Method and system for automated physical access control system using biometric recognition with tag authentication

Abstract

The invention relates to a method and system for an automated physical access control system using biometric recognition plus tag authentication. An access control system and a method for operating the system are described. In one example, systems and methods are disclosed that provide a hand-free solution to enable a user to walk through a door or entrance without stopping motion and not limited to any interaction or user effort. Security of the system is maintained even if user interactions are significantly reduced.

Description

[0001] Information about divisional applications

[0002] This application is a divisional application of the Chinese invention patent application with application number 201780057486.4, application date August 7, 2017, and invention name “Method and system for automated physical access control system using biometric identification and tag verification”.

[0003] CROSS REFERENCE TO RELATED APPLICATIONS

[0004] This application claims the benefit of and priority under 35 USC §119(e) to U.S. Provisional Application No. 62 / 371,477, filed on August 5, 2016, the entire disclosure of which is hereby incorporated by reference in its entirety for all that it teaches and for all purposes. Technical Field

[0005] The present invention is generally directed to access control systems and more particularly to automated or semi-automated access control systems or components therein. Background Art

[0006] Automated doors, while highly convenient and capable of facilitating high throughput, lack the security desired by many organizations, businesses, and government entities. As a result, most physical access control systems are installed with a priority on maintaining security over achieving efficient use. Summary of the invention

[0007] Embodiments of the present invention enable automated access control points (e.g., doors) to simultaneously provide efficient use and maintain a desired level of security. In particular, embodiments of the present invention contemplate a frictionless entry solution for automated doors (e.g., perimeter doors) in commercial and enterprise buildings with high traffic. As used herein, the term "frictionless" refers to a system that enables a user to enter and / or leave a physical access control point without having to physically present a credential or badge to a reader or perform any other proactive action that would otherwise inconvenience the user (e.g., by having to remove a phone or physical credential from a pocket, wallet, bag, or the like). More specifically, a "frictionless" solution refers to a solution that enables a user to pass through a physical access control point without placing an undue burden on the user. Some gestures may be requested from the user, but the gestures should not be overly cumbersome and should not require the user to move objects into / out of other locations.

[0008] In some embodiments, a hands-free solution is proposed that enables a user to walk through a door without stopping motion and without other user interaction except looking at the door (or a camera near the door, for example). Compared to RFID, the solution proposed herein should be better or the same in terms of security, speed, and reliability.

[0009] In some embodiments, a reader equipped to communicate wirelessly (e.g., via NFC, Bluetooth, Bluetooth Low Energy (BLE), 802.11x protocol, etc.) with an access control credential (e.g., an access control card, a smart phone, a key fob, a wearable device, etc.) is used to sense nearby access control credentials via some proximity detection mechanism (e.g., via measuring a received signal strength indicator (RSSI) or some other measurement of the power present in a received radio signal).

[0010] By using only RF credentials and RSSI information, it is difficult to implement a secure and reliable keyless entry system because it is difficult to accurately determine whether the credential is outside or inside the door or whether the user has the intention to open the door.

[0011] Biometrics such as facial recognition can be used to create a frictionless user experience. However, if many users are registered in the system, it is difficult to provide good security. In general, if N is large, then today's biometrics are not suitable for identification or 1:N matching. Typically, N must be <10 to achieve good security. In an office environment, N can easily grow to over 1000, thus reducing the security provided by a single-factor biometric system.

[0012] In the proposed embodiment, a combination of RF credentials, RF-based positioning, and biometrics are used.In a basic configuration, a reader senses the proximity of an RF credential (eg, via RSSI or ToF) and reads its corresponding ID.

[0013] When the user engages the biometric sensor (e.g., in the case of facial recognition, the user's face enters the camera's field of view), the biometric image is matched to the template stored in the reader associated with the proximate credential ID. By doing so, N is significantly reduced (e.g., N<10) in the biometric identification (1:N matching) step. Thus, the second factor security provided by biometrics is increased.

[0014] This ultimately enables the reader to make a positive assessment of the user's identity and confirm that the user is carrying a valid access control credential before the user physically reaches the door.

[0015] As mentioned above, the user's intention to enter the door can also be analyzed and utilized to facilitate the functionality of the system. In particular, embodiments of the present invention facilitate the ability to detect the user's intention to actually open the door so that biometric matching can be used. For contact biometrics such as fingerprints, this is a relatively easy problem to solve, but for facial recognition or iris scanning, a more precise method of controlling the trigger distance is needed. In some embodiments, it is proposed to use the face size (e.g., pixels between eyes) or the actual distance (e.g., distance from the camera) that can be estimated based on the facial image in the camera video stream. A more advanced method is to detect intent based on the rate of increase of face size or the speed of face approach (which can also be estimated based on the facial image). By doing so, it is possible to distinguish between a stationary user and a user who is actually approaching (e.g., moving toward) the door. Finally, credential location can also be used for intent detection. In its simplest form, credential location-based intent detection can be performed by checking the RSSI level of the RSSI increase rate.

[0016] Consequently, the reader can automatically unlock or open the door without requiring the user to physically present their access control credentials directly to the reader and without requiring the user to make any cumbersome type of gestures or interactions with the reader.

[0017] In some embodiments, the overall security of the system can be increased by scrambling the access control ID stored by or accessible to the reader. In addition, in some embodiments, the access control credential carried by the user may store the user's biometric template (e.g., the user's facial template) in the access control credential's memory. Thus, when the user approaches the reader and the access control credential comes within the reader's reading range, the access control credential may wirelessly transmit the biometric template to the reader. The reader may then use the template to compare with the biometric information obtained for the user approaching the reader. If there is a positive match between the biometric template and the biometric information obtained by the reader for the user, the biometric template may be optionally bound to the user's access control ID. This information may be stored in the reader's cache memory for a predetermined amount of time (e.g., one hour, one day, one week, one minute, etc.) to enable the reader to more quickly grant access to the user upon subsequent use of the reader / door.

[0018] In some embodiments, the user experience with the system disclosed herein can be divided into different stages: (1) enrollment; (2) first use; and (3) subsequent use. In enrollment, a biometric template of the user is created and embedded in the access control credential. Specifically, as a non-limiting example, an image of the user's face can be captured at a enrollment station (e.g., a front desk or with some security personnel). The image (or possibly multiple images) can then be converted into a facial template wrapped / protected with an encryption layer. This secure facial template can then be issued and stored on the appropriate access control credential.

[0019] When the user first approaches the reader, the reader will likely not have any prior knowledge of the user's biometric information. Therefore, when the user moves into the reader's read range (e.g., up to 100m or more for BLE), an authentication process may then be initiated between the reader and the user's access control credential. The authentication process may be as simple as each device (reader and access control credential) confirming that the other device is utilizing the appropriate protocol and / or that appropriate secrets have been shared between the devices. After the devices have been authenticated, the user's facial template may be transmitted to the reader, where it is stored in the reader's template database (if the template was not already in the template database) before the user arrives at the door. In the worst case of some mobile phones, at a transmission rate of only 1 kilobyte / second, a read range of 10m and walking will give the reader approximately 7 seconds to exchange the necessary data including the facial template. In some embodiments, the size of the facial template may be approximately 2 kilobytes, so it can be transmitted in a sufficient amount of time before the user arrives at the door (e.g., 5 seconds of backup time). Once the facial template is stored in the reader template database (on the reader or accessible to the reader), the reader can obtain the user's facial information from a camera mounted on or near the reader (or on or near the door). This facial information can be compared to the facial template and if a match is determined, the door can be opened. The facial template can be maintained in the reader's cache memory for subsequent use (to improve availability and accuracy).

