A SUPPLEMENT TO
PULL OUT AND SAVE
September 2008
2008
Access Control and Biometric Source Book
SponSored by
AWId HId Honeywell novacomm pelco protection one Genetec digital Identification Security profiling for Survival
photo credit: HId Global Corp.
www.securitydirectornews.com
Access Control & Biometrics SOURCE BOOK
Increased security, convenience and reduced costs boost biometric market
By Rhianna Daniels
f recent reports and surveys are accurate, the biometrics market is poised for significant growth. A 2008 Frost & Sullivan report, World Financial Biometrics Markets, determined that the global market for biometrics in just the financial industries will grow to nearly $1.5 billion in 2012. And a recent Security Director News’ survey reported that 65 percent of security practitioners are planning on adding biometrics to their security program in the future. Why? Higher security, convenience and reduced costs make it a no brainer. “There is an increasing marketplace acceptance and desire for biometrics,” said Henry Homrighaus, president of ProSecCon. Even so, privacy concerns continue to be a concern. J.C. Guignard, principal scientist Terry Wheeler with Guignard Biodynamics, said there will always be privacy concerns when biometric data is linked and stored with personal information. “People still have misconceptions about biometrics and this tends to limit interest at the user level,” said Daniel Peterson, senior locker product manger for Penco Products. “In our experience, biometrics as an access control interface is still broadly viewed as personally invasive and only suited for high security applications.”
operation outreach
I
Terry Wheeler, president of vascular biometric provider Identica, has found “ a lot of end users are concerned about biometrics.” But the company claims to calm some of those nerves. Identica’s hand scanner captures and encrypts an individual’s vascular (blood vessel) patterns on the back of the hand. Wheeler said, “Fingerprints have criminal connotations — there is no police database of vascular patterns.” Last year, the company won a contract to deploy a biometrics credentialing system using its hand vascular pattern recognition technology to the Port of Halifax — an installation designed to strengthen security and manage access for the port’s 4,000 workers. In Halifax — the world’s second largest ice-free port — workers present their hands to the scanner and the pattern is matched to a stored template.
Go deep
The complexity of biometric applications makes market outreach and education critical. Albert Cooke, corporate security specialist for AT&T Hosting and Application Services, said privacy concerns have not affected its implementation of biometrics; in its datacenter applications most users understand that no biometric information is stored on devices. “With proper awareness and education programs that explain the use of biometrics for tri-factor authentication, undue privacy concerns can be reduced or eliminated,” he said. Regardless of some apprehensions, companies are implementing biometrics for a variety of reasons. Daniel Quinn, information and technical security manager, headquarters, United States Southern Command, said its ability to protect sensitive information is greatly enhanced by ensuring people undergo a biometrics check prior to entering secure areas. “We are looking to implement biometrics wherever feasible,” he said. At Symantec Corp., “we utilize biometrics to reduce calls for password resets on user machines and in restricted access areas requiring two-factor authentication,” said Todd Vigneault, corporate security manager for Symantec. “Two-factor authentication is a standard application deployment for operational areas our organization deems sensitive.”
Wheeler explained that the company’s technology examines four millimeters below the surface of the skin and since the technology does not read from the surface of the hand, it is more reliable than other biometrics. “If you look at the Port of Halifax, those workers’ hands are rough and dirty,” he said. “In that environment, a fingerprint deployment is not going to be successful.” A big part of the company’s strategy is education; not only making end users aware of the technology but also talking through the privacy issues. “Most people have used a biometric in some form right now, in the business world anyway,” Wheeler said. “The acceptance of biometrics has passed the early adopters and is moving up the curve. As far as vascular acceptance? Well, its one of the fastest growing biometrics modality right now.”
carry it with you
Continued on page 14
World Financial biometrics market
Source: Frost & Sullivan. For more information, visit www.frost.com.
September 2008
3
Access Control & Biometrics SOURCE BOOK
www.securitydirectornews.com
‘Finally starting to see tangible results’
By Rhianna Daniels
onvergence is a driving force in the access control market these days, but what security practitioners are looking for is technology providers that can pull together disparate systems — both physical and logical — into a secure solution for identity management. “The days of separating databases for physical access control, networking, human resource, etc. are quickly coming to an end,” said Jason Bohrer, managing director-Americas for HID Global. “We’re not only talking about IP-based hardware devices at the edge of the network, but also the ability to manage network security through logical access control solutions.” As the demand increases for converged access, the ability to manage an individual’s identity is at the core of the issue and that has boosted interest in the door-to-desktop model. “Convergence between the physical access control and IT industries has been bounced around for many years,” Bohrer said. “The interest at the end user level is really beginning to drive changes for many players in the industry. We’re finally starting to see tangible results as players rally to fulfill these needs with something that is effective yet simple.”
