Access Control

Access Control Technology

Access control technologies help organizations manage access to their buildings, systems, and information. Common options include tokens, smart cards, encryption keys, and passwords.

Biometrics
Biometric devices authenticate users through personal characteristics such as fingerprints, voiceprints, iris or retinal scans, facial recognition, or signature dynamics. Unlike a card or token, a biometric identifier cannot be left at home or misplaced. However, biometric systems can produce false matches or reject authorized users, so their suitability should be considered when selecting a system.

Smart Cards
Smart cards contain integrated circuits or embedded memory. Cards with processing capabilities can perform transactions, while memory cards store information. Smart cards can be used to authenticate users to systems and networks. When combined with a personal identification number (PIN), they provide two-factor authentication: something the user has and something the user knows.

Tokens
A token is a handheld device used to authenticate a user with a server. Many tokens generate time-based codes that change and expire after a short period, such as one minute. When used with a password or PIN, a token adds a second authentication factor.

Encryption Keys and Digital Certificates
Encryption keys help protect confidential information. Digital certificates help verify the identities of the parties exchanging information. Standards such as X.509 support compatibility among products from different vendors. These technologies can be used as part of a system that controls access to protected information.

Passwords
Passwords are widely used because they are flexible and easy to implement. They can help protect documents, files, directories, systems, and other resources. However, weak passwords and unprotected network traffic can expose information to unauthorized users. Password-cracking tools can be used against stolen password data or protected files, so password-based access requires careful implementation.