Nepedia
Back to Discover
Advanced Reader
💻

Access control

technology Maturity 11-13 Next article →

Access control, or AC, is the process of deciding if a subject should be granted or denied access to an object. An object can be a physical place or a digital resource. Accessing something might mean entering a room, using a tool, or consuming data. In digital environments, this is often called admission control. It is a vital part of maintaining privacy and security. Organizations create access control policies to manage these decisions. These policies are part of a larger security policy designed to match an organization's risk appetite.

Access control topologies IP master
Access control topologies IP master

Physical access control manages who, where, and when someone enters or exits. Historically, this relied on mechanical locks and keys. While effective, mechanical systems have significant limitations. Keys can be easily copied or transferred to unauthorized people. They also do not provide records of which specific key was used. Furthermore, mechanical locks cannot restrict access to specific times or dates. If a key is lost, the entire lock must be re-keyed to maintain security.

Locksmiths-11211
Locksmiths-11211

Electronic access control (EAC) uses computers to solve the weaknesses of mechanical systems. EAC allows for complete authentication, authorization, and accounting. The process begins when a user presents a credential to a reader. A credential is a physical object, a piece of knowledge, or a biological trait. The reader sends this information, usually as a number, to a control panel. This control panel is a highly reliable processor. It compares the number against an access control list. If there is a match, the panel operates a relay to unlock the resource. If the request is denied, the resource remains locked and the attempt is recorded.

Fob-at-proximity-reader 532 130xauto
Fob-at-proximity-reader 532 130xauto

To improve security, systems often use multi-factor authentication. A single factor can be subverted if a credential is stolen or shared. To prevent this, two-factor authentication requires two different types of proof. There are three main types of authenticating information. First is something the user knows, such as a PIN or password. Second is something the user has, like a smart card or key fob. Third is something the user is, which refers to biometric measurements. Biometrics include fingerprints, facial recognition, iris scans, or voice patterns.

Physical security access control with a fingerprint scanner
Physical security access control with a fingerprint scanner

A complete access control system consists of several integrated components. These include the control panel, the entry point, and the reader. The entry point might be a door, a turnstile, or a parking gate. Locking hardware, such as electromagnetic locks or electric door strikes, secures the entry. A magnetic door switch is often used to monitor the position of the door. For safety, systems include Request-to-exit (RTE) devices. These allow people to leave during emergencies, such as a fire. This can be done through a button, a motion detector, or via mechanical free egress.

Intelligent access control door wiring
Intelligent access control door wiring

Readers are classified by how much intelligence they possess. Basic readers are non-intelligent; they simply forward a card number or PIN to a control panel. Semi-intelligent readers can control door hardware but cannot make access decisions themselves. If the connection to the main controller fails, these readers may stop working. Intelligent readers are more advanced because they have their own memory and processing power. They can make access decisions independently. A new generation called IP readers connects directly to a host computer using a network.

Access control topologies IP reader
Access control topologies IP reader

System topology describes how these components are connected. Around 2009, the predominant setup was the hub and spoke model. In this model, a central control panel acts as the hub. The readers act as the spokes and communicate via a serial connection, often RS-485. This standard is useful because it allows for long cable runs of up to 4,000 feet. However, technology is shifting toward the edge. Modern manufacturers are placing controllers directly at the door. These IP-enabled controllers connect to databases using standard networks, making the system more decentralized.

Access control topologies serial controllers
Access control topologies serial controllers
634 words

Where will your curiosity go next?

Keep exploring at your chosen reading level.

🖼️ Images & Media (17)
File:-32 Security system.jpg
-32 Security system.jpg
File:NewYorkCitySubwayEntranceInterior.jpg
NewYorkCitySubwayEntranceInterior.jpg
File:US Navy 050308-N-2385R-029 Master-at-Arms Seaman Carly Farmer checks an identification card (ID) before allowing a driver to enter the gate at U.S. Fleet Activities Sasebo, Japan.jpg
US Navy 050308-N-2385R-029 Master-at-Arms...
File:Q-Lane Turnstiles.jpg
Q-Lane Turnstiles.jpg
File:Access control topologies IP master.png
Access control topologies IP master.png
File:Access control topologies terminal servers.png
Access control topologies terminal servers.png
File:Access control topologies main controller b.png
Access control topologies main controller b.png
File:Access control topologies IP reader.png
Access control topologies IP reader.png
File:Access control topologies serial controllers.png
Access control topologies serial controllers.png
File:Access control topologies IP controller.png
Access control topologies IP controller.png
File:Access control topologies main controller a.png
Access control topologies main controller a.png
File:Locksmiths-11211.jpg
Locksmiths-11211.jpg

+ 5 more

More to explore

🔗 What's this?

Concepts mentioned in this article

🔬 Go deeper

More advanced topics to explore

🪜 Step back

Simpler topics to build understanding

What is Nepedia?

A free, ad-free encyclopedia for children. Every article is written at five reading levels, so the same page works for a five-year-old and a fifteen-year-old — use the level switcher above to see this one change. No account needed to read.