Brazilian prison adopts integrated platform

Editor / Provider: Axis Communications | Updated: 3/12/2013 | Article type: Government & Public Services

The Francisco Helio Viana de Araujo State Prison in Pacatuba, Fortaleza, Brazil recently became a pioneer in the implementation of an integrated security platform. The prison that houses 400 inmates installed a security solution that combines 180 Axis Communications network cameras (mostly HD), ISS facial recognition software (for turnstiles), motion detection, access control and IR cannons on ramparts. The platform was funded by the Ministry of Justice and Treasury of the State of Ceara, and implemented by local system integrator Imagem Seguranca, who is experienced in network video and prison security. The project serves as a model for other jails in Brazil.

The prison is privy to a comprehensive monitoring system, covering eight different areas and 20 vacancies for individual isolation. The facilities include social and legal care for the prisoners held in custody, medical facilities, library, computer room, classrooms with capacity for 120 students and workshops, as well as an industrial kitchen, bakery and multipurpose hall for social activities. Of the 180 cameras, 30 are fixed HD, four PTZ domes, six small HD and 140 small IP models. Steel boxes were installed on some cameras to combat vandalism. Imagem chose specific camera models to withstand internal or external environments and took into consideration video quality, real-time access and scalability. The network cameras, together with the ISS software, monitor the prison perimeters and movement among points of collective facilities.

"The main advantages of this design are the simple way to operate the system and the seamless integration of the entire security project,” said Mario Jorge, official responsible for the project at the Department of Justice.

Multifactor authentication provides the pieces for peace of mind

Editor / Provider: Tevin Wang, a&s International | Updated: 2/8/2013 | Article type: Tech Corner

According to Report Linker, the multifactor authentication market is expected to grow 17.3 percent from 2012 to 2017 to a market worth US$5.5 million. Something we have indeed removes the problem of forgetting something we know, but now the object(s) must be with the user at the time that he or she wants to be authenticated.

"In the realm of physical security, the failures of companies and governments to protect our private information (personal and financial) are a lesson that what once served as sufficient security (username and password) is no longer acceptable. We have come to accept that card access provides a low level of security," said Adam Shane, Senior Systems Design Architect, Amag Technology (a G4S Technology company). "Cards can be duplicated, spoofed, modified or stolen. There is nothing that validates the authenticity of the card, nothing that binds the card to its owner, and in some cases, nothing to verify the issuer still trusts the owner to have the card."

The driving factor behind multifactor authentication is to increase the security level in an organization and only allow entry for permissible personnel, said John Davies, MD of TDSi. Multifactor authentication is becoming more important because more systems are connected over the Internet and are exposed to huge numbers of people.

Aside from existing compliance and regulatory pushes, the cloud is another driver for deploying multifactor authentication. "Traditional barriers that have been deployed to secure IT systems, such as firewalls, are becoming less relevant due to a growing move toward the cloud, which means an increasing amount of company data no longer resides on company networks," said Julian Lovelock, VP of Product Marketing for Identity Assurance, HID Global (an Assa Abloy company). "Traditionally, enterprises have stored key IT resources behind a firewall on corporate servers, or in a ‘walled garden.' But, with the rapid growth of the remote workforce, the time and effort enterprises have put into reinforcing that ‘wall' have seemingly been wasted, as more data begins to reside outside of the corporate network. All of these trends are leading toward a model in which organizations focus on protecting individual resources with strong authentication, as opposed to simply protecting the wall."

Chris Cardell, CEO of SyferLock Technology, agreed. Megatrends, such as the emergence of cloud computing, server and desktop virtualization, the proliferation of mobile technologies and bring-your-own-device possibilities, the increase in employees requiring remote access, and the increased use of social networking in the work environment, have created new vulnerabilities and risks for companies. "Users expect to be able to access information from virtually anywhere via the Internet and mobile devices such as smartphones and tablets, and that means it is harder than ever for IT and security executives to ensure that all the organization's information assets are protected," Cardell said.

Growth Verticals
Growth verticals for multifactor authentication include hospitals, banks, airports, data centers, large corporations, IT server rooms, universities, research labs, government departments and other organizations working with sensitive materials such as defense. "In some industries such as health care and financial services, the emergence or evolution of regulatory requirements is forcing even more stringent implementation for strong authentication. For instance, in the U.S., health care organizations must be compliant with the health insurance portability and accountability act (HIPAA). Relying solely on usernames and passwords will no longer be sufficient for secure access to data, particularly sensitive information such as patient records," Cardell said.

The US government has also mandated that access to physical and cyber assets in the executive branch requires use of a personal identity verification (PIV) card, Shane said. "This card supporting PKI validation is federated and therefore trusted across all agencies, and supports multifactor authentication (credential, PIN and biometric). Not all systems will be upgraded to support this high-end authentication token as PIV cards can cost the US government about $100 per person and that does not include the regular maintenance overheads. But progress is being made."

Rick Focke, Senior Product Manager at Software House (a Tyco Security Products company) is optimistic about the retrofitting projects and potentials of biometric based solutions. “The US federal government is a large market and one where the need for upgrades and additional solutions are still needed. In this market and in others, as installation volumes rise, costs should begin to decrease.”

