Beware of fishy details

Editor / Provider: Tevin Wang, a&s International | Updated: 5/17/2013 | Article type: Tech Corner

Fisheye cameras provide views from all angles, but must be set up properly to be effective. This feature takes a closer look at practical expectations and tips.

Fisheye cameras are all about seeing everything in a scene more efficiently and effectively than with multiple cameras. They are also more economical as they reduce licensing costs by requiring only one license instead of multiple camera licenses to cover the same area. By expanding horizontally, fisheye cameras allow security managers to cover an entire scene in a logical way without gaps or missing areas of coverage. Other benefits include:
● A huge field-of-view, hence total coverage with no blind spots
● Unbroken surveillance on a single camera; no camera switching required
● Massively reduced camera counts when covering large areas
● PTZ or ePTZ around the scene during playback

However, fisheye cameras are not a cure-all for replacing fixed or PTZ cameras in every scenario, as the loss of detail plus pixel density drops are still their Achilles' heel. “Depending on camera mounting height and distance from the subject, what the user may not get from the 360 camera could be facial-recognition shots or car license plates,” said David Myers, CTO at AMG Systems. “In these cases, the use of an additional fixed camera may be required, usually at an entrance or exit.”

Tips
As fisheye cameras change the perspectives of security personnel who actually “see” the video, installers should pay closer attention when deploying them. First, installers must be conscious of where the camera is being mounted on and of the type of material of the wall or ceiling. As certain fisheye cameras are designed to blend into the decor and need to be mounted on harder ceiling material like drywall or sheetrock, plenum space where air circulation is used might not be a good option. “Aesthetics plays an important role in many installations, especially when mounted at eye level or just above eye level in a wall,” said Greg Alcorn, Global Sales Director for Oncam Grandeye.

Since a fisheye camera covers a wide area in all directions, “ceiling or mounting height is important, and cameras should be positioned strategically to provide the best coverage of the area,” Myers said. Additionally, how the camera is going to be powered (with PoE) and how it would connect to the management network should be given some thought.

Claire Huang, Product Marketing Specialist at Dynacolor, agreed. “Due to resolution drops around the edges, users should make areas of interest the center of the image. Thus, the height and location should be carefully considered.”

Another consideration is light variations in a given scene. “Very bright lights often blow out a scene or create lots of shadows, and many 360-degree cameras cannot pick up information because the image is either too dark or too bright,” Alcorn said. The brightest and darkest areas will be a challenge for the camera to resolve. “Installers should consider the entire scene when placing a camera — how much light will be visible and what in your scene is important to see for total situational awareness.”

When installed under a bright environment with lamps of low frequencies, there might be flickering as well, Huang added.

Security professionals should understand that fisheye cameras are designed to add value, rather than perform as a Swiss-army-knife solution for surveillance. Fixed or PTZ cameras might still be required to ensure fisheye cameras provide a complete overview of the scene and a conclusive evidence trail for devising proper business or security measures.

For more coverage on security products, please check out asmag.com.

S. African mines undertake holistic approach to health, safety, HR and security compliance

Editor / Provider: G4S | Updated: 5/13/2013 | Article type: Commercial Markets

About three years ago, G4S Secure Solutions South Africa (then under the Skycom banner), became involved with projects aimed at enhancing business support systems, especially in the HR and payroll sectors of South Africa mining operations business. Different projects were initiated and aimed at replacing outdated time and access management system with a new comprehensive access control system utilizing smart card readers, portable card readers, fingerprint readers, facial recognition and access control software.

Mining in South Africa has been the driving force behind the history and development of Africa's most prestigious economy. Gold mining has accounted for 12 percent of the world's production in 2005, although the nation had produced as much as 30 percent of world output as recently as 1993. Despite declining production, South Africa's gold exports were valued at US$3.84 billion (￡2.5 billion) in 2005. Almost 50 percent of the world's gold reserves are found in this country. Global mining houses and local mining companies throughout Africa employ well over 450,000 people across all the extraction sectors and platforms.

G4S was tasked with the provision of various hardware and software platforms tailored to the specific requirements of each business. These platforms were then integrated into the existing operations to provide site managers easy and efficient control over access, time recording Health and Safety requirements, movement patterns and environmental situations. The intention was to create software that allowed ease of use to both the end user and management. From the employee clocking into work to the HR team collating reports and gathering management information.

To keep out illegal miners, the solution introduces fingerprint technology to control access to mining facilities; proximity based card readers solutions for mass gatherings; facial recognition deployed for meal issuing and control at canteens plus various accommodation facilities; access control management of shift work or group access to mines as well as health management of workers.

In addition, the system also enables contractor management; visitor management; fuel management; inventory management by making sure workers receive the correct equipment. Through XTIME command and control software, the system can be integrated with building alarm and security systems. Video surveillance systems can also be integrated into the system.