‘common’ sense
C
cal access, but they also want to tie access information with video information, Hebert said. Products are hitting the market that converge video with access control technology, he said, which serve as a visual validation of an access request, he said. “The decision is still made by the access system, but audits and event time stamping allow you to go back and take a look at what happened,” Hebert said. Smith said many more manufacturers are developing integrated video and access solutions to address these customer needs and the demand for tighter security, ease of use and more detailed reporting through one platform. “I think the end users are ahead of the security industry in the IP world,” he said. “They want to put everything on their network. The security industry is still catching up on IP.”
open the door
Denis Hebert, president and CEO of HID Global, said the use of a common credential that can identify a person to a network, as well as access to a door, has grown in the last 12 to 18 months. “In the past, infrastructures at the card level and at the network access level were never really in place,” he said. “But now, certain native card applications can run within an operating system environment, permitting the use of cards, or tokens of some sort, to access networks. This has enabled a true convergence to take place.” Hebert said ‘access controllers’ can now be seen as ‘access appliances’ with common policies and roles assigned to both physical and logical networks to manage these appliances through the IT network. With this trend, comes the demand for a common credential that can “cut across boundaries but provide the things the IT world wants to have in network access,” Hebert said. “When you provision a card, the rights, privileges and policies that you assign to an individual have common characteristics across the logical and physical worlds,” he said. “Customers are looking for a way to provision identities on a one-time basis rather than having to do it individually in each system.” John Smith, senior marketing manager for Honeywell Access Systems, said at this time mostly larger-type end users where integrators are involved are moving towards physical-logical convergence, but “there is a need for all customers out there.” The emergence of IP has not only changed end user needs, but it has also changed the competitive marketplace. “Three years ago you would not have seen many of the larger companies that dominate the IT space involved with physical access control companies,” Bohrer said. “Yet, today name like Microsoft, Cisco and Dell are commonplace when discussing identity management and the new direction of this marketplace.” Not only are end customers looking to merge logical and physi4
September 2008
Although the core fundamentals of access control haven’t changed, what has changed is how security professionals communicate with a system — for example, managing access rules through web portals or networking with existing company data. Steve Fisher, president and CEO of Open Options, said there has been an uptick in the demand for access systems that network with existing databases, such as human resources, so access information can flow data back and forth in real-time. “I think this is representative of the frustration over a lack of cohesion with this data in enterprise-type organizations,” he said. But what is the biggest change in the market over the past three years? Hebert said it has been the “incredible growth of contactless smart cards. The market now seems to understand the need for a higher security level for cards and the whole concept of multiple applications on a card.”
money, so they say
As with any technology, security practitioners are looking to access control technologies to help solve problems in general while managing a variety of scenarios for access to facilities and networks, Hebert said. “Of course, a perennial concern we hear from end users is driving down the total cost of ownership,” he said. “This is a big area where we can help customers and end users.” Simon Wakely, vice president of business development with ActivIdentity, said, believe it or not, there is a cost reduction when moving to a single credential for logical and physical access if a company currently has multiple identities — physical access card, ID badge, passwords — associated with individuals. “All of these together are managed separately and budgeted separately,” he said. “A smart employee ID brings all of these cost centers together. Tie that into a single sign-on process and it provides immense efficiency and a huge reduction in help desk costs.” Another trend in the market, Smith said, is access control as a service. A lot of companies today, mostly smaller businesses, do not want to handle the full integration of a system. Rather, “they want someone to manage their systems,” Smith said. He said customers are looking at remote management from central stations because it reduces upfront costs and streamline workflow. sDn
Access Control & Biometrics SOURCE BOOK
www.securitydirectornews.com
Access control & biometrics buyer’s guide