The increase in employees, contractors and e-commerce customers requiring secure access, both remote and on premise, to computers, networks and sensitive information are also drivers in the demand for stronger multifactor authentication approaches. For instance, multifactor authentication adoption in banks in the U.S. is not mandated, but more customers in this market are moving to more secure solutions, Shane said. "We see this as a general trend. There are many beneficial reasons to move to strong authentication such as, to reduce financial losses from crime or fraud, improve auditing capabilities (non-repudiation), reduce cyber espionage and terrorism incidents, improve public relations, and the list goes on."

Complex and Costly?
Cost and usability are perhaps the two greatest concerns from enterprises/end user when implementing multifactor authentication solutions. "Adding biometric authentication for identity binding requires not only a biometric capture device at every terminal, but also requires licensing software to perform the biometric comparison," Shane said. "In biometric authentication, there are different ways to handle the process of binding an individual to a card or their credential. In one case, the user's biometric map or template is stored on a card or in a computer database. If the binding process requires users to present their card/credential first, for reading identification numbers (known as a 1:1 match), then costs can be kept minimal as the ID number is used to pull users' biometric data from the protected storage and then the biometric match confirms they are the person they claim to be. Similarly, the presentation of the credentials could release the biometric data directly from the card. However, in other systems, a person may simply provide one biometric identifier (fingerprint, iris or other) and the system will match this against all samples in the database. If the best match exceeds a threshold for acceptance then it is assumedthey are that person. This is called a 1:N match or a search." Compared with a one-to-one match, one-to-many comparisons are expensive.

Multifactor authentication solutions also require the appropriate enrollment or registration software to build the identity database and to manage the identities. "This software can be quite expensive also," Shane added. "We try to help customers understand that there is a continuum of solutions from relatively simple to very complex. Their budget, security concerns, regulatory requirements and consequences are all considered in guiding them to an appropriate solution."

In the case of biometric security, end users may also be worried about purchasing a third-party or bolt-on biometric system that requires two separate devices at the door and two separate software systems being used in parallel. "Another concern is the rate of technology change within biometrics today," said Philip Verner, Regional Sales Director for EMEA, CEM Systems (a Tyco Security Products company). "An emerging biometric technology today can go end-of-line within a considerably short period of time and this can make end users hesitant when choosing a biometric solution. When considering Iris technology, patent or licensing modules used can also be a significant barrier for customers."

Throughput and convenience are still issues for users. For example, a system that requires extra layers of authentication equals an extra delay for individuals trying to enter a facility or an area. "Customers want to avoid time delays or bottlenecks at the door where there is a high volume of staff throughput. Where it may not be convenient to use multifactor authentication all day, we recommend that PIN and/or biometric security be enabled during certain times, for example, at night time when the premises are closed," Verner said.

Usage Considerations
Whichever security model is chosen, the total cost of ownership is a key factor in determining the value of a solution. First of all, end users need to evaluate the cost to use and maintain a typical username and password logon security system. Weak security can result in direct and indirect costs and devastating consequences, due to leaking sensitive information and resources to unauthorized users and intruders. This is not to mention issues resulting from noncompliance to industry regulations.

When evaluating a multifactor solution as an alternative, the hardware, software, system integration, installation, deployment, maintenance and device replacement must all taken into the equation. Besides the direct costs of solution purchasing and software licensing, there can be hidden costs involved. For instance, customers might need to take into account the cost of distributing hardware: tokens, smart cards or biometric readers. Support costs must also be taken into account as there will likely be an increase of support calls after the initial deployment.

These procedures are especially critical for those who do not have a proper risk assessment, and therefore are not clear on what their most important data or assets are or where they resides.

Security only works if the end user follows the policy. Quick and convenient solutions that do not disrupt daily routines are perennial favorites. What is required from any multifactor authentication system is not only enhanced security level but also functionality.

While most corporations purchase systems based on their current needs, scalability is another important factor to consider when evaluating multifactor authentication solutions. Some multifactor authentication systems require significant management when dealing with a high number of users. For instance, tokens can become difficult and expensive to manage due to the fact that they need to be replaced every few years.

Bumpy Yet Rosy
Cost continues to be a challenge, as budgets are tight. "However, the US government is providing funding for HSPD-12 upgrades through the OMB 11-11 memorandum with a stipulation that the money must go to installing multifactor authentication solutions," Focke said.

Current industries that recognize the need for multifactor authentication solutions represent a small market for vendors. "The larger commercial market sometimes is challenged to see the ROI in multifactor authentication when all of the infrastructure costs are considered," Shane said.

The lack of awareness about such solutions requires extra effort on market education. "I think that one significant challenge is the incorrect assumption that the only viable option for multifactor authentication is a one-time password (OTP), and the belief that if the OTP option isn't suitable, there are no other alternatives. The reality is that is not true, and that there are a large number of alternatives," Lovelock said. “"we need to push past that point and educate people as to what those alternatives are, and at the same time highlighting the other key aspects of implementing authentication technologies such as, lower deployment and management costs, the enhanced level of security the technologies provide, and better usability for end users."

Despite these obstacles, the growth potential for the multifactor authentication market is substantial. Biometric readers such as fingerprint verification are gaining traction. "Some specialty applications are also coming to the forefront. For example, the health care market is looking at noncontact devices to help ensure readers remain clean and germ free. This non-contact solution utilizes iris, palm vein or facial recognition level of authentication only," Focke said.

