Access Control - Restricted Keys Guide

By: Brian Rhodes, Published on Mar 15, 2018

Not all doors, even in larger facilities, can justify using electronic access control. And even for doors that do have electronic access control, many often need to work with mechanical locks. 

However, most keys can be easily copied. How do you improve their security?

Restricted or proprietary keys are often overlooked but can be effective in improving security and access control. 

Keyways are the part of the lock a key is inserted for use, and the shape of the keyway and the key must match.  (For a general guide, see our: Lock Keyways For Access Control Guide.) Restricted keyways are locks and keys fabricated with profiles that are uncommon or proprietary, controlled by the manufacturer and not available for general use.

So for substantial mechanical key systems, like Master Keyed facilities, Restricted Keyways is a complimentary safeguard to electronic access to protect those doors against unauthorized entry from easily duplicated keys or by Bump Keys.

Inside, we explain:

  • Keyway profile variations
  • Why 'Do Not Duplicate' statements are useless
  • Differences between Unrestricted vs Restricted vs Proprietary 
  • Strengths and Weaknesses of these approaches
  • Common providers and pricing

*** *** *****, **** in ****** **********, *** justify ***** ********** ****** control. *** **** *** doors **** ** **** electronic ****** *******, **** often **** ** **** with ********** *****. 

*******, **** **** *** be ****** ******. *** ** you ******* ***** ********?

********** ** *********** **** are ***** ********** *** *** be ********* ** ********* security *** ****** *******. 

******* *** *** **** of *** **** * key ** ******** *** use, *** *** ***** of *** ****** *** the *** **** *****.  (For * ******* *****, see ***: **** ******* *** ****** Control *****.) ********** ******* *** locks *** **** ********** with ******** **** *** uncommon ** ***********, ********** by *** ************ *** not ********* *** ******* use.

** *** *********** ********** key *******, **** ****** ***** **********, ********** ******* ** a ************* ********* ** electronic ****** ** ******* those ***** ******* ************ entry **** ****** ********** **** or ** **** ****.

******, ** *******:

  • ****** ******* **********
  • *** '** *** *********' statements *** *******
  • *********** ******* ************ ** Restricted ** *********** 
  • ********* *** ********** ** these **********
  • ****** ********* *** *******

[***************]

 

Keyway ********

********* ***** *** ****** is ********* *** *********** security *** ******* ** doors. ** *** **** fit *** ****, **** the ********* ****** ** unique ************ ** ****** from ***** ** ******* exhausted, *** ******* **** that ************ **** **** than *** **** ***** be ******.

** ******* ********, **** makers *********** ** ********* keyway ******** *** ***** locks *** ****. *** shape ** *** *** varies ******** ** **** it **** **** * certain ***** ** **** of ****. **** *** years, *** ****** ** profiles *** ***** ** thousands ** ********* ********. 

** *** **, **** of *** **** ****** profiles *** ***** *****:

*** *******, *** '*******' (KW1) ****** ** **** common ** *** ** residential market, *** **** ***-******* brand ***** **** ********** use ** *** ****. Getting * **** **** of **** ***** ******* * *********** lock ** ** **** difficult **** ******** ** a ******** ***** *** spending * *** *******.

**** ******** * ****** of ********: ** ********* duplicate **** ** ***** is ** ****, ****** - **** ********* - can *** **** ** misuse ****, ****** *** fundamental *** ** **** and ***** *** *********** access ******* **** *********.

Restricted ** *********** *******

********** *** **** ** *** difficult, ******** ** **** prove ** ** **** expensive. ** ******** '**********' or **** '***********' *******, users *** ************ ***** the *********** ** ********** key ******.

*** ********** ******* *** options:

  • ************: *** *** *** ************ of ****** ******** *** not *******, *** ********** commercial ******** *** ************ is ******.
  • **********: *** *** *** availability ** ****** ******** are ******* ** * few, ************** *** ******** diverse ******** *** ***** keys *** ******* ********** by *** ************. *******, these ****** *** ******* by ******* ******* *** user *** * **** manufacturer, *** ******* ** license *** *** ** the ******* ** **** a *** ***** *** are *** ******* ******* and ****** *********** ******* *** material ** * ***** number ** ******* *********. In ****, *********** ****** are **** ******** ** specific *********** **** ***.
  • ***********: ****** **** *********** potential ***** ** * few *********, ***** ** only *** ****** ****. Essentially * ************ ***** up *** ******** **** and **** *** **** one ********. 

