Access Control Advanced Features Guide

Author: Brian Rhodes, Published on Sep 15, 2015

Electronic access offers features that traditional mechanical locks cannot. While these feature may not be as fundamental as keeping doors secure, they can provide significant management, safety, and security advantages over locks and key alone.  In this note we examine three of the most powerful features available in modern systems:

  • Time & Attendance including time clocks, multi-factor authentication, payroll integration, costs, risks and benefits
  • Mustering covering area tracking vs checking in, use cases, additional design requirements, and system support
  • Mantraps inclduing EAC logic vs speciality controllers vs retrofit openings, costs, common uses and safety codes

We explain each of these features in depth inside.

********** ****** ****** ******** **** *********** ********** ***** ******. ***** ***** feature *** *** ** ** *********** ** ******* ***** ******, they *** ******* *********** **********, ******, *** ******** ********** **** locks *** *** *****.  ** **** **** ** ******* ***** of *** **** ******** ******** ********* ** ****** *******:

  • **** & ********** ********* **** ******, *****-****** **************, ******* ***********, costs, ***** *** ********
  • ********* ******** **** ******** ** ******** **, *** *****, ********** design ************, *** ****** *******
  • ******** ********* *** ***** ** ********** *********** ** ******** ********, costs, ****** **** *** ****** *****

** ******* **** ** ***** ******** ** ***** ******.

[***************]

**** *** **********

*** ** *** **** ******** ******** ** *** ** *** time/date ***** ********** **** ***** ***** ** * ******. *** only ** ******* *** **** **** *****, **** **** ****** whose ********** *** **** ** **** ****, ********* **** ** the ******, ****** **** ***** *** ******* ***** ** ******** attendance.

**** ******* ***** ** ******** ** '*****' * ****'* ******** through * ******, *** ******* * ******** ****** ** ***** a ****** *** ** * ***** ****. ***** **** **** even **** **** ** ***** ******* *** ********* ********* ******** ** ******* ***** **** **** *********.

**** ***** ********

**** ********** ***** ***********, **** *** ******* *** *** '**** logging' **** **** ******

**** ******* *** **** ** ****** ****. ******* ************ **** they ***** ***** *** *** **** **** **** ******* ** crucial, ** '****' ** ****** '*****'. ********* **** **** *** traditionally **** *** ******** ** ******* ******, ***** ******* ****** cards ** **** * *** **** ********* ******* *** ** a ***** ***. ******, "******** *** *********" ** * ****** ******.

*******, *** ****** ** *** ******* ****. ***** *** ********, abuse ** * ****, ***** ** ******** ******* **** **** only ***/*** ****. **** **** ** ***** ** ** *** ********* ** **** ** *** ********* ******. **** **** ** ********* **** ****/********** ********. ***** **** ****** *** primarily ******** ** ******* *** ********, *** ******** **** ******** from ****** * ***** ****** ** ********** ** **** ** **** calculating **** ******** ****, **** ****, ** ******** ***.

***** *** *** ****** *** **** & ********** ***** ***** setting ***** ******** ******* *** *** **** ******* ** ********* 'In' *** '***' ******* ** *** ******. **** * *** period ******, * ****** ** ******* ******* ******** ** ***** two *******, ******* *** '**' ******* *** *********** *** '***' intervals ******* ** ******** ****** ** **********.

*****-****** ***** *****

** ***** ** ***** *** ******* ** '***** ********' (* risk *** ******* ******** **** '********'), **** *** ********** ******* ****** ******* ******** ************** *******, including *********** ** **** *******. **** '***** **************' ******* **** no *** *** ******** ************ ********** ** ******* ******.

**** ****** *** **** & ********** ******* ******* **********, ********* resembling *** ******** *****:

***** ***** ** ******* *** ********* **** ** '**********' ********* systems **** ******* ** *** ****** *********, *** **** ********* cost **** ********** **** **** ****** ********. *** ******* ****** need ** ********* ** ******* **** ****. ******* ********* ****** readers can ** **** ** **** **** ************ (*.*., *** *** **/******'* *** ***** **** *** *******).

