RFID-Based Security Systems for Access Control

1.1 Introduction

Radio Frequency Identification (RFID) is a technology that uses radio waves to automatically identify and track objects or individuals through electronic tags and readers. An RFID system normally consists of an RFID tag, a reader, an antenna, and a computer or control system that processes the information obtained from the tag (Finkenzeller, 2010). RFID-based access control systems combine RFID identification with electronic security mechanisms to determine whether a person should be granted or denied entry. When an individual presents an authorized RFID card or tag to a reader, the system reads the identification information and compares it with registered records. If the information is valid, access is granted; otherwise, entry is denied. The system can also record access activities, making it easier for security personnel to monitor movement and investigate unusual activities.

In Nigerian airports and corporate buildings, where controlled movement is important, an RFID-based security system provides an opportunity to strengthen existing access control practices. Such a system is particularly useful for restricting unauthorized persons from sensitive areas while allowing authorized personnel to move efficiently. As a prelude to other parts of this study, this chapter will discuss the background upon which this study was initiated, the statement of problems that led to this study, the aim and objectives of the study. Others are significance of the study, scope of work, limitation of the study and definition of technical terms.

1.2 Background of Study

Historically, Radio Frequency Identification (RFID) can be traced to the development of radio-based identification and detection technologies during the Second World War. Early applications were mainly associated with radar systems used to identify aircraft. RFID according to Ahsan, Shah, and Kingston (2010) has been applied in areas such as security, personal and vehicle access control, asset tracking, transportation, healthcare, and airline operations. The technology generally consists of an RFID tag, reader, antenna, processing unit, and database through which information is captured and processed. Unlike conventional identification methods that depend on physical keys or manual checking, RFID enables information to be exchanged electronically without requiring direct physical contact between the card and reader.

Jung and Lee (2015) reported that RFID applications have expanded considerably and include electronic identification and contactless smart-card applications. The need for effective access control is particularly important in airports because airport facilities contain different categories of users and several restricted areas. Passengers, employees, airline personnel, security officers, maintenance workers, contractors, and visitors may require access to different parts of an airport. According to Ahsan et al. (2010), RFID has already been used in airline-related applications, including baggage management and access control.

Corporate buildings also require reliable access control because they contain offices, information systems, financial records, equipment, and other organizational resources. Traditional systems based on mechanical keys, manual registers, and visual identification may create difficulties when the number of employees and visitors increases. Want (2006) articulated that RFID provides automatic identification capabilities that are useful for applications requiring convenient and rapid identification. Likewise, a properly configured RFID access control system allows employees to use authorized RFID cards or tags while preventing unauthorized users from entering restricted areas.

The basic operation of an RFID access control system involves communication between an RFID tag and a reader. When an authorized user presents a tag near the reader, the reader captures the tag's identification information and sends it to a control system for verification. If the information corresponds with an authorized record, the system activates an electronic locking mechanism and permits entry. If the information is not recognized, access is denied. Chen, Tsai, and Jan (2011) stated that RFID access control systems require both authentication and authorization mechanisms to determine whether a user should be granted access. Moreover, RFID systems provide opportunities for organizations to maintain electronic access records. Every successful or unsuccessful access attempt may be recorded with relevant information such as user identification and time of entry.

Kassim, Idriss, and Ahmed (2023) affirmed that, an RFID-based access control system can provide records of check-in and check-out activities while restricting access to authorized individuals. Such records can support security monitoring and subsequent investigation when unusual access activities occur. In corporate buildings, this feature is useful for monitoring employee movement within restricted departments, while in airports it may assist in controlling access to operational and security-sensitive areas. The development of RFID technology has also improved its usefulness in different sectors. Jung and Lee (2015) stated that RFID has developed beyond simple identification and is now associated with various applications involving digital identification, tracking, business operations, and service management. Similarly, Munoz-Ausecha, Ruiz-Rosero, and Ramirez-Gonzalez (2021) reported that RFID is widely used in different fields and that access control is one of its important applications. The technology is therefore relevant to security systems because it provides a means of connecting physical access with electronic identification and information management. However, the use of RFID does not automatically guarantee complete security. RFID systems themselves may face security and privacy challenges if they are poorly designed or inadequately protected.

This study is set against the backdrop of the growing need for reliable, automated, and properly monitored access control systems in Nigerian airports and corporate buildings, where effective identification and restriction of unauthorized entry are essential for protecting people, facilities, information, and other valuable resources.