[0020] During subsequent use, the user will approach the reader / door in a manner similar to the first use case scenario. When the user and their access control credentials are within the reader's read range, the reader will obtain an access control ID from the access control credential (if the reader and / or the access control credential know that this use of the door corresponds to a subsequent use, this access control ID may be transmitted to the reader without the presence of a facial template). The reader verifies the access control ID obtained from the access control credential (e.g., to confirm that the ID format is acceptable and / or that the ID corresponds to a known and valid access control ID). The access control ID is then used to look up a corresponding facial template from a template database (stored on the reader or in a memory accessible to the reader) for biometric matching. The reader then obtains image information from a camera mounted on or near the reader (or on or near the door) and completes a biometric matching process. If the biometric matching process indicates that the biometric information matches the template (at least within an acceptable tolerance), the reader opens the door, unlocks it, or otherwise enables the user to automatically pass through the physical access point. As can be seen, the reader does not have to obtain a facial template from the access control credential in subsequent use, which significantly increases the speed at which a user can be identified. Furthermore, because the access control ID is used to reduce the number of facial templates that must be searched (e.g., by identifying a corresponding or smaller subset of the total facial templates in the template database), the reader is able to reduce the total number of facial templates that must be analyzed / searched. This increases processing speed and can improve the overall user experience.

[0021] In some embodiments, potential complexities associated with having many users within the reader's read range may be addressed by applying additional intelligence at the reader. For example, the reader may analyze which access control credentials are causing their respective signals to increase in strength. More specifically, the reader may analyze which RSSI signals are increasing in strength by applying a derivative to the RSSI function over time. While an increase in RSSI may not be easily detectable for all access control credentials within the reader's read range, applying this type of filter may help remove at least some access control credentials from the set of access control credentials that are deemed to be approaching the reader (e.g., showing intent to enter a door protected by the reader).

[0022] In some embodiments, the reader may include a directional antenna (or antennas) that can narrow the read range to a particular area of ​​interest that is more closely aligned with the passageway in front of the door. As a non-limiting example, a directional antenna might reduce the read range (and resulting trigger zone for automatically opening / unlocking the door) to approximately 5m in front of the door and 1m behind the door (e.g., on the secure side).

[0023] In some embodiments, one or more motion sensors may be coupled to the access control credential and input from the motion sensors may be used to filter out stationary (e.g., non-moving) credentials. More specifically, if no movement or little movement is detected at the access control credential, the access control credential may not advertise its access control ID to the reader, or if an access control ID is transmitted, the reader may know to discard the access control ID accompanied by additional information indicating that the access control credential has not moved in a significant manner.

[0024] In some embodiments, analytics may be used to correlate the access control credential with the face. For example, the reader may form a correlation between face size / position, RSSI, and / or credential motion (e.g., via a motion sensor). The reader may then utilize some form of artificial intelligence to correlate the access control credential with the face / body and further detect a user who is demonstrating intent to open the door (e.g., by detecting that the user is moving in a certain manner toward the door and carrying a mobile access control credential). It should be appreciated that if the reader and / or the access control credential have sufficient memory and processing power (e.g., like a smartphone), such artificial intelligence may be executed within the reader and / or in the access control credential.

[0025] In some embodiments, the actual indoor positioning of the credential can be used to correlate with the face detected in the video camera. Specifically, RSSI trilateration can be performed with several anchors.

[0026] In some embodiments, additional directional antennas outside the reader housing may be deployed around the door zone. As an example, dual directional antennas may be placed on the outward facing side of the door to filter out access control credentials on the opposite side of the door. It is also possible to install two directional antennas - one on the side of the door opposite the other directional antenna to help further identify whether the access control credential is on the inside or outside of the door. Similarly, the camera position may be manipulated to help control the number of faces detected and processed at a given time. The camera may be placed directly on the reader housing or above the door facing downward so that a restrictive viewing angle is formed for the camera.

[0027] In some embodiments, in addition to or instead of using only RSSI, other signal characteristics can be used to filter out access control IDs or detect a user's intent to enter a door. As an example, angle of arrival (AoA), time of flight (ToF), signal attenuation, and other characteristics can be used in conjunction with or in place of RSSI.

[0028] As used herein, the term "computer-readable medium" refers to any tangible data storage medium that participates in providing instructions to a processor for execution. This medium may take many forms, including but not limited to non-volatile media, volatile media, and transmission media. Non-volatile media include, for example, NVRAM or magnetic or optical disks. Volatile media include dynamic memory, such as primary memory. For example, common forms of computer-readable media include floppy disks, flexible disks, hard disks, magnetic tapes or any other magnetic media, magneto-optical media, CD-ROMs, any other optical media, punch cards, paper tapes, any other physical media with hole patterns, RAM, PROMs and EPROMs, FLASH-EPROMs, solid-state media such as memory cards, any other memory chips or cartridges, or any other media from which a computer can read instructions. When the computer-readable medium is configured as part of a database, it should be understood that the database may be any type of database, such as relational, hierarchical, object-oriented, and / or the like. Therefore, the present invention is considered to include tangible storage media or distribution media and equivalents and successor media recognized by the prior art, in which the software implementation of the present invention is stored.

[0029] As used herein, "credential information" is any data, data set, encryption scheme, key, and / or transmission protocol used by a particular device (e.g., a "credential device") to authenticate and / or verify its authenticity with the aid of a reader and / or interrogator.

[0030] The phrases "at least one", "one or more", and "and / or" are open-ended expressions that are both conjunctions and antonyms in operation. For example, each of the expressions "at least one of A, B, and C", "at least one of A, B, or C", "one or more of A, B, and C", "one or more of A, B, or C", and "A, B, and / or C" means A alone, B alone, C alone, A and B together, A and C together, B and C together, or A, B, and C together. When each of A, B, and C in the above expressions refers to elements such as X, Y, and Z or elements such as X1 to X2, the expression A, B, and C are referred to as "at least one of A, B, and C", ... n , Y1 to Y m and Z1 to Z o When the phrase refers to a class of elements selected from X, Y, and Z, a combination of elements selected from the same class (e.g., X1 and X2), and a combination of elements selected from two or more classes (e.g., Y1 and Z o ).

[0031] The term "a" or "an" entity refers to one or more of that entity. Thus, the terms "a" (or "an"), "one or more" and "at least one" can be used interchangeably herein. It should also be noted that the terms "comprising", "including" and "having" can be used interchangeably.

[0032] As used herein, the terms "determine," "calculate," and "compute" and variations thereof are used interchangeably and include any type of methodology, process, mathematical operation, or technique.

[0033] Pursuant to 35 U.S.C. (Section 112(f)), the term "component" as used herein should be given its broadest possible interpretation. Therefore, a claim incorporating the term "component" should cover all structures, materials, or acts set forth herein and all equivalents thereof. Furthermore, the structures, materials, or acts and their equivalents should include all those structures, materials, or acts and their equivalents described in the Summary, Brief Description of the Figures, Detailed Description, Abstract, and the claims themselves.

[0034] The term "module" as used herein refers to any known or later developed hardware, software, firmware, artificial intelligence, fuzzy logic, or combination of hardware and software capable of performing the functionality associated with the element.

