This sounds like a lazy (likely contracted) security "officer". Call the company he works for and relay this story. There simply cannot be a policy that does no

This sounds like a lazy (likely contracted) security "officer". Call the company he works for and relay this story. There simply cannot be a policy that does not account for people sharing the same name. If so, then THAT'S the story here...