As a direct outcome of the success of the initial projects with large multinational mining houses, a technology partnership was formed with G4S and a number of the big mining companies to develop well suited, efficient technology solutions in accordance to specific requirements at various global mining sites with the use of the time and access management systems. The high end security plant systems were also converted to XTIME which was custom developed for mining and industrial sector customers that had a need for a high security environment such as gold plants and high risk areas. The system handles full search facilities with intelligent routines which are set up by users of the system to cater for different conditions that occur in the plant. The graphical maps feature available provides control and situational awareness from a single screen. This ultimately results in the business being able to view the various platforms in one single view. The overall success of the solution across South Africa has led to implementations within other customer operations in Ghana, Democratic Republic of the Congo and Zambia.

2013 access control trends

Editor / Provider: TDSi | Updated: 3/20/2013 | Article type: Tech Corner

TDSi, a UK access control systems supplier and system integrator highlighted six major trends in the access control sector in a recent report. The last few years have seen a huge shift in the integration of security. This year is shaping up to be no different with the access control sector following the technology evolution. A number of technologies, such as near field communications (NFC), biometrics, PoE and wireless systems are maturing will dominate greater percentages of the market this year – mirroring much wider trends in the technology sector.

1. NFC
As a recognized standard, NFC promises to offer open connectivity (in a similar vein to Wi-Fi or Bluetooth) enabling far more types of technology to successfully interact with one another. Whilst the concept is tried and tested it's the unquestionable dominance of smart devices that have fuelled the possibility and interest in using the technology in security and access control applications. Smart mobile devices already encompass highly sophisticated technology, with some utilizing facial recognition for secure device access. This in turn offers great opportunities for them to be used to help confirm identity. It could also be highly convenient for users, using something that they carry to authenticate access control.

2. Biometrics
Biometrics systems are continuing to evolve and the price point of more complicated systems will continue to fall. Facial recognition has become more accessible and cost-efficient in recent years. But systems developers are also looking at other biometric markers. An emerging technology is heartbeat readers. Like fingerprints or the shape of the human face, the electromagnetic signature of the human heart is unique and offers a new way to prove identity. Rather than having to present biometric data at an access point, systems could be attached to the body, automatically sending approval to entry doors and allowing authorized individuals to freely move between unrestricted and restricted areas with minimum fuss.

3. Cloud-Based Systems
Integration of access control systems continues unabated and following the IT sector, there are moves to make use of cloud technology to host systems and store access control data. Survey figures suggest that 65 percent of new security products will be delivered via cloud by 2014.

4. PoE
There is also a growing move towards PoE, which makes installation easier, quicker and neater – benefiting end users and installers alike by saving costs. This theme is continued with a growing trend towards wireless systems. In the past there had been reservations about using wireless systems with regards to security. The perception by some is that there is a greater risk of system hijack, but as the ubiquitous use of Wi-Fi usage has shown, properly protected, and configured, systems can use encrypted wireless signals. There is also a growing emergence of hybrid Wi-Fi/wired systems which minimize wireless dead spots.

5. Energy Saving Systems
Energy saving is continuing to be an added bonus to integrated access control systems. There has been a distinct move recently towards installing access control systems with switch mode power supplies, which saves money on the running costs of the control systems themselves.

6. Industry Standards
With all the exciting developments in technology that are going on in 2013 it's easy to overlook the IEC and ISO standards. The latest IEC 60839-11-1 is set to be an important one for the access control industry if it passes the voting stage later this year. This is an important piece of legislation which will affect the manufacturing and interoperability of thousands of access control systems. Like many standards a number of stakeholders need to agree before it becomes available, but in a sector that is noticeably less regulated than the intruder and fire markets, it offers a step forward from the current underused and outdated EN standards.

Catholic church in Brazil opens hotel with pilgrims safety in mind

Editor / Provider: Axis Communications | Updated: 3/13/2013 | Article type: Residential & Consumer

The Rainha do Brasil Hotel built by the Catholic church in Aparecida do Norte, Brazil recently installed an IP-based surveillance system consisting of 106 Axis Communications cameras and Digifort VMS, sourced from distributor Delta Cable. Local system integrator Sillis handled the implementation and the integration of access control with alarm management. Installation for the 15-floor hotel was completed in three days, since the cameras were preconfigured on the Digifort platform and were basically plug-and-play upon installment, said Marcel Minotelli, Technical Director for Sillis. To assist engineers, Sillis also configured each camera IP in advance with matching numbers on each box that correlated to its position in the hotel.

The hotel security team required a centralized monitoring system and the ability to access cameras from various points on the local network. Other requirements included automatic alerts of any unauthorized camera repositioning or blocking, as well as archived video footage for investigations.

One discreet, outdoor-ready fixed dome with WDR was installed in each of the five elevators; 10 more of the same model can be found on the ground floor where the reception is located. The ground floor is protected by eight additional cameras, with various WDR, D/N, vandal-proof and facial-recognition features. The discreet dome model can also be found in the mezzanine and each floor of the hotel, along with a fixed model. A total of 15 cameras were installed in the mezzanine, while four cameras were installed on each floor of the hotel.

Six vandal-resistant domes and two ultra-discreet outdoor fixed domes were installed in the penthouse area, where the hotel swimming pool is located. Alfonso Aurin, Technology Consultant for the church, noted that the system has helped in an incident where an unattended child fell into the adult swimming pool, and the video recordings clarified what further measures should be taken to prevent further incidents.