[0035] It should be understood that each maximum numerical limitation given throughout the present invention is deemed to include each and every lower numerical limitation as an alternative, as if such lower numerical limitations are clearly written herein. Each minimum numerical limitation given throughout the present invention is deemed to include each and every higher numerical limitation as an alternative, as if such higher numerical limitations are clearly written herein. Each numerical range given throughout the present invention is deemed to include each and every narrower numerical range that falls within such broader numerical range, as if such narrower numerical ranges are all clearly written herein.

[0036] The following is a simplified summary of the invention to provide an understanding of some aspects of the invention. The summary is neither a broad nor exhaustive overview of the invention and its various aspects, embodiments, and configurations. It is neither intended to identify the key or important elements of the invention nor to describe the scope of the invention, but rather to present selected concepts of the invention in a simplified form as an introduction to the more detailed description presented below. As will be appreciated, other aspects, embodiments, and configurations of the invention are possible, utilizing one or more of the features set forth above and described in detail below, alone or in combination. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] The accompanying drawings are incorporated into and form a part of this specification to illustrate several examples of the present invention. These drawings, together with the description, explain the principles of the present invention. The drawings simply illustrate examples of how the present invention can be made and used, and should not limit the present invention to only the illustrated and described examples. Additional features and advantages will become apparent from the following more detailed description of various aspects, embodiments, and configurations of the present invention, as illustrated by the drawings referenced below.

[0038] Figure 1 is a diagram depicting an access control system according to an embodiment of the present invention;

[0039] Figure 2 are diagrams depicting additional details of an access control system and its operation according to an embodiment of the present invention;

[0040] Figure 3 is a block diagram depicting details of access credentials according to an embodiment of the present invention;

[0041] Figure 4A is a block diagram depicting additional details of an access control system according to an embodiment of the present invention, wherein a reader interacts during a first instance and receives a biometric template;

[0042] Figure 4B is a block diagram depicting the access control system of FIG. 4A during a second interaction between a reader and a user device according to an embodiment of the present invention;

[0043] Figure 5 is a block diagram depicting additional details of a reader according to an embodiment of the present invention;

[0044] Figures 6A to 6D depicts a user approaching a door or entrance during a first use case scenario in accordance with an embodiment of the present invention;

[0045] Figures 7A to 7D depicts a user approaching a door or entrance during a second use case scenario in accordance with an embodiment of the present invention;

[0046] Figure 8 depicts a user approaching a door or entrance during a third use case scenario in accordance with an embodiment of the present invention;

[0047] Fig. 9 is a diagram depicting the message flow between components of an access control system according to an embodiment of the present invention;

[0048] Fig.10 is a flow chart depicting a first method of maintaining security of a door or entrance and permitting automated actuation of the door or entrance in accordance with an embodiment of the present invention;

[0049] Fig.11is a flow chart depicting a second method of maintaining security of a door or entrance and permitting automated actuation of the door or entrance in accordance with an embodiment of the present invention;

[0050] Fig.12 is a flowchart depicting a method of managing templates at a reader according to an embodiment of the present invention; and

[0051] Fig.13 is a flow chart depicting a method of assessing a user's intent to enter a door or entrance, according to an embodiment of the present invention. DETAILED DESCRIPTION

[0052] Copyright and Legal Notice

[0053] A portion of the disclosure of this patent document contains material that is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction by anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark Office patent files or records, but otherwise reserves all copyright rights whatsoever.

[0054] Before any embodiment of the present invention is explained in detail, it should be understood that the present invention is not limited in its application to the details of the construction and the configuration of components set forth in the following description or illustrated in the following figures. The present invention may have other embodiments and be practiced or implemented in various ways. Moreover, it should be understood that the words and terms used herein are for descriptive purposes and should not be considered as limiting. The use of "comprises," "includes," or "having" and variations thereof herein is intended to encompass the items listed thereafter and their equivalents as well as additional items.

[0055] Figure 1 1 is a diagram depicting an access control system 100 according to an embodiment of the present invention. In one embodiment, the access control system 100 includes at least one reading device 112 and at least one portable device 108. The portable device 108 may also be referred to herein as a credential device, a user device, a mobile device, a mobile communication device, a mobile phone, or the like. The reading device 112 may include (e.g., in a local memory) or have access to access data 128. The access data 128 may be stored in a database, table as a set of rules, as program instructions, and / or as other data associated with maintaining the security of the access control system 100. In some embodiments, the reading device 112 may be configured to communicate with the access data 128 through the controller 116 (as shown) or directly across the communication network 140. In other words, the access data 128 may be located remotely, locally, and / or remotely and locally to the reading device 112.

[0056] The portable device 108 may be configured to communicate with the reading device 112 across one or more wireless communication connections. These one or more wireless communication connections may be via conventional radio protocols, proximity-based wireless communication protocols, Bluetooth TM , BLE, infrared, audible, NFC, RF, and other wireless communication networks and / or protocols to utilize communication. In some cases, when the portable device 108 enters the active zone of the interrogating reader 112, communication between the portable device 108 and the reader 112 may be automatically established. In one embodiment, the active zone of the reader 112 may be defined as a three-dimensional space where the strength of the RF signal emitted by the reader 112 exceeds a threshold of the sensitivity of the portable device 108 and the strength of the RF signal emitted by the portable device 108 exceeds a threshold of the sensitivity of the reader 112.

[0057] In some embodiments, portable device 108 may be configured to communicate with reading device 112 across communication network 140, although not in Figure 1 This configuration is depicted in an example of . In such embodiments, the communication network may include at least one of a conventional radio network, a wireless communication network, Zig-Bee, GSM, CDMA, WiFi, and / or use other communication networks and / or protocols as provided herein.

[0058] In one embodiment, authentication between the portable device 108 and the reading device 112 may be required before additional communications are implemented. The additional communications may provide for communications in which access control information (e.g., keys, templates, codes, credentials, etc.) is shared. In some embodiments, authentication may be provided via one-way or mutual authentication. Examples of authentication may include, but are not limited to, simple authentication based on site codes, trusted data formats, shared secrets, and / or the like. As may be appreciated, access control information is more sensitive and may require more involved verification via, for example, an encrypted exchange of access control information.

[0059] In some embodiments, reading device 112 may be configured to request access control information and / or a biometric template from portable device 108. The access control information and / or the biometric template may be provided by portable device 108 to reading device 112 (via a wireless connection established therebetween).

[0060] The reading device 112 or a component connected thereto (e.g., the controller 116) may utilize the access control information and / or the biometric template to determine whether to permit the user 104 to reach a controlled area of ​​the physical location. In particular, information obtained from the portable device 108, along with information obtained from the image capture device 120 or other biometric sensor 124, may be compared to the access data 128 and / or the biometric template to determine whether the door actuator or lock 132 should be opened, thereby permitting the user 104 to pass through and reach the protected physical asset. As will be discussed in further detail herein, the decision to permit access to the user 104 may be made at the reading device 112, at the controller 116, at the remote access server 136, or at a combination thereof.

[0061] Typically, the reading device 112 is associated with a particular asset (e.g., a door protecting access to a secure room, a computer lock protecting sensitive information or computer files, a security lock, and the like). In one embodiment, the portable device 108 and the holder of the portable device 108 (e.g., the user 104) may be verified via one or more components of the access control system 100. Once the portable device 108 is authenticated, the credential information, the biometric information of the user 104, and other information may be verified. During this process, the reading device 112 or the controller 116 may generate a signal that facilitates the execution of the result of interrogating the portable device 108 (e.g., engaging / disengaging a locking mechanism, allowing / disabling movement of a monitored object, temporarily disabling itself, activating an alarm system, providing access to a computer system, providing access to a particular document, and the like). Alternatively, the access server 136 may generate such a signal.