As an expert in physical and logical access integration, HID Global predicts the proliferation of contactless device-based authentication and embedded credentials. "I think we will see technologies that grew up in the consumer space around machine profiling and device forensics being used in the corporate sector, as the consumerization of IT takes a greater foothold. I also believe that an increase in the availability of NFC-enabled devices will open up options for contactless device-based authentication," Lovelock said. "We will see growth in embedded credentials, where endpoint devices like laptops, tablets and phones will be able to securely store, and make credential readily available for use."

Also, software-based authentication solutions are emerging fast. "Because many of today's emerging use cases (e.g., employees and customers requiring secure remote access) are not conducive to legacy hardware-based authentication solutions, we believe that there will be increased demand for flexible, adaptable software-based authentication solutions."

"With increasing concerns about security and with new regulatory requirements, authentication is a growing industry. This growth has resulted in the emergence of a range of authentication solutions, including hard tokens, smart cards, biometrics, SMS text to cell phones, among others, competing in the market place," Cardell said.

VCA revisited

Editor / Provider: Wavestore | Updated: 1/16/2013 | Article type: Hot Topics

So, the ObjectVideo “patent agreement seeking” rampage seems to have come to an end for now, with Panasonic System Networks being the latest to be added to the global, portfolio-wide patent license wish list (others include Tyco Security Products, Sony, Vivotek, Pelco by Schneider and Bosch Security Systems, for anyone who is keeping score). More solution providers are revisiting the technology side of things this year, with more concrete deployment scenarios and ROI agreement, such as this one from Axis Communications, a similar one from AMG Systems, and the one below from Wavestore.

Recent advances have helped overcome many of the problems previously associated with VCA tools, and 2013 will therefore see more powerful and tangible performance in real-life action, predicted Phil Ewers, Business Development Manager at Wavestore. His extensive experience includes playing a key role in a successful bid to deliver and supply Westfield London Shopping Centre with Europe's largest people-counting solution. Ewers is confident that VCA will be requested more in the list of features when video management systems are being designed.

First, there are a number of manufacturers who have increased the processing power of the DSP chipsets incorporated into their video surveillance cameras, highlighted Ewers. “These cameras, therefore, have the potential to be able to perform all their standard functions, while at the same time being able to efficiently handle analytics software.” Second, a tough economic environment is inevitably encouraging end users to demand a higher ROI in a video system solution. Last but not least is the fact that forward thinking video solution providers, such as Wavestore, have incorporated into their VMS the facility for leading technologies, such as video analytics in all its various forms, to work in harmony and interact with each other using a metadata engine. “This enables to offer customers an effective single-source solution.”

VCA is proving to be extremely valuable to the retail sector, but there are many opportunities in environments such as sports stadiums, airports, train stations and so on — any area where there is people movement.

People-counting capability deserves to be near or at the top of the list, as it can provide highly valuable data to allow a business to become more efficient, increase sales or just simply make their premises a safe place to visit or work in, Ewers said. “A hot spot identified by the use of analytics could perhaps generate an alert that there is an escalating risk of people being crushed.”

ALPR has obvious benefits to those involved in traffic management and parking enforcement, as well as verifying that a driver/vehicle is authorized to enter a restricted area. Biometrics in the form of facial recognition deserves a mention as well, as it can be a very powerful tool to identify specific individuals. “When analyzing what may have been thousands of hours of prerecorded video, facial recognition offers the possibility of matching against what could be a large database of undesirable visitors,” Ewers shared. New developments are seeing facial recognition providing invaluable statistics for retailers as to who is checking out a particular product stand, visiting a store or a defined area within a store or shopping complex.

Cloud-based biometrics, anyone?

Editor / Provider: SkyBiometry | Updated: 12/13/2012 | Article type: Tech Corner

SkyBiometry, a new company providing cloud-based biometric software as a service (SaaS), was officially launched as a spin-off of Neurotechnology, a provider of high-precision biometric identification, object recognition and computer vision technologies for more than 20 years. In conjunction with the corporate launch, SkyBiometry introduced a free, cloud-based face detection and recognition API based on a facial recognition algorithm from Neurotechnology, the underlying technology behind many commercial facial recognition products around the world. SkyBiometry also offers a range of paid plans and services to help customers rapidly integrate biometric technologies into their products and online services.

SkyBiometry's team of experienced Neurotechnology professionals have from five to 15 years of experience in algorithm research, biometric solution development and consultancy, enabling them to help customers – even those who are new to biometrics – accelerate product development, integration and time to market. The fast, accurate detection and identification technologies can be used for traditional biometric identification systems such as user ID, security and time management as well as new uses in entertainment, games, online marketing, social media and mobile applications.

“With the launch of SkyBiometry we are pleased to provide cloud-based biometric products and services, said Denis Kocetkov, CEO of SkyBiometry. “The flexibility and scalability of the SaaS delivery model, together with trusted and proven computer vision technology, creates unique advantages in helping to solve our customers' business needs.”

The rapid growth of cloud technologies is creating opportunities for developers and integrators to deliver better products faster than ever before. Because SkyBiometry's offerings are based on the strong foundation of Neurotechnology's proven biometric technologies, solution providers now have an efficient and cost-effective way to deliver fast, high quality biometric capabilities while providing their customers with the flexibility and scalability that SaaS solutions can provide.

“Some face recognition integrators prefer to implement their solutions as online services instead of implementing them as on-premises end-user applications,” said Dr. Algimantas Malickas, CEO of Neurotechnology. “SkyBiometry offers integrators an easy way to use our face recognition technologies in their online service offerings.”

