The reliability of mobile credentials

Access & Identity Management Handbook 2017 Access Control & Identity Management, Products

The use of a PIN or personal access code (PAC) to provide visitors with access to residential estates and business complexes has increased in the past few years. A number of reasons can be cited for this growth in popularity including the elimination of the infamous and highly unreliable visitor logbook, the accurate capturing of a visitor’s details, and on some premises, the assurance that only pre-authorised visitors are on the estate.

John Powell, managing director of Powell Tronics, says that the primary challenges encountered in providing a user-friendly PAC-driven access control system in a modern world using mobile technology are ensuring that the system is both secure and resilient to external unauthorised infiltration and that it is adaptable to meeting the varying needs of individual estates or business parks. The crux here is to select a service provider with a documented and reliable track record. Experience is the keyword and estate and property managers are advised to visit similar installations deployed by the supplier to verify the veracity of their claims.

Powell points to the company’s own PT-GUEST visitor management software, originally developed to enhance the Impro access control solution IXP 400i and the recently implemented Access Portal integration – PT-GUEST Portal. PT-GUEST has evolved into a substantial system that hands over management of access control to property and estate managers, as well as homeowners and tenants.

Adoption of cloud-based solutions for hosting databases can be slow due to security and connectivity concerns voiced by various faculties investigating visitor management solutions. Powell explains that the company took cognisance of this and the PT-GUEST solution and locally hosted database is managed via a secure web portal rather than residing in the cloud. However, this will be reviewed once improved cloud access is available within South Africa.

Secured access at all times

According to Powell, with the eminent introduction of the PoPI Act, secure access to the system and the data which it encompasses is PT-GUEST’s strongest attribute. The software, database and relevant processes are password protected and site administrators are carefully selected by management to ensure that their site’s information is kept secure in-house.

During the registration process onsite, certain authenticated personal information is assigned to the homeowner or tenant, which acts as the verification criteria when a PAC is requested for a visitor. Once it is verified that the request has been issued by a registered tagholder of that particular site, the PAC and expiry information is expedited via either the registered person’s cellphone number or e-mail address through a secure online service.

A necessary tool for pre-authorisation of visitors, using a cellular messaging service incurs continuous costs – monthly subscriptions to the WASP short code system provider, cost of SMS text messages sent to and from the short code system to the requesting resident/tenant/employee, as well as notifications of the visitor’s arrival and departure.

Mobile access app

In an attempt to assist clients to alleviate these expenditures, Powell Tronics will soon be releasing its Android app for PT-GUEST IXP on the Google Playstore as an alternative for requesting PT-GUEST pre-authorised PACs for visitors and notifications. While this mobile app uses the cheaper alternative of data rather than airtime, it also alleviates issues with cellular numbers being blocked on the WASP provider’s cellular marketing systems, something that has been on the rise with the increased amount of unsolicited marketing SMSs received daily from banks, retailers and insurance providers, amongst others.

In order to ensure that the new PT-GUEST mobile Android app delivers the same high-level security currently enjoyed by estates and businesses, mandatory site information and authenticated personal information will form part of the app registration process and mobile device information will be added to the access control system for future verification. Once enabled, the app allows the homeowner or employee to enter their visitor’s information and request a PAC which they can share with their visitor using the standard Android messaging options. All data sent to and from the mobile app is encrypted and password protected to ensure that it is not easily infiltrated through the already secure web portal used on site.

Increased security

Estates quite often require more of the visitor’s details than what is captured in the pre-authorisation process and enforce that all pre-authorised visitors and their vehicle details be scanned when arriving at the estate’s entrance. While the pre-authorised visitor’s destination is predefined by the system, based on who their host is, guards at the entrances using portable devices scan and decrypt the visitor’s driver’s licence or ID and vehicle’s registration disc and on completion update the access control system’s database with all the accurately captured information.

An audit trail is available which allows estate management to view who requested a PAC, which method was used to obtain the PAC, when it was requested and if and when it was successfully created. This also provides for data mining to establish trends, especially where estates have a number of venues or host various events, such as wine tasting, conferences and golf tournaments as well as for levy applications.

