Category: Access Control & Identity

For most secured spaces, the security question is simply who should be allowed in. For a narrower category of high-consequence areas — pharmaceutical controlled-substance vaults, cash-handling rooms, weapons storage, sensitive server rooms, certain industrial control rooms — the more important question is whether any single individual should ever be able to gain access alone at all. Two-person integrity (2PI) access control exists to enforce that no single person can act unilaterally in these spaces.

The Core Principle

Two-person integrity requires two separately authorized, distinct individuals to be simultaneously present to gain and maintain access to a controlled area, rather than one person’s credential being sufficient on its own. The underlying goal isn’t distrust of any specific individual; it’s structural risk reduction — removing the possibility that a single compromised credential, a single coerced employee, or a single person acting alone can result in unauthorized access to the most consequence-sensitive spaces in a facility.

How It’s Implemented

The most common implementation requires two independent, valid credential presentations within a defined time window before an access control system will unlock a controlled door, with the system explicitly rejecting a second scan from the same credential to prevent a single person defeating the control by badging twice. More rigorous implementations pair this with biometric verification for each individual, video confirmation that two distinct people are actually present, and logging that records both individuals’ identities against the access event, not just the fact that “two-person” access occurred.

Handling the Exit Side

Two-person integrity is often designed asymmetrically: exit typically doesn’t require the same dual authorization as entry, both because life-safety egress requirements generally take precedence and because the security concern is usually about who can initiate access to the controlled area, not who can leave it. Facilities implementing 2PI need to explicitly define this asymmetry rather than assuming it, since an overly rigid two-person requirement on egress can itself become a life-safety problem during an emergency.

Where It Breaks Down in Practice

The most common practical failure of two-person integrity isn’t a technology gap but a workflow one: when staffing is tight, employees under pressure to get a task done sometimes badge a colleague in and then leave, defeating the “simultaneous presence” requirement the control depends on. Facilities that rely on 2PI for genuinely high-consequence areas need staffing models and monitoring that make the control practically sustainable, not just technically correct on paper.

Conclusion

Two-person integrity is one of the more demanding access control patterns to implement well, because it depends as much on staffing discipline and monitoring as on the underlying credential technology. For the narrow set of areas where the consequence of a single unauthorized entry is severe enough to justify the operational overhead, it remains one of the more effective structural controls available — but only when the workflow around it is designed as carefully as the access control logic itself.

Tailgating, sometimes called piggybacking, happens when an unauthorized person follows an authorized person through a secured door before it closes and locks, quietly defeating an access control system without ever presenting a credential. It remains one of the most common real-world ways access control gets bypassed, largely because it exploits ordinary politeness rather than a technical flaw.

Detection Versus Prevention

Anti-tailgating technology falls into two broad categories: detection systems that sense a violation and alert security staff after the fact, and prevention systems that physically stop the second person from entering at all. Detection approaches include infrared or thermal sensors mounted above a doorway that count how many people pass through per credential swipe, and video analytics that visually track individuals entering a controlled space. These systems are lower cost and easier to retrofit into existing doorways, but they rely on a human response to an alarm rather than stopping the intrusion outright.

How Mantraps Physically Prevent Piggybacking

A mantrap, also called an interlocking vestibule, is a small enclosed space with two doors that are never both unlocked at the same time: a person must pass through the first door, have it lock behind them, and only then can the second door open, typically after a sensor confirms only one person is present in the vestibule. This makes it physically impossible for a second, uncredentialed person to slip through alongside an authorized individual, which is why mantraps are standard in the highest-security environments, including data centers, pharmaceutical facilities, and secure government spaces.

Sensor Technology Inside the Vestibule

Modern mantraps typically use overhead infrared beams, weight-sensing floor plates, or 3D depth sensors to verify occupancy before releasing the second door, since simple beam sensors alone can sometimes be fooled by unusual body positions or objects carried through the space. Some higher-security installations also require a second credential check or biometric verification at the interior door, adding an additional layer beyond simple occupancy counting.

FAQ

What is the difference between a mantrap and an airlock-style vestibule? The terms are often used interchangeably in security contexts; both describe a two-door interlocking space where only one door can be open or unlocked at a time.

Can mantraps handle wheelchairs or large deliveries? Many facilities install a separate, staff-monitored accessible or delivery entrance alongside a mantrap, since the enclosed vestibule space can be too small for wheelchairs, carts or bulky equipment.

Are camera-based tailgating detection systems as effective as mantraps? Detection-based systems are useful for lower-risk areas and can flag violations for review, but they do not physically prevent an intrusion the way a mantrap does, which is why the highest-security spaces typically use mantraps rather than detection alone.