** *******, '*********** **********' keyways *** *** **** costly *** *** ****** available, *** *** *** most *********. '**********' ******* are ********* ******* ** only * *** ********, but *** ************ ***** limits ***** **** *** use *** *** *** access ** ***** ****.  'Unrestricted' *** *********** *** protected ** ***, *** are *** **** ****** and ****** **** ******* used.

*** ***** ***** ****** down *** **** ** cons ** ***** *******:

Common *******

** ******** ** ********** keyways, **** ** ****** only **** *** ** a ******* ****** ** users *********, **** ***** use ******* **** ****** the ***** ****.

***** *** **** ****** profiles *** ***** **** in **** *** *********** and ********** *******.  ** examine **** ****** ** **** ******* *** ****** Control *****, *** *** '*** 5' ** *** ****** of ***** ***** ************ keyways ***:

***** ******** ******** *** vary, *** ******* ***** are ********* ***** ** small-medium ********** *** *********** locks, ******** ***** *** in ****-******** ***** ** not ********.

**** ***** ******** ** the ******, ***** ******* were ********** ** *******, but *********** ***** *** have *** **** ** use *** ******** ******* (75+ *****), ****** ********** has ****** *** *** designs *** ****** ***********. Despite ***** ******* ******* brand ***** **** '****', 'Schlage', *** '*******', ***** keyways *** *********** **** by ********* ****** *** fit *********** ************ *** blanks **** ** ******.

***** **** *** ****** close ************ ******* ***** profiles. *** *******, *** keys *** ****** *** keyways, *** **** *** open *** ****. **** is *** ** *** 6-pin *********** ** *** locks ****** *** *-*** variants ** ***. ** while *** ******** ***** of *** ******* ** the ****, **** ***** require ********* *** ***** and *********** *** ********** as ********* *******.

DND ********** ****

** * *********** ******** measure, **** ************* ** users ******* ** ********** key *********** ** ****** keyways ** ******** ** embossing *** ****** **** 'Do *** *********' ** 'No ************ ******' ** the ***** * ************* ********* or ******** ***** **** refuse ** **** * copy ******* ******** ******** from * ******** *******.

*******, *** ******* ******* with **** ********: *** 'warning' ** ********** *******.

********, *** ********* ** carries ** ************* ******,*** *** ******* ***** kiosks (**** ******** ****** **** statements) *** ********* ** supermarkets *** ****** ******.

Common *********

** *** ******, ********** and/or *********** **** *** available **** ******* *************:

  • ******: ***** ******** ***** *** ** or ******* ******, ********** **** and ***** *** ********* for * ********** ******* of $*** - $*,***.
  • *******: *** *******'* ******* *** ****** ******* are **********, ******* ** negotiated **** ******* $*** - $*** ***** ** volumes.
  • ****: *** ***** ****** ****** ****** control *** ***** *******, but ** * ****** premium **** ********* ** not **** **** $*,*** per ******.

** *******, ***** *** all ****** ********** *****, and *** ******* ** ordering **** ** *********** with * ******* ****** of *********.

*********

** *******, ******** ****** Restricted ** *********** ******* means ** ************ ****** of ***** ** **** are ********. *** **** does **** ******** *** risk ** ******* *********** unknown *** ***********, ** lowers *** **** ** someone ***** ******** ********* **** ****** ** any **** ** ********* a ************ ********* ********.

**********

*******, *** ***** ******* has *********. *********, *** limited ****** ** ******** users *** ********** ** single **** *** *********** keyways ** ******. ******* of ******* $* ** less *** * *** key ** * ***** store, ** *** **** 10X **** ****** *** take ****.

