Two-Keyed Lock: Difference between revisions

Rescuing 1 sources and tagging 0 as dead.) #IABot (v2.0.8.9
(Rescuing 1 sources and tagging 0 as dead.) #IABot (v2.0.8.6)
(Rescuing 1 sources and tagging 0 as dead.) #IABot (v2.0.8.9)
 
Line 124:
** The logic was that warheads mounted to missiles in either ground-based stations or in ballistic submarines are secure because of the two-man-rule interlocks, and PALs would risk a loss of readiness without significant security benefit. Actual (non-trivially-coded) PALs were (eventually) applied to small warheads - air-dropped bombs and ship/air-launched cruise missiles. Unlike ballistic missiles, these warheads can be stored or transported in a functional or semi-functional state, and thus can be used if lost or stolen. For these weapons, the two-man rule uses the PALs themselves - two officers must concur with the legitimacy of a nuclear launch order and release their portions of the PAL codes, or else the warheads cannot be armed.
* The Soviets had two launch keys and unlock codes held by the higher-ups (i.e. on shore) for their submarines. Now the case for US subs, but not always.
* For safety deposit boxes, one key is the bank's and one is held by the customer. This ensures that the bank cannot open your box without you, and that you (or someone with your key) can't open your box without showing ID to the bank. (Banks are adding increasingly more checks to get in. In the case of [https://wwwweb.webcitationarchive.org/619zhkpkk?url=web/20090620014808/http://www.bankofamerica.com/privacy/sitekey/ one large bank], you must enter a PIN, pass a biometric scan, and use a regular old key as well, constituting three-factor authentication.)
* Some Soviet nuclear missile silos had three blast doors, each needing three keys, and each key given to a different person. So a total of nine people were needed to actually get access to the missiles.
* In a much more mundane context, most of the rides at the local amusement park won't launch without both operators holding the go buttons, and they can still be locked out by ride sensors.