Trends to bank on

Editor / Provider: By Christina Phillips, a&s International | Updated: 11/27/2012 | Article type: Commercial Markets

As Internet banking continues its global ascension, the demand for conventional bank counter activity is on a downward slope, and in turn reliance on websites and ATMs increases. This major customer behavior change calls for proper infrastructure adaptations, as this represents a big opportunity as well as a challenge for the financial industry.

With growing numbers of self-serve financial transactions, video-based security systems are becoming more than just means to increase security, said Hans Kruft, Key Market Manager for Banking at Geutebruck, as outlined in the first part of this vertical feature.

“Facial recognition is increasingly used by banks for recognizing VIPs as well as criminals,” echoed Aluisio Figueiredo, COO of Intelligent Security Systems. “Integrations are also becoming a must, such as having a building management console where you can control the branches and various systems remotely.”

The following is a quick rundown of three trending technologies for the banking and financial sector.

Biometrics
Biometric technology has advanced to the point that it can be deployed in a cost-effective, scalable, easy-to-use manner, resulting in a number of bank projects in emerging markets like Africa, Southeast Asia, India and Latin America, where finger or vein scans are used for augmenting PIN security at ATMs, or voice recognition for remote telephone or online transactions.

Last month in Australia, ANZ Bank CEO Philip Chronican announced that the bank was exploring ways to introduce biometrics as a replacement for traditional payment identification methods. Over the next five years, the bank will direct US$1.5 billion to reshape the way they do business by investing in new technology. Kathleen Erickson, VP of Business Development, Fulcrum Biometrics pointed out that, "Banks in less developed countries go to villages throughout their countries to find small entrepreneurs that may need capital to expand their small business or get it started. These individuals often do not have transportation and cannot read or write, which can create challenges for authenticating identity and signing documents, but they have a good business and banks see business potential. Banks could benefit from a way to authenticate these individuals for loans. Currently, banks use laptops with a USB signature pad or fingerprint scanner, but now, embedded biometrics in portable and easy-to-use handheld devices like smartphones and tablets can be used."

Fingerprint
Among all biometrics, fingerprint-based identification is the oldest and most reliable in numerous applications. This technology is well-suited for banks because in addition to enhancing security and preventing fraud, it provides added convenience for their customers as password is no longer compulsory. There is no need for training — customers simply put their fingers down. “For example, financial institutions in Latin America are embracing fingerprint technology for their ATMs,” said Phil Scarfo, VP of Worldwide Sales and Marketing, Lumidigm. “Biometrics, traditionally employee-centric and confined to the back room, is now being put in front of the customer with confidence.” High reliability is critical at ATMs because their use is not typically supervised.

Iris Scanning
Many millions of people around the globe have had images of their irises taken and stored for enrollment in recognition programs such as national IDs and passport-free border crossings. A major advantage of iris recognition is its extreme resistance to false matches, thanks to its detail-rich images of the iris's intricate structures. There are constantly incidents where culprits duplicate tokens: skimmed ATM cards, and stolen usernames and passwords. With iris-scanning technology, duplication is virtually impossible and thus would eradicate many of the issues facing the industry today. “We are considering implementing iris scans, for identifying our VIPs,” hinted Jerry Feng, Head of Security and Investigative Services for Taiwan, Citibank.

Facial Recognition
Facial recognition is already used by financial institutions in regions such as Europe, South America and Japan. “Facial recognition is currently in use in a small number of institutions, to grant access into high-risk or high-sensitivity areas, or as a VIP or person-of-interest identification system,” said Charles Smith, Product Manager at Omniperception. “Some are still evaluating the use value and effectiveness in the consumer financial sector, but it will certainly become even more integrated into banking in the future.”

Getting High…Def
An HD-SDI based video surveillance system allows branch and security managers to view high-resolution, zero-latency video footage over existing coaxial cable in a closed, secured system, which equates to minimum system downtime and significant savings. On the other hand, with today's banks, IP-based network and storage infrastructure should already be in place, which means the cost is mostly about network cameras and management software.

“It is inevitable that megapixel cameras backed with services over IP will take dominance in the finance sector,” predicted Michael Brown, IT and Computers Director for VideoControlRoom. “Financial institutions are increasingly using integrated technologies that allow for real-time cross-referencing and utilization of data such as alarm/access control logs, video and transactional data via notifications of choice. This helps improve decision making and event response.” Often, system designers and operators err on the side of caution by wanting to know everything, presented in an organized manner.

“We have noticed a move away from scale-out commodity NVR server infrastructure to scale-up consolidated and virtualized NVR servers,” observed Scott Basham, Perimeter and Surveillance Security Systems Program Manager for APAC, Unisys. “The intention is to make significant cost savings by cutting out unnecessary hardware, power and cooling operational expenses.”

Which will come out on top?

In practice, there is no “right” answer or solution, as user environments and requirements can vary from one site to another, from one bank to another. “We have both hybrid DVRs and HD-SDI solutions in operation,” Feng shared. “However, in my opinion, they are both band aid solutions, for the trend is to go IP. To this end, by next year, we'll be 100-percent IP. IP allows us to implement a fully integrated and centralized system, one that facilitates remote visual verification of alarms cost-effectively.”

