Industry Professional

Metro Proof

Securing the Amsterdam Metro Underground

The Amsterdam Metro is a mixed rapid transit and light rail system in Amsterdam and its surrounding municipalities: Amstelveen, Diemen and Ouder-Amstel in the Netherlands. The network is owned by the city of Amsterdam and operated by the Gemeentelijk Vervoerbedrijf (GVB), the company that also operates trams, ferries and local buses.

Underground Lock System

The lock system of the Amsterdam underground is quite extensive and includes 2,574 cylinders. GVB was able to find and implement a system that solved their key issues as well as environmental issues. We will take a look at the challenge Amsterdam Metro is facing, the CyberLock system, the solution, and finally, how CyberLock’s system benefit Amsterdam Metro. In the Amsterdam underground, a cylinder has a lot to endure.

It must be resistant to burglary attempts, vandalism, manipulation, corrosion and rough handling. Even if it’s strong enough to withstand all of these, the life of a lock can be severely shorted if a vital key gets lost.

“We used to have a mechanical lock system, but we were constantly facing problems with lost keys,” said Frank de Vries, security manager of the Amsterdam underground stations. “Since replacing all cylinders would be a rather costly affair, we only replaced those that the lost key could open. In doing so, we eventually ended up with huge key rings.”

Key-centric Solution

CyberLock is a key-centric access control solution. The power is completely in the key. Each key contains a unique ID that cannot be changed or duplicated. These keys have the ability to store thousands of access events such as lock ID, date and time and event type.

The keys carry access schedules for the specific key holder and retain encrypted access codes that bind the key to a specific system. Each key contains a specific list of authorized locks and a schedule of when they may be accessed. For example, a key can be programmed to allow access to one or several locks from 8 a.m. to 6 p.m. on weekdays and 10 a.m. to 4 p.m. on Saturdays.

If presented outside of this schedule it is denied access. As for key expirations, keys can be assigned a start date and an expiration date which means keys can be issued before they become active, and can be set to expire on a regular basis in the future. Key holders must reauthorize keys before access will be granted again. Setting shortterm expiration dates is an excellent way to minimize risk due to lost or stolen keys.

When a key first makes contact, the key energizes the lock. A split second exchange of information determines if a key is at an approved lock within an authorized time frame. Access is then either granted or denied and that action, along with a date and time stamp, is recorded to the memories of both the key and the lock. These features were crucial in Amsterdam Metro’s need to get rid of the huge key rings the employees were carrying around and with the programmability and expiration date of the keys, re-keying will never be in the Amsterdam Metro vocabulary.

Hardware Interface

Because diversity of communication was necessary for Amsterdam Metro, the devices they selected served as an interface between the hardware and software. Key holders were given access privileges as needed. An audit trail also could be downloaded from the key while simultaneously uploading new schedules, permissions and system information. The system is able to keep track of keep track of remote and on ground employees.

The GVB decided to look for another way to protect its station entrances and restrict access to equipment rooms. Under consideration were various alternatives, including electronic access systems and remote card readers; however, these solutions were not resistant to water, frost or vandalism. GVB felt the diversity of electronic cylinder locks made it easy for GVB to convert all locks by retrofitting all their existing hardware on site. Access privileges are distributed to key holders via communicators. These devices are linked to the software over a local area network or securely over the Internet.

Met with some skepticism from some managers, GVB officials held firm to their decision.

“Initially, this system was received with some skepticism; there were a few complaints from managers who were no longer able to open certain doors—doors they should not have been able to open to begin with,” de Vries said. “Within a month, all cylinders had been replaced, including those in doors with very uncommon profiles. We have not had to adjust a single lock, and the installation of the cylinders was easily done by our own locksmith.”

Since re-keying was a costly option, and CyberLock’s electronic cylinders were installed without wiring, Amsterdam Metro was able to stay in budget, as the price for a lock is one-tenth the cost for a hardwired system. Since the implementation of CyberLock at the GVB, de Vries has received visits from colleagues of nearly all Dutch transport companies wanting to learn more about the system that has been such a huge success for Amsterdam Metro.

This article originally appeared in the August 2017 issue of Security Today.


  • Cloud Adoption Gives Way to Hybrid Deployments

    Cloud adoption is growing at an astonishing rate, with Gartner forecasting that worldwide public cloud end-user spending will approach $600 billion by the end of this year—an increase of more than 21% over 2022. McKinsey believes that number could eclipse $1 trillion by the end of the decade, further underscoring the industry’s exponential growth. Read Now

  • AI on the Edge

    Discussions about the merits (or misgivings) around AI (artificial intelligence) are everywhere. In fact, you’d be hard-pressed to find an article or product literature without mention of it in our industry. If you’re not using AI by now in some capacity, congratulations may be in order since most people are using it in some form daily even without realizing it. Read Now

  • Securing the Future

    In an increasingly turbulent world, chief security officers (CSOs) are facing a multitude of challenges that threaten the stability of businesses worldwide. Read Now

    • Guard Services
  • Security Entrances Move to Center Stage

    Most organizations want to show a friendly face to the public. In today’s world, however, the need to keep people safe and secure has become a prime directive when designing and building facilities of all kinds. Fortunately, there is no need to construct a fortress-like entry that provides that high level of security. Today’s secured entry solutions make it possible to create a welcoming, attractive look and feel at the entry without compromising security. It is for this reason that security entrances have moved to the mainstream. Read Now

Featured Cybersecurity

New Products

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure. 3

  • ResponderLink


    Shooter Detection Systems (SDS), an company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols. 3