4,5 million card swipes every month

Access & Identity Management Handbook 2011 Access Control & Identity Management

BAA adds functionality to British Airport Authority airport systems in response to changing legislation.

BAA is a leading airport company at the heart of the world’s transport network. Each year, the company serves 128 million passengers, and 67% of the UK total, at its seven UK airports: Heathrow, Gatwick, Stansted, Southampton, Glasgow, Edinburgh and Aberdeen. More international travellers use Heathrow than any other airport on the planet, making it the world’s busiest international airport.

BAA has used CEM’s AC2000 AE (Airport Edition) system to control access at its UK airports for over 15 years. Today, the seven airports combined have more than 3500 card readers installed and over 240 000 active cardholders with the systems handling more than 4,5 million card swipes per month.

For over 10 years, the three London airports – Heathrow, Gatwick and Stansted – have been networked, allowing their valid cardholders to go from one airport to another. This equates to a linked system with more than 3000 readers, handling 218 000 active cardholders, making it the largest airport system in the world. This link was successfully extended to include all seven BAA airports.

Simplified access control

From its initial installation, CEM has worked with BAA to develop the system in response to each airport’s needs and to offer more than simply an access control solution. Over the years, functionality has been added to each system in response to changing legislation in the aviation industry and as the airports grow. Today, the system provides an integrated business solution that is continuously designed to help BAA run its airports more efficiently.

From using VIPPS (visual imaging pass production system) to control the issue and invoicing of operational access control cards, to configuring readers to assist in the movement and segregation of passengers, CEM has provided BAA with a dedicated airport security management system.

The CEM readers allow doors to operate in a variety of modes as required in the airport environment. Other than simply providing individual staff access, specified readers are configured at each of the BAA airports to permit passengers to enter a controlled area and to allow airline staff to easily segregate arriving and departing passengers.

At Heathrow, the system sends broadcast data to the readers and monitor units. For instance, if a quiet evacuation of an area is required, the system is programmed to unlock a number of doors. This means in the event of an emergency threat, the area can be evacuated without having to trigger the fire alarm system to open doors.

At Stansted airport, the card system holds details of card usage at every control point. Card transaction data includes the card number, date and time used, directional status (in or out) and the transaction outcome. This transaction data, besides producing tracing information, is also passed on to an external payroll system or used with the CEM Time and Attendance module for calculation of working hours. The system can even trace cardholders as the cards are used. Once a cardholder is added to the trace list, the system displays a window showing the card reader at which the card is being used next.

More than physical access

At Glasgow, CEM S600 card readers are used to enable or disable check-in desks or baggage belts. Before a check-in desk can be used, the operator must swipe a card. If valid, power is provided to the desk and belt. The system opens the flight information system, which displays the active check-in locations for various flights. The data can also be used to invoice airlines for the use of shared check-in desks.

A major application at Gatwick is a loading bridge monitoring system. Sometimes referred to as an air jetty, it is designed to reduce maintenance costs and increase the control of a loading bridge. There had been concern that it was difficult to track the use and status of air bridges. To address this, the AC2000 AE system links a loading bridge to a CEM S600 card reader. Before the bridge can be used, a valid swipe must be made on the reader.

CEM also helps BAA control access of vehicles. The Airside Management System is in use at Heathrow to gather meaningful technical information about vehicles in use at the secure airside area, while Gatwick and Stansted use readers to control and manage access of vehicles and passengers to their carparks.

Additionally, CEM developed the Taxi Management System to ensure the fair allocation of taxis at Edinburgh airport. Authorised drivers swipe at a CEM reader to indicate their arrival, while booking software in the taxi office designates an assignment and sends notification to the driver and passenger via a screen at the taxi rank. This system successfully assists in managing passengers at busy periods.

Card cloning concerns

Card cloning refers to the copying of an access control card or fob in order to compromise electronic door security on an access control system. Sometimes referred to as ‘card spoofing’, a device is introduced to either duplicate a card or impersonate it.

Handheld card cloning machines are now readily available on the market. The card cloning machines can copy most RFID cards in use.

To prevent information from being stolen or compromised CEM recommends the following:

1. Use high-security smartcards with industry approved authentication and encryption, such as DESfire, PicoPass and iClass.

2. Use readers capable of two or three factor authentication.

a. Use card and PIN verification or 2 factor authentication.

b. Use card and biometric verification or 2 factor authentication.

c. Use card, PIN and biometric verification 3 factor authentication.

For more information contact Tyco Security Products, +27 (0)82 566 5274, emallett@tycoint.com, www.tycoacvs.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

What’s in store for PAM and IAM?
Access Control & Identity Management Information Security
Leostream predicts changes in Identity and Access Management (IAM) and Privileged Access Management (PAM) in the coming year, driven by evolving cybersecurity realities, hybridisation, AI, and more.

Read more...
Protecting citizens’ identities: a shared responsibility
Access Control & Identity Management
A blind spot in identity authentication today is still physical identity documents. Identity cards, passports, and driver’s licences, biometric or not, are broken, forged, or misused, fueling global trafficking networks and undermining public trust in institutions.

Read more...
The challenges of cybersecurity in access control
Technews Publishing SMART Security Solutions Access Control & Identity Management Information Security
SMART Security Solutions summarises the key points dealing with modern cyber risks facing access control systems, from Mercury Security’s white paper “Meeting the Challenges of Cybersecurity in Access Control: A Future-Ready Approach.”

Read more...
Access as a Service is inevitable
Technews Publishing SMART Security Solutions ATG Digital Access Control & Identity Management Infrastructure
When it comes to Access Control as a Service (ACaaS), most organisations (roughly 90% internationally) plan to move, or are in the process of moving to the cloud, but the majority of existing infrastructure (about 70%) remains on-premises for now.

Read more...
From surveillance to insight across Africa
neaMetrics TRASSIR - neaMetrics Distribution Access Control & Identity Management Surveillance Products & Solutions
TRASSIR is a global developer of intelligent video management and analytics solutions, delivering AI-driven platforms that enable organisations to monitor, analyse, and respond to events across complex physical environments.

Read more...
Securing your access hardware and software
SMART Security Solutions Technews Publishing RBH Access Technologies Access Control & Identity Management Information Security
Securing access control technology is critical for physical and digital security. Every interaction between readers, controllers, and host systems creates a potential attack point for those with nefarious intent.

Read more...
Access trends for 2026
Technews Publishing SMART Security Solutions RR Electronic Security Solutions Enkulu Technologies IDEMIA neaMetrics Editor's Choice Access Control & Identity Management Infrastructure
The access control and identity management industry has been the cornerstone of organisations of all sizes for decades. SMART Security Solutions asked local integrators and distributors about the primary trends in the access and identity market for 2026.

Read more...
Access data for business efficiency
Continuum Identity Editor's Choice Access Control & Identity Management AI & Data Analytics Facilities & Building Management
In all organisations, access systems are paramount to securing people, data, places, goods, and resources. Today, hybrid systems deliver significant added value to users at a much lower cost.

Read more...
Luxury residential access
Access Control & Identity Management Residential Estate (Industry)
Clifftown Shore is an exclusive collection of 51 luxury 1, 2 and 3-bedroom seafront apartments and penthouses set within a protected conservation park area, served by CAME’s XiP system and door entry system.

Read more...
From identity to insight
neaMetrics Access Control & Identity Management
Identity outlives technology. When it is trusted, it becomes a foundation for insight and scale. When it is not, every system built on it inherits the risk. Identity quality matters, at both human and system levels, and getting it right is what allows security to endure.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.