Method and system for controlling access to an enclosed area

• US 7,775,429 B2
• Filed: 08/13/2007
• Issued: 08/17/2010
• Est. Priority Date: 08/16/2006
• Status: Active Grant

• Current Assignee: Isonas Incorporated (Allegion PLC)
• Original Assignee: ISONAS Security Systems, Inc.
• Inventors: Jones, Shirl D., Chapman, Kriston L., Burkley, Richard M., Matsumoto, Roger Y., Radicella, Michael
• Primary Examiner(s): Hess; Daniel A
• Assistant Examiner(s): TARDIF, DAVID P
• Application Number:
  US11/838,022
• Publication Number:
  US 20080041943A1
• Time in Patent Office: 1,100 Days
• Field of Search: 235/382
• US Class Current: 235/380
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/27 with central registration

Abstract

A method and system for controlling access to an enclosed area is described. One illustrative embodiment is an access card reader and controller that is powered via a Power-over-Ethernet (PoE) interface. The access card reader and controller may include a plurality of operating modes, including a network mode in which the access card reader and controller relies on an external access control server to authenticate received card identifiers and a standalone mode in which the access card reader and controller authenticates card identifiers independently of the access control server based on information stored locally in the access card reader and controller.

Claims

1. A method for controlling access to an enclosed area, the method comprising:

receiving a card identification signal including a card identifier (ID) in an access card reader and controller associated with an entrance to the enclosed area, the access card reader and controller being powered via a Power-over-Ethernet (PoE) interface;

determining an operational mode of the access card reader and controller, the operational modes including a standalone mode and a network mode;

authenticating the card ID by transmitting the card ID to an access control server when the access card reader and controller is determined to be operating in the network mode;

authenticating the card ID against entries of one or more internal tables stored in the access card reader and controller when the access card reader and controller is determined to be operating in the standalone mode; and

sending a signal to unlock a door at the entrance to the enclosed area associated with the access card reader and controller when the card ID has been successfully authenticated;

wherein the access card reader and controller serves, from the access card reader and controller to a Web browser external to the access card reader and controller, one or more Web pages by which a user can configure the access card reader and controller.

2. The method of claim 1, wherein the card ID is transmitted to the access control server via a wireless communication link.

3. The method of claim 1, wherein the card identification signal is received from a radio-frequency identification (RFID) transponder included in an access control card.

4. The method of claim 1, wherein the operational modes include at least one of a synchronous mode and an asynchronous mode, the access card reader and controller being periodically polled by the access control server in the synchronous mode, the access card reader and controller operating without being periodically polled by the access control server in the asynchronous mode.

5. The method of claim 1, wherein data transmitted between the access card reader and controller and the access control server are encrypted.

6. An access card reader and controller for controlling access to an enclosed area, the access card reader and controller comprising:

a radio-frequency communication module configured to receive a card identification signal including a card identifier (ID);

a mode module configured to determine an operational mode of the access card reader and controller, the operational modes including a standalone mode and a network mode;

a communication module configured to authenticate the card ID by transmitting the card ID to an access control server when the access card reader and controller is determined to be operating in the network mode;

a local authentication module configured to authenticate the card ID against entries of one or more internal tables stored in the access card reader and controller when the access card reader and controller is determined to be operating in the standalone mode; and

a local input/output module configured to send a signal to unlock a door at an entrance to the enclosed area when the card ID has been successfully authenticated;

wherein the access card reader and controller is powered via a Power-over-Ethernet (PoE) interface of the communication module and wherein the communication module includes a secure HTTP interface to serve, from the access card reader and controller to a Web browser external to the access card reader and controller, one or more Web pages by which a user can configure the access card reader and controller.

7. The access card reader and controller of claim 6, further comprising:

a pin pad with which to enter a personal identification number (PIN), the pin pad being connected with the communication module.

8. The access card reader and controller of claim 7, wherein the pin pad is integrated with a housing of the access card reader and controller.

9. The access card reader and controller of claim 7, wherein the pin pad is separate from a housing of the access card reader and controller and is connected with the communication module via one of a wired and a wireless link.

10. The access card reader and controller of claim 6, further comprising:

a local tamper detector configured to detect when the access card reader and controller is being tampered with.

11. The access card reader and controller of claim 6, wherein the communication module includes at least one of a serial interface, a TCP/IP interface, an IEEE 802.11 interface, and an IEEE 802.15.4 interface.

12. The access card reader and controller of claim 6, wherein the communication module is configured to transmit the card ID to the access control server via a wireless communication link.

13. The access card reader and controller of claim 6, wherein the radio-frequency communication module receives the card identification signal from a radio-frequency identification (RFID) transponder included in an access control card.

14. The access card reader and controller of claim 6, wherein the operational modes include at least one of a synchronous mode and an asynchronous mode, the access card reader and controller being periodically polled by the access control server in the synchronous mode, the access card reader and controller operating without being periodically polled by the access control server in the asynchronous mode.

15. The access card reader and controller of claim 6, wherein data transmitted between the access card reader and controller and the access control server are encrypted.

16. A system for controlling access to one or more enclosed areas, the system comprising:

at least one access card reader and controller powered via a Power-over-Ethernet (PoE) interface, each access card reader and controller being capable of controlling access through a particular entrance to a particular enclosed area, each access card reader and controller being configured to serve, from the access card reader and controller to a Web browser external to the access card reader and controller, one or more Web pages by which a user can configure that access card reader and controller; and

an access control server in communication with the at least one access card reader and controller, the access control server being capable of controlling the operation of the at least one access card reader and controller;

wherein, in a network mode of operation, the access control server is configured to perform authentication of a card identifier (ID) received from the at least one access card reader and controller and to signal the at least one access card reader and controller to unlock a door at the particular entrance to the particular enclosed area when the access control server has successfully authenticated the received card ID;

wherein, in a standalone mode of operation, the at least one access card reader and controller is configured to perform local authentication of a received card ID independently of the access control server and to unlock a door at the particular entrance to the particular enclosed area when the at least one access card reader and controller has successfully authenticated the received card ID.

17. The system of claim 16, wherein the at least one access card reader and controller is configured to enter the standalone mode of operation automatically when the access control server fails.

18. The system of claim 17, wherein, after having automatically entered the standalone mode of operation in response to a failure of the access control server, the at least one access card reader and controller is configured to re-enter the network mode of operation automatically once the access control server has resumed normal operation.

19. The system of claim 16, wherein the access control server is configured to detect automatically that an access card reader and controller has been added to the system.

20. The system of claim 16, wherein the at least one access card reader and controller is capable of operating in at least one of a synchronous mode and an asynchronous mode, the access card reader and controller being periodically polled by the access control server in the synchronous mode, the access card reader and controller operating without being periodically polled by the access control server in the asynchronous mode.