Method and system for controlling access to an enclosed area

• US 8,662,386 B2
• Filed: 07/09/2010
• Issued: 03/04/2014
• Est. Priority Date: 08/16/2006
• Status: Active Grant

• Current Assignee: Isonas Incorporated (Allegion PLC)
• Original Assignee: ISONAS Security Systems, Inc.
• Inventors: Radicella, Michael, Burkley, Richard M., Chapman, Kriston L., Jones, Shirl D., Matsumoto, Roger Y.
• Primary Examiner(s): Lee, Michael G
• Assistant Examiner(s): TARDIF, DAVID P
• Application Number:
  US12/833,890
• Publication Number:
  US 20100276487A1
• Time in Patent Office: 1,334 Days
• Field of Search: 235/380
• US Class Current: 235/380
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/27 with central registration

Abstract

A method and system for controlling access to an enclosed area is described. One illustrative embodiment is an access card reader and controller that is powered via a Power-over-Ethernet (PoE) interface. The access card reader and controller may include a plurality of operating modes, including a network mode in which the access card reader and controller relies on an external access control server to authenticate received card identifiers and a standalone mode in which the access card reader and controller authenticates card identifiers independently of the access control server based on information stored locally in the access card reader and controller. In this illustrative embodiment, the access card reader and controller may also include a local tamper detector configured to detect when the access card reader and controller is being tampered with.

Claims

1. A method for controlling access to an enclosed area, the method comprising:

receiving a card identification signal including a card identifier (ID) in an access card controller through an access card reader associated with an entrance to the enclosed area, at least one of the access card controller or access card reader being powered via a Power-over-Ethernet (PoE) interface;

determining an operational mode of the access card controller, the operational modes including a standalone mode and a network mode;

authenticating the card ID by transmitting the card ID to an access control server when the access card controller is determined to be operating in the network mode;

authenticating the card ID against entries of one or more internal tables stored in the access card controller when the access card controller is determined to be operating in the standalone mode;

sending a signal to unlock a door at the entrance to the enclosed area associated with the access card reader when the card ID has been successfully authenticated;

wherein the access card controller serves, from the access card controller, configuration data that can be displayed by a web browser external to the access card controller.

2. The method of claim 1, wherein the card ID is transmitted to the access control server via a wireless communication link.

3. The method of claim 1, wherein the card identification signal is received from a radio-frequency identification (RFID) transponder included in an access control card.

4. The method of claim 1, wherein the operational modes include at least one of a synchronous mode and an asynchronous mode, the access card controller being periodically polled by the access control server in the synchronous mode, the access card controller operating without being periodically polled by the access control server in the asynchronous mode.

5. The method of claim 1, wherein data transmitted between the access card controller and the access control server are encrypted.

6. An access control system for controlling access to an enclosed area, the access control system comprising:

a radio-frequency communication module configured to receive a card identification signal including a card identifier (ID);

a mode module configured to determine an operational mode of the access control system, the operational modes including a standalone mode and a network mode;

a communication module configured to authenticate the card ID by transmitting the card ID to an access control server when the access control system is determined to be operating in the network mode;

a local authentication module configured to authenticate the card ID against entries of one or more internal tables stored in the access control system when the access control system is determined to be operating in the standalone mode; and

a local input/output module configured to send a signal to unlock a door at an entrance to the enclosed area when the card ID has been successfully authenticated;

wherein at least a portion of the access control system is powered via a Power-over-Ethernet (PoE) interface of the communication module, and wherein the communication module includes an interface to serve configuration data that can be displayed by a web browser external to the access control system.

7. The access control system of claim 6, further comprising a pin pad with which to enter a personal identification number (PIN), the pin pad being connected with the communication module.

8. The access control system of claim 7, wherein the pin pad is integrated with a housing of at least a portion of the access control system.

9. The access control system of claim 7, wherein the pin pad is connected with the communication module via one of a wired and a wireless link.

10. The access control system of claim 6, wherein the interface is a secure HTTP interface.

11. The access control system of claim 6, wherein the communication module includes at least one of a serial interface, a TCP/IP interface, an IEEE 802.11 interface, and an IEEE 802.15.4 interface.

12. The access control system of claim 6, wherein the communication module is configured to transmit the card ID to the access control server via a wireless communication link.

13. The access control system of claim 6, wherein the radio-frequency communication module receives the card identification signal from a radio-frequency identification (RFID) transponder included in an access control card.

14. The access control system of claim 6, wherein the operational modes include at least one of a synchronous mode and an asynchronous mode, the access card control system being periodically polled by the access control server in the synchronous mode, the access control system operating without being periodically polled by the access control server in the asynchronous mode.

15. The access control system of claim 6, wherein data transmitted between the access control system and the access control server are encrypted.

16. A system for controlling access to one or more enclosed areas, the system comprising:

at least one access card controller powered via a Power-over-Ethernet (PoE) interface, each access card controller-being capable of controlling access through an entrance to an enclosed area, and

an access control server in communication with the at least one access card controller, the access control server being capable of controlling the operation of the at least one access card controller;

wherein, in a network mode of operation, the access control server is configured to perform authentication of a card identifier (ID) received from the at least one access card controller and to signal the at least one access card controller to unlock a door at the entrance to the enclosed area when the access control server has successfully authenticated the received card ID;

wherein, in a standalone mode of operation, the at least one access card controller is configured to perform local authentication of a received card ID independently of the access control server and to unlock a door at the entrance to the enclosed area when the at least one access card controller has successfully authenticated the received card ID;

wherein each access card controller is configured to serve from the access card controller configuration data that can be displayed by a web browser external to the access card controller.

