System and method for integrating and adapting security control systems

• US 9,153,083 B2
• Filed: 09/06/2013
• Issued: 10/06/2015
• Est. Priority Date: 07/09/2010
• Status: Active Grant

• Current Assignee: Isonas Incorporated (Allegion PLC)
• Original Assignee: Isonas Incorporated (Allegion PLC)
• Inventors: Radicella, Michael, Burkley, Richard, Chapman, Kriston, Jones, Shirl, Matsumoto, Roger
• Primary Examiner(s): Lee, Michael G
• Assistant Examiner(s): TARDIF, DAVID P
• Application Number:
  US14/019,924
• Publication Number:
  US 20140070003A1
• Time in Patent Office: 760 Days
• Field of Search: 235/380
• US Class Current: 1/1
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence

Abstract

A system for controlling access to one or more enclosed areas comprises at least one access card reader and controller powered via a Power-over-Ethernet (PoE) interface, each access card reader and controller being capable of controlling access through a particular entrance to a particular enclosed area and an access control server in communication with the at least one access card reader and controller, the access control server being capable of controlling the operation of the at least one access card reader and controller, and a signal converter disposed between the access card reader and the access control server. In a network mode of operation, the access control server is configured to perform authentication of a card identifier (ID) received from the at least one access card reader and controller and to signal the at least one access card reader and controller to unlock a door at the particular entrance to the particular enclosed area when the access control server has successfully authenticated the received card ID. In a standalone mode of operation, the at least one access card reader and controller is configured to perform local authentication of a received card ID independently of the access control server and to unlock a door at the particular entrance to the particular enclosed area when the at least one access card reader and controller has successfully authenticated the received card ID.

Claims

1. An access control system comprising:

a radio-frequency communication module configured to receive an identification signal including a credential identifier;

a mode module configured to determine an operational mode of the access control system, the operational modes including a standalone mode and a network mode;

a communication module configured to authenticate the credential identifier by transmitting the credential identifier, to an access control server when the access control system is determined to be operating in the network mode;

a local authentication module configured to authenticate the credential identifier against entries of one or more internal tables when the access control system is determined to be operating in the standalone mode; and

a local input/output module configured to send a signal to a solid state relay to unlock a door at an entrance to the enclosed area when the credential identifier has been successfully authenticated;

wherein the communication module includes an interface to serve data that can be displayed to a user external to the access control system.

2. The access control system of claim 1, further comprising a signal converter coupled to the communication module that is agnostic to a communication protocol of the access control server.

3. The access control system of claim 2 wherein the signal converter is agnostic to a communication protocol of the local authentication module.

4. The access control system of claim 2 wherein the signal converter is adapted to interface with a plurality of access controllers.

5. The access control system of claim 1, wherein the communication module includes at least one of a serial interface, a TCP/IP interface, an IEEE 802.11 interface, an IEEE 802.15.4 interface, and a secure HTTP interface.

6. The access control system of claim 1, wherein the communication module is configured to transmit the credential identifier to the access control server via a wireless communication link.

7. The access control system of claim 1, wherein the radio-frequency communication module receives the identification signal from a radio-frequency identification (RFID) transponder included in an access control card.

8. The access control system of claim 1, wherein the operational modes include at least one of a synchronous mode and an asynchronous mode.

9. The access control system of claim 1, wherein data transmitted to the access control server is encrypted.

10. A system for controlling access to one or more enclosed areas, the system comprising:

at least one access controller powered via a Power-over-Ethernet (PoE) interface, the at least one access controller being capable of controlling access through a particular entrance to a particular enclosed area;

an access control server in communication with the at least one access controller, the access control server being capable of controlling the operation of the at least one access controller;

a signal converter disposed between the at least one access controller and the access control server, the signal converter including logic to administer a plurality of controllers having a plurality of preexisting communication protocols;

an interface to serve data that can be displayed to a user external to the access control system;

wherein, in a network mode of operation, the access control server is configured to perform authentication of a credential identifier received from the at least one access controller and to signal a solid state relay at the at least one access controller to unlock a door at the particular entrance to the particular enclosed area when the access control server has successfully authenticated the received credential identifier;

wherein, in a standalone mode of operation, the at least one access card controller is configured to perform local authentication of a received credential identifier independently of the access control server and to unlock a door at the particular entrance to the particular enclosed area when the at least one access controller has successfully authenticated the received credential identifier.

11. The system of claim 10, wherein the at least one access controller is configured to enter the standalone mode of operation automatically when the access control server fails.

12. The system of claim 11, wherein, after having automatically entered the standalone mode of operation in response to a failure of the access control server, the at least one access controller is configured to re-enter the network mode of operation automatically once the access control server has resumed normal operation.

13. The system of claim 10, wherein the access control server is configured to detect automatically that an access controller has been added to the system.

14. The system of claim 10, wherein the at least one access controller is capable of operating in at least one of a synchronous mode and an asynchronous mode.

15. The system of claim 10 wherein the signal converter is agnostic to a communication protocol of the access control server.

16. The system of claim 10 wherein the signal converter is agnostic to a communication protocol of the local authentication module.

17. A method for controlling access to an enclosed area, the method comprising:

receiving an identification signal including a credential identifier in an access controller associated with an entrance to the enclosed area, the access controller being powered via a Power-over-Ethernet (PoE) interface;

determining an operational mode of the access controller, the operational modes including a standalone mode and a network mode;

authenticating the credential identifier by transmitting the credential identifier to an access control server when the access controller is determined to be operating in the network mode;

authenticating the credential identifier against entries of one or more internal tables stored in the access controller when the access controller is determined to be operating in the standalone mode; and

sending a signal to a solid state relay to unlock a door at the entrance to the enclosed area associated with the access controller when the credential identifier has been successfully authenticated; and

serving data that can be displayed to a user external to the access control system.

18. The method of claim 17, wherein the credential identifier is transmitted to the access control server via a wireless communication link.