Key Generation for a Restricted Keyway
A small business owner wants to upgrade to a restricted keyway system to prevent unauthorized key duplication. They have 10 employees, each needing a key to the main entrance and their individual office. There are 10 offices, a main entrance, and a server room that only the owner and IT manager should access. The owner wants a system where keys cannot be duplicated at a local hardware store. The business is in a leased space and may relocate in 2 years. The owner has a limited budget and wants a system that can be expanded if they hire more employees. You are a locksmith certified in key generation and master keying. You need to recommend a restricted keyway system and design the keying structure, including the number of keys and levels, and explain how to generate the keys securely.
1. Recommend a restricted keyway system that fits the business's needs and explain how you would design the keying structure to meet the access requirements.
Read the worked answer
Recommend a patented restricted keyway system (e.g., Medeco, ASSA, or Schlage Primus) that requires authorized duplication. For a small business with 10 employees, a system with a restricted keyway and a master key hierarchy is appropriate. Design: Level 1: Grand master key (owner) opens all. Level 2: IT manager key opens server room, main entrance, and IT office? Actually, IT manager needs server room and presumably their office and main entrance. So IT manager key should open server room, main entrance, and IT office (and maybe all offices? No, only their own). Level 3: Employee keys open main entrance and their individual office. The server room is a separate access level, only for owner and IT manager. So the server room cylinder is keyed to a sub-master that is only on the owner and IT manager keys. The owner key is the grand master. The IT manager key is a sub-master for the server room and also a change key for their office? Actually, the IT manager key must open their office and the server room and main entrance. That means the IT manager key is a master key for the server room and the main entrance, but a change key for their office? To simplify, create a master key system with three levels: GM (owner), M1 (IT manager) which opens server room, main entrance, and IT office; and change keys for each employee that open main entrance and their office. The server room cylinder is mastered to GM and M1 only. The main entrance is mastered to GM, M1, and all change keys. Each office cylinder is mastered to GM and its change key (and maybe M1 if IT manager needs access to all offices? The problem doesn't state that, so no). Key generation: Use a key generating machine and restricted key blanks; maintain a keying chart with cuts; ensure that the restricted keyway requires authorization for duplication. Generate keys using a code machine or key duplicator with the restricted blank, and record key issuance.
2. How would you securely generate and manage the keys, including future expansion and relocation?
Read the worked answer
Securely generate keys by using a key cutting machine with the restricted key blanks obtained from the manufacturer. Keep the keying chart and master key in a secure location (e.g., safe). Issue keys only to authorized personnel and maintain a log. For future expansion, reserve additional pin positions or use a keying system that allows adding change keys without affecting existing keys. For relocation, since the system is patented and restricted, the locks can be moved to the new location; however, if the new location has different doors, new cylinders may be needed. The restricted keyway can be rekeyed if necessary. Also, consider a system that allows the owner to order additional keys from the manufacturer with proper authorization. Ensure that the key blanks are controlled and not available to unauthorized persons. Document all key cuts and maintain a backup of the keying chart.