********* ** *** **** of ******* *** ************* locks *** * ***** number ** ********* ********* that *** ********* ***** to ******** ********** ********** into * *********** **** that *** ***** **** several ******* ** ******* thousand *******. ** *******, the ******* *** ********** of **** *** ***** using *** ******, *** higher **** *** ** the ********* ** **** volumes ******* *** ******** and ***** ********** *****.

** *******, *** ****** of ********** ** ******** ******* providers ** ******* ** well.  ******* ** ** end-user ******** *** ******* based ** ***** ** service *****, ***** * restricted ****** ****** *** approved ********* ** *** or * ***, *** ordering *********** ***** **** simple *** ****** *** take **** ** *****.

******* ******** * ********** keyway ******* ** **** once *** ********** *** decades, *** ** *** required *********** *** ******** of *** **** *** locks ** ** *** user's system.

[**** **** *** ********** written ** **** *** substantially ******* ** ****.]

Comments (8)

Electronic access control uses a similar concept to this one: "Facility Codes"

In general, the credential must have the right facility code in order to be approved for scanning by the reader.

In the same way as a key may not fit into a lock because of keyway mismatch, the credential cannot be read because the code doesn't match.

Considering the uselessness of DND warnings, is there any value in using high tech to manage the low? By restricting or at least tracking token usage by using devices like these?

Yes, if you are using keys which are not possible to copy (restricted or proprietary).

Seems like more trouble than it's worth since all but the most expensive locks can be picked relatively quickly. And the existence of this guy: http://www.qtactical.com/easy-entrie-key-machine/

Important doors simply shouldn't be left unmonitored.

Apparently now you can make bump keys for proprietery locks just by taking a picture of the keyhole.

Many lock makers carefully trademark or patent their key blank designs and prevent them from being sold to anyone outside a small group of verified customers. But with the advent of 3D printing, those restrictions can’t stop lockpickers from 3D printing their own blanks and filing them into bump keys

Most "high security" Kennedy's have a 3D element that is not seen from the 2D profile. For Schlage there is a unique side bar profile. With Medeco it's cut angles per pin. 

We are a large Medeco dealer and you can buy cylinders for a fraction of what you descirbe (I/C core, mortise, etc.) and you can retrofit the cylinders into most 3rd party hardware. I don't see how you came up with those dollar amounts? We can install cylinders in an entire office with a lot of keys for that. Of course if you want the best lock you can get in a truly restricted & patented keyway then it is going to cost more but not by a large margin. Each dealer has their own keyway which matches their locks. You have to go to your dealer to get any keys. It's not like you are locking the customer into coming to you and only you so you can gouge them all along the way. They buy into the system knowing their keys are secure and that is why they do it.

As for the time it takes for a key, anybody can walk in our store who has permissions to have keys cut and have them cut on the spot OR pay a delivery fee and have them dropped off within 24 hours or so. Others may have longer lead times but it doesn't take any longer than cutting a regular key. Obviously you cant walk into Home Depot and have it cut. The key machines are specialized for the patented keyway.

Also there is a difference between a restricted keyway and a restricted high security cylinder. Restricted is just that it doesn't say anything about being pick or drill resistant. High security add another level. They may have angled cuts and specially constructed pins to prevent this. I personally have never seen anybody pick a high security Medeco or Mul-T-lock cylinder. Hardware like this is just in a different class than anything else and you are paying a premium for the technology and advanced construction of this hardware. If you took apart your regular Schlage lock/cylinder vs. a high security one there is no comparison.

Physical security will never go away. Cameras and access control don't matter if I can pick a lock or physically defeat a lock in seconds. The alarm goes off and the cameras record my mask and then you are on your way with what you came for.

Many times there is no damage or break in whatsoever since the person came right in with a key that may have been duplicated or stolen since there are so many copies around.

Do yourself a favor and invest in a high security restricted system.

My budget for locks jumped a ton once I showed in hand how quick it is to zip a lock, with that, so did my budget for lock bypass tools and tooling to make prototypes for bypasses. I cant tell you how many cores I took a part that had master wafers in locks that shouldn't of ever had them.

