Using Bio-metrics in BNL’s
Particle Accelerator Personnel
Safety Systems (PSS).

C-A COMPLEXPHOBOS
BRAHMSPHENIXSTAR
LINAC

2003/3/28

BOOSTERAGS Experiments

CAD Access Controls Group

2

RHIC

2003/3/28

CAD Access Controls Group3

COLLIDER- ACCELERATOR
Personnel Safety System (PSS)n Personnel Safety System at RHIC andrelated experiments uses PLC based controllogic .
n The Linac, Booster, Tandem and AGS uses
relay based control logic.
n The NASA Space Radiation Laboratory
uses PLCs.

2003/3/28

CAD Access Controls Group

4

DIVISION A PEERS

2003/3/28

CAD Access Controls Group5RHIC PASS System Block Diagram

MCR Panels –Control /OperatorInterface

A DIVISIONDH485

B DIVISIONFirewall
PLC

MasterSLC
A-div

Field SLC
P5Gates

Crash

Field SLCP7DH+Master
PLC
B-Div

Field SLC
P9Field SLC
P19

Sweep

FIGURE 1

2003/3/28

CAD Access Controls Group6NASA Space Radiation
Laboratory (NSRL)(NSRLACCESS CONTROL SYSTEM

NASA Space Radiation
Laboratory(NSRL)n PLC based Access Control System.
n Iris Identification in conjunction with Trapped

Key Technology controlled who could enter
primary gate.
n Hands free automatic door opening system inexperimental area.
n Infrared and microwave sensors keeps the door
open during access (OSHA Req.)

2003/3/28

CAD Access Controls Group

8

NSRL
n Simultaneous release & video ensured MCR

still had entry control.
n No beam delivered by MCR until all keys
returned and trapped.

2003/3/28

CAD Access Controls Group

9

NSRL
Scanner Processor
Gate Box Hardware
Iris Camera

Microwave Sensors
Token Key Tree

2003/3/28

CAD Access Controls Group10NSRL
Why use Iris Identification?
n NASA experimenters required a method ofidentification that would require minimal use ofhands since they are carrying specimens.
n Iris identification did not require the use of PIN

numbers. Stand at the CCD camera & berecognized by unique characteristics of your iris.

2003/3/28

CAD Access Controls Group

11

NSRL
Infrared Sensors

Magnet locks

Microwave Sensors
2003/3/28

CAD Access Controls Group

12

NSRL

Microwave Sensors

2003/3/28

CAD Access Controls Group

13

NSRL

2003/3/28

CAD Access Controls Group

14

NSRL

2003/3/28

CAD Access Controls Group15

Iris Access System(Bio-metrics)
n RHIC and NSRL uses Iris Scanner to verify user

training for remote access in the experimental
areas.
n PTR experiment uses Hand Recognition fortraining verification.
n Finger print verification is use to allow authorize
personnel into ACS enclosures.

2003/3/28

CAD Access Controls Group16

Iris Accessn Enrollment is performed in the MCR after

valid user access training is verified.
n Once scanned your iris code is downloaded
via Ethernet (TCP/IP) to processor at
primary gate.

2003/3/28

CAD Access Controls Group17

Enrollment Process

2003/3/28

CAD Access Controls Group18

MCR ACS STATION

NASA & PTR STATION IN MCR
2003/3/28

CAD Access Controls Group

19

Iris Access

IRIS ENROLLMENT STATION IN THE MCR
2003/3/28

CAD Access Controls Group20

Iris Accesslocal CCD Camera
located at experiment.
6.5 X 10.5 X 5 (W X H X D)
3” – 9” OPER. RANGEUSERHEIGHT 4’9” – 6” 5”
2003/3/28

CAD Access Controls Group21

Iris Access Entry Logger

2003/3/28

CAD Access Controls Group22

Accuracy and User Acceptabilityn Exceptionally high levels of accuracy .
n Claimed to have a false acceptance rate of 1 in1078 .
n Broaden its applicability to high-risk, highsecurity installations.
n User acceptance of iris scanner is very favorable
in comparison to other biometric technologies.

2003/3/28

CAD Access Controls Group23

Accuracy (cont.)

2003/3/28

CAD Access Controls Group24

Accuracy(cont.)

2003/3/28

CAD Access Controls Group25

Typical Iris Access Network

2003/3/28

CAD Access Controls Group26

Cyber-Security Process■ Access Controls Safety network uses Cisco Pix

firewall, network switch (ACL) and PC Server.
■ The Network uses Access Control List (ACL onthe Server) to determine access to the safetynetwork.
■ All network hardware is isolated dedicated roomwith finger print identification entry system.

2003/3/28

CAD Access Controls Group27

Cyber-Security Process
n The SAFETY NETWORK is a 100% stand-alone

infrastructure as requested.
n No fiber pairs or network equipment are sharedoutside the SAFETY NETWORK.
n There are no connections to the Internet ormachines at BNL.

2003/3/28

CAD Access Controls Group28

Cyber-Security Process
Internet

2003/3/28

CAD Access Controls Group29

Advantages of the Iris Accessn Reduction of the turn around time for user accessinto the experimental areas.
n Highest user acceptance of all the biometrictechnologies.
n Automatic logging of personnel during access.
n Verification that a user’s access training is valid
prior to releasing a token.

2003/3/28

CAD Access Controls Group30

Advantages (cont.)n Minimal training to configure the IrisAccesssoftware since it is Windows based.
n Totally hands free. No contamination.
n Tremendously accurate.
n Not affected by eyeglasses or contacts.
n No known health effects.
n Identification happens in 2 seconds.
n CCD Camera is auto focus.
n No password or PIN to remember.
2003/3/28

CAD Access Controls Group31

Disadvantages of Iris Accessn Require significant administration to create andmaintain the iris access database.
n The initial cost to implement the iris access system
at BNL is high (~$60K on hardware andinstallation)n Many political hurdles.

2003/3/28

CAD Access Controls Group32

Disadvantages (Continued)
Political Hurdles
n Of ~ 1000 Rhic users, 25% refused to enroll in theIris Access system.
n We had to provides legal assurance BNL would
not release iris records to external authorities(Home land security, etc.)
n Provide documentation to ensure the irisrecognition system would not cause health effects.
n http://www.cl.cam.ac.uk/~jgd1000/
2003/3/28

CAD Access Controls Group33

IrisCode

2003/3/28

CAD Access Controls Group34