******* ***********

**** *** ********* ****** '**** *** **********' ********, **** ** frequently **** **** ********** ****** *******. **** *** ******* **** format **** ** ** *** ** ******** ******** **** ******* systems **** ****** ** ****. *******, **** ** ********* * ****** *******, *** ********** or ******* ***** ******* *********** ** *** ****** ******** ** collect *******. *** ********** ***** **** ***** ******'* ******* ****** ****** ** **** *** ********** ****:

** ***** *****, '**** & **********' ******** *** ** ***** in *** ****** ********, *** ** ********** '******* ******' ** added ** *** ******** *** ****** ***********. **** ********** ******** becomes *** ******* ******* ********, ** ******** ** ***** ******* may **** ******** **** '***-********' ************.

****** **********-***** ********* ***** ********** '******** ******' *********, *********:

**** & ********** *****

*******: *** ***** ****** *** * ******* **** ****** *** ** you **** ** ***** ***** ********, **** *** ********** ********* readers ***** ******* ~$*** *** ~$**** ****, **** ****-******** ******* fingerprint ******* ******* ****** $*** ****. (*** *** ****** ** *********** ******* *** **** ******.) ******** ******* *** ** ******** *** ***** sites, *** ********* *** *** ****** ***** ******** ****** *********** or ********** ** ******* ***** *******.

***** ********: ******* ***** ** *** * **** *** ********** ****** ***** from '****' ******* ** ~$****. **** ********* ***** * '** ********** ****' ********* ************* ** ***** ***** ******, *** *** **** **** be ******** ************ **** * ******* ********. 

******** ********: *** ***** ******** / *********** ****** ******** **** ********* *********, but ********* ***** ******* ~$*** *** ~$****, ********* ********* ** the **** ** * *******'* ******** ****** *** ****** ** sites **** ** *********. *** **** ********** ****** *******, ***** modules **** ***** ~$*,*** ****.

**** *** *** *****?

***** ***** *** ** **** **** ***** ******** *** ** advantageous, ** ** *** ******* *****:

  • Clock *****: In effect, the EAC system clock serves as the payroll clock. While a variety of solutions for syncronizing/standardizing time exist, such as *** ******* *** ******* **** ******, *********** ******* *** *** ***** ********** can ****** *********** ********. **** *** ** **** *** **** and **********, ******* ****** **** ** **** **** *** ***** standard **** ** *****.
  • Single ****** ********: Or rather '******* *** **** **** ** *** ******'. ** * ****** ** **********, ** **** *** ****** drops *******, ** **** **** **** *****. *** ******* ** granting ****** ******* ******* ***** *** ***** ** ****** ** issuing ********** ****, ** ****** ******** ****** *** **** *** Attendance ********. *** ***** **** ** **** ** ***** ****** timeclock ** * ******, **** ** ****, *** *** *** time *** ****** ** *******, ******** ********* *** ********* *******.
  • Passback *********: For access systems using 'Anti-Passback' controls, logic discrepancies can cause low-level conflicts with Time Clock readers. If an employee 'scans In' to the timeclock, and then immediately 'scans In' to a normally secured door, the EAC system may generate an alarm or deny access unless the timeclock reader is isolated from passback rules. Given the large number or doors across multiple sites, or large populations of employees in a single system, these sort of errors can be common and hard to troubleshoot.

**** *** *** ********?

*******, ** ***** **** ******** ***** ** *** *** ** host '**** *** **********' ********, *********:

  • Less ** ***, ********: While a single system can be a weakness, it can also be efficient. Many facilities prioritize the upkeep of facility access systems, and issuing a credential for access also means it can be used for payroll. The investment in one facility system can be leveraged by another.
  • Expanded ******** ********: In normal use, if an employee has a security credential revoked in an EAC system, they immediately become invalid in the payroll system. In addition, tying the two systems together can prevent an unauthorized employee from gaining access to an 'Time In' reader before an allotted shift and help manage overtime payouts, and payroll hour allocations are enforceable by physical access controls. 

*********

******* ******** ******* ** ***** *** ****** **** ** ****** people ** * ******** ** ******** *****. ***** * *********** of **** *** *****, ********* ****** ** ***** ** ******** where **** ***, **** ****** ** *********.

*********'* *** **********

*****, *** **** ****** / ************* ******* *** *** ***** of *********, ********* ** *** **** ************* ********* ** ********:

  • **** ********
  • ******** **

**** ********: *** ******* ** ********* **** ****** ******* ** ******** * roster ** ********* ** * ******* ****. ***** **** ** occupant ***** * **** ** ***** *** ***** ** ****, the ****** ****** **** *** ****, ****, *** ********** ****** of *** **********. **** **** *** ** **** ** ********* who ** ** *** **** ** *** ***** ****, ********* emergency **********.