Rob banks of security threats

Editor / Provider: By Christina Phillips, a&s International | Updated: 11/26/2012 | Article type: Commercial Markets

Banks are responsible for the security of countless personal, corporate and national assets, making them obvious targets. Conditions in today's economy unfortunately attract more unwanted attention to vaults and online transactions, and financial institutions are demanding more up-to-date security solutions and services that are closed in terms of protectability and yet open in terms of expandability. In this feature, a&s looks at modern security measures and protocols for valuable-handling establishments, discussing how various technologies should be deployed and integrated.

According to the FBI, there were 5,014 bank robberies reported in the U.S. alone in 2011. In 1,242 of the incidents, the use of a firearm was involved. In all, these acts of violence resulted in 30 people being taken hostage, 88 injuries and 13 deaths. During these incidents, more than US$38 million was taken, and only about $8 million or 21 percent was recovered and returned to the financial institutions. That is to say, the average loss after the recoveries was $5,952 per incident. What's wrong with this picture?

Of the incidents, video surveillance cameras were operational 97 percent of the time, and alarm systems were triggered 89.5 percent of the time. In spite of the security systems in place, a small percentage of the cameras (1.5 percent) and alarm systems (1.3 percent) did not properly capture footage or activate. Even more alarmingly, approximately 1 percent of the victim financial institutions did not have cameras, and another 1 percent did not even have an alarm system. “Those statistics tend to be downplayed,” according to one industry source. “On average, 20 percent of all cameras in large bank networks are not operational because management does not even check whether cameras are working, unless something comes up that requires going back to the video footage. Cameras may not be operational for a number of reasons: they might have been accidentally disconnected, moved due to maintenance or janitorial work, degraded due to normal wear and tear, maliciously sabotaged or simply covered by dirt or a spider's web.”

This year in particular, the banking sector has been hit with a great deal of fraud, from issues with ATM skimming to major hacking attacks. "Financial institutions and the banking industry at large are aggressively seeking more secure and effective ways to secure sensitive information and authenticate the identities of their customers to minimize exposure to fraud," observed Anthony Antolino, CMO at Eyelock. 
 
                                                                                                                           (Source: Frost & Sullivan)

Divide & Conquer
For better security, a holistic approach — both physical and logical — is often adopted by bank security managers and their trusted systems integrators. In practice, different areas or choke points of an establishment require different products or features to maximize security coverage and facilitate incident resolutions or investigations.

Entrance and ATMs
Most, if not all, banks are located in highly visible locales and are almost always encircled by glass, which allows full saturation of the sun's rays into the bank. While this may provide a pleasant environment for customers waiting in line, the possible image contrasts wreak havoc for surveillance cameras. Direct sunlight into the lenses virtually “blinds” cameras by washing captured images into a brilliant, undetectable white or shrouding them in darkness. Newly waxed or glossy flooring can also reflect unwelcomed light into the lenses.

Analog and IP cameras alike, those nasty shadows, glares, reflection and direct sunlight have always been the Achilles' heel of video surveillance; megapixel and HD cameras with their superior quality images exacerbate the problem. Image how easily such “evidence” can be thrown out of a court of law. For this reason, more and more countries have regulations that stipulate the use of WDR-enabled cameras for entrances and ATMs, in order to capture true footage that facilitates proper facial feature identification for prosecutions.

Many ATMs are equipped with two day/night cameras. One of the cameras (usually a vandal-proof dome) is clearly visible. In addition to being a crime deterrent, it is also used to capture a subject's face at a 1:1 ratio, undistorted. “This camera is positioned at a precise angle in order to capture a clear and unobstructed image of the user's face, and as it turns out this angle also captures a clear view of the number pad, so the password input process is also inadvertently captured,” said one industry executive. He recommended an easy and effective way to circumvent this — use one hand as a “shield” to cover the other hand while the password is being keyed in. He also indicated that some ATMs, by means of VCA, will issue an alarm when more than one person's face is present.

The second, hidden camera is used to provide wide-angle viewing. “It is preferred to replenish cash during regular business hours, as frequent foot traffic creates natural obstacles for potential perpetrators, thus minimizing threat of the operation,” said Jerry Feng, Head of Security and Investigative Services for Taiwan, Citibank.

Financial institutions are typically passive as opposed to proactive. Many banks tend to wait until they have been attacked with a skimmer before they take any type of action. Losses associated with skimming incidents have risen, and these skimming losses cost US banks about $1 billion annually. This averages to about $50,000 per incident, and this does not include expenses relating to investigation or affected customer notification efforts.

Ironically, many anti-skimming devices used by banks actually look very much like the skimming devices that criminals use. This is particularly worrisome to discerning customers. Newer anti-skimming kits, which consist of a small control panel installed inside the ATM, trigger an alarm that can generate audible and visual warnings on the control unit and screen when a skimming device is detected. In addition, newer kits, which can be integrated with a bank's alarm and video surveillance, also emit a magnetic pulse that prevents the skimming device from reading a cardholder's data and password.

