Can GateKeeper Proximity be spoofed?

GateKeeper Anti-Spoofing.

No. GateKeeper Proximity cannot be spoofed.

GateKeeper was specifically engineered to avoid common vulnerabilities associated with Bluetooth Low Energy (BLE) communication. Unlike many Bluetooth-based devices, GateKeeper does not pair or connect using standard BLE methods, making it immune to typical Bluetooth spoofing attacks.

How GateKeeper Prevents Spoofing?

GateKeeper includes a powerful feature called Secure Key Exchange, which makes each token cryptographically unique and significantly enhances proximity authentication security.

When Secure Key Exchange is enabled:

1. The GateKeeper Client application writes a unique cryptographic key to the Halberd token.

2. This key is stored in both:

   • On the GateKeeper token

   • In the user’s GateKeeper profile within the Hub

3. The token then uses this key to generate a six-digit One-Time Passcode (OTP), which is included in its Bluetooth advertising packet.

4. The OTP refreshes every 30 seconds.

5. The GateKeeper Client verifies this OTP against its own self-generated code.

6. Only if the codes match will authentication be successful.

One Token, One User

Once a secure key is written to a token:

• It cannot be re-provisioned or reused for another user.

• This one-to-one cryptographic binding ensures the token cannot be hijacked or reassigned maliciously.

For any additional questions or concerns regarding proximity settings, computer locking, credential management, or compliance, please contact GateKeeper Enterprise support using the Support Ticket form on https://gkaccess.com/support/ or email [e-mail].

---------------

GateKeeper spoof attack; antispoof;