Method of access control implemented in an Ethernet switch

• US 8,341,695 B2
• Filed: 05/01/2008
• Issued: 12/25/2012
• Est. Priority Date: 05/01/2008
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Whitsitt, Steven L., Thomas, Beth A. B.
• Primary Examiner(s): Truong, Thanhnga B
• Assistant Examiner(s): HERZOG, MADHURI R
• Application Number:
  US12/113,806
• Publication Number:
  US 20090328152A1
• Time in Patent Office: 1,699 Days
• Field of Search: 726 1- 5, 726/9, 726 16- 21, 340 51- 533, 340 57- 585, 713182-186
• US Class Current: 726/2
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

An access control system, having at least one access control unit for securing a physical area and controlling entry into and egress out of the physical area, and an Ethernet routing device, is disclosed. The Ethernet routing device includes an access controller for determining access privileges to the physical area; an Ethernet switching unit for directing network communications between multiple network devices; at least one Ethernet connector for connecting the at least one access control unit to the Ethernet routing device; and an access control message interpreter for reading messages received, by way of the Ethernet connector, from the at least one access control unit and providing access control information contained in the messages to the access controller for access privilege determination.

Claims

1. A device for use in an access control system, said device comprising:

an access controller that determines access privileges to a physical area;

an Ethernet switching unit for directing network communications between multiple network devices;

at least two Ethernet connectors, a first Ethernet connector that connects at least one access control unit to said device, and a second Ethernet connector that connects at least one non-access control related network unit to said device; and

an access control message interpreter

that reads router headers of messages received by way of said Ethernet connectors,

that determines if said messages are from said at least one access control unit or if said messages are from said at least one non-access control related network unit,

that transfers said messages to a destination unit without reading message content when said messages are from said at least one non-access control related network unit, and

that extracts message content not in said router headers of said messages and provides said message content to said access controller for access privilege determination when said messages are from said at least one access control unit.

2. The device as in claim 1, wherein said at least one access control unit is selected from a group consisting of:

ID card reader, RF-ID reader and biometric scanner.

3. The device as in claim 1, wherein said access controller implements at least one access control scheme selected from a group consisting of:

antipassback, 2-man rule and n-man rule.

4. The device as in claim 1, further comprising an access rules storage unit for storing information regarding authorized personnel used for determining identity and access privileges of said authorized personnel.

5. The device as in claim 1, wherein said access controller, upon receiving said access control information, determines identity and access privileges, and based on said determination transmits a message to said access control unit originating said message granting or denying access.

6. An access control system, comprising:

at least one access control unit that secures a physical area and controls entry into and egress out of said physical area; and

an Ethernet routing device having;

an access controller that determines access privileges to said physical area;

an Ethernet switching unit that directs network communications between multiple network devices;

at least two Ethernet connectors, including a first Ethernet connector that connects said at least one access control unit to said Ethernet routing device, and a second Ethernet connector that connects at least one non-access control related network unit to said Ethernet routing device; and

an access control message interpreter that reads router headers of messages received by way of said Ethernet connectors,

said access control message interpreter determines if said messages are from said at least access control unit or if said messages are from said at least one non-access control related network unit,

said access control message interpreter transfers said messages to a destination unit without reading message content when said messages are from said at least one non-access control related network unit, and

said access control message interpreter extracts message content not in said router headers of said messages and providing said message content to said access controller for access privilege determination when said messages are from said at least one access control unit.

7. The access control system as in claim 6, wherein said at least one access control unit is selected from a group consisting of:

ID card reader, RF-ID reader and biometric scanner.

8. The access control system as in claim 6, wherein said access controller implements at least one access control scheme selected from a group consisting of:

anti-passback, 2-man rule and n-man rule.

9. The access control system as in claim 6, further comprising an access rules storage unit for storing information regarding authorized personnel used for determining identity and access privileges of said authorized personnel.