Brazilian prison adopts integrated platform

Editor / Provider: Axis Communications | Updated: 3/12/2013 | Article type: Government & Public Services

The Francisco Helio Viana de Araujo State Prison in Pacatuba, Fortaleza, Brazil recently became a pioneer in the implementation of an integrated security platform. The prison that houses 400 inmates installed a security solution that combines 180 Axis Communications network cameras (mostly HD), ISS facial recognition software (for turnstiles), motion detection, access control and IR cannons on ramparts. The platform was funded by the Ministry of Justice and Treasury of the State of Ceara, and implemented by local system integrator Imagem Seguranca, who is experienced in network video and prison security. The project serves as a model for other jails in Brazil.

The prison is privy to a comprehensive monitoring system, covering eight different areas and 20 vacancies for individual isolation. The facilities include social and legal care for the prisoners held in custody, medical facilities, library, computer room, classrooms with capacity for 120 students and workshops, as well as an industrial kitchen, bakery and multipurpose hall for social activities. Of the 180 cameras, 30 are fixed HD, four PTZ domes, six small HD and 140 small IP models. Steel boxes were installed on some cameras to combat vandalism. Imagem chose specific camera models to withstand internal or external environments and took into consideration video quality, real-time access and scalability. The network cameras, together with the ISS software, monitor the prison perimeters and movement among points of collective facilities.

"The main advantages of this design are the simple way to operate the system and the seamless integration of the entire security project,” said Mario Jorge, official responsible for the project at the Department of Justice.

Multifactor authentication provides the pieces for peace of mind

Editor / Provider: Tevin Wang, a&s International | Updated: 2/8/2013 | Article type: Tech Corner

According to Report Linker, the multifactor authentication market is expected to grow 17.3 percent from 2012 to 2017 to a market worth US$5.5 million. Something we have indeed removes the problem of forgetting something we know, but now the object(s) must be with the user at the time that he or she wants to be authenticated.

"In the realm of physical security, the failures of companies and governments to protect our private information (personal and financial) are a lesson that what once served as sufficient security (username and password) is no longer acceptable. We have come to accept that card access provides a low level of security," said Adam Shane, Senior Systems Design Architect, Amag Technology (a G4S Technology company). "Cards can be duplicated, spoofed, modified or stolen. There is nothing that validates the authenticity of the card, nothing that binds the card to its owner, and in some cases, nothing to verify the issuer still trusts the owner to have the card."

The driving factor behind multifactor authentication is to increase the security level in an organization and only allow entry for permissible personnel, said John Davies, MD of TDSi. Multifactor authentication is becoming more important because more systems are connected over the Internet and are exposed to huge numbers of people.

Aside from existing compliance and regulatory pushes, the cloud is another driver for deploying multifactor authentication. "Traditional barriers that have been deployed to secure IT systems, such as firewalls, are becoming less relevant due to a growing move toward the cloud, which means an increasing amount of company data no longer resides on company networks," said Julian Lovelock, VP of Product Marketing for Identity Assurance, HID Global (an Assa Abloy company). "Traditionally, enterprises have stored key IT resources behind a firewall on corporate servers, or in a ‘walled garden.' But, with the rapid growth of the remote workforce, the time and effort enterprises have put into reinforcing that ‘wall' have seemingly been wasted, as more data begins to reside outside of the corporate network. All of these trends are leading toward a model in which organizations focus on protecting individual resources with strong authentication, as opposed to simply protecting the wall."

Chris Cardell, CEO of SyferLock Technology, agreed. Megatrends, such as the emergence of cloud computing, server and desktop virtualization, the proliferation of mobile technologies and bring-your-own-device possibilities, the increase in employees requiring remote access, and the increased use of social networking in the work environment, have created new vulnerabilities and risks for companies. "Users expect to be able to access information from virtually anywhere via the Internet and mobile devices such as smartphones and tablets, and that means it is harder than ever for IT and security executives to ensure that all the organization's information assets are protected," Cardell said.

Growth Verticals
Growth verticals for multifactor authentication include hospitals, banks, airports, data centers, large corporations, IT server rooms, universities, research labs, government departments and other organizations working with sensitive materials such as defense. "In some industries such as health care and financial services, the emergence or evolution of regulatory requirements is forcing even more stringent implementation for strong authentication. For instance, in the U.S., health care organizations must be compliant with the health insurance portability and accountability act (HIPAA). Relying solely on usernames and passwords will no longer be sufficient for secure access to data, particularly sensitive information such as patient records," Cardell said.

The US government has also mandated that access to physical and cyber assets in the executive branch requires use of a personal identity verification (PIV) card, Shane said. "This card supporting PKI validation is federated and therefore trusted across all agencies, and supports multifactor authentication (credential, PIN and biometric). Not all systems will be upgraded to support this high-end authentication token as PIV cards can cost the US government about $100 per person and that does not include the regular maintenance overheads. But progress is being made."

