Slashdot Mirror
Shopping for Building Access Security?
JoeCommodore asks: "At work we are planning a new facility, which will combine a lot of departments into one bigger building. We think it may be time to forgo analog key access and go with access cards (or something like it) for physical security. I could see the benefits (we don't have to collect keys and re-do locks on staff turnover, selective room access, access logs, and so forth). Beyond this, we are pretty clueless on the ins and outs of such systems, so I am asking those of you who have had to shop, install, administer, or even just regularly use such systems, what are your thoughts, recommendations, or opinions? This is pre-building so we can do just about anything within reason."
Most of the systems that I've installed, managed and used were a variation upon this theme. They were all contact-less NON-RFID cards that also served double-duty as ID badges. That proved pretty handy as they were always visible and easy to use when mounted to a retractable cord. The wiring system is rather simple as it's simply a serial connection (for the older systems) but requires home runs to the controller.. I've seen newer systems that use POE and are IP based which simplifies installation somewhat in that you no longer have to do home runs to the controller.
"An Ye Harm None, Do What Ye Will" Wicca Rede
Sounds like your setups weren't very well thought through. At work we have both proximity cards and hard key locks. When the power fails, a small group of people can still open the building because they've been issued hard keys. Everyone in IT and all of the higher-ups get a key. (We also have the prox cards for convienence when the power is on.) We issue a prox card to all employees and set access groups specifying times and locations in the building that can be accessed. HR/Accounting is super locked down, as is the server room. As for logging the hard keys, unless the power is out, the system requires an id code at a keypad placed just within each door. Lastly, the doors "fail" to the locked position. If they lose power or are tampered with, the door switches into the locked position. This setup is extremely nice for us to set "Business Hours" that the main doors are unlocked automatically. This accounts for holidays as well. Very nice setup. We used a local consulting firm that resells for ADT.
You are getting some good tips here. Also, talk to lots of vendors. With enough conversations you can put together an even more comprehensive list of possibilities and potential problems.
But the most important thing to start with is your requirements. Start with why do you want to replace mechanical keys? Save rekeying costs when employees leave or lose a key? That will frequently pay off by itself. Do you want to avoid people propping doors open because keys are inconvenient? Electronic can help with that, too. Just put the readers in a convenient place (ie. hip-level if you are using cards in wallets/purses - higher if the keys are embedded in picture ids that must be worn in the facility) and buy a system that sounds alarms when doors are open too long. Most businesses don't need to go overboard on security but can still benefit from electronic access.
On the other hand, you may have specific requirements imposed by your type of business or your vendor relationships. If you are handling, for instance, banking records, IRS info, medical data, etc. you may have some very specific security requirements and the key you use will be only a small part. Read the specs specific to your industry or your customers' industries and go from there.
And be sure that you have a tested disaster-recovery procedure. Others have told stories so I'll tell one, too. A friend worked on a NASA funded project. The satellite they were controlling cost 500 million dollars. They had fancy keylocks, backed up by redundant power and a operational plan that involved immediately shutting down non-essential systems and if the power outage looked long-term, having the university physical-plant connect in the emergency generators. When the big all-California whole-day power outage hit the plan fell apart. The on-duty controller headed down the hall, punched in his code and had it accepted but....nothing happened. Turns out that while the security system was backed up, the solenoid that actually retracts the lock was not. Neither was the phone system. Or the pager company transmitter sites. Fortunately the controller found a pay-phone and eventually a manager with a plain-old-telephone at home so they were able to get physical keys to the server rooms. (Note: disaster recovery is rife with this sort of tale. We found that while we can theoretically access our systems, getting to our office when the elevators are out and the fire stairs are locked due to silly post-911 security "enhancements", we can't actually get to our office in a major power outage.)
~~~~~~~
"You are not remembered for doing what is expected of you." - Atul Chitnis
As I understand it, the systems in the buildings I have worked have relied on magnetic locks. The building is sealed up tight when the power goes out, so I assume there is a rather large permanent magnet at each door and associated coils to negate the field long enough to open the door.
The access control system is contactless card based and on a whopping great battery backup (apparantly good for over 8 hours). There are specific building regulations about what is to happen in a power outage. Since the access control can lock you in and none of the windows open the building must be evacuated almost immediately anyway. The evacuation thing is due to the air-con being off in power outage and no fresh air being supplied to the building.
Any company that blocks doors open with a chair when the power is out is probably breaching a few safety codes.