The four- or five-digit PAC is randomly generated by the PT-GUEST system and allows for a single entry and exit through the perimeter entrances. PACs are valid for a customisable period but expire 24 hours from first use at the entry point and visitors exceeding this time allocation will have to visit the administration office to request a manual exit. PT-GUEST does however also cater for long-term visitors that can be pre-authorised and have multiple accesses to the estate or business park over an extended period of time.

Powell says that in instances where sites have perimeter and internal access points, the PAC will be allocated to allow single entry and exit access to the main gate but multiple access to the access control points en route to the destination. It will deny access into any other area within the estate not allocated to the visitor. This prevents visitors from driving haphazardly around estates, thereby adding a further security element to the access control process.

Collaboration leads to success

PT-GUEST, IXP and Portal, have grown to accommodate combinations of over 50 configurable settings which cover a large variety of site preferences and security requirements. This includes the use of in-lane biometric enrolment or proximity cards, Bluetooth printing for PAC information slips with disclaimers, on-scanner acceptance of terms and conditions and so forth. With each new implementation, new requirements are discussed and inevitably added to the feature list of the next bi-monthly release.

The success of any PAC-driven pre-authorisation access visitor management system is dependent on a collaborative relationship between the system supplier, the contractor, consulting engineer and the estate manager/homeowners association. The system should furthermore do what it claims to do and should both have verifiable reference sites and be fully supported by the supply chain.

For more information contact Powell Tronics, +27 (0)861 787 2537,,

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Improved security health check tool
Gallagher Access Control & Identity Management Products
Gallagher Security has streamlined its free Security Health Check tool, making it easier than ever to protect against potential system risks and improve business efficiencies.

Maximum fire protection for the most dangerous places
Securiton Fire & Safety Mining (Industry) Products
Africa’s heavy mining and resource processing industries are some of the continent’s leading economic lights. They also present some of its toughest fire safety challenges on the planet.

RDC expands its production capabilities
Radio Data Communications Perimeter Security, Alarms & Intruder Detection Products
Local electronics manufacturer, RDC, recently acquired a new SMT (surface mount technology) machine to boost its manufacturing output and meet the needs of its global customer base.

Suprema showcases integrated security solutions
Suprema Access Control & Identity Management Products
Apart from being an access terminal that supports multiple credentials such as facial recognition, RFID, mobile and QR codes, the BioStation 3 also supports VoIP Intercom and real-time video monitoring features to make it a truly multi-functional reader.

Unlock seamless security with integrated products
Secutel Technologies Integrated Solutions Products
By combining SecuVue and Secutraq, Secutel has created a system that enables users to configure analytics, facial recognition, pose detection, and XFS among other security triggers modern service providers require.

Local electronic locks
Access Control & Identity Management
YeboTech is an electronics manufacturing company, founded in 2005, which designs, markets and sells an electronic key and locking systems, aimed at replacing all conventional mechanical locks.

Selecting the correct access control system
Enkulu Technologies Access Control & Identity Management
Frazer Matchett, Managing Director of Enkulu Technologies, suggests the right questions to ask when selecting an access control solution; not just the access system, but the integrated solution that fits your requirements.

Integrated guarding services
XtraVision Integrated Solutions Access Control & Identity Management Industrial (Industry)
XtraVision offers a few tips on how to go about planning and setting up an integrated approach to sustainable and successful security services, from the initial risk assessment to the technology and people required.

Paxton secures multi-tenant office in Cape Town
Paxton Integrated Solutions Access Control & Identity Management Products
Cecilia Square in Paarl, Cape Town is an office building from where several businesses operate. The multi-tenant site has recently undergone a full refurbishment, including a complete upgrade of its security system for access control.

AI face recognition OEM module
Suprema News Access Control & Identity Management Products
Suprema AI, a company specialized in artificial intelligence–based integrated security solutions, recently launched its high-performance face recognition OEM module called ‘Q-Face Pro’ in response to the growing need for contactless security solutions.