Access Control

From ATXHackerspace

Jump to: navigation, search
Prototyped Cerberus-Prox Board, sans ICs

Physical access at the space is managed by a single-point authentication server running a customized implementation of Cerberus-Prox. Currently, only the front door is controlled in this way; However, over time, all doors (excluding the Business Service Center), machinery requiring training, and even personal lockers will be access-controlled by this system.

The system was built, tested, and implemented by the Access Control Deployment Committee. The group also manages and maintains the system.

Physical Access Control Implementation

Server Information

  • Doorsystem server is named ChiefWiggum.
  • SSH and MySQL is only accessible via a direct connection between servers.
    • SSH utilizes public key authentication.
  • Public services run on a designated, separate, server.
  • Web Interface manipulates Doorsystem database over network.
  • Web Interface is only accessible from ATXHS Internal network.

Cerberus-Prox

  • System communicates with doors via 2-wire serial.
  • Readers are HID 6008BGB00 type.
  • Redundant 12 VDC powers the card readers / doorstrikes.
  • Doorstrikes are designed to withstand 3000 lbs.
  • System may announce events via IRC/PA system later.
Cerberus-Prox Management Web Interface

Web Interface

  • Webserver utilizes LAMP and Ruby.
  • Interface offers users the ability to locally unlock the door.
  • Users can opt-in/out of Doorsystem announce events.
  • Keeps an log of all actions taken for auditing.
  • Provides access to card-swipe logs.
  • Simple user management / Control Panel.
  • User notifications (multiple failed login attempts, etc).

Code Merge

First Control / Reader Interface board

Several modifications have been made to the original Cerberus-Prox code in an effort to make it more effective. These modifications, including several bugfixes, were submitted to Hacklab Toronto (the original authors). The changes were later merged into the official codebase, and Egesté was named as a contributor.