[0062] According to an embodiment of the present invention, the reading device 112 may collect access control information associated with the portable device 108 before an access control decision can be made. For example, the reading device 112 may require credential information stored on the portable device 108 to authenticate the portable device 108. In addition to authenticating the information received from the portable device 108, the reading device 112 and / or the controller 116 may also compare information from the image capture device 120 and / or other biometric sensors 124 to one or more biometric templates. The information obtained from the image capture device 120 and / or the biometric sensor 124 may describe the current biometric information about the user 104. If the current biometric information about the user 104 substantially matches the information in the biometric template within an acceptable threshold, the user 104 may be identified as a valid or authentic user. In some embodiments, when both the user 104 and the portable device 108 are authenticated, the reading device 112 and / or the controller 116 may actuate the door actuator or lock 132. In some embodiments, information from the portable device 108 may be used to reduce the number of biometric templates that are compared to the current biometric information of the user 104 (e.g., information from the devices 120, 124), thus enabling the biometric comparisons to occur more quickly than if all biometric templates were analyzed. By increasing the speed at which biometric comparisons are performed, the overall authentication process for the user 104 may be completed more quickly. This effectively enables the access control system 100 to make access control decisions for the user 104 quickly enough to limit the amount of interaction that the user 104 must perform with his portable device 108 and / or the reading device 112. It should be appreciated that the biometric templates discussed herein may include one or more of the following template types: retinal templates, infrared signature templates, weight templates, iris templates, sclera templates, body shape templates, and gait templates.

[0063] The access server 136 may include a processor, a memory, and one or more input / outputs. The memory of the access server 136 may be used in conjunction with the execution of application programming or instructions by the processor, and for temporary or long-term storage of program instructions and / or data. As an example, the memory may include RAM, DRAM, SDRAM, or other solid-state memory. Additionally or alternatively, the access server 136 may communicate with the access data 128. As with the memory of the access server 136, the access data 128 may be stored in one or more computer memory devices including, without limitation, solid-state memory devices. Alternatively or additionally, the access data 128 may be stored in a hard drive or some other random access memory device.

[0064] In some embodiments, the reading device 112 may be configured to communicate with one or more devices across the communication network 140. For example, the reading device 112 may communicate with the access server 136 across the communication network 140. In addition, such communication may allow back-end verification and / or provide notifications from the reading device 112 to the access server 136. The communication network 140 may include any type of known communication media or collection of communication media and may use any type of protocol to transmit messages between endpoints. The communication network 140 may include wired and / or wireless communication technologies. The Internet is an example of a communication network 140 that constitutes an Internet Protocol (IP) network, which is composed of many computers, computing networks, and other communication devices located throughout the world (which are connected by many telephone systems and other components). Other examples of the communication network 140 include, without limitation, a standard plain old telephone system (POTS), an integrated services digital network (ISDN), a public switched telephone network (PSTN), a local area network (LAN), a wide area network (WAN), a session initiation protocol (SIP) network, a voice over internet protocol (VoIP) network, a cellular network, RS-232, similar networks used in access control systems between readers and control panels, and any other type of packet-switched or circuit-switched network known in the art. Additionally, it can be appreciated that the communication network 140 need not be limited to any one network type, and instead may be comprised of a number of different networks and / or network types. Furthermore, the communication network 140 may include a number of different communication media, such as coaxial cables, copper cables / wires, fiber optic cables, antennas for transmitting / receiving wireless messages, and combinations thereof.

[0065] Reference now Figure 2 , additional details of access control system 200 and its operation will be described in accordance with at least some embodiments of the present invention. Access control system 200 is shown to include components similar or identical to those included in access control system 100. It should be appreciated that similar devices in each system may have similar or identical properties and / or features. Access control system 200 is shown to have a number of components operating at a first location 204 and another number of components operating at a second location 208 remote from the first location. In some embodiments, first location 204 and second location 208 may be in communication with each other (e.g., connected to each other) via communication network 140 or the like.

[0066] The first location 204 is shown to include a registration station 212 and a capture device 216. The capture device 216 may be an example of an image capture device 120. For example, the capture device 216 may correspond to a still image capture device or a video capture device. Alternatively or in addition, the capture device 216 may include one or more biometric sensors 124 or similar types of biometric capture devices. As some non-limiting examples, the capture device 216 may include a fingerprint capture device, a retinal image capture device, a heartbeat / heart rate capture device, or any other type of device capable of capturing biometric information about a user.

[0067] The enrollment station 212 is shown to include a template packaging module. The template packaging module of the enrollment station 212 may be executed by a processor in the enrollment station to facilitate the creation and packaging of a biometric template with information obtained from the capture device 216. In some embodiments, the enrollment station 212 includes a microprocessor and computer memory that enables the execution of template packaging. The enrollment station 212 may be operated by a security officer or the enrollment station 212 may include functionality that enables the user 104 to complete a self-registration procedure, wherein the user 104 is allowed to enroll themselves in the physical access control system and generate their own biometric template.

[0068] The enrollment station 212 is shown to communicate with a credential service interface or mobile access portal application programming interface (API) 220. As described above, the communication between the enrollment station 212 and the mobile access portal API 220 may be facilitated by the communication network 140. Depending on the security requirements of the system and whether the template package is encrypted before being transmitted, the connection may or may not be an encrypted / secure connection. The mobile access portal API 220 may enable the enrollment station 212 to communicate with the credential issuance system 224 in a secure manner. The mobile access portal API 220 may also facilitate the delivery of one or more biometric templates to the portable device 108. The delivery of the biometric template to the portable device 108 may be performed directly through the mobile access portal API 220 or the biometric template may be delivered via the credential issuance system 224. In some embodiments, the credential issuance system 224 is provided as one or more servers operating in a secure environment (e.g., behind one or more firewalls and / or session border controllers (SBCs)). In some embodiments, the entire remote system 208 operates in a secure environment. The mobile access portal API 220 may be provided as a functional component of the server that also implements the credential issuance system 224. Communications between the remote system 208 and the portable device 108 may occur via the communication network 140, which may be the same or a different type of communication network used to carry communications between the first location 204 and the remote system 208.

[0069] The access control system 200 can be used to facilitate the registration of a user 104 in a larger access control system 100. In operation, the user registration process can begin with the remote system 208 sending a registration communication to the portable device 108 of the user 104 (step S200). In some embodiments, the mobile access portal API 220 generates a message and sends the message to the portable device 108 of the user 104. The message can be in the form of an email message, an SMS message, an MMS message, an HTML file, or the like. It should be appreciated that this step can be performed after other steps in the registration process.

[0070] Enrollment may also include capturing one or more images or other biometric indicators of user 104 using capture device 216. The captured information may be provided to enrollment station 212 via a wired or wireless connection (step S201). In some embodiments, capture device 216 corresponds to a dedicated image capture device connected to enrollment station 212, which may be in the form of a personal computer, laptop computer, or the like. In alternative embodiments, capture device 216 may correspond to an image capture component on portable device 108 of user 104. For example, user 104 may be enabled to complete self-enrollment by acquiring an image or images of herself using a camera function on portable device 108. The captured information may be provided to enrollment station 212 in a secure or unsecure manner depending on system requirements and user preferences.