Useful ATM Security Measures:
* Surveillance cams with WDR capability for high-contrast scenes; 600 dpi minimum
* Motion detectors for camera/DVR and light activation
* Vibration and temperature sensors and alarms
* Audio recording during events or when the sound level surpasses the preset threshold
* Two-way, live communication with the central control and/or patrolling guards

Lobby and Counters
Aside from deploying typical surveillance cameras, bulletproof glass and panic buttons, a growing number of banks opting for VCA to monitor both suspicious activities and business operations/VIPs can be witnessed. These days, installations are requiring more cameras than ever before, translating to even more recorded video. As a result, events and activities might be easily missed, and suspicious behavior is not noticed until after a crime has been committed. A quality and properly installed surveillance system with facial recognition capability, among other VCA features, will enable a financial institution to better cope with customers with disgruntled expressions, unexpected long lines, suspicious loitering and so on; such a system can also ensure staff members man their appropriate areas, recognize blacklisted people and maintain access control of restricted areas, said an industry source.

VCA for security and business operations:
- Recognize faces that are of registered VIPs, blacklisted or concealed
- Alert management to long lines or disputes
- Detect and identify suspicious activities:
   * Trajectory tracking, such as straying from the customary path after entering/leaving the bank (for example, not   heading toward the counter upon entering the premises)
   * Loitering or walking back and forth
   * Frequent head turning akin someone who is surveying the environment
   * Idle objects, lack of or even too much movement (for example, someone stands still for an unusual period of time)
   * Not doing what they should be doing (for example, someone is at the ATM, but is not making any transactions)
   * Particular types of body movement or clothing

Watch Your Back
One of the most common security risks in access control is simply user carelessness, such as a misplaced badge or token, or not closing the door right away for tailgating. “Security management for banking is a discipline unlike any other; it is always a good idea to have a ‘twin,' meaning that it requires two bank personnel's physical attendance in order to unlock and access the vaults and cash depositories,” Feng said. Citibank actually had its RFID entry cards custom-made, so it is virtually impossible to duplicate them without proper authorizations.

“A dependable method to counter the false use of access control cards would be the use of dual-factor authentication, for example facial recognition plus access cards,” said Charles Smith, Product Manager at Omniperception.

The greatest risk in any security system is the staff, cautioned Michael Brown, IT and Computers Director for VideoControlRoom. Vulnerabilities include staff opening or closing a branch; early mornings when there are few people around and the alarm is disarmed; the authorities may be slow to respond due to rush-hour traffic. “System designers need to think of security from all risk angles and cover the people aspect just as much as the ‘armed state' intrusion aspect.”

UPS
Security and video surveillance systems for financial institutions are mission-critical, given that they must be available 24/7. For this reason, UPS systems are a must. A well-maintained power protection system will ensure the integrity and availability of power to critical installations, such as intrusion detection sensors, fire sensors and bank vault sensors. “The highest priority is clean power, which means investing more in quality power-filtering UPS systems,” Brown added.

Seismic Sensors
Seismic sensors can detect both heat variations and vibrations resulting from attempts to disturb solid structures such as ATMs, bank vaults and safes — even in noisy environments. In addition, some seismic sensors are even equipped with light-sensing features. An added advantage is that they can be installed in existing legacy security systems to offer a higher level of protection over traditional shock sensors, which often lack the ability to discriminate between ambient vibrations and real attacks (such as heavy strokes from sledgehammers, repeated knocks from hammer and chisel attacks, drilling, mechanical cutting, acetylene torches, diamond drills and hydraulic jacks).

Unlike auxiliary/emergency power systems or standby generators, reliable UPS systems will provide near-instantaneous protection from power interruptions. While the primary role is to provide short-term power when the input power source fails, most UPS systems can, to a certain degree, correct common power problems such as:
- Voltage spike or overvoltage
- Momentary or chronic reduction in input voltage
- Noise, defined as a high-frequency transient or oscillation

Biometrics and integration, key to health care security

Editor / Provider: a&s International | Updated: 10/16/2012 | Article type: Commercial Markets

Access control, particularly biometrics, is a key focus in health care facilities. As part of the mainstream push to user-friendly solutions that are easy to understand and use, open systems and plug-and-play devices are opening up their lead in popularity contests. Video analytics continue to simmer on the sidelines, while cloud-based systems and technologies, despite the hype, have yet to come into their own. a&s takes a look at the major technologies shaping the health care world.

 

Major smart-card issuance efforts, such as a recent US government initiative, are resolving issues, including lack of reader infrastructure. Commercially, smart cards finally benefit from reader infrastructure that goes beyond physical access to encompass logical access. Part and parcel of this effort are mobile phones, used for both access and payments.

 

Putting his money on smart cards is Matthew Conrad, Director of Global Innovation and Customer Experience for the Health Care Practice, Ingersoll Rand. “The number of credentialed applications in health care facilities is increasing rapidly.” Once just used to gain entrance to parking garages or secured areas, credentials (cards or keyfobs) now grant access to computer networks and other electronic information — payments in the cafeteria, vending machines, time and attendance, authorized access to pharmaceuticals or patient records.

 

Eric Assouline, Export Sales Manager at CDVI, also points to access control innovation in RFID and biometric technologies. “Manufacturers have not yet taken full advantage of these technologies,” Assouline said, as trust issues remain. “While biometric and RFID technologies have improved over the past 10 to 15 years, improvements still need to be made.” For example, 256-bit encryption is helping foster end-user confidence.

