Industry Professional

Metro Proof

Securing the Amsterdam Metro Underground

The Amsterdam Metro is a mixed rapid transit and light rail system in Amsterdam and its surrounding municipalities: Amstelveen, Diemen and Ouder-Amstel in the Netherlands. The network is owned by the city of Amsterdam and operated by the Gemeentelijk Vervoerbedrijf (GVB), the company that also operates trams, ferries and local buses.

Underground Lock System

The lock system of the Amsterdam underground is quite extensive and includes 2,574 cylinders. GVB was able to find and implement a system that solved their key issues as well as environmental issues. We will take a look at the challenge Amsterdam Metro is facing, the CyberLock system, the solution, and finally, how CyberLock’s system benefit Amsterdam Metro. In the Amsterdam underground, a cylinder has a lot to endure.

It must be resistant to burglary attempts, vandalism, manipulation, corrosion and rough handling. Even if it’s strong enough to withstand all of these, the life of a lock can be severely shorted if a vital key gets lost.

“We used to have a mechanical lock system, but we were constantly facing problems with lost keys,” said Frank de Vries, security manager of the Amsterdam underground stations. “Since replacing all cylinders would be a rather costly affair, we only replaced those that the lost key could open. In doing so, we eventually ended up with huge key rings.”

Key-centric Solution

CyberLock is a key-centric access control solution. The power is completely in the key. Each key contains a unique ID that cannot be changed or duplicated. These keys have the ability to store thousands of access events such as lock ID, date and time and event type.

The keys carry access schedules for the specific key holder and retain encrypted access codes that bind the key to a specific system. Each key contains a specific list of authorized locks and a schedule of when they may be accessed. For example, a key can be programmed to allow access to one or several locks from 8 a.m. to 6 p.m. on weekdays and 10 a.m. to 4 p.m. on Saturdays.

If presented outside of this schedule it is denied access. As for key expirations, keys can be assigned a start date and an expiration date which means keys can be issued before they become active, and can be set to expire on a regular basis in the future. Key holders must reauthorize keys before access will be granted again. Setting shortterm expiration dates is an excellent way to minimize risk due to lost or stolen keys.

When a key first makes contact, the key energizes the lock. A split second exchange of information determines if a key is at an approved lock within an authorized time frame. Access is then either granted or denied and that action, along with a date and time stamp, is recorded to the memories of both the key and the lock. These features were crucial in Amsterdam Metro’s need to get rid of the huge key rings the employees were carrying around and with the programmability and expiration date of the keys, re-keying will never be in the Amsterdam Metro vocabulary.

Hardware Interface

Because diversity of communication was necessary for Amsterdam Metro, the devices they selected served as an interface between the hardware and software. Key holders were given access privileges as needed. An audit trail also could be downloaded from the key while simultaneously uploading new schedules, permissions and system information. The system is able to keep track of keep track of remote and on ground employees.

The GVB decided to look for another way to protect its station entrances and restrict access to equipment rooms. Under consideration were various alternatives, including electronic access systems and remote card readers; however, these solutions were not resistant to water, frost or vandalism. GVB felt the diversity of electronic cylinder locks made it easy for GVB to convert all locks by retrofitting all their existing hardware on site. Access privileges are distributed to key holders via communicators. These devices are linked to the software over a local area network or securely over the Internet.

Met with some skepticism from some managers, GVB officials held firm to their decision.

“Initially, this system was received with some skepticism; there were a few complaints from managers who were no longer able to open certain doors—doors they should not have been able to open to begin with,” de Vries said. “Within a month, all cylinders had been replaced, including those in doors with very uncommon profiles. We have not had to adjust a single lock, and the installation of the cylinders was easily done by our own locksmith.”

Since re-keying was a costly option, and CyberLock’s electronic cylinders were installed without wiring, Amsterdam Metro was able to stay in budget, as the price for a lock is one-tenth the cost for a hardwired system. Since the implementation of CyberLock at the GVB, de Vries has received visits from colleagues of nearly all Dutch transport companies wanting to learn more about the system that has been such a huge success for Amsterdam Metro.

This article originally appeared in the August 2017 issue of Security Today.

Featured

  • It's Show Time

    I am one of those people that likes to see things get bigger and better. As advertised, ISC West is going to be bigger (more exhibitors) and better (more attendees). It’s show time in Las Vegas. Read Now

    • Industry Events
    • ISC West
  • SIA Releases New Report on Operational Security Technology

    The Security Industry Association (SIA) has released an impactful new resource – Operational Security Technology: Principles, Challenges and Achieving Mission-Critical Outcomes Leveraging OST. Read Now

  • Cyber Overconfidence Is Leaving Your Organization Vulnerable

    The increased sophistication of cyber threats pumped by the relentless use of AI and machine learning brings forth record-breaking statistics. Cyberattacks grew 44% YoY in 2024, with a weekly average of 1,673 cyberattacks per organization. While organizations up their security game to help thwart these attacks, a critical question remains: Can employees identify a threat when they come across one? A Confidence Gap survey reveals that 86% of employees feel confident in their ability to identify phishing attempts. But things are not as rosy as they appear; the more significant part of the report finds this confidence misplaced. Read Now

  • Mission 500 Debuts Refreshed Identity Ahead of Security 5K/2K at ISC West

    Mission 500, the security industry’s nonprofit charity dedicated to supporting children in need across the US, Canada, and Puerto Rico, has unveiled a refreshed brand identity ahead of ISC West. The charity’s new look includes a modernized logo with refined messaging to reinforce Mission 500’s nearly decade-long commitment to serving the needs of children and families in crisis. Read Now

    • Industry Events

New Products

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.