The Buzz: A Story of Multi-Technology Access Control

Marrying a variety of technologies together into a single card seems to be the most cost-efficient access control solution for facilities with a high turnover rate or a graduating class of 4 or 5 thousand students each year, as is the case with my...

The system was competitively bid with four manufacturers/integrators submitting proposals. The winning bidder was Andover Controls, and Operational Security Systems of Atlanta, GA, won the integration bid.

The Georgia Tech ID card, called the Buzz Card after the school's mascot, was created using a photo for visual identification; mag stripe for card access, parking control, vending and debit; bar code for library check out; and a proximity feature for the handicap entrances. The Georgia Tech Research Institute chose to add a proximity feature with PIN alternative for its secure buildings. The card access system uses Andover Controls' Continuum software, which is practically limitless in the amount of card users available. The system has grown to more than 1,200 readers. It is one of the largest systems in the United States. However, as with any system that was developed and installed in the early 1990s, technology has progressed and we need to revisit our requirements and change and add criteria for an all-encompassing system.

If It Ain't Broke?
Many people abide by the axiom, "If it ain't broke, don't fix it." However, since Georgia Tech is a leading technological university, we can't sit on our hands and ignore advancements in access technology. Georgia Tech is presently reviewing its Buzz Card system to see if the incorporation of a smart card is the way the institute wants to go. Smart cards provide a great opportunity to enhance capabilities in banking applications, debit and user authentication applications, personal key information (PKI) for verifying electronic authorization, and securely storing personal information such as health records.

One particularly interesting aspect of the smart card is its use of validation proofs that contain information about who you are, what you are allowed to do, and when you are allowed to do it. This approach can allow you to centrally manage cards and update them remotely via public networks, and to then allow transactions to take place using the updated card without a network connection. CoreStreet of Cambridge, MA, is a provider of validation products for identity management and access control. With CoreStreet's Real Time Credentials' and KeyFast' products, a card provisioned once in Atlanta can be updated to access a facility in Taiwan even if it isn't updated prior to leaving Atlanta.

According to Salvatore A. D'Agostino, VP of Physical Access for CoreStreet, "The user presents the card to the system at the Taiwan location and it updates it with the latest set of credentials, all from the central remote location over a standard network connection ... If the previous input to the card was at 12 noon and a new update was sent at 12:10 p.m., the newest version would be added to the card the next time a card hits an access point. The system deals with privileges, changes, even revocations of previous authorizations, as well as log information in this manner". D'Agostino added that the "Real Time Credentials? solutions can be deployed anywhere in the world, in connected and disconnected environments.

As Georgia Tech considers a new smart card option, it needs to dust off its old needs matrix and add to it the smart card application attributes to determine if it is a viable and cost-effective product for the institution.

The present mag stripe/bar code cards are less expensive than a programmable chip card. Changing our card readers, AC1s (units that tell the head-end what type of controller it's talking to), and net controllers in order to use a smart card may be cost prohibitive. An alternative solution may be to add a smart card reader to the present card system where required.

A smart card reader, positioned in proximity to the existing reader, can add flexibility to the overall system without creating the need to change out all the system components. For those personnel requiring the smart card option, the smart card can be made to perform as a "one-card" system, depending on which card is used as the base system. The decision for Georgia Tech, as for any other facility considering new technology, will be: Is it worth it?