How Nagpur Metro secured 36 stations with an integrated access control platform
Overview
Nagpur Metro operates a geographically distributed urban transit environment where physical security extends far beyond controlling entry through individual doors. Stations, depots, operational facilities, technical areas, employee zones, and vehicle access points all need to operate within a coordinated security framework.
The Nagpur Metro Rail Project, undertaken by Nagpur Metro Rail Corporation Limited (NMRCL), spans approximately 34 km across the North-South and East-West corridors. Its infrastructure includes 36 stations, two depots, RSS, and Metro Bhavan, supporting an employee population of approximately 4,000–5,000.
IDCUBE implemented Access360 as an integrated access control and time attendance management platform across this distributed infrastructure. The deployment brought employee identities, access permissions, attendance, credential issuance, perimeter protection, monitoring, and integrations with key metro systems into a common environment.
Nagpur Metro deployment at a glance
Integrated access, attendance, identity, and security management across a distributed metro environment.
- 36 metro stations across a 34 km corridor
- Two depots, RSS, and Metro Bhavan
- Approximately 4,000–5,000 employees
- Centralized access control and time attendance
- Primary server at the Operation Control Center (OCC)
- Secondary server at the Backup Operation Control Center (BOCC)
- Real-time replication between primary and backup servers
- Employee and vehicle access management
- Biometric fingerprint enrollment and employee ID issuance
- Depot perimeter intrusion detection
- Integration with Master Clock, Fire Alarm, T-SCADA, AFC, HRMS, and CCTV
These capabilities reflect the scope documented in the Nagpur Metro implementation.
The challenge
Securing a metro network requires a different approach from securing a single building.
Nagpur Metro needed to manage employee identities and access privileges across multiple geographically distributed facilities while ensuring that access decisions reflected each employee’s operational role.
A station control room, technical room, ticket office, depot, parking facility, and administrative building do not carry the same security requirements. Access therefore needed to be controlled according to the individual, location, operational responsibility, and authorized security zone.
The requirement extended to vehicles as well. Employee and vehicle privileges needed to be administered across different facility types without creating fragmented access systems at individual locations.
Metro depots introduced another security consideration. Protected perimeter areas needed intrusion detection capable of identifying unauthorized activity and ensuring that alarms were communicated to the appropriate control centers.
System resilience was equally important. Nagpur Metro required its access and attendance environment to remain available while protecting critical security information against system failure or data loss.
Operational requirements included:
- Managing employee identities across distributed metro facilities
- Applying role- and zone-based access permissions
- Managing employee and vehicle access
- Protecting restricted and critical operational areas
- Monitoring depot perimeter intrusion
- Maintaining access and attendance information during system failure
- Standardizing biometric enrollment and credential issuance
- Centralizing attendance administration
- Connecting access control with existing operational and IT systems
- Supporting future expansion without major architectural changes
Nagpur Metro therefore needed more than independent access control installations. It required a common platform capable of connecting security, workforce identity, attendance, alarm monitoring, and operational systems across the metro environment.
The solution
IDCUBE implemented Access360 as an open-platform access control and time attendance management environment covering Nagpur Metro’s stations, depots, RSS, and Metro Bhavan.
The architecture was designed to provide centralized administration while supporting the different security requirements of individual facilities and operational zones.
Centralized access and attendance management
Access360 created a common management environment for employee identities, attendance, credentials, and access permissions across Nagpur Metro’s distributed facilities.
Administrators could centrally manage employee attendance information and access rights instead of treating every station or operational facility as an independent security environment.
This provided Nagpur Metro with a consistent approach to identity and access administration while retaining the ability to assign permissions according to specific operational requirements.
Role-based and zone-based access control
Access permissions were configured according to authorized roles and areas.
Access360 managed distinct access privileges for employees and vehicles across locations including:
- Station control rooms
- Ticket offices
- Excess fare offices
- Technical rooms
- Wicket gates
- Authorized vehicle parking
- Restricted areas within Metro Bhavan
Within Metro Bhavan, access to individual zones could be controlled according to assigned authorization.
This approach helped ensure that an employee’s credential did not automatically provide unrestricted access throughout the metro infrastructure.
Fault-tolerant OCC and BOCC architecture
For a distributed transit environment, system continuity was an important part of the solution architecture.
The primary Access360 server was deployed at Nagpur Metro’s Operation Control Center (OCC), with a secondary server located at the Backup Operation Control Center (BOCC).
Real-time data replication between the two servers supported system availability and helped protect critical access and attendance information against data loss.
The system architecture shown in the original case study also illustrates the OCC and BOCC servers connecting through the wider metro communication infrastructure to station, Metro Bhavan, and depot systems.
Biometric enrollment and credential issuance
Managing several thousand employees required a standardized identity enrollment process.
The IDCUBE Smart Issuance module supported:
- Biometric fingerprint enrollment
- Employee identity enrollment
- Employee ID card issuance
- Card printing
Bringing these capabilities into the wider Access360 environment helped connect credential issuance with the identity, access control, and attendance lifecycle rather than managing each process independently.
Integrated depot perimeter protection
Security requirements at metro depots extend beyond controlled doors.
Nagpur Metro’s deployment therefore incorporated perimeter intrusion detection for protected depot areas. Infrared beam sensors were used to detect intrusion attempts near protected zones and escalate associated alarms to the relevant control centers.