17. The system of claim 16, wherein the at least one access card controller is configured to enter the standalone mode of operation automatically when the access control server fails.

18. The system of claim 17, wherein, after having automatically entered the standalone mode of operation in response to a failure of the access control server, the at least one access card controller is configured to re-enter the network mode of operation automatically once the access control server has resumed normal operation.

19. The system of claim 16, wherein the access control server is configured to detect automatically that an access card controller has been added to the system.

20. The system. of claim 16, wherein the at least one access card controller is capable of operating in at least one of a synchronous mode and an asynchronous mode, the access card controller being periodically polled by the access control server in the synchronous mode, the access card controller operating without being periodically polled by the access control server in the asynchronous mode.

21. A method for controlling access to an enclosed area, the method comprising:

receiving a card identification signal including a card identifier (ID) in an access card reader and controller associated with an entrance to the enclosed area, the access card reader and controller being powered via a Power-over-Ethernet (PoE) interface;

determining an operational mode of the access card reader and-controller, the operational modes including a standalone mode and a network mode;

authenticating the card ID by transmitting the card ID to an access control server when the access card reader and-controller is determined to be operating in the network mode;

authenticating the card ID against entries of one or more internal tables stored in the access card reader and controller when the access card reader and controller is determined to be operating in the standalone mode;

sending a signal to unlock a door at the entrance to the enclosed area associated with the access card reader and controller when the card ID has been successfully authenticated;

wherein the access card reader and controller serves, from the access card reader and controller, configuration data that can be displayed by a web browser external to the access card controller.

22. A system for controlling access to one or more enclosed areas, the system comprising:

at least one access card reader and-controller powered via a Power-over-Ethernet (PoE) interface, each access card reader and controller being capable of controlling access through an entrance to an enclosed area; and

an access control server in communication with the at least one access card reader and controller, the access control server being capable of controlling the operation of the at least one access card reader and controller;

wherein, in a network mode of operation, the access control server is configured to perform authentication of a card identifier (ID) received from the at least one access card reader and-controller and to signal the at least one access card reader and-controller to unlock a door at the entrance to the enclosed area when the access control server has successfully authenticated the received card ID;

wherein, in a standalone mode of operation, the at least one access card reader and controller is configured to perform local authentication of a received card ID independently of the access control server and to unlock a door at the entrance to the enclosed area when the at least one access card reader and controller has successfully authenticated the received card ID;

wherein each access card reader and controller is configured to serve from the access card reader and controller configuration data that can be displayed by a web browser external to the access card reader and controller.

23. The system of claim 22, wherein the at least one access card reader and controller is configured to enter the standalone mode of operation automatically when the access control server fails.

24. The system of claim 23, wherein, after having automatically entered the standalone mode of operation in response to a failure of the access control server, the at least one access card reader and controller is configured to re-enter the network mode of operation automatically once the access control server has resumed normal operation.

25. The system of claim 22, wherein the access control server is configured to detect automatically that an access card reader and controller has been added to the system.

26. The system. of claim 22, wherein the at least one access card reader and controller is capable of operating in at least one of a synchronous mode and an asynchronous mode, the access card reader and controller being periodically polled by the access control server in the synchronous mode, the access card reader and controller operating without being periodically polled by the access control server in the asynchronous mode.

27. An access control system including an access card reader and controller for controlling access to an enclosed area, the access control system comprising:

a radio-frequency communication module configured to receive a card identification signal including a card identifier (ID);

a mode module configured to determine an operational mode of the access control system, the operational modes including a standalone mode and a network mode;

a communication module configured to authenticate the card ID by transmitting the card ID to an access control server when the access control system is determined to be operating in the network mode;

a local authentication module configured to authenticate the card ID against entries of one or more internal tables stored in the access control system when the access control system is determined to be operating in the standalone mode; and

a local input/output module configured to send a signal to unlock a door at an entrance to the enclosed area when the card ID has been successfully authenticated;

wherein at least a portion of the access control system is powered via a Power-over-Ethernet (PoE) interface of the communication module, and wherein the communication module includes an interface to serve configuration data that can be displayed by a web browser external to the access control system.

28. The access control system of claim 27, further comprising a pin pad with which to enter a personal identification number (PIN), the pin pad being connected with the communication module.

29. The access control system of claim 28, wherein the pin pad is integrated with a housing of at least a portion of the access control system.

30. The access control system of claim 28, wherein the pin pad is connected with the communication module via one of a wired and a wireless link.

31. The access control system of claim 27, wherein the interface is a secure HTTP interface.

32. The access control system of claim 27, wherein the communication module includes at least one of a serial interface, a TCP/IP interface, an IEEE 802.11 interface, and an IEEE 802.15.4 interface.

33. The access control system of claim 27, wherein the communication module is configured to transmit the card ID to the access control server via a wireless communication link.

34. The access control system of claim 27, wherein the radio-frequency communication module receives the card identification signal from a radio-frequency identification (RFID) transponder included in an access control card.

35. The access control system of claim 27, wherein the operational modes include at least one of a synchronous mode and an asynchronous mode, the access card control system being periodically polled by the access control server in the synchronous mode, the access control system operating without being periodically polled by the access control server in the asynchronous mode.

36. The access control system of claim 27, wherein data transmitted between the access control system and the access control server are encrypted.