# Testing of Permeability of RFID Access Control System for the Needs of Security Management
## 1 Introduction
* Door lock controllers--Electric devices for mechanical locking/unlocking of doors. * Mechanical barriers--Different types of doors, turnstiles, ramps, and their components. Access readers are devices that can read data presented by the user, process it, and transfer it to the controller. The process of data submission and processing can be called user identification. The subscription process can take several forms and depends on the identification element; the most common ones are [18] as follows:
* Codes (PINs and passwords);
* Access cards (RFID, NFC);
* Biometrics. Considering the methods of user identification and the types of identification elements, several types of access readers are generally produced, which differ from each other in the method of obtaining data from the user. They most commonly take the form of keypads, card readers, and biometric readers [22; 23; 24]. Access card readers can be contact or contactless. Contactless access card readers, which are equipped with RFID technology, are currently the most widely used. They consist of an RFID transmitter and receiver and can thus receive data presented by a contactless card or tag, mobile device, etc. RFID and NFC technology is at a very high level of security. The disadvantage of this technology is that the user must have a contactless card or tag, which can be lost or copied. Description of system function--individual components are connected to a controller that decides whether to allow access based on authentication of a person's identity. A person proves his identity at the access reader through knowledge, something he owns, or a property. If the system verifies the person's identity, it releases the electric lock on the door and allows the person to enter the secured area. The controller is connected via TCP/IP to a computer that has the necessary software installed. Through this interface, it is possible to manage the database of authorized persons in the controller or on the server. The database contains a wealth of information, ranging from authorized users, device configuration records, access control plans, etc. Access control records (requests, identifications, access denials) and alarm events are also stored in the database [25; 26; 27]. Based on the claims made or the user's identity data, the identity verification process can be carried out in two ways, namely, identification or verification. User identification is the process of matching the data obtained from the user by the access reader against all the data in the access control system database (1:N matching). User verification is the process of comparing data obtained from a user by an access reader against only a specific entry in the access control system database (1:1 comparison), whereby the user must enter an additional piece of information that indicates his identity (e.g., PIN) to be verified [28; 29]. Authorization is the process that takes place after identification or verification. It is a sequence of decisions and events executed by the controller to allow the user to pass through the access point [30; 31; 32]. The need to know the reliability of the input control system is essential from several points of view. One point of view is the fact that the access control system is part of the overall object protection system, and without this information, it would be quite difficult to talk about overall comprehensive object protection. The second point of view is the fact that access control systems form a kind of imaginary border or obstacle allowing entry or exit from the protected object; therefore, it is necessary to be as effective as possible. This is also the case since in recent years, object security has undergone a major change, namely, automation consisting of the replacement of the classic form of guarding by guards for technical protection through alarm systems and video surveillance systems controlled by former guards. Thanks to this fact, it is necessary that all alarm systems work as well as possible.