Subscriber Discussion

Thoughts On A Pin-Pad At A Vehicle Gate Entrance To A Parking Lot?

JH
Jay Hobdy
•Mar 11, 2018
IPVMU Certified

We have a client who has an employee parking lot with a fenced parking lot and a manual gate. They want to automate the gate, and we have a gate company handling that.

 

They want UPS, FedEx to have a PIN to get in the parking lot. Thoughts? I always shy away from pin-pads.

 

There will also be a callbox for visitors to ring the receptionist to open the gate.

 

The primary goal is to stop vehicle break-ins from people that enter the parking lot at will. In this case, I do not think the PIN will be so bad?

 

 

Avatar
Michael Silva
•Mar 11, 2018
Silva Consultants

Using PIN codes always creates a security risk. Once a code is given out, it can't be taken back. Codes can easily be passed from person to person. It is possible for people to observe codes being entered from a distance. When I do a security assessment, I play a a little game where I try to learn a few codes just by observing employees as they come and go. I am usually successful on the very first day. When four-digit codes are used, I find that I can usually find a working code just by sequentially entering codes from 1960 to 2000 - codes that people choose because it corresponds with a year of birth, marriage or graduation.

In your situation, I would highly recommend that the delivery drivers be required to use the call box to call the receptionist to get in. In most cases, this will only a happen a few times a day and not be that much of an inconvenience.  

Avatar
Campbell Chang
•Mar 12, 2018
In reply to Michael Silva

I disagree to an extent.

You can absolutely take codes back.  I did it to a site last week. I also use 6 digit pins instead of 4.  4 is way too easy.  But obviously it's harder to know which code to rescind.

The biggest difference is whether the customer wants to drop ~200 on a Rosslare kp or 2000 on an EAC system.

In my scenario, using the intercom is not a solution as it's a school and PINs are given to the garbos and cleaners who access the car park out of hours.

Avatar
Michael Silva
•Mar 12, 2018
Silva Consultants
In reply to Campbell Chang

You can void a code, but you can't "take it back" from the brain of a person who has memorized it. In many cases, the same code is given out to all delivery drivers, so voiding a code requires reissuing a new one to all drivers who it has been given to - sometimes a time-consuming task.

TM
Ty Mullen
•Mar 12, 2018
COR Security, Inc.

We are having more and more customers ask for that. Especially because everyone is ordering more and more things online. If you can't find a way around it I would setup the user code to only work several hours during the day. And if the system is capable have the it send emails of failed access attempts by that user. So you know if the code has been compromised. Or for that matter an email for valid access for that user. If it happens when they are not expecting it they can look into it more. 

New discussion

Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.

Newest discussions