The following listing is compiled from a survey conducted by Security Director News, and sent to access control and biometrics manufacturers known to the staff. Inclusion in this section is based on a company’s response to our requests for information. The data in the listing is provided by the respective company. Locks/door hardware Visitor management • • Intercom/telephone Time & attendance Remote monitored Integrated systems Entry/exit devices Perimeter systems Intrusion systems Card accessories Digital keypads Metal detection Magnetic stripe Network-based Retinal pattern Multi-building Access control power supplies Video imaging Barium ferrite Company Gates/barriers • Guard booths Card printers Single door Fingerprint PC-based Bar code Weigand Wireless Optical Smart Facial Hand Voice Prox Iris
Access Control Systems 877-442-6724 www.a-c-s.biz Access Specialties International 800-332-1013 access-specialties.com ActivIdentity 800-529-9499 www.actividentity.com Aiphone 800-692-0200 www.aiphone.com Alarm Lock Systems 800-252-5625 www.alarmlock.com Assa Abloy Door Security Solutions 800-377-3948 www.assaabloydss.com AWID 408-825-1100 www.awid.com Barcode Automation 800-528-9167 barcode-automation. com BlueWave Security 866-408-6182 bluewavesecurity.com Bosch Security Systems 800-289-0096 www.boschsecurity.us Boyle & Chase 800-325-2530 boyleandchase.com Brijot Imaging Systems 866-723-3796 www.brijot.com Brivo Systems 866-692-7486 www.brivo.com Camden Door Controls 877-226-3369 camdencontrols.com Card Scanning Solutions 310-691-8920 www.card-reader.com Ceelox 888-769-0918 www.ceelox.com • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
6
September 2008
Access Control & Biometrics SOURCE BOOK
Time & attendance Remote monitored Integrated systems Card accessories Digital keypads Magnetic stripe Network-based Retinal pattern Multi-building Access control power supplies Barium ferrite Card printers Single door Fingerprint PC-based Bar code Weigand Wireless
www.securitydirectornews.com
Locks/door hardware Visitor management • • • • Intercom/telephone Entry/exit devices Perimeter systems Intrusion systems
Metal detection
Video imaging
Company
Channel Vision 800-840-0288 channelvision.com Cogent 626-325-9600 cogentsystems.com Concentric Security 800-854-0050 concentricsecurity.com Continental Access 800-645-9330 www.cicaccess.com Cross Match Technologies 561-622-1650 www.crossmatch.com Cross Point Industries crosspointindustries. com Datacard Group 952-933-1223 www.datacard. com/ID Designed Security Inc. 800-272-3555 www.dsigo.com • • • • • • • • • • • • • • • • • • • • • • • • • • • • • •
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
8
September 2008
Gates/barriers • •
Guard booths
Optical
Smart
Facial
Hand
Voice
Prox
Iris
www.securitydirectornews.com
Time & attendance Remote monitored Integrated systems
Access Control & Biometrics SOURCE BOOK
Locks/door hardware Visitor management • • • • • • • Intercom/telephone Entry/exit devices Perimeter systems Intrusion systems Card accessories Digital keypads Metal detection Network-based Retinal pattern Multi-building Access control power supplies Video imaging Gates/barriers • • Guard booths Card printers Single door Fingerprint PC-based Wireless
Magnetic stripe
Barium ferrite
Bar code
Weigand
Optical
Smart
Facial
Hand
Company
Digital Acoustics 877-724-3387 digitalacoustics.com Digital Horizon Solutions 888-592-1670 www.1dhs.com Digital Identification Solutions 888-DIS-USA-1 digital-identification. com DMP 800-641-4282 www.dmp.com DoorKing 800-826-7493 www.doorking.com Dortronics Systems 800-906-0137 www.dortronics.com DSX Access Systems 888-419-8353 www.dsxinc.com ECSI International 973-574-8555 anti-terrorism.com e-DATA 866-807-3549 www.e-data.com E-Seek Inc. 714-545-3316 www.e-seek.com FaceKey Corp. 210-826-8811 www.facekey.com Firetide 877-FIRETIDE www.firetide.com Garrett Metal Detectors 800-234-6151 www.garrett.com Genetec 866-684-8006 www.genetec.com Graybar 800-472-9227 www.graybar.com HID Global 800-237-7769 www.hidglobal.com Hirsch Electronics 949-250-8888 hirschelectronics. com Honeywell Security 800-675-3364 honeywellaccess.com Identica Holdings Corp. 813-642-3479 www.identicacorp.com • • • • • • • • • • • • • •
•
•
•
•
•
•
Voice
Prox
Iris
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
September 2008
9
Access Control & Biometrics SOURCE BOOK
Time & attendance Remote monitored Integrated systems Card accessories Digital keypads Magnetic stripe Network-based Retinal pattern Multi-building Access control power supplies Barium ferrite Card printers Single door Fingerprint PC-based Bar code Weigand Wireless
www.securitydirectornews.com
Locks/door hardware Visitor management • • • • Intercom/telephone Entry/exit devices Perimeter systems Intrusion systems
Metal detection
Video imaging
Company
