Decentralised identity, access and MFA for defense: secure at the edge, even when disconnected
Modern defense operations cannot rely on one central identity server, one cloud or one network link. Crayonic Badge™ and Crayonic DDS (project ABCD) bring hardware-rooted, decentralised identity and access management to personnel, facilities and systems. Authentication keeps working when links are jammed, degraded or cut.
Why centralised IAM fails in contested environments
Single points of failure
A central directory or cloud identity provider is a prime target. Take it down, or cut the link to it, and nobody can log in or open a door.
Denied, disrupted, intermittent links
Deployed units, ships, field hospitals and forward bases often operate with no reliable connection back to headquarters.
Phishing and credential theft
Passwords, OTPs and phone-based MFA are routinely phished, relayed or intercepted by state-level adversaries.
Sovereignty and supply chain
Identity infrastructure that depends on non-EU clouds or components creates legal exposure and supply-chain risk.
The Crayonic approach: identity that travels with the person
Hardware-rooted credentials
FIDO2 passkeys, certificates and access credentials are generated and kept in a Common Criteria EAL5+ secure element on the Badge. They cannot be copied or phished.
Verified locally, offline
The user is verified on the device itself, with a PIN on its own touchscreen or a fingerprint, and the result is checked by local infrastructure. No call to a central server is needed at the moment of access.
Crayonic DDS (project ABCD)
Crayonic's decentralised directory and access-control system distributes identities and access rights across nodes instead of one central server. Every site and unit can keep making access decisions on its own and synchronise when connectivity returns.
One device for digital and physical
The same Badge unlocks workstations, signs documents, opens secure areas and carries a photo ID or access card.
Personnel safety
Panic button, critical alerts and indoor location help protect staff in hospitals, bases and critical facilities.
EU-made, sovereign stack
The Badge is manufactured in the EU with EU-made critical components. Crayonic's management software can run fully on-premises with no dependence on a foreign cloud.
Where it applies
| Environment | What the Badge and DDS provide |
|---|---|
| Military hospitals and medical units | Touchless clinical login on shared workstations, secure paging and staff safety, including during network outages. |
| Bases and secure facilities | Phishing-resistant MFA for IT systems, combined with physical access to restricted areas and an audit trail of who entered where. |
| Deployed and disconnected operations | Local, offline authentication and access decisions that keep working without a link back to a central directory. |
| Defense industry and dual-use suppliers | Strong authentication for engineering, production and classified-adjacent systems, with on-premises management. |
| Coalition and inter-agency work | Standards-based credentials (FIDO2, X.509, smart cards) that partner systems can verify without sharing one central directory. |
Frequently asked questions
What is decentralised IAM, and why does defense need it?
Decentralised identity and access management removes the dependence on one central directory or identity provider. Credentials live on hardware the person carries, and access decisions can be made locally. Defense operations need this because central systems are high-value targets and connectivity in the field cannot be guaranteed.
Does the Badge work without a network connection?
Yes. Authentication runs on the device and on local infrastructure. Logins and access decisions keep working during internet, cloud or backbone outages.
What is Crayonic DDS (project ABCD)?
DDS is Crayonic's decentralised directory and access-control system. It distributes identities and access rights across nodes instead of keeping them in one central server, so each site or unit can operate on its own and synchronise when connectivity returns.
Why use a dedicated wearable instead of smartphones for MFA?
Smartphones are always online, run third-party apps and cannot be certified to Common Criteria. A dedicated certified device keeps keys in a secure element, works offline, and isn't exposed to the attack surface of a consumer phone.
Is Crayonic hardware made in the EU?
Yes. The Crayonic Badge is fully manufactured in the European Union, and its critical components are EU-made. Crayonic is headquartered in Eindhoven, the Netherlands, with R&D and production in Bratislava, Slovakia.
Talk to us about defense and dual-use deployments
We work with defense organisations, military hospitals and dual-use industry on pilots and EU-funded projects for decentralised, phishing-resistant identity.
Book a meetingExplore Crayonic Badge