International. "Open" is not a term generally used to describe improvements in security, but in this era of highly connected buildings, access control is increasingly only with its proprietary and siloed technology.
Open access control isn't particularly new, it's been more than six years since Axis introduced its Open Network Door Controllers, but they and others are still struggling to make a significant impact on the market. However, driven by an increased awareness of open technology, the end-user demand for such systems is growing and it is only a matter of time before open access control finds its place within the ecosystem of connected buildings.
All access control systems are composed of several components, which can be manufactured by different suppliers. An open access control system is where components from several different vendors can be integrated to work together seamlessly. However, most access control systems sold today are proprietary, where all components must be manufactured by the same manufacturer, limiting the choice and flexibility available to buildings. This current status quo not only restricts the development of buildings, it also slows down the industry.
"Open systems are good for end customers because they increase options and are future-proof. Long-term open systems are also good for the entire industry as they enable specialization, which drives innovation," explains Carlo Pompili, CEO of cloud-based access control solutions provider Telcred AB. "Compared to IT or telecommunications, the physical security industry has a long way to go when it comes to openness and standardization, and the question of whether a specific access control product is open or not can always be answered with a simple yes or no. Instead, it is necessary to assess the degree of openness."
For most access control implementations, the problem starts with credentials. Currently, there is no fully open standard for credential identities, which means that buildings interested in open access control are limited to credential technologies that are compatible with readers from a wide range of manufacturers and available from many resellers, such as NXP's Mifare DESfire. Once this first limitation between credentials and readers is accepted, things start to open up more. Readers must communicate with drivers, and while some readers also remain proprietary in this regard, many support traditional Wiegand or the more modern and secure OSDP (Supervised Open Device Protocol).
Other more modern open protocols are also emerging, but in a proprietary physical security environment that does not support their progressive approach. Most geographic markets are dominated by a few local vendors who have no incentive to open up their systems and risk their market share, thus keeping the physical security landscape highly fragmented. To move toward open access control systems, more controller/dashboard vendors must open them up to third-party administrative software vendors through open application programming interfaces (APIs).
ONVIF, an open industry forum for standardized interfaces and interoperability of IP-based physical security products, is another example of where access control is headed. Through its A, C and D profiles, ONVIF provides the framework for developers to use when producing open access control software and other security products. However, until vendors open their systems, ONVIF and others will have to wait their time and continue to try to push the open access control agenda.
"Communication between readers and controllers is the area where the access control industry has advanced the most towards open systems. Today, OSDP is a mature and capable standard, which has broad support from leading reader manufacturers. It should be a requirement for any customer looking for an open access control system," Pompili continues. For mobile credentials, there is, unfortunately, nothing resembling a de facto standard with the support of various brands of readers."
Smartphones are now ubiquitous across society and, in combination with cloud platforms that connect to a variety of other building systems, provide an ideal platform for open access control. Too often, however, we see organizations that follow a mobile-first strategy and an open approach to their buildings, but still maintain outdated cards and badges in the absence of reliable, latency-free mobile access options. One by one, building systems are migrating data and processes to the cloud to achieve this new level of connectivity and system intelligence, but access control seems stuck in the slow lane.
"While many of today's applications integrate seamlessly with each other in the office, access control has traditionally been independent of all other systems. However, many companies rely on a single source of information to handle all employee management needs, such as Active Directory and G Suite," said James Segil, co-founder of OpenPath Security, during a Memoori webinar in May. With open cloud-based access control systems, companies can easily manage or revoke access credentials in real time. Through strategic integrations, companies not only enhance their overall security and management capabilities, but can also provide a better experience for both guests and employees."
The potential of access control goes beyond security, but only if it can be openly integrated with other building systems. Through application programming interfaces (APIs), organizations can develop applications that use the valuable data generated by access control systems. During the webinar, Segil highlights a multi-tenant owner who used the Openpath API to create a service application, which allows tenants to have a more interactive experience. It provided the ability to book common areas or assign guest passes, allowing apartment complexes to create unique added value for their property.
That untapped value will continue to erode the ownership status quo in the physical access control industry and drive the innovation required to facilitate widespread adoption. This shift will start with large real estate companies wanting to integrate access control into their BMS for full automation and large portfolios of public sector buildings whose long-term outlook makes them adverse to single-vendor agreements. Step by step, open access control will follow other building systems to find their place in the increasingly open ecosystem of smart buildings.
Source: memoori.
