METHOD OF ACCESS CONTROL IMPLEMENTED IN AN ETHERNET SWITCH

• US 20090328152A1
• Filed: 05/01/2008
• Published: 12/31/2009
• Est. Priority Date: 05/01/2008
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Thomas, Beth A.B., Whitsitt, Steven L.
• Granted Patent: US 8,341,695 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

An access control system, having at least one access control unit for securing a physical area and controlling entry into and egress out of the physical area, and an Ethernet routing device, is disclosed. The Ethernet routing device includes an access controller for determining access privileges to the physical area; an Ethernet switching unit for directing network communications between multiple network devices; at least one Ethernet connector for connecting the at least one access control unit to the Ethernet routing device; and an access control message interpreter for reading messages received, by way of the Ethernet connector, from the at least one access control unit and providing access control information contained in the messages to the access controller for access privilege determination.

Claims

1. A device for use in an access control system, said device comprising:

an access controller for determining access privileges to a physical area;

an Ethernet switching unit for directing network communications between multiple network devices;

at least one Ethernet connector for connecting at least one access control unit to said device; and

an access control message interpreter for reading messages received by way of said Ethernet connector from said at least one access control unit and providing access control information contained in said messages to said access controller for access privilege determination.

2. The device as in claim 1, wherein said at least one access control unit is selected from the group consisting of:

ID card reader, RF-ID reader and biometric scanner.

3. The device as in claim 1, wherein said access controller implements at least one access control scheme selected from the group consisting of:

anti-passback, 2-man rule and n-man rule.

4. The device as in claim 1, further comprising an access rules storage unit for storing information regarding authorized personnel used for determining identity and access privileges of said authorized personnel.

5. The device as in claim 1, wherein said access controller, upon receiving said access control information, determines identity and access privileges, and based on said determination transmits a message to said access control unit originating said message granting or denying access.

6. An access control system, comprising:

at least one access control unit for securing a physical area and controlling entry into and egress out of said physical area; and

an Ethernet routing device having;

an access controller for determining access privileges to said physical area;

an Ethernet switching unit for directing network communications between multiple network devices;

at least one Ethernet connector for connecting said at least one access control unit to said Ethernet routing device; and

an access control message interpreter for reading messages received by way of said Ethernet connector from said at least one access control unit and providing access control information contained in said messages to said access controller for access privilege determination.

7. The access control system as in claim 6, wherein said at least one access control unit is selected from the group consisting of:

ID card reader, RF-ID reader and biometric scanner.

8. The access control system as in claim 6, wherein said access controller implements at least one access control scheme selected from the group consisting of:

anti-passback, 2-man rule and n-man rule.

9. The access control system as in claim 6, further comprising an access rules storage unit for storing information regarding authorized personnel used for determining identity and access privileges of said authorized personnel.