A Review of Access Control Technologies in Data Privacy and security

2.1 Physical Access Control Technologies

Physical Access control technologies include physical barriers such as burglar proof casings, fences, walls, and gates that control access to a property. Physical access controls are the oldest and most basic approach to access control. Physical access technology is often combined with other controls such as mechanical controls to provide multiple levels of protection [4].

According to Masoumzadeh, van der Laan and Dercksen [4], Physical access control technologies can be broadly categorized into two types: static and dynamic; where static physical access control technologies is defined as fixed and permanent, such as burglar proof casings, walls, doors, and windows and dynamic physical access control technologies as movable and temporary, such as gates, turnstiles, and barriers. Static physical access control technology provides consistent control, while dynamic physical access control technology provides variable control with respect to user permissions.

Furthermore, Masoumzadeh, van der Laan and Dercksen [4] elaborate that physical access can be evaluated using metrics such as coverage, connectivity, cost, and complexity. Physical access technology can be used for a variety of purposes, including perimeter security, intrusion detection, crowd control, and emergency management.

Physical access control technologies have several strengths, such as simplicity, durability, and visibility. They are easy to understand and operate, as they do not require sophisticated software; are resistant to environmental factors, such as weather, temperature, and humidity and they are also visible and preventive, as they can alert and discourage potential intruders.

Despite the above-mentioned strengths of the physical access control, they also have several weaknesses including inflexibility, inefficiency, and vulnerability. Physical access control technologies are difficult to modify and update, as they require physical changes and maintenance; are inefficient and inconvenient, as they can cause delays and queues for legitimate users and are also vulnerable to physical attacks, such as cutting, breaking, or bypassing.

It is worthy to note that physical access control technologies have been evolving and improving over time, incorporating new materials, designs, and features. Such as fences that can detect and respond to intrusions with electric shocks, alarms, or notifications. With increased adaptions and improvements, physical access control technologies are expected to continue to play an important role in access control as the first line of defence against physical threats.

2.2 Mechanical Access Control Technologies.

Mohamed, Auer, Hofer and Küng [2] define mechanical access control technologies as an access control model that involves mechanical locks and manual controls that require human intervention to operate. Just like Physical access controls, they are not standalone hence used in conjunction with physical and/or digital access control technologies to provide solid security. They are based on the state - transition methodology, where states represent the locking and unlocking status of the lock and transitions represent the actions.

Mechanical access controls have several strengths which include affordability, availability, and compatibility. Mechanical access control technologies are relatively cheap and easy to install; are widely available and accessible, as they can be found and used in most places and situations; and are also compatible and interoperable, with the other models.

However, as explored by Parkinson and Khan [1], mechanical access control technologies also have limitations of vulnerability, inefficiency, and inconvenience. They are prone to physical attacks; can cause delays and hassles for legitimate users, for example when keys are lost, stolen, or forgotten.

The innovation and technology progress have not left this technology the same too, there has been evolution and changes of incorporating new designs and features. Some of the innovations in mechanical access control include smart locks and biometric locks. Smart locks are locks that can be controlled and monitored remotely via mobile applications or a web interface. Biometric locks are locks that can authenticate users based on their biometric features, such as fingerprints. This integration of the digital access controls plus it's simple and effective way of securing physical access will continue to provide a more holistic access control solution.

2.3 Digital Access Control Technologies

Gardner and Tanenbaum [3] explains digital access control technologies as the use of computer-based systems and devices that use electronic credentials, such as passwords, smart cards, biometrics, and mobile devices, to authenticate and authorize users to access resources. Digital access control technologies are considered the newest most advanced form of access control. They are mostly used to add a layer of control to the physical and mechanical access control technologies.

Digital access control technologies can be broadly categorized into the types of mobile access control, cloud-based access control, multi-factor authentication, biometric access control, and blockchain-based access control [5, 6]. Where mobile access control leverages mobile devices, such as smartphones, tablets, or wearables, as access credentials; Cloud-based access control is grounded on the use of cloud computing, which enables users to access resources from anywhere and anytime over the internet; Multi-factor authentication technologies is the use of multiple factors, such as knowledge, possession, and inherence, to verify the identity [1]; Biometric access technologies use of biometric features, such as fingerprints, face to authenticate the user [5] and the most latest; Blockchain-based access control technologies that are based on the use of blockchain, which is a distributed ledger that records and verifies transactions in a secure and decentralized way [6].

Unlike the physical and mechanical, digital access control technologies offer more flexibility and convenience, as they allow remote access control; they provide higher security and lower risk of credential duplication, as they use passwords, biometric scans, or other forms of authentication that are harder to breach and bypass; they also enable modern features and benefits, such as integrations and access analytics [1, 2, 7].

Despite the merits, digital access control has obstacles too; they are complex and expensive to install and maintain, as they require complex software and hardware components; they can be hacked and compromised by malicious actors; are more prone to malfunction and damage; they pose more ethical and social challenges, such as privacy, security, trust, and accountability issues [1, 2, 5, 7].

However, With the increasing technology innovations such as artificial intelligence, block chain, cloud computing and the increase in demand for convenience, remote access and efficiency in security, digital access control technologies are expected to grow more rapidly providing access control for the future.

2.4 Mixed Model of Access control

From all the above exploration of access model of physical, mechanical, and digital, it is evident that none of these modes work as standalone control system but rather a careful fusion to provide more solid access control. By combining elements from each mode, a more resilient and adaptive access control infrastructure emerges. This integration capitalizes on the theory that the strength of one mode compensates the weakness of the other.

This establishes multiple layers of security, leveraging physical barriers, mechanical locks, and sophisticated digital authentication methods. However, it should be noted that this amalgamation isn't devoid of challenges but is undeniably more robust.