[0071] Upon receiving the information from the capture device 216, the enrollment station 212 may utilize its template packaging module to create one or more biometric templates for the user 104 (step S202). It should be understood that the one or more biometric templates may include a facial template, a fingerprint template, a full body template, an ear template, a retina template, etc. As is known in the art, a biometric template is not a copy of the captured biometric information (e.g., a biometric template is not simply an image of the user 104). Rather, the biometric template generated by template packaging is the result of some analysis and summary of the captured biometric information. As a non-limiting example, the biometric template may correspond to an analysis of the location of details contained in a fingerprint or facial image. As another example, the biometric template may correspond to a mathematical summary of a pattern in an iris image, a facial image, or the like. These templates contain unique characteristics of the biometric information of the user 104, and they are master copies that can be compared to future data acquisitions.

[0072] The enrollment process continues with the enrollment station 212 sending the wrapped biometric template to the credential service interface 220 (step S203). Specifically, this data may be transmitted to the remote system 208 upon requesting the credential issuing system 224 to provide an appropriate biometric template consistent with the data and formatting requirements of the access control system 100, 200.

[0073] The credential service interface 220 may then forward the biometric template (or request for a biometric template) to the credential issuing system 224 (step S204). In response, the credential issuing system 224 may generate an appropriate message or data payload that may be delivered to the portable device 108. The message or data payload may include the biometric template generated at the enrollment station 212. In some embodiments, the credential issuing system 224 may save the biometric template until the portable device 108 submits a request for the biometric template (step S205). By waiting for an appropriate request from the portable device 108, the credential issuing system 224 ensures that the biometric template is not inappropriately transmitted to a portable device 108 that has not passed verification. As a non-limiting example, the request generated and transmitted by the portable device 108 may be generated together with the information contained in the registration message received at step S200. Therefore, the request transmitted in step S205 references the registration message or obtains the addressing information of the credential issuing system 224 via the registration message.

[0074] Upon receiving the request, the credential issuing system 224 may reference its internal database to determine whether a biometric template has been created for the user 104 associated with the portable device 108. If such a biometric template has been generated and received at the credential issuing system 224, the system 224 may then transmit the biometric template to the portable device 108 (step S206). This effectively enables the portable device 108 to store and retain the biometric template in local memory. As an example, the portable device 108 may store the biometric template in a secure or encrypted protected area of ​​memory. Alternatively or in addition, the biometric template may be stored by a specific application operating on the portable device 108, thereby making the biometric template inaccessible to other applications on the portable device 108. At this point, the portable device 108 is now provisioned with a biometric template and the user 104 is ready to utilize the access control system 100 in a relatively frictionless manner, as will be described in further detail herein.

[0075] Reference now Figure 3, additional details of the portable device 108 will be described according to at least some embodiments of the present invention. As mentioned above, the portable device 108 may correspond to any type of communication or computing device capable of being carried by the user 104. The portable device 108 may include a smart phone, a tablet computer, a laptop computer, an implanted chip, etc.

[0076] The portable device 108 may include one or more components, such as a memory 304, a processor 308, antennas 312A to N, and a communication module 316. The memory 304 of the portable device 108 may be used in conjunction with the execution of application programming or instructions by the processor 308, and for temporary or long-term storage of program instructions and / or data. The memory 304 may also be used for long-term or temporary storage of templates 328A to M. The memory 304 may further contain executable functions used by the processor 308 to run other components of the portable device 108. In one embodiment, the memory 304 may be configured to store credential information, templates, and applications that enable the portable device 108 to be used and recognized within the access control system 100. In some embodiments, the memory 304 may include volatile or non-volatile memory and a controller thereof. Non-limiting examples of memory 304 that may be utilized in the portable device 108 include RAM, ROM, buffer memory, flash memory, solid-state memory, or variations thereof.

[0077] Processor 308 may correspond to one or more microprocessors contained within the housing of portable device 108 along with memory 304. In some embodiments, processor 308 incorporates the functionality of a central processing unit (CPU) of a user device on a single integrated circuit (IC) or several IC chips. Processor 308 may be a multi-purpose programmable device that accepts digital data as input, processes the digital data according to instructions stored in its internal memory, and provides results as output. Processor 308 implements sequential digital logic because it has internal memory. Like most known microprocessors, processor 308 can operate on numbers and symbols represented in the binary number system.

[0078] One or more antennas 312A-N may be configured to enable wireless communication between the portable device 108 and the reader 112 and / or between the portable device 108 and the communication network 140. As can be appreciated, the antennas 312A-N may be configured to use, including but not limited to, The antennas 312A to N may be RF antennas and may transmit RF signals through free space to be received by a reader device 112 having an RF transceiver.

[0079] In some embodiments, the portable device 108 may include a power module. The power module may be configured to provide power to several parts of the portable device 108 for operation. The power module may store power in a capacitor of the power module. In one embodiment, the electronics in the power module may store energy in the capacitor and shut down when an RF field is present. This arrangement can ensure that energy is presented to the portable device 108, thereby minimizing any effect on the reading distance. Although the portable device 108 may be configured to passively receive power from the electric field of the reading device 112, it should be understood that the portable device 108 can provide its own power. For example, the power module may include a battery or other power source to supply power to several parts of the portable device 108. The power module may include a built-in power supply (e.g., a battery) and / or a power converter that facilitates converting externally supplied alternating current into DC direct current for powering various components of the portable device 108. In some embodiments, the power module may also include a certain implementation of a surge protection circuit to protect the components of the portable device 108 from power surges.

[0080] The portable device 108 may include a communication module 316 configured to communicate remotely or locally with one or more different systems or devices. Thus, the communication module 316 may send or receive messages to or from the reading device 112, the server 136, across the communication network 140, etc. The communication module 316 may utilize one or more antenna drivers 314 to format the message for transmission by the antenna 312A. Conversely, the antenna driver 314 may also be used to convert the signal received at the antenna 312A into an appropriate message that can be used by the communication module 316 and then can be transmitted to the processor 308.

[0081] The memory 304 of the portable device 108 is specifically shown to have stored thereon an advertising application 320 and one or more mobile access applications 324. The advertising application 320 may contain instructions that, when executed by the processor 308, enable the portable device 108 to advertise or broadcast specific information about the portable device 108 (e.g., a mobile identifier, model type, identification of the mobile access application 324, a Bluetooth or BLE beacon ID, a random number, a site code, a serial number, etc.). Generally speaking, the information transmitted by the advertising application 320 is not considered sensitive. Therefore, the information transmitted by the advertising application 320 may be transmitted in the clear and, as an example, may be used to facilitate initial authentication between the portable device 108 and the reader 112.