Imron Corp. 866-713-4299 www.imron.com IntelliView Technologies 888 922 9235 www.intelliview.ca Isonas Security Systems 800-581-0083 www.isonas.com Janus Associates 203-251-0200 www.janusassociates. com Jeron Electronic Systems 800-621-1903 www.jeron.com Kaba Access Control 800-849-8324 www.kaba-ilco.com Kantech 800-550-6660 www.kantech.com KapLogic Corp. 720-283-7501 www.kaplogic.com Keri Systems 800-260-5265 www.kerisys.com Kouba & Associates 877-873-8242 www.koubasystems. com Lee Dan Communications 800-231-1414 www.leedan.com Legic Identsystems www.legic.com Linear 800-421-1587 www.linearcorp.com Marks USA 800-526-0233 www.marksusa.com Middleware Associates 614-334-0859 www.middlewareassociates.com Open Options 877-818-7001 www.openoptionsinc. com Optellios Inc. 215-741-5850 www.optellios.com Pacom Systems Inc. 866-867-2266 www.pacom.com • •
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
10
September 2008
Gates/barriers • •
Guard booths
Optical
Smart
Facial
Hand
Voice
Prox
Iris
Access Control & Biometrics SOURCE BOOK
Time & attendance Remote monitored Integrated systems Card accessories Digital keypads Magnetic stripe Network-based Retinal pattern Multi-building Access control power supplies Barium ferrite Card printers Single door Fingerprint PC-based Bar code Weigand Wireless
www.securitydirectornews.com
Locks/door hardware Visitor management • • Intercom/telephone Entry/exit devices Perimeter systems Intrusion systems
Metal detection
Video imaging
Company
Panasonic Security Systems 866-726-2288 www.panasonic.com/ security Pelco 800-289-9100 www.pelco.com PERCo www.percoweb.com Reach Systems 510-452-9532 www.reachsystems. com Ringdale Inc. 888-288-9080 www.ringdale.com Rosslare Security Products Inc. 866-632-1101 www.rosslaresecurity. com Rutherford Controls Int’l Corp. 800-265-6630 rutherfordcontrols. com S.I.C. Biometrics 866 499.8377 www.sic.ca Seco-Larm USA Inc. 800-662-0800 www.seco-larm.com Secura Key 800-891-0020 www.securakey.com Securitech Group 800-622-LOCK www.securitech.com Securitron Magnalock Corp. 800-MAGLOCK www.securitron.com Security Door Controls 800-413-8783 www.sdcsecurity.com Smarter Security Systems 800.943.0043 www.smartersecurity. com • • • • • • • • •
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Security Director News will showcase the top 20 security practitioners under 40 in its November issue. Want to nominate someone you know? email editor@securityydirectornews.com
12
September 2008
Gates/barriers • •
Guard booths
Optical
Smart
Facial
Hand
Voice
Prox
Iris
Company
Sorhea Vaulx en Velin www.sorhea.com
SPICA Ljubljana www.spica.com
Software House 800-550-6660 www.swhouse.com
Ultra Electronics - Magicard 877 236 0933 www.magicard.com
US Biometrics Corp. 866-922-8202 www.usbiometrics. com
Vidient Systems 408-970-8240 www.vidient.com Bar code Barium ferrite • • Magnetic stripe Optical • • Weigand • Smart • Prox • Integrated systems • Network-based Remote monitored • • Time & attendance • • Wireless • • Single door • • PC-based • • Multi-building • • Fingerprint • Hand Retinal pattern • Facial • Iris Voice Access control power supplies • • Card printers • Card accessories • • • • • • • • • • Digital keypads Entry/exit devices Intercom/telephone Locks/door hardware Metal detection • Video imaging • • Perimeter systems • •
Visonic Americas 800-223-0020 www.visonic.com • • • • • • • • •
www.securitydirectornews.com
Access Control & Biometrics SOURCE BOOK
September 2008
Intrusion systems Guard booths Gates/barriers • • Visitor management
13
Access Control & Biometrics SOURCE BOOK
www.securitydirectornews.com
Biometrics: A no brainer?
Continued from page 3
Another company that is trying to change the way users view biometrics is Privaris, a company focusing on fingerprint biometrics for access control and consumer transactions. Its PlusID product, a key fob with an biometric authenticator that stores the fingerprint on the device and transmits a signal compatible with many common smart card and prox readers upon authentication, is also called “The Personal Biometric Token.”
paradiGm shift
New York instead of paying to park a car at the airport. Unique applications aside, Petze knows the privacy issue well and said Privaris’ product offers a solution. “Companies will say, ‘Hey employees, we love you and trust you but we just want to store your biometric data in our database. Don’t worry all the stuff will be protected.’ With our approach you never have to go down that road; you avoid the whole problem. Fingerprint data is never collected and stored. An individual stores it and puts it in their pocket.” sDn
The personal approach to biometrics is quite different from how things have been done in the past, said John Petze, CEO of the company. “It is a big education process and it is one of our major challenges,” he said. ““People assume that it’s fingerprints in a database.” In Privaris’s case, the fob is an enhanced prox card that will only broadcast with the proper finger in place. “You can have biometrics without changing your entire system,” Petze said. He said the company sees more demand from corporations that want to lock down computer rooms as well as more interest in securing access to vehicle parking garages. One unique problem heard from a customer was that an employee was stealing company parking spaces in downtown
October 19-21, 2008 the Fairmont, Dallas For more information, visit www.securityprofilingforsurvival.com
14
September 2008