 

More than a pretty face

Next-generation biometric technologies could be worth US$14 billion globally by 2017, at a CAGR of nearly 20 percent. With major improvements in sensors and applications, sales globally are already $6 billion annually, with the U.S. accounting for $2 billion to $3 billion alone. Biometrics deployments in the health care sector have traditionally been “extremely difficult and problematic,” said Phil Scarfo, VP of Worldwide Sales and Marketing at Lumidigm. “Most conventional biometric systems fail to operate reliably in harsh environments. Frequent hand washing, heavy use of chemicals and cleaners, wearing of latex gloves and demographic issues make accurate biometrics enrollment and authentication challenging.”

 

Multispectral imaging, according to Scarfo, uses multiple wavelengths of light and advanced polarization techniques that extract unique fingerprint characteristics from both skin surfaces and subsurfaces, effectively addressing environmental issues. “The fingerprint ridges on finger surfaces have their foundation beneath the skin's surface in capillary beds and other subdermal structures.” The visible fingerprint, he added, is merely “an echo of foundational inner fingerprints.” Unlike surface fingerprint characteristics that can be obscured by moisture, dirt or wear, inner fingerprints lie undisturbed and deliver more consistent, tamper-resistant results.

 

For John Davies, MD at Time and Data Systems International (TDSi), other innovative players include China-based Hanvon and ZK Software. Another notable business, in his view, is Germany-based Cognitec, which excels in high-end facial recognition algorithms used in video analytics. According to IMS Research, the market for video analytics will reach $600 million by 2015. Following increased use of motion detection and camera-tampering applications, it anticipates increased market differentiation and heightened demand for more sophisticated applications. However, despite the drop in processing costs, Davies does not see the technology as being ready for mass acceptance. “Biometrics via video analytics is still not quite there.” Coupled this with the fact that the health care sector is slightly behind other government-funded and managed critical infrastructure, he sees more widespread adoption taking place several years away.

 

User-friendly integration

Scarfo sees system complexity as creating new needs. “Hospitals are busy places with hundreds, sometimes thousands, of people logging onto multiple systems several times a day from different locations. While authentication solutions must comply with extensive regulations, they must also be convenient, secure and reliable. Providing convenient, secure and reliable authentication solutions to hospital systems is a challenge.”

 

Security directors often manage multiple security systems that operate independently and do not communicate. According to Conrad, this leads to duplicated efforts, increased risk and difficulty making informed decisions. “Health care providers want solutions that connect disparate systems, drive enhanced communication, enable task automation and workflows, and provide important information and data when and where needed.” The key is to integrate not only physical security systems but also building management and business systems. “Doing so improves productivity, intelligence and visibility to operations.” 

 

Developing global solutions to integrate access control with video surveillance and other electronic security equipment and systems is a must, Assouline said. “That is why we are moving to develop high-end, performance-based algorithms that enable real integration. While integration has long been a buzzword, it is only now that intelligent products and systems can truly ‘talk to each other.'”

 

One major area in this arena is ready-to-use, plug-and-play systems. Panels, according to Assouline, can be prewired and preassembled, and the power supply can be included in the controller. “There is no need for complicated configuration. There is no complicated installation. Installers find that they can do more jobs without extensive training.”

 

According to Davies, the natural instinct for companies is to try to lock their customers into proprietary systems. “You can smile at your customers, but if they find that their feet are nailed to the ground when they get up to leave, you are not really developing customer loyalty.” Digitalization and harmonization are not the only potential issues; project complexity is another source of frustration and cost overruns. “Often, not enough time is spent planning. What happens is that, two or three years down the road, someone thinks of a new need that no one considered before. Accommodating these new requirements is what really adds to the cost.”

 

Still in the clouds?

While many talk about cloud computing, enterprises have been slow to take it up due to perceived security concerns. Companies are making increasing efforts to hone mobile strategies to enable employees to use mobile devices. This is putting pressure on IT departments to develop appropriate security infrastructure.

 

“Cloud” is now just about as much of a buzzword as “integration,” Assouline said, while fully admitting that the technology offers many advantages. “We have seen many companies moving toward this technology, and everyone seems to like it. Cloud-based systems offer many more services and, most importantly, redundancy; if one system goes down, the rest are 100-percent safe.”

 

Over the next five to 10 years, cloud-based systems will become increasingly accepted and relevant, Davies said. These systems have not yet reached their full potential, given the “reticence of end users.”

 

“Many data security personnel are not ready to give up control.” Davies finds this attitude somewhat contradicting to daily activity; many shop online regularly, providing credit card and bank information without any hesitations. The big issue with video surveillance is the sheer volume of data and requirements of decent playback speeds. That said, in 10 years, Davies believes that cloud-based systems will represent a 35- to 40-percent share of the market.

 

Samsung Techwin works with FaceFirst for facial recognition in megapixel cams

Editor / Provider: Samsung Techwin | Updated: 10/10/2012 | Article type: Security 50

Samsung Techwin America, a global supplier of video surveillance and security products combining superior performance and value, is partnering with California-based FaceFirst, LLC. to supply megapixel video surveillance cameras for its FaceFirst facial recognition system. The FaceFirst product platform uses the Samsung cameras to complement its proprietary facial recognition software system. Facial images captured by the cameras are automatically matched with watch list photos and when a person of interest is identified, alerts are instantly sent directly to pre-provisioned computers, cell phones (as e-mail, SMS or MMS messaging) or cash registers.

“By leveraging Samsung's powerful megapixel imaging technology with FaceFirst's expertise in software development and integration, the FaceFirst platform is primed to detect and defeat potentially dangerous or criminal activities,” said Joseph Saad, Director of Business Development, FaceFirst, LLC. “The combination of FaceFirst with Samsung's technology has enabled us to provide our customers with world class performance and accuracy at an affordable price point.”

