Security Mantraps on the way

Security Mantraps on the way

Security mantraps came into use during the 16^th century and were mechanical devices used for catching poachers and trespassers. Today, a security mantrap is commonly described as a small room, area or compartment that is designed to temporarily hold (trap) an individual between two doors (barriers) so that their credentials can be verified before granting access. Verification may be manual, with security personnel doing the verification, or automatic, with technology doing the verification. Most systems installed today are automatic with various integrated technologies to enhance security, safety and prevent unauthorized entry.

In the 17^th century, sally ports were built to control the entryway to a fortification or prison. They often included two sets of doors (or gates) to delay enemy penetration. Today, a sally port used for security applications may include doors, gates or other physical barriers to control access of people (or vehicles) to a secure area. Both security mantraps and sally ports are in widely used for security applications, however, despite some similarities, the terms are not used interchangeably, and only sally ports are referenced in the building codes.

A mantrap is an access control tool designed and restricted to a physical space, which is separated from the adjoining spaces (rooms) by two doors, usually an exit and an entry door that cannot be unlocked at the same time. Mantraps are like a double-door checking system that use either airlock technology or interlocking doors.

Today's simplified automatic mantrap rooms enable access with access cards, key fobs and mobile phones. Since mantraps prevent two persons (unless authorized) to be in the same room, they can be used for shared spaces in hospitals, dormitories and boarding rooms or anywhere else where people have some need for privacy.

Both the International Building Code (IBC) and the Life Safety Code (NFPA 101) describe a sally port as a compartmented area with two or more doors (or gates) where the intended purpose is to prevent continuous and unobstructed passage by allowing the release of only one door at a time. Both codes restrict their use to institutional type occupancies (e.g., prisons, jails, detention and correctional centers) and require provisions for continuous and unobstructed travel through the sally port during an emergency egress condition.

During 2017, the most digital damage from cyber-attacks includes continuous targeting of critical infrastructure, ransomware, government emails being hacked, exfiltration of Central Intelligence Agency documents, and the multinational WannaCry ransomware attack of over 200,000 systems. Gartners’ global information security spending forecast estimates that by the end of 2017, purchases for security products and services could reach $84.5 billion or a seven percent increase since 2016. Defenses have progressively improved and measures continue to be implemented. However, there is one area which lags far behind – that is the physical security of data centers and, specifically, the adoption and employment of mantraps.

According to BICSI, a mantrap is created using two interlocking doors which open only one at a time after the correct credentials have been validated. To physically secure a facility or data center, periodic risk assessment and policy reviews should be conducted. Ideally, drills should be included to engrain the training scenarios and validate policies and procedures. An example of layered security can be found in the TIA-942 where tiers I through IV are used to differentiate each level including Kevlar or bullet resistant walls, windows, doors, closed circuit television (CCTV) monitoring, access control and more.

Despite their widespread use, security mantraps are not referenced by either IBC or NFPA, which has given rise to a plethora of terms and definitions, including, for example: security portals, security vestibules, security airlocks, security booths, security cabins, control vestibules and personnel interlocks. For the supplier, designer or code official, this lack of regulation can result in different interpretations of building code and life safety requirements. Generally, the most appropriate sections of the code are applied and enforced, which may include sections on doors, gates, turnstiles, revolving doors and accessibility requirements. Because security mantraps are unique in their design and operation, the enforcement of code sections intended for other technologies may result in installed systems that are over- or under-designed with added costs and project delays, if accepted at all.

A security mantrap may be manual or automatic, manned or unmanned, pre-engineered or built from the ground up, located indoors or outdoors, and include a variety of technologies to enhance security, safety, aesthetics, throughput, service and overall performance. The systems come in various sizes, shapes, styles and configurations with a multitude of finishes, glazing and door options, including ballistic and vandal resistant. Other options and features include: metal/weapons detection, left object detection, tailgating/piggybacking detection, monoblock construction, wall mount versions, network interface capabilities, video cameras, intercoms, anti-pass back integration, biometrics, manual releases, and inputs/outputs for control and alarm monitoring. most common mantraps work with a system of two interlocked doors, there are solutions that can be implemented on three or more doors, including varied authentication systems. “Real” mantraps typically have two locked doors. Some interlocked mantraps, such as those used at bank entrances, are unlocked to begin with, and only lock when one of the doors is open.

