Slashdot Mirror
Securing Your Facility?
krahd asks: "We, at the CS department of our University, in Uruguay, are evaluating different ways of securing the access to our floor. Until now we have used just a traditional door lock, but its's time to delpoy a new, more geeky solution. So, after reading this Ask Slashdot, I figured I'd pose this question as a follow-up. What would be the best way to do it? We've already evaluated biometric technologies like iris-scanning and fingerprint-scanning, and more traditional ways like intelligent cards but, what others possibilities exist, and which would you choose? Yes, price does matter."
We have fingerprint scanners to get into a computer room and they are very flaky. Lots of false negatives, dunno on the false positive rate (haven't tried). They also require a 4 digit pin number. Kinda defeats the purpose, huh?
-Sean
That does not defeat the purpose at all. The concept of using two different authentication mechanisms together is called two-factor authentication. Not only is it a well-established Information Security principle, it's also considered a Best Practice.
After all, if someone steals your finger, at least they won't know your PIN!
Check out my eclectic infosec blog at InfoSecPotpou
Use an electronic keypad lock where users need a special 4 or 5 digit key to get in. Make sure it is smart enough to have many keys, so each user (or special group of users) gets their own unique key. Everytime someone leaves, just remove them from the list. Biometric methods are flaky and expensive. They sound cool, but, IMO, it will just make people want to break them.
Appropriate Google search.
-Sean