[0082] In contrast, the mobile access application 324 may store sensitive mobile access credentials and / or biometric templates 328A to M. The biometric templates 328A to M stored in the mobile access application 324 may be used in conjunction with the mobile access application 324. Figure 2 The biometric templates generated during the enrollment process depicted and described are similar or identical. As can be appreciated, the different biometric templates stored in a single mobile access application 324 may include templates of different types (e.g., facial templates, fingerprint templates, retinal templates, gait templates, etc.). In some embodiments, more than one mobile access application 324 may be stored in the memory 304. In this case, different mobile access applications 324 may be used in conjunction with different access control systems 100. As a non-limiting example, one mobile access application 324 may be used in conjunction with a home access control system of the user 104, while another mobile access application 324 may be used in conjunction with a work access control system of the user 104. These different applications 324 may be isolated from each other in the memory 304, meaning that no information is shared between the applications. However, there may be scenarios in which the user 104 allows a single biometric template to be stored in two or more different mobile access applications 324 operating in conjunction with different access control systems. This may be possible in the presence of a certain level of trust between the applications 324, meaning that one application can prove to another application that a biometric template created for one application is trusted and suitable for use with another application. Sharing biometric templates 328 between mobile access applications 324 may help reduce the number of times a user 104 is required to complete a registration process, which may be viewed as cumbersome and time consuming.

[0083] Reference now Figure 4A and 4B , additional details of the interaction of the portable device 108 with the reader system 404 (e.g., the reading device 112) will be described according to at least some embodiments of the present invention. The portable device 108 is now depicted as a user device 108, but it should be understood that the devices are similar or identical to each other. The term user device 108 is intended to mean that the portable device is being carried by the user 104. Initially referring to Figure 4A , the first usage scenario will be described.

[0084] In this particular scenario, user 104 approaches reader system 404 for the first time with his user device 108. As can be appreciated, reader system 404 can correspond to a particular instance of reading device 112 or a collection of reading devices 112. Alternatively or in addition, a reader system can be distinct from a reading device in that a reader system does not necessarily contain all of its components in a common housing, whereas a reading device contains all of its components in a common housing. For ease of discussion, Figure 4A and 4B Reference may be made to reader system 404 , but it should be appreciated that reading device 112 may operate in a similar or identical manner as reader system 404 .

[0085] The reader system 404 is shown to include an embedded system 408 in communication with one or more reader units 412, 416. The reader units 412, 416 may serve as a physical interface between the embedded system 408 and the user device 108. During the first use, the reader system 404 may not have the biometric template 328 of the user 104 in local memory. Therefore, the biometric template 328 is passed to the reader system 404 via the reader unit 416. In some embodiments, the reader unit 416 corresponds to a second reader unit of the reader system 404, while the reader unit 412 corresponds to the first reader unit 412. The reader units 412, 416 may utilize different communication protocols or wireless communication channels / frequencies to exchange information with the user device 108. As a non-limiting example, the first reader unit 412 may correspond to a generic BLE reader, while the second reader unit 412 may correspond to a secure BLE reader. Other protocols (e.g., NFC) may be utilized by one or both of the reader units 412, 416.

[0086] When the reader system 404 needs to obtain a biometric template from the user device 108, it may be desirable to use a secure reader unit (e.g., the second reader unit 416) rather than a less secure reader unit. This helps ensure that the biometric template is not compromised when transmitted to the reader system 404.

[0087] The embedded system 408 is further shown to include a biometric module 420, a credential module 424, analysis rules 428, a template library 432, a temporary template storage area 436, and a decision engine 440. The credential module 424 can interface with the reader units 412, 416, while the biometric module can interface with the capture device 216. One of the credential module 424 and the biometric module 420 can be used in conjunction with making an access control decision for the user 104. Such an access control decision can take into account both the credential information stored on the user device 108 and / or the biometric information of the user 104 captured by the capture device 216. The analysis rules 428 can be referenced by the decision engine 440 to make access control decisions based on data received from both the credential module 424 and the biometric module 420.

[0088] In some embodiments, when the user device 108 first interacts with the reader system 404, the biometric template 328 is transmitted to the embedded system 408 via the second reader unit 416. Communication between the second reader unit 416 and the credential module 424 may be facilitated by a wired connection (e.g., a hardwired connection or some other secure serial communication interface). The credential module 424 may cause the biometric template 328 to be stored in the template library 432 of the reader system 404. The biometric template 328 of the user 104 may be maintained in the template library 432 indefinitely or for as long as is practicable and based on a memory management policy. The biometric template 328 may then be compared to the biometric information captured by the capture device 216 and passed to the biometric module 420. If there is a sufficient match between the biometric template 328 and the biometric information, the decision engine 440 may pass a positive result of the biometric comparison to the gate controller 116.

[0089] Alternatively or in addition, the door controller 116 may execute the decision engine 440 and reference the analysis rules 428. In other embodiments, the decision engine 440 may make the access control decision and the door controller 116 may provide an electromechanical interface between the reader system 404 and the actuators 448, 452 of the door 444. In some embodiments, the actuators 448, 452 may include a lock or latch 448 that can be moved between a first position and a second position (e.g., a locked position and an unlocked position). On the other hand, the actuator 452 may correspond to an automated arm, piston, or similar mechanical actuator that physically moves the door 444 between an open position and a closed position. The door controller 116 may control the actuators 448, 452 in a coordinated manner according to the access control decision made at the decision engine 440. As can be appreciated, the first access control decision made by the embedded system 408 may be slightly delayed due to the need to pass the template 328 to the reader system 404 before enabling the biometric matching process.

[0090] on the other hand, Figure 4BThe same user device 108 is shown interacting with the reader system 404 during subsequent use (e.g., after the biometric template 328 has been passed to the reader system 404 and stored in the template library 432). The reader system 404 and the user device 108 may both maintain a log of interactions, thereby enabling both devices to know when they interacted with the other device, either for the first time (e.g., if no previous interaction history exists for the device pair) or at a subsequent time (e.g., if some previous interaction history exists for the device pair). During subsequent use, the user device 108 no longer needs to pass the biometric template 328 to the reader system 404. Alternatively, the user device 108 may simply provide information from its advertising application 320 to the embedded system 408 via the first reader unit 412. The advertising application 320 may simply provide an identifier of the user device 108, an identifier of an instance of the mobile access application 324, and / or an identifier of the user 104. This information is provided to the credential module 424 which correlates the received information with one or a subset of the templates stored in the template library 432. These correlated templates in the template library 432 are moved to the temporary template storage area 436 so that the biometric module 420 can quickly compare only the biometric information from the capture device 216 to the biometric templates in the temporary template storage area 436.

[0091] Because the number of templates in the temporary template storage area 436 is less than the total number of biometric templates stored in the template library 432, the number of comparisons performed by the biometric module 420 is greatly reduced. This significantly increases the speed at which biometric comparisons can be performed, which in turn increases the speed at which access control decisions can be made for the user 104. In some embodiments, if access control decisions can be made quickly enough by the reader system 404, the door 444 can be automatically locked / unlocked and / or opened / closed for the user 104 without requiring the user 104 to slow down when approaching the door 444 or perform some other type of explicit interaction with the reader system 404. It should be appreciated that after the biometric comparisons have been completed and access control decisions have been made, the biometric templates saved in the temporary template storage area 436 can then be removed or cleared from that section of memory, thereby clearing the memory for other biometric templates that will be compared to other users' biometric information.

[0092] Reference now Figure 5, additional details of the reader system 404 will be described in accordance with at least some embodiments of the present invention. The reader system 404 is shown to interface with the capture device 216 and the reader units 412, 416 as previously described. More specifically, the reader system 404 is shown to include a controller interface 504, a capture interface 508, a reader unit interface 512, a wireless interface 516, a facial controller 520, a credential controller 524, a facial template and credential identifier repository 528, an intent analyzer 532, a credential matcher 536, a decision engine 540, and an access controller protocol 544.