1.3 Statement of Problem

Based on the investigation conducted, the implemented system encounters a number of challenges, with some of the most significant issues outlined below:

1. The existing system depends mainly on manual security checks, physical keys, identity cards, and registers, which makes the process of checking people slower.
2. The system does not always keep proper electronic records showing who entered a restricted area, the time of entry, and the access point used.
3. Lost, stolen, or shared keys and identity cards create security risks because unauthorized persons may use them to gain access.
4. The system depends heavily on security personnel to check identities and record information, which may result in human errors.
5. Utilizing the present system is difficult to quickly detect and stop unauthorized persons who attempt to enter restricted areas.
6. When access information is recorded manually, finding previous records during a security investigation may be difficult and time-consuming.
7. The existing system does not adequately connect user identification, access authorization, electronic door locking, and security monitoring into one system.

1.4 Aim and Objectives of the Study

The aim of this study is to develop an RFID-based security system for effective access control in Nigerian airports and corporate buildings.

The specific objectives of this study are to:

1. Create an RFID-based security system for identifying authorized personnel in restricted areas.
2. Develop a system for verifying RFID tags before granting access to authorized users.
3. Design an electronic access control system that records entry and exit activities.
4. Implement the RFID-based security system for controlling access to selected restricted areas.
5. Evaluate the effectiveness of the developed system in reducing unauthorized access and improving access monitoring.

1.5 Significance of Study

The deployment of the proposed system will hold significant relevance in the following ways:

1. The proposed system will provide airport management with an electronic method of controlling access to selected restricted areas and monitoring authorized personnel.
2. It will assist corporate organizations in controlling employee access to offices, departments, and other areas that require authorization.
3. The new system will help security officers verify authorized users and review electronic access records during routine security monitoring.
4. The system will provide authorized personnel with a convenient way of accessing areas for which they have permission without depending entirely on physical keys.
5. Lastly, the project will serve as a useful reference for students and researchers working on RFID, electronic security, automation, and access control systems.

1.6 Scope of Study

The study focuses on the design and implementation of an RFID-based security system for access control, using Federal Airports Authority of Nigeria (FAAN) facilities in Rivers State and selected corporate buildings in Port Harcourt as the study context.

The system covers RFID card or tag registration, user identification, access verification, electronic door control, and access-record management. The study is limited to controlling access to selected restricted areas and does not cover complete airport security operations, baggage screening, passenger screening, surveillance cameras, or national security systems.

1.7 Limitations of the Study

During the course of this study, many things militated against its completion, some of which are:

1. Financial Constraints: Limited funds affected the purchase of some RFID components, electronic locks, power backup devices, and other materials required for system development.
2. Time Constraints: The period available for the study was limited, which restricted the extent of field investigation, system testing, and data collection.

1.8 Definition of Terms

Radio Frequency Identification (RFID):

RFID is a technology that uses radio waves to identify objects or individuals through electronic tags and readers.

RFID Tag:

An RFID tag is a small electronic device that contains identification information and communicates with an RFID reader.

RFID Reader:

An RFID reader is an electronic device that communicates with an RFID tag and obtains the identification information stored on it.

Access Control:

Access control is the process of determining who is permitted to enter a particular facility or restricted area.

Authentication:

Authentication is the process of confirming the identity of a user before access is granted.

Authorization:

Authorization refers to determining what an authenticated user is permitted to access.

Electronic Lock:

An electronic lock is a locking device operated through an electrical or electronic control signal rather than only through a conventional physical key. In this study, the electronic lock receives a signal from the control system to permit or deny entry after RFID verification.

Access Control System:

An access control system is a combination of hardware and software used to identify users and regulate entry into protected areas.

Authorized User:

An authorized user is a person whose identification has been registered in the access control system and who has permission to enter a specified restricted area. In this study, authorized users are personnel whose RFID tags are recognized by the system.

Unauthorized Access:

Unauthorized access occurs when a person attempts to enter an area without the required permission. In this project, an RFID tag that is not registered or does not have permission for a particular area is treated as unauthorized.

Access Record:

An access record is electronic information showing an access activity, such as the identity of a user and the time of entry. RFID systems are capable of supporting automatic identification and data collection, making such records useful for monitoring access activities (Ahsan et al., 2010).