And the locksmith who likes to keep the code cuts on hand incase "you lose your keys" while driving their branded trucks to your office. 

All it takes is their truck to get broken in till your key is out there with you address attached to it.

Login to read this IPVM report.

Related Reports

Multipoint Door Lock Tutorial on Jan 23, 2020
Despite widespread use, locked doors are notoriously weak at stopping entry, and thousands can be misspent on locks that leave doors quite...
Breaking Into A Facility Using Canned Air Tested on Jan 28, 2020
Access control is supposed to make doors more secure, but a $5 can of compressed air may defeat it. With no special training, intruders can...
Use Access Control Logs To Constrain Coronavirus on Apr 09, 2020
Access control users have included capabilities that are not commonly used that can help zero-in and discover potential Coronavirus hotspots in a...
Help Security End Users Facing Coronavirus Improve Remote Access on Mar 24, 2020
Many end-users and integrators are struggling with the impact of coronavirus lock downs but remote access can help both sides during this...
Access Control ADA and Disability Laws Tutorial on Feb 17, 2020
Safe access control is paramount, especially for those with disabilities. Most countries have codes to mandate safe building access for those...
Add Door Operators To Fight Coronavirus on Mar 31, 2020
IPVM recommends that integrators advocate and end-users consider adding door operators to fight the spread of coronavirus. This delivers mutual...
Vehicle Gate Access Control Guide on Mar 19, 2020
Vehicle gate access control demands integrating various systems to keep unauthorized cars out. Everything from high voltage electrical, to...
Vulnerability Directory For Access Credentials on Feb 20, 2020
Knowing which access credentials are insecure can be difficult to see, especially because most look and feel the same. Even insecure 125 kHz...
Wyze Smart Door Lock Test on Jan 14, 2020
Wyze's inexpensive cameras have grabbed the attention of many in the consumer market, but can the company's new smart lock get similar...
Access Credential Form Factor Tutorial on Feb 10, 2020
Deciding which access control credential to use and distribute, including form factor, can be a difficult task. Knowing the limitations and...

Most Recent Industry Reports

Ban Rules Released: Use Dahua or Hikvision, No Government Contracts on Jul 13, 2020
The US government has released the rules implementing the "Prohibition on Contracting with Entities Using" Dahua, Hikvision, and Huawei based...
JCI Sues Genetec For Patent Infringement on Jul 13, 2020
Surprisingly, security giant JCI has sued their partner, security software developer Genetec, for patent infringement. Inside this note,...
Remove Dahua and Hikvision Equipment "Immediately" Or Else Banned From US Government Contracts on Jul 10, 2020
The US government has directed contractors to remove covered equipment, such as Dahua, Hikvision, and Huawei Hisilicon products, "immediately." If...
ZeroEyes Presents Firearm Detection Video Analytics on Jul 09, 2020
ZeroEyes presented its Firearm detection Video Analytics system at the May 2020 IPVM Startups show. A 30-minute video from ZeroEyes...
Directory of 164 "Fever" Camera Suppliers on Jul 09, 2020
This directory provides a list of "Fever" scanning thermal camera providers to help you see and research what options are available. There are...
Clinton Public View Monitor (PVM) Mask Detection Tested on Jul 09, 2020
Face mask detection, or more specifically not wearing one, is expanding amidst the pandemic. Clinton Electronics has added this capability to their...
These Florida Real Estate Agents Are Now Selling "SafeCheck USA" Temperature Detectors on Jul 09, 2020
The "Kakon Brothers", William and Nathan, are self-described "south Florida Power Agents specializing in Luxury Real Estate" who "have closed over...
Avigilon ACC Cloud Tested on Jul 08, 2020
Avigilon merged Blue and ACC, adding VSaaS features to its on-premise VMS, offering remote video and health monitoring that was previously limited...
Hikvision's India Dominance Faces Threat on Jul 08, 2020
While Hikvision has become a dominant video surveillance provider in India, recent tension between the governments of India and the PRC is...
The US Fight Over Facial Recognition Explained on Jul 08, 2020
The controversy around facial recognition has grown significantly in 2020, with Congress members and activists speaking out against it while video...