Rick Focke, Senior Product Manager at Software House (a Tyco Security Products company) is optimistic about the retrofitting projects and potentials of biometric based solutions. “The US federal government is a large market and one where the need for upgrades and additional solutions are still needed. In this market and in others, as installation volumes rise, costs should begin to decrease.”

The increase in employees, contractors and e-commerce customers requiring secure access, both remote and on premise, to computers, networks and sensitive information are also drivers in the demand for stronger multifactor authentication approaches. For instance, multifactor authentication adoption in banks in the U.S. is not mandated, but more customers in this market are moving to more secure solutions, Shane said. "We see this as a general trend. There are many beneficial reasons to move to strong authentication such as, to reduce financial losses from crime or fraud, improve auditing capabilities (non-repudiation), reduce cyber espionage and terrorism incidents, improve public relations, and the list goes on."

Complex and Costly?
Cost and usability are perhaps the two greatest concerns from enterprises/end user when implementing multifactor authentication solutions. "Adding biometric authentication for identity binding requires not only a biometric capture device at every terminal, but also requires licensing software to perform the biometric comparison," Shane said. "In biometric authentication, there are different ways to handle the process of binding an individual to a card or their credential. In one case, the user's biometric map or template is stored on a card or in a computer database. If the binding process requires users to present their card/credential first, for reading identification numbers (known as a 1:1 match), then costs can be kept minimal as the ID number is used to pull users' biometric data from the protected storage and then the biometric match confirms they are the person they claim to be. Similarly, the presentation of the credentials could release the biometric data directly from the card. However, in other systems, a person may simply provide one biometric identifier (fingerprint, iris or other) and the system will match this against all samples in the database. If the best match exceeds a threshold for acceptance then it is assumedthey are that person. This is called a 1:N match or a search." Compared with a one-to-one match, one-to-many comparisons are expensive.

Multifactor authentication solutions also require the appropriate enrollment or registration software to build the identity database and to manage the identities. "This software can be quite expensive also," Shane added. "We try to help customers understand that there is a continuum of solutions from relatively simple to very complex. Their budget, security concerns, regulatory requirements and consequences are all considered in guiding them to an appropriate solution."

In the case of biometric security, end users may also be worried about purchasing a third-party or bolt-on biometric system that requires two separate devices at the door and two separate software systems being used in parallel. "Another concern is the rate of technology change within biometrics today," said Philip Verner, Regional Sales Director for EMEA, CEM Systems (a Tyco Security Products company). "An emerging biometric technology today can go end-of-line within a considerably short period of time and this can make end users hesitant when choosing a biometric solution. When considering Iris technology, patent or licensing modules used can also be a significant barrier for customers."

Throughput and convenience are still issues for users. For example, a system that requires extra layers of authentication equals an extra delay for individuals trying to enter a facility or an area. "Customers want to avoid time delays or bottlenecks at the door where there is a high volume of staff throughput. Where it may not be convenient to use multifactor authentication all day, we recommend that PIN and/or biometric security be enabled during certain times, for example, at night time when the premises are closed," Verner said.

Usage Considerations
Whichever security model is chosen, the total cost of ownership is a key factor in determining the value of a solution. First of all, end users need to evaluate the cost to use and maintain a typical username and password logon security system. Weak security can result in direct and indirect costs and devastating consequences, due to leaking sensitive information and resources to unauthorized users and intruders. This is not to mention issues resulting from noncompliance to industry regulations.

When evaluating a multifactor solution as an alternative, the hardware, software, system integration, installation, deployment, maintenance and device replacement must all taken into the equation. Besides the direct costs of solution purchasing and software licensing, there can be hidden costs involved. For instance, customers might need to take into account the cost of distributing hardware: tokens, smart cards or biometric readers. Support costs must also be taken into account as there will likely be an increase of support calls after the initial deployment.

These procedures are especially critical for those who do not have a proper risk assessment, and therefore are not clear on what their most important data or assets are or where they resides.

Security only works if the end user follows the policy. Quick and convenient solutions that do not disrupt daily routines are perennial favorites. What is required from any multifactor authentication system is not only enhanced security level but also functionality.

While most corporations purchase systems based on their current needs, scalability is another important factor to consider when evaluating multifactor authentication solutions. Some multifactor authentication systems require significant management when dealing with a high number of users. For instance, tokens can become difficult and expensive to manage due to the fact that they need to be replaced every few years.

Bumpy Yet Rosy
Cost continues to be a challenge, as budgets are tight. "However, the US government is providing funding for HSPD-12 upgrades through the OMB 11-11 memorandum with a stipulation that the money must go to installing multifactor authentication solutions," Focke said.

Current industries that recognize the need for multifactor authentication solutions represent a small market for vendors. "The larger commercial market sometimes is challenged to see the ROI in multifactor authentication when all of the infrastructure costs are considered," Shane said.

The lack of awareness about such solutions requires extra effort on market education. "I think that one significant challenge is the incorrect assumption that the only viable option for multifactor authentication is a one-time password (OTP), and the belief that if the OTP option isn't suitable, there are no other alternatives. The reality is that is not true, and that there are a large number of alternatives," Lovelock said. “"we need to push past that point and educate people as to what those alternatives are, and at the same time highlighting the other key aspects of implementing authentication technologies such as, lower deployment and management costs, the enhanced level of security the technologies provide, and better usability for end users."