Security mantraps are commonly found in high-security, mission-critical facilities (e.g., government, military, critical infrastructure), but can also be found in many commercial and industrial facilities (e.g., banking, data centers, pharmaceutical, health care, airports, casinos, executive suites, high-end retail, R&D labs). Some of the key drivers for using security mantraps include the ability to detect and prevent tailgating and piggybacking incidents in unmanned locations, satisfying various regulatory compliance standards (e.g., GDPR, GLBA, PCI DSS, HIPPA, FISMA, SOX) by restricting access to critical information systems, and protecting against other security threats that have become more prevalent in the world today (e.g., espionage, terrorism, theft, vandalism, protests, etc.).

When security mantraps are being considered as a countermeasure to mitigate unauthorized entry, it is important to establish clear goals and objectives for the equipment, application and environment. Then, carefully review and evaluate the proposed system based on form, fit and function. When these systems become part of the building infrastructure, provisions for security and safety must be met. This often starts with a security risk assessment for the facility or site.

Two Major Types of Mantraps:

• Air Lock Control – low-security systems used only for environmental control also referred to as normally unlocked.
• Restricted Entry and Exit – these are considered the highest security type that is used with normally locked doors. Opening any door keeps all other doors secure. The man trap buffers simultaneous requests for access which prevents any two doors from being unlocked.

Additionally, some man traps may incorporate the use of Request-to-exit (REX) device – typically located on the inside secured door, most are identified as a ‘quick release’ latch.

Mantrap Pros:

• Allows only one person to enter or exit at a given time
• Requires proper identification and authentication
• Restricts movement into and out of the data center
• Can be used to closed unwanted visitors until authorities are called
• Provides an audit trail for personnel and visitors

Mantrap Cons:

• Highly secure doors are more expensive
• May not permit movement of large boxes, dollies, deliveries, etc.
• May fail during electrical power outage unless backup exists
• If not properly implemented according to policy and design, may present a safety risk

The goal of any security risk assessment is to develop a protection strategy that mitigates risk to people, property and information systems, and, for security mantraps, the primary goal is to prevent unauthorized entry. The security risk assessment process begins with asset identification and valuation, followed by evaluation and analysis of associated threats, vulnerabilities and potential loss impact. Finally, security measures are recommended and form the basis of an integrated protection strategy.

What happens during a fingerprints scan

What happens during a fingerprints scan?

What is a Fingerprint?

The skin surface of the fingers, palms and soles of the feet is different to the rest of the body surface. If you look at the inner surface of your hands and soles of the feet you will see a series of lines made up of elevations which we call 'ridges' and depressions which we call 'furrows'.

These ridges and furrows can be recorded in many ways. For example, the ridges can be inked and placed on to a piece of paper. This would leave a fingerprint like below. The black lines represent the ridges and the white lines represent the furrows.

Within these patterns the ridges can split or end creating ridge characteristics. There are 6 types of ridge characteristics.

Everyone has a unique and different distribution of these characteristics that develop in the womb and are persistent throughout life.

It is the coincidence sequence of these characteristics that allow me to make identifications. The coincidence sequence is whereby I will find the same characteristics, in the same order with the same relationship to each other in both the crime scene fingerprint and the fingerprint on the form I am using.

Fingerprints unique:

It's pretty obvious why we have fingerprints—the tiny friction ridges on the ends of our fingers and thumbs make it easier to grip things. By making our fingers rougher, these ridges increase the force of friction between our hands and the objects we hold, making it harder to drop things. You have fingerprints even before you're born. In fact, fingerprints are completely formed by the time you're seven months old in the womb. Unless you have accidents with your hands, your fingerprints remain the same throughout your life.

Enrollment and verification

Suppose you're in charge of security for a large bank and you want to put a fingerprint scanning system on the main entry turnstile where your employees come in each morning. How exactly would it work?

There are two separate stages involved in using a system like this. First you have to go through a process called enrollment, where the system learns about all the people it will have to recognize each day. During enrollment, each person's fingerprints are scanned, analyzed, and then stored in a coded form on a secure database. Typically it takes less than a half second to store a person's prints and the system works for over 99% of typical users (the failure rate is higher for manual workers than for office workers).

Once enrollment is complete, the system is ready to use—and this is the second stage, known as verification. Anyone who wants to gain access has to put their finger on a scanner. The scanner takes their fingerprint, checks it against all the prints in the database stored during enrollment, and decides whether the person is entitled to gain access or not. Sophisticated fingerprint systems can verify and match up to 40,000 prints per second!

How fingerprint scanners work

a computer has to scan the surface of your finger very quickly and then turn the scanned representation into a code it can check against its database. How does this happen?

