Access control technology is changing, with older systems being replaced by newer, more affordable systems. Increasingly, people are asking for end-to-end solutions that incorporate video, audio, and analytics. These new unified solutions are increasingly possible thanks to advances in system architecture, mobile technology, artificial intelligence, and cybersecurity. Here, we discuss four of the biggest trends in access control that security leaders should pay attention to and the opportunities they present.
SYSTEM ARCHITECTURE
How are cloud and hybrid technologies being applied to access control? What are their advantages and are there any disadvantages?
Before diving into any advantages or disadvantages, it’s important to note that within the security industry, cloud technology is being adopted more quickly in access control. This is because people are more comfortable testing cloud capabilities in access control since it deals strictly with transactional data, rather than video, which requires larger storage resources and brings greater privacy concerns.
In terms of pros and cons, cloud solutions offer the advantage of always having access to the latest software features without the need for physical servers on-site. This eliminates the burden on system administrators to frequently update or maintain hardware. However, cloud technologies have yet to be widely adopted for enterprise systems, which often prefer the greater control provided by on-premises servers. Additionally, cloud solutions may be less effective in remote locations or areas with bandwidth constraints.
Hybrid solutions provide a cost-effective approach to extending legacy systems to the cloud while protecting the initial investment in existing hardware. They are also beneficial for adding new sites without the expense of additional hardware. Despite their advantages, integrating hybrid systems can be complex, and ensuring that they meet all requirements is crucial. Hybrid solutions can sometimes result in user interfaces that are not as robust as traditional on-premises systems, potentially limiting some capabilities.
MOBILE-FIRST TECHNOLOGY
Are access control solutions moving towards mobile technology? If so, why, and what opportunities and challenges does this present?
Access control is undergoing a shift toward mobile technology for two reasons: it’s cost-effective for organizations and easier for their users. Additionally, this shift makes temporary credentialing more efficient, as QR codes and Bluetooth credentials can be sent directly to visitors or contract workers via their phones or emails. These credentials can be set for a specific time period, offering more control and improved security. Finally, mobile credentialing can be used across a variety of systems, whether on-premises, hybrid, or cloud-based. This move toward mobile, known as Mobile-First, is a design approach that leverages mobile devices as user credentials instead of key cards or fobs.
With this shift towards mobile credentialing, there is still the potential risk of people sharing credentials. However, this is not unique to this type of solution and is something that good systems can manage. Another potential challenge is that some cardholders may not want to have work-related apps or credentials on their personal devices. However, this can be easily addressed by issuing card credentials and having readers that can handle multiple credential types.
Mobile technology presents huge opportunities for systems management and is growing in popularity. It allows authorized users to more easily add and remove users, assign visitor access, receive alerts and notifications, and even remotely control doors, all from their mobile devices.
AI AND ANALYSIS
How are AI and analytics being applied to access control? What are their potential use cases and how can they improve security?
While access control is one of the major areas of security that is adopting cloud technology, video is leading the way with AI and analytics. This is not to say that AI and analytics are not being used in access control, but rather that they are being adopted more slowly and in conjunction with video or audio to help create a more secure environment.
For example, by combining video with access control, users can identify instances of tailgating, or piggybacking (where unauthorized individuals follow an authorized individual into a secure premise), which is always a vulnerability. Or it can be used to monitor access to sites that require PPE (personal protective equipment) and restrict entry to anyone not wearing the appropriate equipment. Access control analytics can also help monitor and manage instances of occupancy restriction. The possibilities are endless, but as with any AI or analytics, the biggest challenge is properly trained models.
CYBERSECURITY
Are there cyber risks uniquely associated with access control? If so, how can they be mitigated?
Cybersecurity risks in access control are not unique, and many of the same best practices that security leaders apply to other areas can and should be applied. For example, ensuring that they are aware of who has access to which spaces and using multi-factor authentication (MFA) are important steps to protecting credentials and access to an organization’s spaces. Similarly, it is important that devices on the network and communications are encrypted, and security leaders should look at security keys and standards like OSDP and TPM modules, among other things, to ensure that every aspect—from the door reader to the server—is secure.
Legacy access control systems are giving way to new all-in-one systems that are designed to automate and unify the entire system experience for end users. From changing architectures to mobile design, increased use of AI and analytics, to increased cybersecurity demands, access control will continue to evolve along with the rest of the security industry. It’s important to stay on top of the latest developments while always focusing on what’s needed from an organization’s system.
