SELF-DIRECTED ACCESS CARD ISSUANCE SYSTEM

• US 20190318558A1
• Filed: 04/11/2019
• Published: 10/17/2019
• Est. Priority Date: 04/11/2018
• Status: Active Grant

• Current Assignee: Entrust Datacard Corporation (Entrust Corp.)
• Original Assignee: Entrust Datacard Corporation (Entrust Corp.)
• Inventors: BIEHLMANN, CHRISTOPHE
• Granted Patent: US 11,004,286 B2
• Time in Patent Office: Days
• CPC Class Codes: B42D 25/485 by electronic processing means
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G07C 2209/02 Access control comprising means for the enrolment of users
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07C 9/27 with central registration

Abstract

An access card issuance system comprising an access card issuance device located at a facility of an organization and a web server is disclosed. The access card issuance system provides a web interface in response to a request from a mobile device, and receives user information identifying a user of the mobile device. The system is also configured to validate the identity of an authorized individual associated with the facility identified by a user of the mobile device, and issue an access card to the user of the mobile device. The access card has indicia printed thereon identifying at least a portion of the user information, and programmable information encoded onto the access card providing access rights to the facility. The system further transmits, to the authorized individual, a message associated with issuance of the access card.

Claims

1. An access card printer comprising:

a card printing subsystem;

a processing unit;

a memory communicatively connected to the processing unit, the memory storing instructions executable by the processing unit including a card printing application wherein the instructions, when executed, cause the access card printer to perform, in response to a request from a mobile device;

provide a web interface to the mobile device;

receive, via the web interface, user information identifying a user of the mobile device and an identity of an authorized individual associated with a facility;

issue an access card to the user of the mobile device, the access card having indicia printed thereon by the card printing subsystem identifying the user; and

transmit, to the authorized individual, a message associated with issuance of the access card.

2. The access card printer of claim 1, wherein the access card includes information encoded thereon providing access rights to the facility.

3. The access card printer of claim 1, wherein the indicia printed on the access card includes at least one of a user name, a picture, a signature, a duration of validity of the badge;

or an access level associated with the badge.

4. The access card printer of claim 1, wherein the instructions further cause the access card printer to validate the identity of the authorized individual associated with the facility.

5. The access card printer of claim 1, wherein the memory stores instructions including a web server application configured to provide the web interface to the mobile device.

6. The access card printer of claim 1, wherein the memory further stores at least one access card template, the access card template defining a layout of the indicia printed on the access card.

7. The access card printer of claim 1, wherein the web interface comprises a plurality of user entry screens, the plurality of user entry screens including a signature screen, an image capture screen, and a host identification screen.

8. The access card printer of claim 1, wherein the memory further stores a visitor log including user information for a plurality of visitors, and wherein the access card issuance device is further programmed to, based on issuance of the access card to the user, store the user information associated with the user in the visitor log.

9. The access card printer of claim 1, wherein the access card issuance device is configured to provide the web interface to the mobile device in response to the mobile device registering on a wireless network at the facility.

10. The access card printer of claim 1, wherein the access card issuance device is configured to provide the web interface to the mobile device in response to a request from the mobile device received at the access card issuance device.

11. The access card printer of claim 1, wherein the user is a visitor of the authorized individual, and the message to the authorized individual notifies the authorized individual of the presence of the user at the facility.

12. The access card printer of claim 1, wherein the access card printer is located at the facility, the facility being managed by an organization of the authorized individual.

13. The access card printer of claim 1, wherein the user information includes at least one of a signature of the user or an image of the user.

14. A method of issuing an access card at a facility, comprising:

providing a web interface to a mobile device;

receiving, via the web interface, user information identifying a user of the mobile device and including an identity of an authorized individual associated with the facility;

issuing, at an access card issuance device, an access card to the user of the mobile device, including printing indicia on the access card including at least a portion of the user information; and

transmitting, from the access card issuance device to the authorized individual, a message associated with issuance of the access card.

15. The method of claim 14, wherein the user comprises one of the authorized individual associated with the facility or a visitor associated with the authorized individual associated with the facility.

16. The method of claim 14, wherein the user comprises the authorized individual and wherein the message comprises a validation code transmitted prior to issuing the access card, and wherein issuing the access card occurs in response to receipt, at the access card issuance device, confirmation of the access code from the mobile device.

17. The method of claim 14, wherein the user comprises a visitor, the method further comprising:

receiving from the mobile device an identification of a host individual; and

performing a lookup at a host identity catalog to verify the identification of the host individual;

wherein providing an information gathering user interface to the mobile device is based on verification of the identity of the host individual.

18. The method of claim 17, wherein the message associated with issuance of the access card comprises a message to the host individual indicating the presence of the visitor at the facility.

19. The method of claim 18, wherein transmitting the message is performed using contact information of the host individual that is included in the host identity catalog.

20. The method of claim 19, wherein the message comprises one of a text message, an email, or an automated voice message.

21. The method of claim 14, wherein providing the web interface is performed in response to the mobile device registering on a wireless network at the facility.

22. The method of claim 14, wherein the user information includes a signature of the user and an image of the user.

23. An access card issuance system comprising an access card issuance device located at a facility of an organization and a web server, wherein the access card issuance system is configured to:

provide a web interface from the web server to a mobile device in response to a request from the mobile device;

receive, via the web interface, user information identifying a user of the mobile device, the user information including an identity of an authorized individual associated with a facility;

issue an access card to the user of the mobile device from the access card issuance device, the access card having indicia printed thereon identifying at least a portion of the user information; and

transmit, to the authorized individual, a message associated with issuance of the access card.

24. The access card issuance system of claim 23, wherein the web server is communicatively connected to and separate from the access card issuance device.

25. The access card issuance system of claim 23, wherein the host identity catalog comprises at least one of a corporate directory or an identity provider.

26. The access card issuance system of claim 25, wherein the corporate directory comprises an Active Directory server communicatively connected to the access card issuance device.