By Chris Skinner, Security Technology Director
Access control has evolved over the years from mechanical locks to a wide variety of different systems, including some that are growing in popularity, and some that should be avoided.
At its core, access control determines who can enter a given area, whether that is a building, a room, or even a server rack. The combination of access control tech put in place at a given facility depends on factors like the level of security needed, and how often it will be accessed.
Access Control Basics
There are different protocols for access control. Different ways of determining who is authorized to access the area being secured. Access can be granted based on identity, role, or organization, along with several other determining factors.
There are other decisions to make around access control systems as well, depending on the spaces they secure.
Fail-safe installations require electric current to remain locked and are best suited for spaces where ingress and egress are needed in the event of a fire or similar event.
Fail-secure is the opposite, where an electric current is required to unlock the door. These are the most common systems for life safety since a building will remain secure even without power to keep bad actors out.
The technology used to secure these spaces is just as important as who can access them. As the industry continues to evolve, so do the threats it faces. According to Verizon, 22% of data breaches are caused by stolen credentials, and this is not the only way these systems can be compromised.
Proximity Cards
Proximity cards and access readers have been in use since the 80s, with a reader receiving low frequency radio signals from a physical card. In their infancy, these cards transmitted in low frequency bands like 26-bit Wiegand and would only transmit whatever identification number they were programmed with.
From there the reader would compare the identification number to its database to determine whether the individual with the card had entry permissions.
While revolutionary at the time, these cards were developed before encryption protocols were in place making them very easy to copy. They were quickly replaced with cards using higher-frequency, encrypted signals.
The higher frequencies allowed the cards to transmit more complex, harder-to-copy signals.
Today proximity cards are being replaced in part by devices we carry with us every day, smartphones and smart watches. HID SEOS frequencies allow for far denser signals to be transmitted efficiently.
Mobile access control is becoming an industry standard as it allows these systems to scale easily through the cloud. Access can be granted based on the protocols discussed above without issuing a physical card and administrators can even implement multi-factor authentication for an additional layer of security.
Biometric Access Control
Biometric access control used to be the stuff of sci-fi movies, but as technology has advanced the systems have become commonplace, especially in high-risk facilities.
Biometric access control uses technology like cameras, infrared scanners and fingerprint readers to identify authorized and unauthorized personnel by unique physical characteristics.
While fingerprint and palm scanners are the most common, followed by retina and face scanners, there are also systems that grant access based on voice recognition, and even infrared scans that can identify personnel by the unique patterns of veins in their arms.
Naturally, the added security of these systems comes with an increase in cost, but there are other drawbacks as well.
There is no federal regulation on the protection of biometric data but there is state legislation that has been passed regulating how it can be stored. Data breaches at a facility using biometric access control could be especially costly for employers.
Data security must be carefully considered when implementing systems like these.
For more information on access control systems, and how they can integrate with the rest of your security stack, schedule a consultation with one of our experts.