This extended the security environment from credential-based access control to perimeter-level monitoring.
Integration with metro operational systems
A major part of the deployment was the ability of Access360 to operate alongside systems already used within the Nagpur Metro environment.
The platform integrated with:
Master Clock
The integration synchronized the Access360 server clock with the metro’s Master Clock environment.
Fire Alarm System
During a fire event, the integration enabled configured doors to unlock automatically, connecting access control with emergency response requirements.
T-SCADA
Access control alarms could be monitored through the T-SCADA HMI, giving operators visibility within an existing operational monitoring environment.
Automatic Fare Collection System
Integration with the Automatic Fare Collection System enabled employees to use AFC cards for access to secured facilities.
HRMS
Attendance logs could be provided to HRMS for salary-calculation processes.
CCTV System
Access-related alarms could be monitored by operators through the CCTV HMI.
Together, these integrations allowed physical access control to function as part of Nagpur Metro’s broader operational technology environment rather than as an isolated security application.
Centralized reporting and administration
Access360 also provided configurable access and attendance reporting.
Administrators could generate relevant reports and schedule their delivery through email, supporting centralized monitoring and administration across distributed facilities.
The architecture was also designed to accommodate future expansion without requiring major structural changes.
The impact
The Nagpur Metro implementation created a more connected security and workforce management environment across stations, depots, operational facilities, and administrative infrastructure.
Stronger protection of critical areas
Role-based access helped restrict entry to authorized personnel across station facilities, depots, RSS, Metro Bhavan, and other controlled operational areas.
Instead of treating every credential equally, access privileges could reflect an individual’s authorized role and security zone.
Unified security administration
Nagpur Metro gained a common environment for administering employee identities, attendance, credentials, and access permissions across geographically distributed facilities.
This reduced the need to manage these functions as disconnected processes at individual locations.
Greater operational resilience
The primary and secondary server architecture provided an additional layer of resilience for the access and attendance environment.
Real-time replication between OCC and BOCC helped maintain system availability while protecting critical data against loss.
Coordinated security monitoring
Access control, perimeter intrusion detection, and connected operational systems could work together within the wider metro security environment.
Integrations with T-SCADA and CCTV provided additional visibility into access-related alarms, while fire alarm integration connected door operation with emergency response processes.
Streamlined employee identity management
Biometric enrollment, ID card issuance, attendance management, access permissions, and reporting were incorporated into a more connected workflow.
This provided administrators with a more consistent way to manage workforce identities throughout the employee access lifecycle.
Better interoperability
Integration with Master Clock, Fire Alarm, T-SCADA, Automatic Fare Collection, HRMS, and CCTV enabled Access360 to work within Nagpur Metro’s existing technology environment.
This interoperability was particularly important in a metro operation where physical access decisions can interact with workforce, emergency, monitoring, and operational systems.
A scalable foundation for expansion
The architecture was designed to accommodate additional data and future expansion without requiring major structural changes.
This gave Nagpur Metro a common security foundation that could evolve alongside its infrastructure.
Conclusion
Nagpur Metro demonstrates why access control in a modern transit environment cannot be limited to individual doors or isolated stations.
By connecting 36 stations, two depots, RSS, and Metro Bhavan through a common Access360 environment, IDCUBE brought physical access, employee identities, attendance, biometric enrollment, credential issuance, vehicle access, perimeter protection, reporting, and system integrations into a coordinated architecture.
The deployment also connected physical security with important metro systems including T-SCADA, CCTV, Fire Alarm, Automatic Fare Collection, HRMS, and Master Clock.
The result is an integrated framework that gives Nagpur Metro centralized administration and stronger control over distributed facilities while maintaining the resilience, interoperability, and scalability required by a growing urban transit network.
Frequently asked questions
What access control solution did IDCUBE implement for Nagpur Metro?
IDCUBE implemented Access360 as an integrated access control and time attendance management platform across Nagpur Metro’s stations, depots, RSS, and Metro Bhavan.
How many Nagpur Metro stations are covered by the deployment?
The project covers 36 stations across an approximately 34 km North-South and East-West metro corridor, along with two depots, RSS, and Metro Bhavan.
How does Nagpur Metro manage access across critical areas?
Access privileges can be assigned according to employee authorization and operational zones. The implementation covers areas including station control rooms, ticket offices, excess fare offices, technical rooms, wicket gates, parking areas, and controlled zones within Metro Bhavan.
How is system availability supported?
The solution uses a primary Access360 server at the Operation Control Center and a secondary server at the Backup Operation Control Center. Real-time replication between the servers supports system availability and protects critical data against loss.
Does the Nagpur Metro deployment support biometric enrollment?
Yes. The Smart Issuance module supports biometric fingerprint enrollment, employee ID card issuance, and card printing as part of the employee identity-management process.
Which systems integrate with Access360 at Nagpur Metro?
Access360 integrates with the Master Clock, Fire Alarm System, T-SCADA, Automatic Fare Collection System, HRMS, and CCTV System. These integrations support functions including clock synchronization, emergency door unlocking, alarm monitoring, employee AFC-card access, attendance transfer, and CCTV-based alarm monitoring.
How does the solution support perimeter security?
Protected depot areas use an integrated perimeter intrusion detection system with infrared beam sensors. Detected intrusion events can be escalated to the appropriate control centers.