There are two main ways of scanning fingers. An optical scanner works by shining a bright light over your fingerprint and taking what is effectively a digital photograph. If you've ever photocopied your hand, you'll know exactly how this works. Instead of producing a dirty black photocopy, the image feeds into a computer scanner. The scanner uses a light-sensitive microchip (either a CCD, charge-coupled device, or a CMOS image sensor) to produce a digital image. The computer analyzes the image automatically, selecting just the fingerprint, and then uses sophisticated pattern-matching software to turn it into a code.

Another type of scanner, known as a capacitive scanner, measures your finger electrically. When your finger rests on a surface, the ridges in your fingerprints touch the surface while the hollows between the ridges stand slightly clear of it. In other words, there are varying distances between each part of your finger and the surface below. A capacitive scanner builds up a picture of your fingerprint by measuring these distances. Scanners like this are a bit like the touchscreens on things like iPhones and iPads.

Unlike ordinary digital photos, scans have to capture exactly the right amount of detail—brightness and contrast—so that the individual ridges and other details in the fingerprint can be accurately matched to scans taken previously. Remember that fingerprints might be used as evidence in criminal trials, where a conviction could result in a long jail sentence or even the death penalty. That's why "quality control" is such an important part of the fingerprint scanning process.

Here's how the process works with a simple optical scanner:

1.    A row of LEDs scans bright light onto the glass (or plastic) surface on which your finger is pressing (sometimes called the platen).

2.    The quality of the image will vary according to how you're pressing, how clean or greasy your fingers are, how clean the scanning surface is, the light level in the room, and so on.

3.    Reflected light bounces back from your finger, through the glass, onto a CCD or CMOS image sensor.

4.    The longer this image-capture process takes, the brighter the image formed on the image sensor.

5.    If the image is too bright, areas of the fingerprint (including important details) may be washed out completely—like an indoor digital photo where the flash is too close or too bright. If it's too dark, the whole image will look black and details will be invisible for the opposite reason.

6.    An algorithm tests whether the image is too light or too dark; if so, an audible beep or LED indicator alerts the operator and we go back to step 1 to try again.

7.    If the image is roughly acceptable, another algorithm tests the level of detail, typically by counting the number of ridges and making sure there are alternate light and dark areas (as you'd expect to find in a decent fingerprint image). If the image fails this test, we go back to step 1 and try again.

8.    Providing the image passes these two tests, the scanner signals that the image is OK to the operator (again, either by beeping or with a different LED indicator). The image is stored as an acceptable scan in flash memory, ready to be transmitted (by USB cable, wireless, Bluetooth, or some similar method) to a "host" computer where it can be processed further. Typically, images captured this way are 512×512 pixels (the dimensions used by the FBI), and the standard image is 2.5cm (1 inch) square, 500 dots per inch, and 256 shades of gray.

9.    The host computer can either store the image on a database (temporarily or indefinitely) or automatically compare it against one or many other fingerprints to find a match.

The matching algorithm finds out whether there is a match by comparing two templates extracted by the characteristic point extraction algorithm, specifically by comparing the positions of each characteristic point and the structure.

Biometrics Systems usage and Advantages

Biometrics Systems usage and Advantages

Biometrics Systems are spreading its limbs in almost every sector, as it ensures security to the top most level. Looking at its multidimensional features, biometric systems are used for various applications. 

In today's technologically modern era, the biometric systems are replacing other conventional methods for different purposes. Biometrics Systems can be used to-- Manage Attendance, Access Control, Leave Management, Payroll Processing and many more. This really helps to optimize the solutions according to one's requirement. These solutions help to reduce the chaos of work and also reduces administrative costs.

How secure Biometric Systems are?

Biometric features of each individual are unique in itself, which cannot be tampered or manipulated. Though there are few possibilities to break the security, so to manage optimum security level, biometric systems can be secured with passwords and PIN codes.

How Biometrics Systems are beneficial?

Biometrics systems are useful in many ways, and its benefits depend on the application. Following are the most important benefits of biometrics systems which can help any firm to streamline the work force:-

Reduces Time and other paper works
Biometric solutions can easily reduce the time consumed in hectic calculations and paperwork required in salary processing or other processes. Now these solutions generate reports easily. The reports can be generated monthly or weekly or daily; depending on the requirements.

Accurate Identification

While traditional security systems are reliant on passwords, personal identification numbers (PINs) or smart cards, you can achieve a high level of accuracy with biometrics systems. If you have set up the system correctly, you can use biological characteristics like fingerprints and iris scans, which offer you unique and accurate identification methods. These features cannot be easily duplicated, which means only the authorized person gets access and you get high level of security.