******** **: *************, ********* *** ** *********** ** **** ******* ** * 'opt-in' *******, ***** * ********** ****** ******* ** ** ********** point ** ******* ** *********** ***** **** ********. **** **** list ** ***** *** ** ******** ******* *** ******** **** of ******** *** ****** **** **** **** ****** ****** *********. The ****** ****** ***** ** ** ******* ****** ****** **** a '********* ******':

** ****** *** ****, *** **** ** ********* ** ** account *** ******** ***********, ** ** **** *** *** ********* present ****** ** ****, **** ********** ****** *** ** ***** to *********** ***** **** ***. ** ** ********* *********, *** resources ** ****** *** *** *********** *** *******, *** ****** an ******** **** ** *** ** ******* ***** ***** ***** to ***** *******.

***** ** ********* ****?

***** **** '********* **** *****', ********* ********* *** ** ******* in ******* ****. ** ********** ** ****** **********, ********* *** be **** *** '**** ***/ *** ***' **********, ***** ********* should *** ** ********* ** ** **** ********** ***** *** maintenance ********* *** ********* ***. ** **** *** *********** ****** has ******* ** ** ** ****, *** *** *** ******* out, *** ******** *** **-********* ***** ******** *** ** ********* for.

********, ** ********** ***** ******** ********** *** *********, **** *******, daycares, ** ********* *********, ********* *** ** ********** ** ****** that *** ******* ** * ***** *** ******* ** ** electronically ****** ******. 

********* ** *** ********* ** ***********, ** *** **** ************* or ***** ******* ** ********** *********. *** **** *** '******** reports' ** **** ** ****** ******** ****** ** ********** ****, it *** **** ****** ** **** ******** ** ******* ********* alerting **** ** *********** (**: ****** ******, **** *******, ** other ********* *************).

********** ****** ********

********* ** *** * ****** ********** *********, ********** ******** ************* and ******** *** ** ********. ** '********* *******' *** ****, then *********** **** ******** *** ** ** **** **** ********* a *** **********. **** ************* ***** ******** ***** *********** ***** readers ** *** ****** ** ******* ********* *** *** ********* in *** ******, ** *** **** *****-********* ***** ** ******** schedules ** ******* ********* *** ****.

*******, ***** ***** ** ********* *** ******* ********** *******. ** ***** to **** ** ******** ********* ** *** ** ******* ** an ****, ********* **** '**** ***' **** **** *****. **** access ********** ******** ****** ******* '******** **' *** ******, ** *** ******** of ** *** ******, **** **** ******** ** *** ****** to **, **** **** *** ********** ** * ******.

****** ********

************** ** *** ******* ****** ** ****** ******* ********, *** is ********* ********* ** ********** ***** *********. *** *******:

  • *****: ***** ******** ** ***** ******* ********* ** *** ** *********** ******** readers ** "********** ******", ******* ******* ******** ******* ********* ********* that ******** * **** ** ***** ** ** **** ** demand. 
  • ***: **** ****** ******** ********* *******, ** **** ** *****/****** linking **** *** ** **** ** ****** '********* *******'. **** 'Time & **********' ******* *** ****, ********* ******* *** ** filtered ** *** ** ********* ******* ** * ********.
  • *****: ******* ******** **** ********* ******* *** ********* ******* ****** in *** ********, *** *** ** ********** **** ***** *******.

** ********* ** ********* ** ***, **** **** ** ***** carefully ***** *** ** ** *********** ** **** ****** ******* software ** ********** *** ************ **** *******.

********

*** ** *** ****** ********** ** ****** ******* ** ***** used *****. ******** **** **** ** ******** ***** *** ********* ****** ** **** ******* ** ******** ******, **** the ***** ******* ** '********' ** ********. ****** **** ** mantraps **** *** **** ******** **** *** *****, *** *** concept ** ***** ******* ** * ****** ** ********** ********** in * ****** ** ****. ** **** ****, ** **** at ********, *** **** *** *********, *** ***** **** *** used.

