Where IT Security and Physical Security Converge

Racing to the Edge

While security has raced forward with IP video and digital video management, similar bursts are surfacing in the general access control market.

Access control hardware first found its way onto IP networks in the early 1990s, but the movement toward any true functionality beyond the basic data gathering panels running on networks is a more recent trend that poses a certain degree of challenge and understanding.

A brief explanation of the evolutionary history of access control will serve to highlight the benefits and challenges associated with true IP-based access control.

The basic architecture of access control has evolved from a network topology; however, in its infancy, the technology was strictly limited to private, dedicated networks of proprietary cable structure. As products have gained sophistication, IP networks became the standard communication for the core intelligence functions of the access control network. This design is centered around the concept of distributive intelligence whereas the peripheral card readers remained hardwired from the portal to a central communication controller to store offline activities and process access decisions based upon predefined criteria.

Overall network stability was a limiting factor in moving the basic peripheral components onto a network. The concept of distributive intelligent architecture proved to be an advancement in data handling via IP networks, distribution of decision-making capabilities and functional archiving of event activity in the event of network outages. This system architecture has been the backbone of access control systems for the past 15 years, but technology has now emerged that returns full circle to the original network topology -- only now residing on standard IP networks rather than the dedicated networks of yore.

Today, the focus on edge technologies is changing the general access control market in major ways. The initial benefits in the use of a managed IP network infrastructure are the deployed standards and perceived benefits in reduced cabling and associated labor costs.

More demonstrable benefits are emerging with the use of digital identities through smart cards, biometric devices and the seamless convergence of access transaction data with digital video and audio. In a general security approach, systems such as access control, CCTV and critical communications all exist to augment each other. With the IP standard firmly in place, it can be seamlessly provided through one connection to the network in the locale of the specific portal.

Additionally, the data stream of live events can be merged and stored so the entire event is documented in a common file for review and investigation rather than matching events on disparate systems. All of this functional efficiency is being deployed at an increasing rate; however, as with any new technology, there are pitfalls that must be understood and avoided.

Availability of network. While the standard robust IP network is generally available within a facility, some IT professionals are apprehensive of placing network access physically outside of the building in commonly controlled portals such as parking gates, turnstiles around perimeter fencing and exterior points on the building. In these applications, the continuation of standard access control can become the dominant solution, which ultimately results in a hybridized system. This is not a bad thing as it enhances a general level of security both physically and logically, but it serves to mitigate the demand for edge devices in other areas of the facility as well.

Availability of features. Many of the existing edge products are relatively new to the market and, more importantly, new to the industry. As such, they provide the end user with a relatively thin set of access control features. Dozens of sophisticated features have been developed and have evolved in the 20-year progress of the general access control industry. Many of those features have become widespread in the deployment of the systems and are typically taken for granted. This poses a challenge in the migration or expansion of existing systems and can often prove to be a limiting factor in the move to an exclusive IP-based access control system.

Regulatory environment. Most IT professionals have limited experience with fire and life safety issues pertaining to facility management and the regulations in force. Each municipality has various interpretations of the widely used national standards.

This can have a great impact when deploying PoE technologies available with the IP access control equipment.

While PoE makes immediate sense in the deployment of IP video, caution needs to be taken in looking to power electrical locks with this same technology. Fire marshals control building occupancy, and an oversight in this area could be very costly and embarrassing. Viable solutions exist. All of these challenges can be dealt with as the industry moves to adapt a more IP-centric product offering. But as it relates to access control, the race to the edge should be more of a managed walk to avoid the potential pitfalls most clearly suggestive of an enthusiastic herd of lemmings.



This article originally appeared in the August 2009 issue of Network-Centric Security.

About the Author

Steve Fisher is the president and CEO of Open Options Inc.

Comments

Add your Comment

Your Name:(optional)
Your Email:(optional)
Your Location:(optional)
Comment:
Please type the letters/numbers you see above