In this lesson,
we will learn about access control systems.
Access control systems are mechanisms designed
to ensure that only authorized individuals
can access resources and information
based on their identity and permissions.
Access control systems may be classified
as either physical or logical control systems.
Physical access control systems
manage entry to physical locations
such as buildings or server rooms
using methods such as RFID key cards or biometric scanners.
Logical access control systems manage digital access
to enterprise networks using passwords
or multi-factor authentication to verify user identity
and enforce permissions to access network resources.
Let's learn more about physical
and logical access control systems.
First, we have physical access control systems.
Physical access control systems
manage entry to physical locations such as office buildings,
server rooms, or secure areas using various technologies
to verify a person's identity before granting access.
One common example of a physical access control system
is an RFID key card.
RFID stands for Radio Frequency Identification,
and an RFID card works by using electromagnetic fields
to automatically identify and track tags,
which in this case are embedded in RFID key cards.
When an individual taps or holds their RFID key card
near an RFID reader,
the reader sends out a radio signal
to power up the chip inside the card.
Once powered, the chip transmits
its unique identification number or tag back to the reader,
which then checks the system's database
to verify whether the card holder is authorized access.
This system is widely used in office buildings, hotels,
and parking garages.
Another widely used physical access control system
is biometric scanning.
Biometric scanners rely on unique biological traits
such as fingerprints, facial recognition, iris scans,
or retina scans to verify identity.
Biometric systems are used in high-security areas
because they provide a higher level of security
compared to standard RFID key cards.
For example, fingerprint scanners are often installed
at data centers or sensitive government facilities,
where it's critical to ensure
that only specific individuals can enter sensitive areas.
As an alternative to
or used in conjunction with biometric scanners,
businesses may incorporate keypad entry systems.
Keypad entry systems require individuals
to enter a unique PIN to gain access to an area.
Finally, each of these physical access control systems
can be integrated with an access control vestibule,
also known as a mantrap.
An access control vestibule consists of two sets of doors
designed to allow only one person to pass through
at a time to enter a secure area
through an access control vestibule,
an individual first passes through the outer door,
usually using a verification method
such as an RFID key card, keypad entry, biometric scan,
or a combination of methods.
Once inside the vestibule,
the outer door closes before an inner door opens,
ensuring that only one person gains access at a time.
This setup of door openings and closings
prevents an attack called tailgating.
Tailgating is when an unauthorized person
follows someone into a secure area.
In some cases,
additional verification may be required
in the access control vestibule while both doors are closed
and the user is in the middle of the entry.
Access control vestibules are commonly used
in high-security environments like data centers,
financial institutions, and government buildings.
Second, we have logical access control systems.
Logical access control systems
manage digital access to networks
and are designed to verify user identity
before granting access to sensitive data or resources.
Logical access typically involves methods such as passwords,
multi-factor authentication, and smart cards.
One of the most common forms of logical access control
is the use of passwords.
While passwords are easy to implement and widely used,
they come with certain limitations.
If passwords are weekly constructed
or reused across multiple platforms,
they can be easily compromised.
For this reason, many organizations
encourage the use of complex passwords
and recommend changing them regularly to enhance security.
To strengthen security beyond passwords,
many organizations rely on multi-factor authentication,
or MFA.
MFA requires users to provide two
or more authentication factors,
which are different types of credentials
used to verify their identity.
In fact, there are three primary types
of authentication factors.
Something you know, like a password or PIN,
something you have, such as a smartphone or security token,
and something you are,
such as biometric traits like your fingernails
or facial recognition.
For example, in a typical MFA setup,
after entering a password
using the something you know authentication factor,
a user might receive a one-time code sent to their phone,
which is something that they have,
or use an authenticator app,
which is also something that they have,
to generate a code for authentication.
This combination of factors strengthen security
by making it much harder for unauthorized users
to gain access, even if they obtain a user's password.
By requiring multiple forms of verification,
MFA significantly reduces the risk of account compromise.
Another example of logical access control
is the use of smart cards.
A smart card is a physical card with an embedded chip
that contains encrypted information about the user.
To gain access to a system, the user inserts the card
or taps it on a contactless reader.
The system reads the data from the chip
to authenticate the user.
Smart cards often work
in conjunction with a PIN or password,
adding an additional layer of security.
Smart cards are commonly used in corporate settings
and government offices to secure access to computers,
networks, or even specific software applications.
For example, an employee might use a smart card
to log into their computer
or access confidential information on a secure server.
So, remember, physical and logical access control systems
are used to regulate who can access specific physical spaces
or digital networks.
Physical access control systems
manage entry to locations like buildings or server rooms
using technologies like key cards, biometric scanners,
or keypad entry systems.
Logical access control systems regulate digital access,
ensuring only authorized users can access sensitive data
or networks using methods like passwords,
multi-factor authentication, and smart cards.
Both systems rely on verifying the identity of the user,
either through something that they know,
something that they have, or something that they are.
Integrating these access control systems
and authentication factors increases security
and helps protect both physical and digital assets
from unauthorized access.