********

*** **** ***** ******** * ****** ******* * ******* ** use: 

****** *** *** ********** ** *** ** *****:

  • *** ******* **** ****** ***** ******* *** ****, ***** *** inside ****** ***** * **********
  • *** ****** **** *******, *** *** ******* **** *****, ********** anyone **** ******** *** '********' ****. 
  • *** ******* **** ******* ****** ***** *** ****** **** ****** and *******.

*** '***********' ****** ** *** ******* ****** **** *** **** to ** ******** *** **** ** * ****. ***** **** restricting ******, *** ******* ** *** ********* *** ****** *** environment ****** *** **** ** ** ********** (***********, ********, ****) before *********** ** ** *** ****** ****, ** **** ***********. When **** **** ***, "********" *** ***** ****** "********", *** even ** ******** ** *** *** ******* ****, *** ******* sequencing ** ***** ** *** ****.

***** *******

*********, ******** *** *********** ** ********** ***** ** ** ***** primary ****:

*** *****

****** ********** ***** *** ********** ***** ******* ***** ** ****/****** ***** ** ****** ******. **** **********-***** *** ******* (********* **************, ******** *****, ***) ***** '*******' ************** ** **** ** their ******* **** ** ********** **** ****** ********** *** ***** to *** ******.

********* ***********

*** ************ ******* *** ** *** ********* *** ********** ******* configuration, *** ***** ********** ***** *** **** ** ********* ******** on ****** *****. *** ***** ***** ***** *** ******* '******' controller **** ** ********* ** ********* ***** ** *** **** way **** ******** *** ** *********:

******** ********

** ***** *****, '******** ** * ***' (** '******* ******') *** *****, ********** ***** ******** *** desired, *** ********** *** ***** ** *** ********. ** **** cases, ***** '****' **** **** ********* ***********, *** *** ** configured ** **** **** ******** *** ******* ** *******. ***** ******** feature * ****** ***** ** *** ****** ** ********* ** * 'passthru' ****; *******, *** ****** ** * ****. ** ***** ** accomplish ****, * ********** ***** **** ** *********** ********** ** several *****, ******, *** *** **** ********. ***** **** ****** be ******** ************, * "***" ****** *** ** ******* ************* sliding ********** ** **** ***** ** *** ****. *** ****** below **** ** ******* '***', *********** ****** ** ******** ******* or ******** ** ** ******** ****:

*** ********* ***** ***** *** **** *** ***** ****, ***** entering ******* *** ****** ****, ******* *** ** ** *****, validating ****** *** **** ******* *** **** ******** ****.

******* ****

** * **** *****, *** '*** *****' ****** ** ********* the ***** ********* ****** ** *** ** ******* ***** ****. 

********* *********** **** * ***, ***** **** ***** *** ** not ******* ** ***, *** * ********** ******* ** ***** required. *** *******, * ********* ********** ***** ~$***, ****** **** installing ** *** ****** *** ********** **** **** ******** ******** functionality.

******** ******** **** * **** ****, ********* ******* ~$**** - $10000, *** **** ***** *** ** **** *********, **** **********, and ******* ********** **** * '***** *****' *******.

****** ****

***** **** '********** *******' **** * *****, ******** *** **** employed ** ******* ************* ** *****-***** ************* ** ******* ************, and ** ********-********* ****** ******** **** '**********'. **** ***** *** **** ******* ******* **** *******, ** that * ******* ** ******** *** ** ******** **** * police ******* ******* ****** *********** ** ******. 

** **** *****, * ********* ********** *** ******** ** * jail/prison **** **** * ******-**** ******** ****. ** ***** ***** the ******** **** ** **, *** **** **** ** ******, preventing ******* **** ******** **** *** ******* *******. ********, **** the ******** **** ** ****, *** ****** **** ** ********, allowing * ******* *** ***** *** *******/******* ****, *** ****** to ****** ** *** ******* *******. 

****** *****

*** ******** ***** **** ***** ** *** ** ******** ****** largely ** *** ********* **** ************** ** *** ********. *** *******, * ***** *********** ** **** is ********** *********** **** ** ****** ********, *** ** ****** from **** ** *** '****/******' *********** ********. ******** ** *** which ***** ***** ***** ******** * ***** ************** ** *** building ****.