Despite these obstacles, the growth potential for the multifactor authentication market is substantial. Biometric readers such as fingerprint verification are gaining traction. "Some specialty applications are also coming to the forefront. For example, the health care market is looking at noncontact devices to help ensure readers remain clean and germ free. This non-contact solution utilizes iris, palm vein or facial recognition level of authentication only," Focke said.

As an expert in physical and logical access integration, HID Global predicts the proliferation of contactless device-based authentication and embedded credentials. "I think we will see technologies that grew up in the consumer space around machine profiling and device forensics being used in the corporate sector, as the consumerization of IT takes a greater foothold. I also believe that an increase in the availability of NFC-enabled devices will open up options for contactless device-based authentication," Lovelock said. "We will see growth in embedded credentials, where endpoint devices like laptops, tablets and phones will be able to securely store, and make credential readily available for use."

Also, software-based authentication solutions are emerging fast. "Because many of today's emerging use cases (e.g., employees and customers requiring secure remote access) are not conducive to legacy hardware-based authentication solutions, we believe that there will be increased demand for flexible, adaptable software-based authentication solutions."

"With increasing concerns about security and with new regulatory requirements, authentication is a growing industry. This growth has resulted in the emergence of a range of authentication solutions, including hard tokens, smart cards, biometrics, SMS text to cell phones, among others, competing in the market place," Cardell said.

VCA revisited

Editor / Provider: Wavestore | Updated: 1/16/2013 | Article type: Hot Topics

So, the ObjectVideo “patent agreement seeking” rampage seems to have come to an end for now, with Panasonic System Networks being the latest to be added to the global, portfolio-wide patent license wish list (others include Tyco Security Products, Sony, Vivotek, Pelco by Schneider and Bosch Security Systems, for anyone who is keeping score). More solution providers are revisiting the technology side of things this year, with more concrete deployment scenarios and ROI agreement, such as this one from Axis Communications, a similar one from AMG Systems, and the one below from Wavestore.

Recent advances have helped overcome many of the problems previously associated with VCA tools, and 2013 will therefore see more powerful and tangible performance in real-life action, predicted Phil Ewers, Business Development Manager at Wavestore. His extensive experience includes playing a key role in a successful bid to deliver and supply Westfield London Shopping Centre with Europe's largest people-counting solution. Ewers is confident that VCA will be requested more in the list of features when video management systems are being designed.

First, there are a number of manufacturers who have increased the processing power of the DSP chipsets incorporated into their video surveillance cameras, highlighted Ewers. “These cameras, therefore, have the potential to be able to perform all their standard functions, while at the same time being able to efficiently handle analytics software.” Second, a tough economic environment is inevitably encouraging end users to demand a higher ROI in a video system solution. Last but not least is the fact that forward thinking video solution providers, such as Wavestore, have incorporated into their VMS the facility for leading technologies, such as video analytics in all its various forms, to work in harmony and interact with each other using a metadata engine. “This enables to offer customers an effective single-source solution.”

VCA is proving to be extremely valuable to the retail sector, but there are many opportunities in environments such as sports stadiums, airports, train stations and so on — any area where there is people movement.

People-counting capability deserves to be near or at the top of the list, as it can provide highly valuable data to allow a business to become more efficient, increase sales or just simply make their premises a safe place to visit or work in, Ewers said. “A hot spot identified by the use of analytics could perhaps generate an alert that there is an escalating risk of people being crushed.”

ALPR has obvious benefits to those involved in traffic management and parking enforcement, as well as verifying that a driver/vehicle is authorized to enter a restricted area. Biometrics in the form of facial recognition deserves a mention as well, as it can be a very powerful tool to identify specific individuals. “When analyzing what may have been thousands of hours of prerecorded video, facial recognition offers the possibility of matching against what could be a large database of undesirable visitors,” Ewers shared. New developments are seeing facial recognition providing invaluable statistics for retailers as to who is checking out a particular product stand, visiting a store or a defined area within a store or shopping complex.

Cloud-based biometrics, anyone?

Editor / Provider: SkyBiometry | Updated: 12/13/2012 | Article type: Tech Corner

SkyBiometry, a new company providing cloud-based biometric software as a service (SaaS), was officially launched as a spin-off of Neurotechnology, a provider of high-precision biometric identification, object recognition and computer vision technologies for more than 20 years. In conjunction with the corporate launch, SkyBiometry introduced a free, cloud-based face detection and recognition API based on a facial recognition algorithm from Neurotechnology, the underlying technology behind many commercial facial recognition products around the world. SkyBiometry also offers a range of paid plans and services to help customers rapidly integrate biometric technologies into their products and online services.

SkyBiometry's team of experienced Neurotechnology professionals have from five to 15 years of experience in algorithm research, biometric solution development and consultancy, enabling them to help customers – even those who are new to biometrics – accelerate product development, integration and time to market. The fast, accurate detection and identification technologies can be used for traditional biometric identification systems such as user ID, security and time management as well as new uses in entertainment, games, online marketing, social media and mobile applications.