Turnstiles are one of the oldest access control technologies still in widespread use, and for good reason: paired with a card reader or biometric scanner, a turnstile physically enforces that only one person passes per valid credential, something a door alone cannot guarantee. Choosing the right type is a balance between throughput, security level and how a site wants to present itself to visitors.

Waist-Height Turnstiles for High Throughput

Waist-height turnstiles, the tripod or drop-arm style common in stadiums, transit stations and office lobbies, prioritize speed, letting large numbers of people pass quickly while still enforcing single-person entry per credential. Their tradeoff is security level: a determined person can climb or vault over a waist-height barrier, which is why they are typically paired with a security guard or camera coverage rather than deployed as a standalone security measure in high-risk environments.

Full-Height Turnstiles for Higher Security

Full-height turnstiles, which resemble a rotating cage extending from floor to ceiling, physically prevent climbing over or crawling under, making them the standard choice for unstaffed perimeter entrances at data centers, utilities and other facilities where an unauthorized entry cannot rely on a guard noticing in time. The tradeoff is throughput and cost: full-height units process people more slowly and take up significantly more space and budget than waist-height alternatives.

Optical and Sensor-Based Lanes

A newer category, optical turnstiles or speed lanes, uses infrared sensors rather than physical arms to detect unauthorized passage, sounding an alarm or triggering a barrier only when someone attempts to pass without a valid credential or follows too closely behind an authorized person. These systems offer a more open, modern appearance favored in corporate lobbies, but they generally rely on integration with video analytics or a staffed reception desk to respond to detected violations rather than physically stopping them outright.

Matching the Barrier to the Risk

Security consultants typically select turnstile type based on the consequence of an unauthorized entry, the expected volume of legitimate traffic, and whether the location has staff present to respond to an alarm. A single site often uses different turnstile types at different entrances, for example optical lanes at a staffed main lobby and full-height turnstiles at an unstaffed rear or loading-area entrance.

FAQ

Can turnstiles alone stop tailgating? Waist-height and optical turnstiles reduce tailgating but do not fully prevent a determined person from following closely behind an authorized individual; full-height turnstiles and mantrap-style systems provide stronger physical prevention.

Are full-height turnstiles required for data centers? Not universally required by code, but they are a common industry best practice for unstaffed high-security entrances where climbing over a barrier must be physically prevented rather than just detected.

Do optical turnstiles work with mobile credentials? Yes, most modern optical turnstile systems integrate with the same card, mobile or biometric credential readers used elsewhere in a facility’s access control system.

Access control systems were once treated as purely physical hardware: a card reader, a controller board and a locked door. Today most systems run over IP networks, store credential databases, and expose management interfaces, which means they carry the same categories of cybersecurity risk as any other networked infrastructure, alongside the physical risk of an unlocked door.

Controllers Are Endpoints, Not Just Hardware

Access control panels and controllers are, functionally, small networked computers, and vulnerabilities in their firmware or management interfaces can let an attacker unlock doors, disable alarms, or extract stored credential data without ever touching the building. Recently disclosed flaws in access control and device management platforms have shown that missing authentication or hard-coded credentials in these systems can hand an attacker root-level control, underscoring why manufacturers and integrators treat firmware update discipline and network segmentation as security-critical rather than optional maintenance.

Weak Credential Technology Is Still Common

Despite years of known weaknesses, many sites still rely on older low-frequency proximity cards and legacy Wiegand wiring between readers and controllers, both of which can be cloned or intercepted with inexpensive, widely available equipment. Modern smart cards and mobile credentials using encrypted protocols close much of this gap, but only if a site has actually migrated its readers, controllers and credentials together; a modern reader paired with an unencrypted legacy card format, or vice versa, can leave the original vulnerability largely intact.

Network Segmentation and Monitoring

Best practice increasingly places access control controllers on a segmented network separate from general office IT traffic, limiting what an attacker who compromises one system can reach from the other. Pairing that segmentation with logging and monitoring of controller and management-software activity helps detect unusual behavior, such as after-hours credential changes or unexpected firmware update attempts, before it results in an unauthorized physical entry.

FAQ

Can a cyberattack on access control lead to a physical break-in? Yes. If an attacker gains control of an access control system’s management interface, they may be able to unlock doors, add unauthorized credentials, or disable alarms, translating a network compromise directly into physical access.

Are older proximity cards insecure? Many legacy low-frequency proximity card formats can be cloned with low-cost, readily available equipment, which is why organizations are increasingly migrating to encrypted smart card or mobile credential technology.

Should access control systems be on the same network as office computers? Security best practice generally recommends network segmentation, keeping access control controllers and servers on a separate network segment from general office IT traffic to limit the blast radius of a compromise on either side.