Keys and Credentials

School district blends security system to protect students and staff

With many school buildings that are veterans of the suburban expansion of the 1950s and 1960s, Boulder Valley School District (BVSD) needed to consolidate its access control solutions to improve security. Today, electronic locks control access through exterior doors while restricted patented keyways improve key control and prevent unauthorized key duplication on interior door locks.

BVSD, located in the foothills of the Rocky Mountains, stretches from the Continental Divide to the suburbs of Denver. It operates 55 schools serving approximately 28,500 students in the 500-square-mile area it encompasses, with more than 4,000 employees.

When most of the district’s schools were built, schools were viewed as public places, similar to libraries, and security was not a major concern. Emerging issues, such as custodial parent disputes and the potential for violence, especially in the wake of the Columbine incident, caused the district to focus more strongly on steps it could take to minimize or prevent such problems. As with most districts, BVSD originally used a mechanical key system.

“With good key control, it is possible to maintain a certain degree of security, but there are always risks of lost keys,” said Steve Hoban, the district’s director of security. “If someone loses a master key, it could require re-keying an entire school or even multiple schools, which can be very expensive.”

These concerns led to a pilot program that marked the beginning of the move to electronically locking perimeter doors. Locksmith Paul Poglajen notes that the first such installation incorporated Schlage standalone computer-managed locks, in which access control data is downloaded to each lock individually using a PDA. Audit trails and other information also can be uploaded to the PDA and a computer. The database itself is managed on the computer, which provides quick response to staff changes, lost credentials and changing access requirements.

The self-contained locks also are easy to install because they do not require separate wiring.

Once the district was satisfied that electronic access control would meet its needs, it moved a step further with online readers that are hardwired into its network. This approach provides the added benefit of making instant changes available at every lock.

“Beyond that, there are levels of control, so I can feel comfortable giving a key credential to a teacher, a para-professional or any employee, because I know I can control their access to a school and the times they need it,” Hoban said. “Before, we either had to check a brass key in and out each day or give the access 24/7.”

Hoban added that the ability to issue, change or replace electronic credentials quickly also is a major advantage that saves time and reduces cost.

“On the buildings where we have implemented full electronic access control, we’ve been able to limit hard keys to administration and custodial people,” he said.

Electronic access also benefits employees who work at multiple schools; nurses, food service workers and physical education teachers, for example, formerly needed multiple keys, but with electronic locks their credential can be programmed to allow access at all the sites they serve and tailored to include the specific hours they should be allowed access.

To manage the access control system, BVSD uses the Schlage security management system, which manages both online and standalone locks from a single database. In addition, the system retains audit trail information that can be helpful if it becomes necessary to investigate vandalism, theft, employee attendance claims or other incidents.

One circumstance that helped facilitate the move to electronic access control, Hoban points out, was that the district’s IT department wanted to secure its equipment closets at the schools with a system that would provide information on who was going in and out of them.

Using funds from a bond issue, the IT department installed panels at each school that also formed the base for controlling the exterior doors.

The district uses proximity credentials, both key fobs and badges, although Hoban prefers the fobs because they cannot be identified with a specific school if they are lost. Because people sometimes delay reporting a lost credential in the hope they will find it, he said he believes a lost badge could compromise security more easily than a fob.

For exterior doors that are controlled by the credential, the district prefers to use Von Duprin EL electric latch exit devices.

Hoban says electric strikes can also be used on interior doors that are controlled or in locations where getting power to the door for the EL device would be difficult.

Because funding dictates priorities, the district’s primary focus for electronic security has been on perimeter doors.

“Convenience is the enemy of security, so we try to make it convenient for people to get in using electronic access by installing it on doors that are closer to parking lots, as well as playground doors,” Hoban said. “A typical elementary school will have up to six controlled doors, including the main entrance.”

The district is working toward integrating its ADA-accessible doors into the system, said Vince Grishman, an electrical repair technician, so the LCN auto operator on a door will be activated for a student or employee who needs it during specific times.

Visitor Verification
For greater security, most main entrances have been renovated to incorporate a vestibule adjacent to the school’s office, which functions as an access control point. When visitors enter, they encounter a locked door leading into the school but an open one leading to the office, where they must stop and register.

The door to the school will open when authorized credential-holders present the credential. At schools where the vestibule has not yet been renovated, a visitor calls the office from a telephone intercom in the vestibule, and the office staff verifies his or her identity using a video surveillance system before remotely unlocking the door. In both cases, the doors are locked automatically once school is in session.

One added benefit is the ability to control doors remotely.

“If an authorized person calls in and needs access, we can remotely unlock the door,” Hoban said. “Also, if there is a problem outside the school that creates a lockout situation, the school can get the students inside and lock all the doors remotely.”

Conversely, if an intruder is inside the school, the policy now is to get the students, teachers and staff behind locked classroom doors but unlock the exterior doors so police aren’t delayed in getting inside. This can also be done remotely.

While unlocking the doors may seem counterintuitive at first, Hoban points out that the exit devices would allow anyone inside to get out but a locked door would only slow down the first responders.

To make it easier to lock down the classrooms, the district is now specifying classroom security locks on new construction projects. These allow a teacher to lock the door safely from the inside, rather than going into the hallway.

Keys Still Play a Role
Mechanical keys still have a place in the district’s system, both for backup in case of power failure and for interior doors. Where doors require higher security, Schlage Everest patent-protected restricted keyways are used to prevent unauthorized duplication.

“Before we used patented keys, we had a security breach at one school when people were duplicating keys,” Hoban said. “Now we have an exclusive side cut for our zip code.”

He notes that the restricted keyways are being used on new construction projects, which are funded by a bond issue, while the district’s capital reserve is used to upgrade locks at existing buildings on an ongoing basis.

According to Poglajen, the district originally had a single master key, but consolidation brought in several other incompatible key systems.

“We’re re-keying the buildings that had individual key systems and slowly whittling it down to what eventually will be three viable masters,” he said.

This article originally appeared in the May 2011 issue of Security Today.

Featured

  • Maximizing Your Security Budget This Year

    Perimeter Security Standards for Multi-Site Businesses

    When you run or own a business that has multiple locations, it is important to set clear perimeter security standards. By doing this, it allows you to assess and mitigate any potential threats or risks at each site or location efficiently and effectively. Read Now

  • New Research Shows a Continuing Increase in Ransomware Victims

    GuidePoint Security recently announced the release of GuidePoint Research and Intelligence Team’s (GRIT) Q1 2024 Ransomware Report. In addition to revealing a nearly 20% year-over-year increase in the number of ransomware victims, the GRIT Q1 2024 Ransomware Report observes major shifts in the behavioral patterns of ransomware groups following law enforcement activity – including the continued targeting of previously “off-limits” organizations and industries, such as emergency hospitals. Read Now

  • OpenAI's GPT-4 Is Capable of Autonomously Exploiting Zero-Day Vulnerabilities

    According to a new study from four computer scientists at the University of Illinois Urbana-Champaign, OpenAI’s paid chatbot, GPT-4, is capable of autonomously exploiting zero-day vulnerabilities without any human assistance. Read Now

  • Getting in Someone’s Face

    There was a time, not so long ago, when the tradeshow industry must have thought COVID-19 might wipe out face-to-face meetings. It sure seemed that way about three years ago. Read Now

    • Industry Events
    • ISC West

Featured Cybersecurity

Webinars

New Products

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis. 3

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure. 3

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.” 3