“With the launch of SkyBiometry we are pleased to provide cloud-based biometric products and services, said Denis Kocetkov, CEO of SkyBiometry. “The flexibility and scalability of the SaaS delivery model, together with trusted and proven computer vision technology, creates unique advantages in helping to solve our customers' business needs.”

The rapid growth of cloud technologies is creating opportunities for developers and integrators to deliver better products faster than ever before. Because SkyBiometry's offerings are based on the strong foundation of Neurotechnology's proven biometric technologies, solution providers now have an efficient and cost-effective way to deliver fast, high quality biometric capabilities while providing their customers with the flexibility and scalability that SaaS solutions can provide.

“Some face recognition integrators prefer to implement their solutions as online services instead of implementing them as on-premises end-user applications,” said Dr. Algimantas Malickas, CEO of Neurotechnology. “SkyBiometry offers integrators an easy way to use our face recognition technologies in their online service offerings.”

Trends to bank on

Editor / Provider: By Christina Phillips, a&s International | Updated: 11/27/2012 | Article type: Commercial Markets

As Internet banking continues its global ascension, the demand for conventional bank counter activity is on a downward slope, and in turn reliance on websites and ATMs increases. This major customer behavior change calls for proper infrastructure adaptations, as this represents a big opportunity as well as a challenge for the financial industry.

With growing numbers of self-serve financial transactions, video-based security systems are becoming more than just means to increase security, said Hans Kruft, Key Market Manager for Banking at Geutebruck, as outlined in the first part of this vertical feature.

“Facial recognition is increasingly used by banks for recognizing VIPs as well as criminals,” echoed Aluisio Figueiredo, COO of Intelligent Security Systems. “Integrations are also becoming a must, such as having a building management console where you can control the branches and various systems remotely.”

The following is a quick rundown of three trending technologies for the banking and financial sector.

Biometrics
Biometric technology has advanced to the point that it can be deployed in a cost-effective, scalable, easy-to-use manner, resulting in a number of bank projects in emerging markets like Africa, Southeast Asia, India and Latin America, where finger or vein scans are used for augmenting PIN security at ATMs, or voice recognition for remote telephone or online transactions.

Last month in Australia, ANZ Bank CEO Philip Chronican announced that the bank was exploring ways to introduce biometrics as a replacement for traditional payment identification methods. Over the next five years, the bank will direct US$1.5 billion to reshape the way they do business by investing in new technology. Kathleen Erickson, VP of Business Development, Fulcrum Biometrics pointed out that, "Banks in less developed countries go to villages throughout their countries to find small entrepreneurs that may need capital to expand their small business or get it started. These individuals often do not have transportation and cannot read or write, which can create challenges for authenticating identity and signing documents, but they have a good business and banks see business potential. Banks could benefit from a way to authenticate these individuals for loans. Currently, banks use laptops with a USB signature pad or fingerprint scanner, but now, embedded biometrics in portable and easy-to-use handheld devices like smartphones and tablets can be used."

Fingerprint
Among all biometrics, fingerprint-based identification is the oldest and most reliable in numerous applications. This technology is well-suited for banks because in addition to enhancing security and preventing fraud, it provides added convenience for their customers as password is no longer compulsory. There is no need for training — customers simply put their fingers down. “For example, financial institutions in Latin America are embracing fingerprint technology for their ATMs,” said Phil Scarfo, VP of Worldwide Sales and Marketing, Lumidigm. “Biometrics, traditionally employee-centric and confined to the back room, is now being put in front of the customer with confidence.” High reliability is critical at ATMs because their use is not typically supervised.

Iris Scanning
Many millions of people around the globe have had images of their irises taken and stored for enrollment in recognition programs such as national IDs and passport-free border crossings. A major advantage of iris recognition is its extreme resistance to false matches, thanks to its detail-rich images of the iris's intricate structures. There are constantly incidents where culprits duplicate tokens: skimmed ATM cards, and stolen usernames and passwords. With iris-scanning technology, duplication is virtually impossible and thus would eradicate many of the issues facing the industry today. “We are considering implementing iris scans, for identifying our VIPs,” hinted Jerry Feng, Head of Security and Investigative Services for Taiwan, Citibank.

Facial Recognition
Facial recognition is already used by financial institutions in regions such as Europe, South America and Japan. “Facial recognition is currently in use in a small number of institutions, to grant access into high-risk or high-sensitivity areas, or as a VIP or person-of-interest identification system,” said Charles Smith, Product Manager at Omniperception. “Some are still evaluating the use value and effectiveness in the consumer financial sector, but it will certainly become even more integrated into banking in the future.”

Getting High…Def
An HD-SDI based video surveillance system allows branch and security managers to view high-resolution, zero-latency video footage over existing coaxial cable in a closed, secured system, which equates to minimum system downtime and significant savings. On the other hand, with today's banks, IP-based network and storage infrastructure should already be in place, which means the cost is mostly about network cameras and management software.

