4403275313","https://openalex.org/W4404593305","https://openalex.org/W4406795586","https://openalex.org/W4407706826","https://openalex.org/W4407904271","https://openalex.org/W4408445000","https://openalex.org/W4410005298"],"related_works":[],"abstract_inverted_index":{"A":[0],"secure":[1,81],"and":[2,40,63,65,82,123,134,141,180,197],"sustainable":[3,83],"building":[4,85],"access":[5,18,86],"control":[6,87],"system":[7,35,88,131,156,214],"plays":[8],"a":[9,80,96,161],"vital":[10],"role":[11],"in":[12,58],"protecting":[13],"organisational":[14],"assets":[15],"worldwide.":[16],"Physical":[17],"management":[19],"at":[20],"Auckland":[21],"University":[22],"of":[23,100,127,143,164],"Technology":[24],"(AUT)":[25],"is":[26,36,158],"still":[27],"primarily":[28],"done":[29],"through":[30],"traditional":[31],"card-based":[32],"authentication.":[33],"The":[34],"susceptible":[37],"to":[38,152,217],"replay":[39,135],"cloning":[41,133],"attacks":[42],"because":[43],"the":[44,75,101,125,128,139,150,155,165,213],"conventional":[45],"Mifare":[46],"Classic":[47],"credentials":[48,187,210],"employ":[49],"outdated":[50],"Crypto1":[51],"encryption.":[52],"Such":[53],"weaknesses":[54],"provide":[55],"significant":[56],"threats":[57],"laboratories,":[59],"engineering":[60],"testing":[61],"facilities,":[62],"research":[64,94],"technological":[66],"areas":[67,118],"that":[68,145,185,206],"require":[69],"strict":[70],"security":[71],"procedures.":[72],"To":[73,148],"overcome":[74],"above":[76],"issues,":[77],"we":[78],"propose":[79],"university":[84],"using":[89],"mobile":[90,209],"app":[91],"credentials.":[92],"This":[93],"grounded":[95],"thorough":[97],"risk":[98],"analysis":[99],"university\u2019s":[102],"current":[103,129],"infrastructure,":[104],"mapping":[105],"potential":[106],"operational":[107,153],"continuity":[108],"threats.":[109],"We":[110,137],"analyse":[111],"card":[112],"issuance":[113],"records":[114],"by":[115],"identifying":[116],"high-risk":[117],"such":[119],"as":[120],"restricted":[121],"laboratories":[122],"evaluating":[124],"resilience":[126,199],"Gallagher\u2013Salto":[130],"against":[132,200],"attacks.":[136,202],"quantify":[138],"distribution":[140],"usage":[142],"cards":[144],"are":[146],"vulnerable.":[147],"evaluate":[149],"risks":[151],"continuity,":[154],"architecture":[157],"examined.":[159],"Additionally,":[160],"trial":[162],"implementation":[163,183],"Gallagher":[166],"Mobile":[167],"Connect":[168],"platform":[169],"was":[170],"conducted,":[171],"utilising":[172],"cloud":[173],"registration,":[174],"multi-factor":[175],"authentication":[176],"(PIN":[177],"or":[178],"biometrics),":[179],"books.":[181],"Pilot":[182],"shows":[184],"mobile-based":[186],"improve":[188,212],"user":[189],"experience,":[190],"align":[191],"with":[192],"AUT\u2019s":[193],"environmental":[194],"sustainability":[195],"roadmap,":[196],"increase":[198],"known":[201],"Results":[203],"have":[204],"shown":[205],"our":[207],"proposed":[208],"can":[211],"performance":[215],"up":[216],"80%.":[218]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-12-04T00:00:00"}