Walk In, You've Been Recognized: The Evolution of Identification Technologies in Modern Access Control Systems
PERCo has released a new line of readers supporting Bluetooth Low Energy (BLE), accompanying mobile applications, and a joint facial identification solution developed with the CRТ group. These additions to the PERCo-Web access control platform offer a timely occasion to review how identification technologies in physical access control systems (СКУД) have evolved over recent years.
Access control systems have always followed the same core principle: a person possesses an identifier, presents it, and the system decides whether to grant entry. Earlier, this identifier was a paper pass checked by a guard who could also perform verification by comparing the visitor’s face with a photograph. Modern systems distribute this work across readers, controllers, and actuators while preserving the same logical sequence.
Proximity and MIFARE Cards as the Enduring Foundation
The first truly mass-market contactless cards operated at 125 kHz (proximity cards). Their simplicity and low cost turned access control from a specialized solution into a mainstream product used in offices, business centers, and educational institutions. The next generation, MIFARE smart cards, introduced protected memory and cryptographic authentication mechanisms originally developed for public transport. Today, cards are divided into two classes: those carrying only a factory identifier and those with cryptographically protected memory. Multi-format readers allow organizations to migrate gradually from legacy cards to protected ones without replacing the entire infrastructure at once.
QR Codes: Convenience for Temporary Access
QR codes gained popularity with the spread of smartphones because the phone’s camera and screen can serve as both reader and transmitter. They excel at issuing temporary passes for visitors, contractors, or parking lots without requiring physical cards or installed applications. Their main limitation is easy duplication, making them unsuitable for scenarios demanding strict identification.
NFC and BLE: Expanding Contactless Capabilities
NFC works well with existing MIFARE infrastructure, allowing NFC-enabled phones and bank cards to function as identifiers. However, platform restrictions on iOS and uneven NFC hardware support on low-cost Android devices have limited its universal adoption. BLE overcomes many of these constraints. It operates over several meters, supports “hands-free” passage, and lets installers adjust detection range via signal threshold settings. BLE also enables wireless configuration, firmware updates, and diagnostics of readers without physical connections.
Biometrics and Regulatory Transformation
Biometric methods—fingerprints, palm vein patterns, and face—offer the advantage that credentials cannot be transferred. Facial recognition, however, now operates under strict Russian regulation. Federal Law 572-FZ requires that facial biometric processing use either the state Unified Biometric System (EBS) or accredited commercial biometric systems (KBS). These platforms perform liveness detection and authentication before returning a standard digital identifier to the access controller. As a result, facial biometrics has shifted from a convenience feature to a regulated “technology of trust” primarily justified by compliance needs, such as construction site access in Moscow or critical infrastructure protection. Alternative identification methods must remain available for individuals who have not consented to biometric processing.
The overarching conclusion is that the oldest and simplest technology—identification by access card—continues to serve as the reliable foundation of most systems, while newer methods occupy specialized roles shaped by security, usability, and regulatory demands.
Related articles
Russia Ready to Disclose Source Code of Social Networks, Messengers and AI Models, Minister Shadaev Says
Russian Minister of Digital Development Maksut Shadaev announced that Russia is prepared to open the source code of its domestic social networks, messengers and video services to foreign partners. The offer includes showing the internal structure of the platforms and jointly modifying their algorithms. Shadaev compared reliance on Western IT products to digital colonialism, citing years of disagreements over compliance with Russian legislation. A similar proposal was made for Russian AI foundation models, which could be adapted to meet other countries' laws, cultural requirements and security standards. The statement was delivered at the Platform of Sovereign Development exhibition, yet no specific products, repositories, timelines or licensing terms were provided.
Russia Mulls Mandatory Two-Week IMEI Registration for Foreign Smartphones via Gosuslugi
Russian authorities are discussing a new rule requiring owners of smartphones imported without customs clearance or purchased abroad to register the devices through the Gosuslugi portal within two weeks. Failure to register would result in the device being blocked from Russian mobile networks. The Ministry of Digital Development is preparing the requirements, which remain under discussion with possible changes to timelines and details. Devices already operating in Russia before April 2027 would be exempt and continue working without restrictions. Officially imported equipment would be added to the registry automatically. The measure is expected to significantly impact gray-market sellers, potentially forcing up to 70 percent of them out of the market and driving price increases of up to 40 percent for some models.
Google Opens Registration for Registered App Stores Program to Simplify Third-Party App Installs on Android
Google has opened registration for its new Registered App Stores program, enabling approved third-party app stores to install applications with a single tap and perform background updates on Android devices. The program introduces stricter compliance requirements, including an annual $10,000 registration fee paid before review, mandatory submission of all APK files and updates for malware scanning, and organizational verification. These features will become available starting December 1, 2026, on devices running Android 17 QPR2 and newer versions, with Russia listed among supported countries. Stores that remain outside the program can continue using the existing multi-step installation process. Google will impose additional fees if more than 1% of installation attempts or 2% of catalog applications are flagged as potentially malicious within any 30-day period. The initiative aims to balance user convenience with enhanced security controls while remaining entirely voluntary for alternative app distributors.
Mobile Internet Slowdowns Reported in Central Moscow as Content Filtering Systems Activate for Summits
Residents in central Moscow reported noticeable degradation in mobile internet performance starting October 27, coinciding with the first day of possible restrictions announced by the Ministry of Digital Development. The measures involve content filtering systems deployed to comply with Russian legislation and ensure security during the Gas Exporting Countries Forum and Russia-Africa summits. Two Speedtest measurements shared via the Ostorožno, Moskva channel showed speeds dropping from 225.47 Mbit/s to 12.13 Mbit/s, though exact locations, operators, and test conditions remain unspecified. The ministry indicated that restrictions inside the Third Transport Ring could occur daily from 11:30 Moscow time on October 27-28 and from 9:30 on October 29. Access to resources in the approved whitelist is expected to remain available, while voice calls, fixed broadband, and Wi-Fi should continue without interruption. The practical recommendation for visitors is to download necessary maps, tickets, and documents in advance before traveling to the affected area.