1. NSRL MCR-Free Access for NSRL A.Rusek P.Ingrassia J.Reich

2. NSRL MCR-Free Access  Trimmed Down System (compared to 1 st presentation)  System Description  Intellivision Samples  Failure Rates  Proposed Commissioning Scheme

3. System Description  Three systems: Iris Scanner, Token System (proximity card), Video Turnstile.  Require iris scan for both release and recapture of the token. This ties the token to the eyeball at both ends of the process.  Use proximity card technology to enforce the carrying of token during access.  Use the video technology to monitor and count people walking through the gate. Key Tree Iris Scanner Card Reader PLC Server Gate

4. Intellivision Samples  Multiple people tracking  Two people in close proximity  People counting.

5. PLC Server Card Reader Key Tree Iris Scanner Gate To estimate the failure rate for the integrated system, we will look at two parts separately: 1) The first is the camera(s) outside the gate with the iris scanner/token dispenser system. 2) The second is the camera(s) inside the gate, along with the two card readers.

6. Key Tree Iris Scanner PLC Server User walks into coverage area of the camera, and is assigned a “yellow” status, that is, user is recognized as human, but not cleared to enter the gate. Upon iris-scanning and receiving a token, the user’s status changes to “green”, that is, both human and clear for entry through the gate. First Stage, Outside the Gate Gate

7. Key Tree Iris Scanner PLC Server Second user walks into coverage area of the camera, and is assigned a “yellow” status, that is, user is recognized as human, but not cleared to enter the gate. If the user attempts to enter the open gate, the server will assign a “red” designation to the user and alert the PLC which will respond with a sweep drop. Failure at this stage would be somehow changing the status of the user to “green” without issuing a token. Either the user just walks into the coverage area and is assigned “green” status, or actually attempts to get a token, fails, yet the server still assigns a “green” status. This failure is estimated to occur once in 10,000 entrances (0.0001) First Stage, Outside the Gate Gate

8. Card Reader PLC Server User walks into coverage area of the camera, and is assigned a “yellow” status, that is, user is recognized as human, but not cleared to enter the gate. Upon one proximity-card detection the user’s status changes to “green”, that is, both human and clear for entery through the gate. Failure at this stage would be somehow changing the status of the user to “green” without detecting a token. This failure is estimated to occur once in 1,000 entrances (0.001) Second Stage, Inside the Gate Gate

9. Key Tree Iris Scanner Card Reader User walks into coverage area of the camera, and is assigned a “yellow” status, that is, user is recognized as human, but not cleared to enter the gate. Upon iris-scanning and receiving a token, the user’s status changes to “green”, that is, both human and clear for entry through the gate. User then walks into overlap area of the cameras, and his “green” status is handed over to the second area camera. One proximity-card detection will preserve the user’s “green” status and clear the user to walk through the gate. Failure here would be somehow changing the status of the user to “green” without issuing a token AND allowing the user to enter without detection of a token. The failure rate here is (0.0001)*(0.001) = 0.000001, that is one in 10M. UNLESS…………………. Unless the failure is due to the inability of the camera to resolve an individual. In that case, the failure may be shared, to some extent, by other cameras, and straight multiplication of the individual failure rates is not legitimate. PLC Server Combined Stages Solutions: More cameras, at different angles. IR cameras. Gate

10. Key Tree Iris Scanner Card Reader User walks into coverage area of the camera, and is assigned a “green” status (user is already in). The inside proximity card reader is used to arm the door and to enforce the requirement that the token be carried by the user during the access. The user then walks through the door and returns the token. The token will not capture if the iris scan does not match the one which was used to release it. Upon recapture of the token, the server returns the User to “yellow” status and the PLC closes the loop. Failure here would require that the cameras over-count the exiting people, that the card reader agree with this count (one user carrying two tokens), and all tokens capture successfully in the token tree. The failure rate here is estimated to be (0.001)*(0.0001)*(0.0001) = 0.00000000001 that is, one in 10 11 PLC Server Card Reader Combined Stages Gate

11. The “Nightmare” Scenario  User and tailgater enter the coverage area together and are counted by all cameras as one person.  They pause at the token dispensing station together and the user gets one token.  They stay together as they walk through the gate and are counted as one person by all cameras involved.  Only the user leaves the target room, returns the token and the target room is cleared for beam with the tailgater inside. Not realistic. Constitutes a malicious act. We can take credit for training.

12. A More Realistic Scenario  User and enters the coverage area alone and takes one token  User then goes to the edge of the coverage area and picks up one end of a small, heavy item requiring two people to carry. The other end is manned by a person who has no token.  They walk through the gate and are counted as one person by all cameras involved.  Only the user leaves the target room, returns the token and the target room is cleared for beam with the token-less user inside. We think the cameras can pick this up(?) We can take credit for training.

13. Proposed Commissioning Scheme  Have the new key tree and proximity card readers installed and tested, during operations if possible.  Install video system and study its performance while using existing system. Try to challenge the system and find its limits and weaknesses.  If there are problems, fix them.  Use the new system, monitored by a designated person at NSRL. This person will report findings to the committee and at that time a decision will be made to accept the system as is, or assign action items to be met before full endorsement.