[0093] The capture interface 508 may provide a physical interface between the reader system 404 and the capture device 216. As such, the capture interface 508 may include a serial data port or some other input / output device that enables communication with the capture device 216. Non-limiting examples of the capture interface 508 include a USB port, a SCSI port, a PCIe port, an Ethernet port, a video port, or the like.

[0094] Similar to the capture interface 508, the reader unit interface 512 can provide a physical interface between the reader system 404 and the reader units 412, 416. In some embodiments, a single interface 512 provides interconnection between the reader system 404 and multiple reader units. In other embodiments, each reader unit can be connected to the reader system 404 via a different and dedicated reader unit interface 512. The reader unit interface 512 can depend on the nature of the reader units 412, 416. Non-limiting examples of the reader unit interface 512 include a USB port, a set of USB ports connected to an internal switch, an RS-232 port, an Ethernet port, etc.

[0095] The wireless interface 516 may provide a physical interface between the reader system 404 and one or more wireless antennas. The wireless interface 516 may include, without limitation, one or more wireless antenna drivers that enable communication using any type of wireless communication protocol (e.g., WiFi, Bluetooth, NFC, etc.). The wireless interface 516 may be directly connected to the processor of the reader system 404 or the wireless interface 516 may be directly connected to the main application 540.

[0096] The capture interface 508 is connected to the face controller 520, whereas the reader unit interface 512 is connected to the credential controller 524. It should be appreciated that the face controller 520 may be embodied as any type of controller suitable for processing any type of biometric information and templates. In particular, the face controller 520 is not necessarily limited to facilitating the processing of facial biometric information and facial templates. Rather, the face controller 520 may be provided as a general biometric controller capable of processing other types of biometric information and templates (e.g., fingerprint, retina, gait, etc.). Both the face controller 520 and the credential controller 524 interface with a database 528, which may include biometric templates and credential identifiers (e.g., "credential IDs"). Based on the credential information received at the credential controller 524, a subset of all templates may be retrieved from the database 528 by the face controller 520. In other words, when the credential ID is received at the credential controller 524, the credential ID may be matched to one or a subset of all templates stored in the database 528. The matching template may be provided to the face controller 520. The face controller 520 may provide the biometric information obtained from the capture interface 508 along with the retrieved template to the credential matcher 536. Thus, the credential matcher 536 is allowed to compare the biometric information to less than all of the biometric templates maintained in the database 528. Alternatively or in addition, the selected biometric template may not flow through the face controller 520 to the credential matcher 536. Rather, the credential controller 524 may retrieve an appropriate subset of biometric templates from the database 528 based on a lookup on the credential ID. The templates may be provided directly to the credential matcher 536 or the subset may be further reduced to a smaller subset by the intent analyzer 532.

[0097] The intent analyzer 532 may further reduce the number of biometric templates that need to be compared to the biometric information based on detecting which user's intent affirmatively indicates intent to enter the door 444. Said another way, the intent analyzer 532 may analyze the captured information from the capture device 216 to determine whether a particular user within the viewing area has demonstrated a positive intent to enter the door 444. If the user's intent has been identified as positive with respect to entering the door 444, then the credential ID associated with that particular user (rather than other users also within the communication range of the reader units 412, 416) may be used as the credential ID to select a particular biometric template to match at the credential matcher 536. By waiting for a positive intent indication, the door 444 is maintained in a secure state unless and until the user 104 demonstrates that he or she wants to pass through the door 444. This eliminates the number of times the door 444 is inadvertently opened when no user is attempting to pass through the door 444, thereby enhancing the overall security of the system.

[0098] The results of the credential analysis and biometric matching may be provided from the credential matcher 536 to the primary application or decision engine 540. The primary application or decision engine 540 may then make a determination as to whether to actuate (e.g., open, close, lock, and / or unlock) the door 444 based on the decision from the credential matcher 536 along with any other relevant decision criteria (e.g., time of day, user access rights, etc.).

[0099] The decisions of the main application or decision engine 540 may then be provided to an access controller protocol 544, which formats one or more instructions to be executed by the controller 116. Instructions to actuate or not actuate the door actuators 448, 452 may be provided from the controller protocol 544 to the controller 116 via the controller interface 504. In some embodiments, the controller interface 504 may include a serial or parallel data interface / port that physically connects the reader system 404 to the controller 116. Non-limiting examples of controller interfaces include an RS-485 interface, a Wiegand interface, an Ethernet port, a USB port, or the like.

[0100] The controller 116 may receive instructions from the controller protocol 544 (via the controller interface 504) and make a decision as to whether the door actuators 448, 452 need to be actuated. As an example, if the door 444 is normally closed and a decision is made to grant access to the user 104 through the door 444, the controller 116 may cause the actuators 448, 452 to unlock the lock / latch 448 and automatically open the door 444 via the actuator 452. Alternatively, if the door 444 is normally open and a decision is made not to grant access to the user 104 approaching the door 444 through the door 444, the controller 116 may cause the actuator 452 to close the door 444 and then actuate the lock / latch 448 into the locked position. Thus, a normally open or normally closed door 444 may be operated with the reader system 404.

[0101] Reference now Figures 6A to 6D , a first use case scenario for access control system 100 will be described in accordance with at least some embodiments of the present invention. Fig. 6A A first point in time is shown where the user 104 is approaching a door 616 that serves as a physical entrance through the wall 604 or the like. The door 616 is associated with a biometric sensor 608 and a reader device 612. The door 616 can be similar or identical to other doors depicted and described herein. Likewise, the biometric sensor 608 can be similar or identical to other image capture devices, biometric sensors, or capture devices depicted and described herein. The reader device 612 can be similar or identical to a reader device or reader system depicted and described herein.

[0102] As the user 104 approaches the door 616, the user 104 also enters the active zone of the associated biometric sensor 608 and the reader 612. In some embodiments, the user 104 may first enter an active read zone 624 of the reader 612. This active read zone 624 may correspond to a volume of space in which a credential or portable device 108 carried by the user 104 is readable or capable of exchanging information with the reader 612 wirelessly. As a non-limiting example, if the reader 612 is BLE or WiFi enabled, the active read zone 624 may extend 10 to 50 meters away from the door 616. This active read zone 624 may be directional (e.g., only pointing away from the door 616 on the unsecured side of the wall 604) or the active read zone 624 may also extend to the secure side of the wall 604. When the user 104 is within this active read zone 624, the credential or portable device 108 carried by the user 104 may perform an authentication process with the reader 612 and further exchange credential information with the reader 612. As a non-limiting example, the credential or portable device 108 may provide its credential ID to the reading device 612 .

[0103] like Figure 6B and 6C , if the user 104 continues to approach the door 616, the user 104 may enter the sensing range 620 of the biometric sensor 608. In embodiments where the biometric sensor 608 corresponds to a camera or image capture device, the sensing range 620 may correspond to a viewing range where the biometric information of the user 104 may be captured with a certain amount of accuracy and confidence. In some embodiments, a credential ID is first collected from a credential in range (e.g., from any credential or portable device 108 present within the active reading zone 624). Thereafter, a template is collected by the reader 612 using the credential ID. Specifically, a template corresponding to the obtained credential ID is obtained from a template library. If the template is not currently stored in the template library, a template associated with the credential ID may be requested from the credential or portable device 108. Finally, the reader 612 obtains a biometric template from the template library and forms a template subset based on the credential ID present within the active reading zone 624.