*** **** **********/*********/********** ***************, **** ****** ******* *** '****** ****', which ***** **** **** ****** **** ****** ** **********. ** this ****, ******** *** ** **** ** **** ****** *** of ** ****, *** **** ****** ** **** ** **** people ****** ***. ** *** ********** ***** *** *** **** to ******* **** ********* ******, **** ***** ******* ****** ****** paths **** ** ** ******* ****** *** ****.

** **** *****, ******** *** ******** ******** *** **** ***** interfaces *** ********, ** **** ** ** ********* ** *** can *********** ** ******* ****** * "********" ****. 

Comments (0)

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

Top Maglock Provider Warns Against Using Maglocks on Nov 21, 2017
Do not buy my company's product. It sounds strange indeed, but a senior Allegion consultant stated that maglocks should not be used in common...
CBR vs VBR vs MBR - Surveillance Streaming on Nov 21, 2017
How you stream video has a major impact on quality and bandwidth. And it is not simply CODEC choice (e.g., H.264 vs H.265). Regardless of the...
Isonas Cofounders Split, Launch Partner/Competitor on Nov 16, 2017
Breaking up is hard to do, especially when door access security is at stake. But that is exactly what has happened at Isonas. Senior employees...
PoE UPS Tested (Energy Reconnect) on Nov 15, 2017
In security, backup power is important, but most often requires UPS systems or extra cabling to devices for low voltage power. Now, some have...
Mobile Credentials (BLE / NFC / Apps) Guide on Nov 14, 2017
One of the biggest trends in access for the last few years has been the marriage of mobile phones and access cards. In this guide,...
Long Range Access Control Readers Tutorial on Nov 10, 2017
One of the classic challenges for access control are parking lots and garages, where the user's credential is far from the reader. With modern...
Selecting Access Control Readers Tutorial on Nov 09, 2017
Given the variety of types available, specifying access control readers can be a daunting process. However, focusing on a few key elements will...
Assa August Smartlock Pro Tested on Nov 07, 2017
Failures and set backs in the smartlock business have been commonplace (e.g., Lockitron Admits Failure and issues from our 2017 Kevo test). But...
Avigilon Access Control 2017 Examined on Nov 01, 2017
For more than 4 years, Avigilon has been in the access control business, since their May 2013 acquisition of RedCloud. Since then, Avigilon has...
Access Control Physical Security Tutorial on Oct 30, 2017
The physical security of access control components is critical to ensuring that a facility is truly secure. Otherwise, the entire system can be...

Most Recent Industry Reports

Camera Multi-Streaming Usage on Nov 22, 2017
IP cameras typically support multiple streams, allowing a single camera to transmit multiple streams at different resolutions, frame rates and even...
Law Breaking Longse Enters USA on Nov 22, 2017
Longse has established itself as world class, at least in spamming the industry, ripping off Milestone and Video Insight as well as Hikvision. But...
Amazon Key In-Home Package Delivery Examined on Nov 21, 2017
Interesting idea or invitation for criminals to rob you? Amazon's recent announcement of Key, a service that will help manage visitors, welcoming...
Top Maglock Provider Warns Against Using Maglocks on Nov 21, 2017
Do not buy my company's product. It sounds strange indeed, but a senior Allegion consultant stated that maglocks should not be used in common...
CBR vs VBR vs MBR - Surveillance Streaming on Nov 21, 2017
How you stream video has a major impact on quality and bandwidth. And it is not simply CODEC choice (e.g., H.264 vs H.265). Regardless of the...
Hikvision Chinese Government Owner CETHIK Exposed on Nov 20, 2017
Hikvision deceives about its Chinese government ownership. Contrary to their claims about 'independence' and simply having 'shareholders' that are...
Dahua Hard-Coded Credentials Vulnerability on Nov 20, 2017
A newly discovered Dahua backdoor is described by the researcher discovering it as: not the result of an accidental logic error or poor...
Panasonic Unified Surveillance Strategy Analyzed on Nov 17, 2017
Panasonic is now a "Unified Surveillance" offering, as their ASIS 2017 booth proclaimed: Looking to make a comeback in the security industry,...
Amazon Cloud Cam Is Poor (Tested) on Nov 17, 2017
Retail behemoth Amazon has entered the surveillance market with the Amazon Cloud Cam, the eyes of its just-announced Amazon Key delivery...
Nest Secure Alarm System Tested on Nov 16, 2017
Google's expansion continues, this time into home security with their Nest subsidiary's move into alarm systems. They paid more than a...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact