Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Analysis: Physical/Logical Security Convergence: Page 3 of 30

» Single-step user/card enrollment (provisioning) and termination (revocation) across all identity and access-control databases

» A central ID-management system instead of multiple disparate user directories/databases

» Unified event monitoring and correlation: Like SIM (Security Information Management), but even more aware of context, these systems may alert that you Bob logged on to the wireless network (an event generated by the logical access-control system), but didn't enter the building (an event sourced from the physical access-control system), meaning someone is likely hijacking Bob's wireless account.

A number of standards initiatives on the horizon will make convergence projects much more accessible--if they're adopted by vendors, of course. These include oBIX (Open Building Information Exchange) and PHYSBITS (Physical Security Bridge to IT Security).

PHYSBITS provides a good data model for access-control information. It describes relationships as well as a working model of the appropriate process to use/update assets, including people, readers, locations, pictures, video, credentials, roles, rights, policies and events. For example, what steps should take place during user enrollment, PIN change, compromised token or user termination? Meanwhile, oBIX specifies a Web services protocol for communication among facilities systems (including security and HVAC) and IT systems. It defines a generic XML definition (and associated Web services) for sensors and actuators, and lets a common communication medium pass data between sensors/actuators and an upstream processing system. It's device-independent, so you can hook up everything from thermostats to door locks to PCs.