Selected Cardea access control readers have received OSDP verification from the Security Industry Association (SIA). According to the manufacturer, the devices are the first OSDP readers to achieve verification for the XRD/XRW profile, known as Transparent Mode, in addition to PD Secure certification. The approach shifts the processing of sensitive credential data away from the reader at the door and into the central access control system.

The OSDP verification covers all Cardea keypad models as well as the mobile-compatible Cardea and Cardea W readers. Of particular significance for high-security applications is the additional verification of the XRD/XRW profile for Transparent Mode alongside the existing PD Secure functionality.

OSDP, the Open Supervised Device Protocol, provides a standardized and secure method of communication between peripheral devices such as credential readers and access control systems. Transparent Mode goes a step further by changing where sensitive credential processing and security decisions take place.

Credential processing moves into the access control system

In conventional access control architectures, part of the credential processing may be performed directly within the reader. With OSDPv2 Transparent Mode, the reader assumes a different role. Rather than processing the credential data locally, it securely transfers encrypted credential information to the access control system.

Authentication, credential evaluation and the final access decision are then handled by the central system. Sensitive information and security logic therefore do not need to be processed or retained in the device installed at the door.

This separation can be particularly relevant in environments where physical security and cybersecurity requirements increasingly converge. Reducing security-critical processing at the edge can limit the reader’s attack surface while allowing sensitive functions to remain within a more controlled system environment.

Open architecture instead of proprietary lock-in

Cardea combines Transparent Mode with MIFARE DESFire, OSDPv2 Secure Channel and support for customer-owned security keys. This gives organizations greater control over their cryptographic keys and the way credential information is handled throughout the access control infrastructure.

At the same time, the approach supports more open and vendor-independent system architectures. Rather than tying central security functions to proprietary mechanisms within an individual reader, the concept relies on open standards and a clearer separation between the reader, secure communication and central authentication.

The SIA verification of the XRD/XRW profile therefore represents more than an additional technical certification. It points to a broader development in access control: the reader at the door is increasingly becoming a secured interface for credential data, while security logic and access decisions remain within the protected central system.

For operators of critical infrastructure, high-security facilities and other environments with demanding cybersecurity requirements, this separation can provide an important building block for secure, interoperable and future-ready access control architectures.