Reduces Human efforts and administrative costs
Since each report is easily generated, so there is no requirement of involvement of more than one employee. Also, each and every detail of each employee is managed easily, thus there is no chance of any kind of manipulation. This reduces the administrative costs.

Restricts unauthorized access
The Access Control Solutions are generally used to restrict the unauthorized movements of any person. It basically works on biometrics of an employee. It also allows to limit the access of employees to a certain range of the office premises. 

Accountability

Biometric log-ins mean a person can be directly connected to a particular action or an event. In other words, biometrics creates a clear, definable audit trail of transactions or activities. This is especially handy in case of security breaches because you know exactly who is responsible for it. As a result you get true and complete accountability, which cannot be duplicated.

Helps to maintain attendance and other records
The Biometric Systems can be used to maintain the attendance of each employee and also manages other records, including OTs, Leaves, etc. A report of records can be generated according to the requirements.

Different solutions based on biometrics for different purposes
Biometric systems can be linked with different solutions like leave management system, canteen management system, payroll software and time office software to solve different purposes.

Security

Another advantage these systems have is that they can’t be guessed or stolen; hence they will be a long term security solution for your company. The problem with efficient password systems is that there is often a sequence of numbers, letters, and symbols, which makes them difficult to remember on a regular basis. The problem with tokens is that they can be easily stolen or lost – both these traditional methods involve the risk of things being shared. As a result you can’t ever be really sure as to who the real user is. However that won’t be the case with biometric characteristics, and you won’t have to deal with the problem of sharing, duplication, or fraud.

Scalability

Biometrics systems can be quite flexible and easily scalable. You can use higher versions of sensors and security systems based on your requirements. At the lowest level you can use characteristics that are not very discriminative; however if you are looking for a higher level of security for large scale databases then you can use systems with more discriminable features, or multi-modal applications to increase identification accuracy.

Convenience

It’s considered to be a convenient security solution because you don’t have to remember passwords, or carry extra badges, documents, or ID cards. You are definitely saved the hassle of having to remember passwords frequently or changing cards and badges. People forget passwords and ID cards are lost, which can be a huge nuisance with traditional security methods.

Versatility

There are different types of biometrics scanners available today and they can be used for various applications. They can be used by companies at security checkpoints including entrances, exits, doorways, and more.

Moreover you can make the most out of the biometric solutions to decide who can access certain systems and networks. Companies can also use them to monitor employee time and attendance, which raises accountability.

Biometricization of systems in India

Heading towards “Biometricization” of systems in India

Biometrics Technologies are searching new ways to spread its limbs in recent technology driven era. Every system within the public domain is proposed to be made transparent, secure and safe in its operation. Looking at these demands, Government of India is trying to implement Biometrics Technology in their system under Digital India program. This initiative from Government is really appreciable and needs an applaud. This will really help to curb corruption, larceny, and truancy. Also, the implementation of biometric technology will help layman gain the services in more effective ways. 

We all know biometrics technology is one of the most secure, safe and reliable way of human identification. So, it is quite necessary to implement this technology in every process under Government of India. This will bring a fruitful result in comparison to other conventional methods. Through this blog, I would like to throw some light on a few sectors where Biometrics Technology has been implemented or are proposed to be implemented in the coming days.

Attendance System: As the new Govt took the charge at the center, they firstly implemented Biometric Attendance System in Government offices. Also, they launched an attendance portal www.attendance.gov.in where the attendance of every employee is monitored. Its implementation has really proved fruitful and now they are showing up at offices right in time. As a result, Govt. Officials are found in their workplace.

E-PDS Scheme: Slowly and steadily, every state governments are implementing biometrics technology in the Public Distribution System at different levels. This will show a drastic change in the whole process of ration distribution. The poor people who usually are kept aside from govt. aides now will be directly benefited. The mediators will vanish and e-ration card holder can enjoy their right to the food.

Skill Development: Under the skill development program, the implementation of Biometric technology is really an effective state. Each and every student's attendance is marked in biometric devices with its location and uploaded to the central server. This has reduced larceny and made the process more transparent and effective.

Passport system: Also, the government has proposed to make biometric characteristic a mandatory  verification during passport issue. This step has been taken to reduce the crime and illegal immigration. Effective implementation will lower down, the rate of crimes under different circumstances.

For Criminal Records: National Crime Record Bureau (NCRB) has decided to launch a software which will identify the criminals. The implementation of Biometrics will help officials to know whether the criminal had ever been previously prosecuted for any other crime. This will help in the faster procedure of judgments and other trials.

