Hypergate’s SmartAccess Feature

At Hypergate we constantly improve our products and develop new features which help you to ensure better usability and even better security. Introducing Hypergate’s newest feature: SmartAccess.

SmartAccess is a local rule engine which allows the IT administrator to use Context Data such as Geofences, WIFI, requested resource etc. to trigger pre-programmed actions. With SmartAccess you can gain full control over when, where and how their employees get access to specific data.

To enable the SmartAccess service no additional infrastructure or network is needed.

Set Context Data, define Actions

SmartAccess gives you the tools to define a rule under what conditions access should be granted and how. A rule will be expressed in a JavaScript which preforms actions based Context Data. These can be summarised to the following:

Let’s start with an example

Your sales team neither want to compromise on security nor on usability when they are in the office.
They just want the highest level of convenience which means directly accessing internal websites without additional security measures in place.
Since they are travelling quite a lot, it would be smart to step up the security whenever they are not in the headquarter.

Set up

Easily define, that when a member of the sales team is within your internal WIFI, authentication happens without any friction.
If a member of the sales team wants to authenticate from outside, you additionally ask for a Biometric validation (i.e. Fingerprint or Face ID).

To achieve this, SmartAccess does not require any additional infrastructure or backend components. All the processing is done in a secure way on the managed device. To give you an impression how powerful SmartAccess is, you can have a look at the passed context as well as the available events and actions:

Available events:

An event is a hook, when SmartAccess is triggered. It is propagated as part of the context and is usually the first thing to check to assure your code is running at the right time.  Available events are:

Actions

Actions allow you to interact with the user, make network requests or accept and deny the request. All the actions are also emulated in our SmartAccess configurator for testing at http://config.hypergate.com/tabs/smartaccess .

// the following methods can be called to control business logic (javascript syntax)
environment.store(key, payload): void // store data
environment.load(key, defaultValue): string // load previously stored data
environment.showAlert(title, message): void // show an alert
environment.showDialog(title, message): string // show a dialog with user input
environment.requestBiometrics(): boolean // request biometric authentication
environment.get(url, headers = [{'key': string, 'value': string}]): result // get webservice request
environment.post(url, body, headers = [{'key': 'Authorization', 'value': 'ApiKey xyz'}]): result // post webservice request
environment.put(url, body, headers = []): result // put webservice request
environment.delete(url, headers = []): result // delete webservice request
environment.accept(): void // accept / approve request
environment.deny(): void // deny / reject request
utils.needleInHaystack(needle, haystack): boolean // helper class for in list search

Use Cases

These are the currently available methods, with further updates, we will gradually add more methods. This very powerful feature set allows us to cover use cases such as:

These are just some examples to give you an impression of what might be possible. They are by no means complete. To give you an impression of how easy it is to develop such rules, we developed a configurator which emulates Hypergates behaviour. You can find it (including some samples) at https://config.hypergate.com. 

Smart Access is available for Hypergate Professional Android and coming soon to Hypergate iOS. Please reach out to us if you have questions regarding Smart Access.

See how it works