The FaceFirst true biometric facial recognition platform features cloud-ready software and offers functionality that is affordable, scalable, and can be custom configured to specific business requirements. The system allows users to select the facial databases they want to use and a familiar web-based portal allows users with little or no training to self- provision biometric enrollments, alerting, and notification preferences.

The military-grade FaceFirst system identifies Individuals matching client records at the rate of millions of comparisons per second. It is ideal for transportation facilities and sports arenas or for entrances where people normally pass through without stopping — at school and college campuses, corporate headquarters, financial institutions, warehouses and hospitals.

“The Samsung megapixel cameras deliver real-world environment performance, making them the perfect choice for this application,” said Frank De Fina, Senior Vice President of Sales and Marketing, Samsung Techwin America. “The combined package provides a better and faster tool for today's security practitioners.”

Additional performance features of the Samsung megapixel cameras include true day/night (ICR) functionality, 16:9 full HD (1080p) resolution support, SSNRIII (3D + 2D) noise reduction technology and wide dynamic range (WDR) to help ensure crisp, clear images even in low light environments. Hybrid installations are supported with BNC outputs and RS-485 inputs and they are PoE (Power over Ethernet) compatible. Focus and zoom is network adjustable.

Russian café installs facial recognition on Axxonsoft platform for optimal customer experience

Editor / Provider: Axxonsoft | Updated: 10/5/2012 | Article type: Commercial Markets

Boulvar is the largest café in Petropavlovsk-Kamchatsky, which is the regional hub of Kamchatka Peninsula and located in the easternmost reaches of Russia. The café is split into four distinct zones: a romantic zone (also referred to as the coffeehouse), an Italian zone, a Japanese zone, and a bar. As any restaurant or café grows and flourishes, it accumulates regular customers who require particular attention and a personal approach. By the same token, there may be unwelcome patrons best kept at arm's length.

At Boulvar, the owners installed a system to automatically recognize faces in real time and classify incoming visitors. They started with two basic categories:
- "Unwelcome" – deadbeat diners who skipped out on their bill or behaved disruptively
- VIP – regular visitors and others requiring special care and service Automation needed to enable timely decision-making: for example, signaling a waiter to escort a client to their favorite table.

The task from the very start was two-fold, as well as tricky: Unimax was tasked with installing an ambitious project, from an engineering point of view, while minimizing system startup costs. Due to Kamchatka's distance from Moscow – nine time zones – installation works were assigned to local companies in Petropavlovsk-Kamchatsky. Thus Unimax was responsible for project design, manufacture and supply of equipment, consulting, and technical support.

The facial recognition system needed to analyze the incoming video stream and automatically capture facial images, comparing these with the photographs in its database. The system should then alert the operator after a match is found. Both administrators and security staff would be able to work more effectively, thanks to the database of VIP clients as well as deadbeat clients and hooligans.

Since the client's selected contractor was inexperienced with such systems, Unimax developed a detailed technical solution and provided all necessary consultations. It also created guides for configuring cameras to work with the automatic facial recognition system and for writing Face Intellect scripts.

At the core of the system is Axxon Intellect Enterprise platform and the Face Intellect facial recognition module. To complement the VIDEOMAX-IP platform from Videomax, the AXIS P3346 – the flagship of the Axis lineup of professional fixed-dome cameras – was chosen. With 3 megapixels of resolution, high sensitivity, manual shutter controls, and advanced focusing algorithms, the Axis camera offered the consistent high image quality required for recognition.

The facial recognition algorithm proved its worth during trial runs of the system. The database began to store photographs of unwelcome clients who did not pay their bills. More recently, the client has decided to supplement the system with additional cameras and look into using panoramic cameras for facial recognition.

3-D facial recognition for high-volume foot traffic

Editor / Provider: Submitted by Artec ID | Updated: 9/13/2012 | Article type: Tech Corner

Artec ID, the 3D biometric division of Artec Group, and manufacturers of walk through identification systems, unveiled the third generation of Broadway 3D, their newest 3D facial recognition biometric system. The Broadway system identifies up to 60 persons per minute using 3D facial recognition sensors, offering high-speed access and contactless technology. It leads the way with better recognition accuracy, convenience-in-use, and high-speed spoof protection.

“This newest generation of Broadway addresses the security needs of airports, transportation hubs, factories, business centers, etc.,” comments Sergey Sukhovey, Chief Marketing Officer at Artec Group. “Broadway 3D can recognize differences up to a fraction of a millimeter. It provides the highest level of security control even when subjects are passing quickly through checkpoints.”

The Artec ID's Broadway 3D system kit comes with a 3D camera that captures still or video images, and proprietary software pre-installed on a 3D computing unit. The technology's combination of surface reconstruction algorithms and proprietary hardware enables accurate and real-time 3D scanning of objects with arbitrary topology.

The benefits of the Broadway 3D system include:
- Contactless biometrics with no lasers
- Accurate recognition even when subject is in motion or wearing glasses
- Fast enrollment time – less than 2 sec
- Scans up to 60 people per minute
- Performs at high speeds even on big databases
- Reliable biometrics - 3D face
- Easily integrates with existing automated control systems (ACS) used for security
- Automated employee attendance record keeping
- No limit to image database size