National ID for Fishermen: The major setback of fishermen is their identification. This also leads to prosecutions of fishermen and they are sent behind the bars without any charge. So to resolve this issue, the government has decided to issue National ID cards with biometric for fishermen.

The rapid implementation of Biometrics Technology in different fields is definitely going to solve major common issue every citizen faces into their day-to-day life. Biometrics Technology has a tendency to change the approach of Government officials towards safe, secure and transparent systems. So, Star Link India, being the largest Indian manufacturer of Biometric Attendance Systems, endorses the step of Govt. and promises full support from their side.

Biometric Access Control Solutions

Biometrics has become one of the most prominent technologies in access control because it is reliable, convenient and secure.

The 4 characteristics of biometric access control solutions are: 
1. Speed and stability: Using infrared sensing, users can have their credentials quickly scanned without having to actually touch the scanners. In addition, most environments have little negative impact on the reliability of biometric credentials or the accuracy of scanners.

2. Convenience: Most biometric scanners use an all-on-screen design that lays out all controls in a single touchscreen display. The UI is also usually optimized for usability and convenience. Since leading manufacturers serve a global customer base, their devices generally feature multiple languages for users to choose from.

3. Security: Biometric access control systems are generally designed to protect facilities from backdoors in the system and coerced users. Depending on the security level, systems may use multiple authentication methods—such as requiring a user to also input a passcode or swipe an ID card—or require multiple people to be simultaneously authenticated. Systems can also be configured to include backdoors, such as different actions for different palms, to serve as a silent alarm in the case of coercion.

4. Integration: IP networks greatly increase the viability of creating an IP-based all-encompassing smart home system through the integration of biometric access control, alarm, video surveillance and other systems.

Comparison of 4 major authentication methods for access control.

Biometric Scanning and Your Privacy

Look at the whorls on your index finger. Every fingerprint is almost entirely unique – that’s why they’ve been dusted for crime detection for more than a century. Technology is moving on. Biometric scanning is the process of checking a fingerprint, iris, or face pattern with a technological device. But what does the mass introduction of Biometrics mean for your privacy?

What is Biometric Scanning?

Biometric scanning is the process of ‘reading’ a physical feature such as fingerprint, iris, face, vein, or voice. When you present your fingerprint or iris, the biometric reader creates a digitized template which will be used to recognize you in the future. The template is stored, either in a central system, or on your card.

Where is Biometric Scanning Used?

Biometric scanning is already used in many workplaces, high-tech laptops, and on passports in some European countries. It is also being proposed for the new Identity Cards which could soon be compulsory in the UK.

Biometric scanners are currently used to register asylum seekers and monitor travellers passing through major airports. The UK and USA are in discussions about sharing their biometric information in the anti-terror campaign. In Europe, the sharing of information between police and immigration officials is being orchestrated. The Home Secretary recently remarked that the UK could not hope to improve its security systems by remaining inside a “bubble”, insisting that this sharing of personal biometric data is crucial to a safe future.

Is Biometric Scanning Foolproof?

Ever since a secondary school tested out a top-notch Biometrics system for dishing out school dinners, then declared it too slow, and worth another try in 12 months, biometric testing has been something of a laughing matter. Will it really be good enough for our national security?

The National Physical Laboratory carried out tests on behalf of the Home Office, which is looking for two methods (a primary and a back-up) to use on the new Identity Cards. The report indicated that minor factors such as a cut finger, poor light, bad positioning, watery eyes or contact lenses influence the success of scanning. 98% of fingerprint scans resulted in the successful acquisition of an image and 100% of facial scans produced a usable image. The report also showed that, once an image was produced, the number of false matches was quite high.

What Are The Risks To Your Privacy From Biometric Scanning?

In terms of privacy, the main concern with biometric scanning is the storage and handling of any data acquired by biometric systems.

Storing Your Biometric Data

The UK government does not have a reputation for handling information securely. It’s already tentatively proposed sharing biometric data from the National Identity Register with banks and supermarkets, and is in talks to give out more information to other countries, resulting in a lack of privacy. An ex-MI6 operative said that the National Identity Register is a “present” for terrorists – a fantastic target for misuse or destruction.

Using Your Biometric Data

The privacy concerns here are international. Although we’re protected by the European Convention on Human Rights, and by the Data Protection Act, other countries have different laws. Critics are already worried that the new biometric passports will be too easy to read, record, and pass on.