Technology : Security
Locked out
Keyless guestroom entry systems are getting a lot of attention , but questions about the security of the technology remain .
In recent months both Hilton Worldwide and Starwood Hotels & Resorts Worldwide have helped usher in the era of keyless entry to hotel guestrooms , offering new mobile-based systems that allow guests to use everything from mobile phones to Apple Watches to open doors . But with the technology still in its early stages , some wonder whether the systems are really hack-proof .
When it comes to the science driving these new locking mechanisms and the inherent level of security they provide , hotel companies piloting the keyless systems defer to the vendors providing the locks . The vendors , on the other hand , aren ’ t sharing much either , chalking it up to proprietary information .
“ If you have security providers that are using the latest technology and using it appropriately , there is no reason why a key on a mobile device shouldn ’ t be as secure as a key on a keycard , but the important word is ‘ if ,’” explains Doug Rice , CEO of Hotel Technology Next Generation ( HTNG ), Schaumburg , Illinois . “ There is really no good information anywhere in this industry on how state-of-the-art any of the solutions really are .”
Already here Both major hotel conglomerates like Hilton and Starwood and high-end individual properties like The Cromwell in Las Vegas are now embracing the keyless trend . Hilton ’ s mobile-key solution is soon to be live at all U . S . -based Conrad Hotels & Resorts properties , and the rollout will then continue across the Hilton Hotels & Resorts , Waldorf Astoria Hotels & Resorts and Canopy by Hilton brands beginning in summer 2015 . Then in 2016 , Hilton plans to deploy the mobile-key technology across 11 brands globally . But when reached for comment regarding the security of the locks , the company was only willing to speak in general terms .
“ The reliability and security of this technology has been thoroughly vetted ,” says Aaron Radelet , vice president of global corporate communications for Hilton . “ Before deployment , the technology undergoes rigorous testing and validation , including certification by external security experts .”
Starwood , meanwhile , is investing US $ 15 million in its SPG Keyless program , which will be present in 30,000 rooms this year after wrapping up pilot testing at select properties ( Aloft Beijing , Aloft Cancun , Aloft Cupertino , Aloft Harlem , W Doha , W Hollywood , W
Independents like The Cromwell in Las Vegas are instituting keyless programs like this Kaba system .
Hong Kong , W New York-Downtown , W Singapore and Element Times Square ). Company sources say Starwood worked closely with vendor Assa Abloy to insure the security of the new system .
“ Starwood ’ s in-house tech team worked closely with Assa Abloy to develop a software and hardware solution for SPG Keyless that is safe , reliable and design-forward , and equally as secure as key card technology ,” says a Starwood spokesman . “ Starwood hired an independent third-party security firm to conduct ‘ penetration testing ’ on both the locks and the SPG mobile app to identify for remediation any vulnerabilities .”
Leap of faith While there is no reason yet to believe one shouldn ’ t trust the systems , some insiders would like to see more independent third-party tracking of the keyless systems on the market .
“ The hoteliers want to know it ’ s secure , but they don ’ t necessarily want to have a cryptography expert on their staff to figure that out ,” Rice says . “ It ’ s hurting everybody right now .”
56 HOTELS May 2015 www . hotelsmag . com