Card Access Systems Don Spade COSC 380

Types of cards Magnetic Stripe –Credit Cards –Driver’s Licenses –IUP I-Card Proximity –Used for ADA entrances –Allows user to get close to reader

IUP’s I-Card Magnetic stripe –3 tracks Track 1 –Personal information »Banner id, name Track 2 –ABA number Track 3 –blank

IUP’s I-Card ABA number – – Used for online access systems, Dining, Fitness Center and tickets –Customer Code –Unique number –Checksum Last digit (6) Also has a Smart Card for vending, printing and laundry

Card Access Systems at IUP Traditional Residence Halls –ESMS Systems –Online System only (Connects to a central database over network) Suites –Stanley/Best/Lenel –Online and offline (Suite doors) system

ESMS System Currently used on all traditional Residence Halls and Sutton, Cogswell and McElhaney Halls Controls card access, door alarms (propped and immediate) and ADA doors Runs over 100 doors –Entry doors –Immediate Alarm Doors

ESMS System Headend system Stores card data in an Oracle database The original headend System (installed in 1994) was a Unix computer Current system runs on a Windows XP computer with a Unix emulator interface

ESMS System Multinodes Each building has panels that store card information called “multinodes” Each multinode contains data for all valid cards, one for each door When a card is swiped, it is verified on the multinode. If the card’s information is not on the multinode a request is sent to the headend to see if the card needs downloaded Card is accepted or rejected

ESMS System Data Communication Data is converted from serial at the headend to ethernet via DEC servers, transmitted over IUP’s network and converted back into serial to multinode Data is transmitted back to the headend the same way Can use dialup connection using modem at both ends Punxsutawney is currently on dialup

Stanley Best (Lenel) System Will be installed in all new Suite Style Residence Halls Currently running on Suites on Grant (400+ offline and 40 online doors, also one door in Stright Hall) Does both online (hallway and entrance doors) and offline (Suite rooms)

Stanley Best (Lenel) System Headend Uses mySQL or an Oracle database for an extra cost Foundation for IUP bought the Oracle database for future expansion User interface runs on any Windows machine, the database is on a Windows 2003 server

Stanley Best (Lenel) System Online System Controls all hallway and entrance doors Entrance doors are locked only at night, Residence Wings are always locked Uses ABA number to verify card Has panels at each building, one controller for each door Panels store card information in a similar way to the ESMS system

Stanley Best (Lenel) System Online System – data communication Headend transmits to panels using Ethernet, data is transformed to serial using Lantronix boxes, serial to panels Panel transmits to Lantronix box which converts to Ethernet, sending data to headend

Stanley Best (Lenel) System Offline System Each lock is programmed using a handheld device –Given a name (ex: A-128) –Date is set Each lock has a battery that will last at least 2 years depending on use Card must be encoded on track 3 –Which door can be accessed? –What time period? –Card can only access one door at a time

Stanley Best (Lenel) System Offline System – Lost cards New card must be encoded with door information System increments sequence number When new card is swiped, the lock knows that this card has a higher encode count than what’s programmed, so it updates the sequence number on the lock If old card is tried, the lock sees the older number and rejects the card

Features Not Used at IUP Anti-Passback –All users must swipe card to get in and out –If they don’t swipe in, they can’t swipe out –Deters “following” Card with Pin –Can require that user swipes card and punches in a pin number –Deters using lost cards dishonestly

Card Access Systems at IUP Old and new systems use similar methods of storing and transmitting card information New System gives the ability to use offline locks Old system will be phased out