“It is inevitable that megapixel cameras backed with services over IP will take dominance in the finance sector,” predicted Michael Brown, IT and Computers Director for VideoControlRoom. “Financial institutions are increasingly using integrated technologies that allow for real-time cross-referencing and utilization of data such as alarm/access control logs, video and transactional data via notifications of choice. This helps improve decision making and event response.” Often, system designers and operators err on the side of caution by wanting to know everything, presented in an organized manner.

“We have noticed a move away from scale-out commodity NVR server infrastructure to scale-up consolidated and virtualized NVR servers,” observed Scott Basham, Perimeter and Surveillance Security Systems Program Manager for APAC, Unisys. “The intention is to make significant cost savings by cutting out unnecessary hardware, power and cooling operational expenses.”

Which will come out on top?

In practice, there is no “right” answer or solution, as user environments and requirements can vary from one site to another, from one bank to another. “We have both hybrid DVRs and HD-SDI solutions in operation,” Feng shared. “However, in my opinion, they are both band aid solutions, for the trend is to go IP. To this end, by next year, we'll be 100-percent IP. IP allows us to implement a fully integrated and centralized system, one that facilitates remote visual verification of alarms cost-effectively.”

Rob banks of security threats

Editor / Provider: By Christina Phillips, a&s International | Updated: 11/26/2012 | Article type: Commercial Markets

Banks are responsible for the security of countless personal, corporate and national assets, making them obvious targets. Conditions in today's economy unfortunately attract more unwanted attention to vaults and online transactions, and financial institutions are demanding more up-to-date security solutions and services that are closed in terms of protectability and yet open in terms of expandability. In this feature, a&s looks at modern security measures and protocols for valuable-handling establishments, discussing how various technologies should be deployed and integrated.

According to the FBI, there were 5,014 bank robberies reported in the U.S. alone in 2011. In 1,242 of the incidents, the use of a firearm was involved. In all, these acts of violence resulted in 30 people being taken hostage, 88 injuries and 13 deaths. During these incidents, more than US$38 million was taken, and only about $8 million or 21 percent was recovered and returned to the financial institutions. That is to say, the average loss after the recoveries was $5,952 per incident. What's wrong with this picture?

Of the incidents, video surveillance cameras were operational 97 percent of the time, and alarm systems were triggered 89.5 percent of the time. In spite of the security systems in place, a small percentage of the cameras (1.5 percent) and alarm systems (1.3 percent) did not properly capture footage or activate. Even more alarmingly, approximately 1 percent of the victim financial institutions did not have cameras, and another 1 percent did not even have an alarm system. “Those statistics tend to be downplayed,” according to one industry source. “On average, 20 percent of all cameras in large bank networks are not operational because management does not even check whether cameras are working, unless something comes up that requires going back to the video footage. Cameras may not be operational for a number of reasons: they might have been accidentally disconnected, moved due to maintenance or janitorial work, degraded due to normal wear and tear, maliciously sabotaged or simply covered by dirt or a spider's web.”

This year in particular, the banking sector has been hit with a great deal of fraud, from issues with ATM skimming to major hacking attacks. "Financial institutions and the banking industry at large are aggressively seeking more secure and effective ways to secure sensitive information and authenticate the identities of their customers to minimize exposure to fraud," observed Anthony Antolino, CMO at Eyelock. 
 
                                                                                                                           (Source: Frost & Sullivan)

Divide & Conquer
For better security, a holistic approach — both physical and logical — is often adopted by bank security managers and their trusted systems integrators. In practice, different areas or choke points of an establishment require different products or features to maximize security coverage and facilitate incident resolutions or investigations.

Entrance and ATMs
Most, if not all, banks are located in highly visible locales and are almost always encircled by glass, which allows full saturation of the sun's rays into the bank. While this may provide a pleasant environment for customers waiting in line, the possible image contrasts wreak havoc for surveillance cameras. Direct sunlight into the lenses virtually “blinds” cameras by washing captured images into a brilliant, undetectable white or shrouding them in darkness. Newly waxed or glossy flooring can also reflect unwelcomed light into the lenses.

Analog and IP cameras alike, those nasty shadows, glares, reflection and direct sunlight have always been the Achilles' heel of video surveillance; megapixel and HD cameras with their superior quality images exacerbate the problem. Image how easily such “evidence” can be thrown out of a court of law. For this reason, more and more countries have regulations that stipulate the use of WDR-enabled cameras for entrances and ATMs, in order to capture true footage that facilitates proper facial feature identification for prosecutions.

Many ATMs are equipped with two day/night cameras. One of the cameras (usually a vandal-proof dome) is clearly visible. In addition to being a crime deterrent, it is also used to capture a subject's face at a 1:1 ratio, undistorted. “This camera is positioned at a precise angle in order to capture a clear and unobstructed image of the user's face, and as it turns out this angle also captures a clear view of the number pad, so the password input process is also inadvertently captured,” said one industry executive. He recommended an easy and effective way to circumvent this — use one hand as a “shield” to cover the other hand while the password is being keyed in. He also indicated that some ATMs, by means of VCA, will issue an alarm when more than one person's face is present.

The second, hidden camera is used to provide wide-angle viewing. “It is preferred to replenish cash during regular business hours, as frequent foot traffic creates natural obstacles for potential perpetrators, thus minimizing threat of the operation,” said Jerry Feng, Head of Security and Investigative Services for Taiwan, Citibank.

Financial institutions are typically passive as opposed to proactive. Many banks tend to wait until they have been attacked with a skimmer before they take any type of action. Losses associated with skimming incidents have risen, and these skimming losses cost US banks about $1 billion annually. This averages to about $50,000 per incident, and this does not include expenses relating to investigation or affected customer notification efforts.

Ironically, many anti-skimming devices used by banks actually look very much like the skimming devices that criminals use. This is particularly worrisome to discerning customers. Newer anti-skimming kits, which consist of a small control panel installed inside the ATM, trigger an alarm that can generate audible and visual warnings on the control unit and screen when a skimming device is detected. In addition, newer kits, which can be integrated with a bank's alarm and video surveillance, also emit a magnetic pulse that prevents the skimming device from reading a cardholder's data and password.

Useful ATM Security Measures:
* Surveillance cams with WDR capability for high-contrast scenes; 600 dpi minimum
* Motion detectors for camera/DVR and light activation
* Vibration and temperature sensors and alarms
* Audio recording during events or when the sound level surpasses the preset threshold
* Two-way, live communication with the central control and/or patrolling guards

Lobby and Counters
Aside from deploying typical surveillance cameras, bulletproof glass and panic buttons, a growing number of banks opting for VCA to monitor both suspicious activities and business operations/VIPs can be witnessed. These days, installations are requiring more cameras than ever before, translating to even more recorded video. As a result, events and activities might be easily missed, and suspicious behavior is not noticed until after a crime has been committed. A quality and properly installed surveillance system with facial recognition capability, among other VCA features, will enable a financial institution to better cope with customers with disgruntled expressions, unexpected long lines, suspicious loitering and so on; such a system can also ensure staff members man their appropriate areas, recognize blacklisted people and maintain access control of restricted areas, said an industry source.

VCA for security and business operations:
- Recognize faces that are of registered VIPs, blacklisted or concealed
- Alert management to long lines or disputes
- Detect and identify suspicious activities:
   * Trajectory tracking, such as straying from the customary path after entering/leaving the bank (for example, not   heading toward the counter upon entering the premises)
   * Loitering or walking back and forth
   * Frequent head turning akin someone who is surveying the environment
   * Idle objects, lack of or even too much movement (for example, someone stands still for an unusual period of time)
   * Not doing what they should be doing (for example, someone is at the ATM, but is not making any transactions)
   * Particular types of body movement or clothing

Watch Your Back
One of the most common security risks in access control is simply user carelessness, such as a misplaced badge or token, or not closing the door right away for tailgating. “Security management for banking is a discipline unlike any other; it is always a good idea to have a ‘twin,' meaning that it requires two bank personnel's physical attendance in order to unlock and access the vaults and cash depositories,” Feng said. Citibank actually had its RFID entry cards custom-made, so it is virtually impossible to duplicate them without proper authorizations.

“A dependable method to counter the false use of access control cards would be the use of dual-factor authentication, for example facial recognition plus access cards,” said Charles Smith, Product Manager at Omniperception.

The greatest risk in any security system is the staff, cautioned Michael Brown, IT and Computers Director for VideoControlRoom. Vulnerabilities include staff opening or closing a branch; early mornings when there are few people around and the alarm is disarmed; the authorities may be slow to respond due to rush-hour traffic. “System designers need to think of security from all risk angles and cover the people aspect just as much as the ‘armed state' intrusion aspect.”

UPS
Security and video surveillance systems for financial institutions are mission-critical, given that they must be available 24/7. For this reason, UPS systems are a must. A well-maintained power protection system will ensure the integrity and availability of power to critical installations, such as intrusion detection sensors, fire sensors and bank vault sensors. “The highest priority is clean power, which means investing more in quality power-filtering UPS systems,” Brown added.

Seismic Sensors
Seismic sensors can detect both heat variations and vibrations resulting from attempts to disturb solid structures such as ATMs, bank vaults and safes — even in noisy environments. In addition, some seismic sensors are even equipped with light-sensing features. An added advantage is that they can be installed in existing legacy security systems to offer a higher level of protection over traditional shock sensors, which often lack the ability to discriminate between ambient vibrations and real attacks (such as heavy strokes from sledgehammers, repeated knocks from hammer and chisel attacks, drilling, mechanical cutting, acetylene torches, diamond drills and hydraulic jacks).

Unlike auxiliary/emergency power systems or standby generators, reliable UPS systems will provide near-instantaneous protection from power interruptions. While the primary role is to provide short-term power when the input power source fails, most UPS systems can, to a certain degree, correct common power problems such as:
- Voltage spike or overvoltage
- Momentary or chronic reduction in input voltage
- Noise, defined as a high-frequency transient or oscillation