[0104] Thereafter, when the user 104 enters the sensing range 620, the facial information or other biometric information of the user 104 is obtained (for example, see Fig. 6A and 6B). While user 104 remains in sensing range 620, user 104 and his / her biometric information may be tracked, recorded, etc. While user 104 is within sensing range 620, but before user 104 enters intent zone 628, reader 612 may compare user 104's biometric information to a subset of templates. If there is a match between user 104's current biometric information and a template analyzed based on the subset of templates, then a "pending" access grant is given to that particular user 104. In other words, a conditional access control decision is made for user 104. This decision effectively enables reader 612 to open door 616 if / when user 104 enters intent zone 628, which is a predetermined distance away from door 616. When user 104 eventually gets close enough to door 616 (or camera 608), the "pending" access grant is converted into a conditional access control decision such as Fig.6D . At this point, user 104 is identified as a valid user and further identified as having the intent to enter door / entrance 616.

[0105] Advantageously, the current biometric template extraction and matching may be made at a distance before the user 104 is in the vicinity of the door 616. This biometric matching process, which is processor intensive, may be performed over a longer amount of time and before the user 104 affirmatively demonstrates intent to enter the door / entrance 616. Alternatively or in addition, it may be possible in certain instances to check the access rights of the user 104 (e.g., through biometric matching) after the user 104's intent to enter the door 616 has been determined. However, making the biometric matching decision with a CPU-constrained system before the user 104 is directly in front of the door helps enhance the user 104 experience and minimizes delays for the user 104 to gain access through the door / entrance 616.

[0106] The biometric comparison may be performed relatively quickly because the reading device 612 does not have to compare the current biometric information to all templates stored in the database of the reading device 612. If there is a match between the current biometric information and the selected template, the user 104 may be granted access through the door 616 (temporarily, immediately, or after the user 104 has demonstrated intent to pass through the door / entrance 616). If operating effectively, the user 104 may be allowed to gain access through the door 616 without having to affirmatively present their credentials or portable device 108 to the reading device 612 and without having to wait or stop upon approaching the door 616 because the biometric match may be made relatively quickly and before the user 104 enters the intent zone 628.

[0107] Reference now Figures 7A to 7D, another use case scenario will be described. Similar to the first use case, this particular use case may correspond to a scenario in which a user 104 is approaching a door 616 that protects a physical asset such as a room, hallway, building, etc. In this scenario, the user 104 is not the only person within the sensing range 620 and / or the active reading zone 624. Rather, a group 704 of other people may also be within one or both of the sensing range 620 and the active reading zone 624. This particular use case highlights the effectiveness of first obtaining a credential ID associated with the user 104 and then using the credential ID to obtain one or more biometric templates for matching purposes. The processes implemented in this use case are similar to those in conjunction with Figures 6A to 6D The process described and implemented is similar in that the reader 612 can obtain the credential ID of the user within the active reading zone 624 and then form a subset of biometric templates for analysis against the current biometric information of the user passing through the sensing range 620. However, what is different in this use case is the fact that multiple credential IDs can be obtained by the reader 612. This effectively means that a 1:1 match between the template and the current biometric information may not be possible. However, advantageously, it is still possible to minimize the number of biometric templates analyzed during the biometric comparison step. For example, even in the case where there are 100 people in the group 704, it is unlikely that everyone is carrying a credential or portable device 108. Therefore, only the biometric template of the recognized credential ID will be obtained from the template library for further comparison with the current biometric information. Therefore, it may be possible to move from a 1:10 type of matching process (depending on how many credential IDs are recognized and how many people are in the group 704) as opposed to a 1:100 or 1:1000 matching process. Specifically, if the reading device 612 only has to compare the biometric information of the user 104 to one or a subset of all biometric templates stored in the template library, it will be able to make rapid access control decisions. In addition, if one or more people in the group 704 are not carrying a valid credential or portable device, at least one template will not be retrieved from the template library of another user 104 when that person approaches the door.

[0108] If the crowd 704 includes some users carrying valid credentials or portable devices 108 and those users are within the active read zone 624, then the biometric templates of those users may be retrieved from the template library for biometric matching against the current biometric information obtained by the biometric sensor 608 for the user 104. Unfortunately, this may result in a less than 1:1 optimal biometric match when the user 104 is close to the matching range 628, because more than one template may have been retrieved from the template library due to the presence of other credentials or portable devices 108 within the active read zone 624.

[0109] Embodiments of the present invention propose additional features or capabilities to further reduce the number of biometric templates used in the biometric matching process. For example, the distance between the credential or portable device 108 and the reading device 112 can be used to correlate a particular user 104 approaching the door 616 with a particular credential ID and therefore a particular biometric template. The distance can be calculated using any type of known indicator such as signal strength (e.g., received signal strength indicator (RSSI)), flight distance or time (e.g., time of flight (ToF)), angle of arrival (AoA), or a combination thereof. The number of templates taken from the template library can be further reduced or limited to a particular user 104 that is close to the matching range 628 or shows an intention to enter the door 616. In particular, the reading device 612 can be enabled to determine which of the users in the sensing range 620 show an intention to enter the door 616. Only users identified as having intent can have their associated credential ID used to take out a biometric template from the template library. All other users in the crowd 700 can be ignored and their credential IDs can not be read by the reading device 612 or can be ignored only when read by the reading device 612. Alternatively or additionally, such as in combination with Figures 6A to 6D As discussed, a biometric comparison may be performed for user 104 (and other users) in sensing region 620. When there is a biometric match between the current biometric information of user 104 and the biometric template, then a "temporary" or "pending" access grant may be granted to user 104. Once an authorized (and previously verified) user 104 enters intent region 628, door 616 may be opened or otherwise controlled to permit user 104 to pass through door / entrance 616.

[0110] Reference now Figure 8 , wherein a use case scenario of user intent for further limiting the number of biometric templates retrieved from the template library will be described in accordance with at least some embodiments of the present invention. User 104 is shown as the only user in active read zone 624, but it should be appreciated that this use case may be employed in scenarios where multiple people are within active read zone 624. This may help move reading device 612 from a 1:N match between a biometric template and the current biometric information of user 104 to a 1:N-1 or even a 1:1 match.

[0111] Specifically, the user may begin to approach the door 616 along a path that is not directed toward the door 616. When the user 104 enters the active reading zone 624 (step S801), the credential from the user 104 or the credential ID of the portable device 108 may be received at the reading device 612. The user 104 may continue along a path that is not directed toward the door 616 until the user 104 enters the sensing range 620 of the biometric sensor 608 (step S802). The reading device 612 may not have yet retrieved the user's biometric template (based on the credential ID that has been received) because this user 104 has not yet demonstrated an intention to enter the door 616. However, the movement or travel path of the user 104 may still be monitored as the distance between the user 104 and the door 616 decreases (step S803). Eventually, the travel path of the user 104 may become directed toward the door 616 (step S804).

[0112] If intent analyzer 532 eventually recognizes that user 104 has affirmatively demonstrated intent to enter door 616 and the user crosses the door action boundary (step S805), intent analyzer 532 may cause the reading device to fetch the biometric template associated with the credential ID previously obtained from user 104's credential or portable device 108. If the door action boundary is adequately sized (e.g., small enough to ensure that no more than two or three people can fit within the door action boundary), the number of biometric templates compared to user 104's current biometric information will be sufficiently small to likely facilitate a 1:1 biometric match rather than requiring a 1:N match against other users' templates in active read zone 624. This effectively enables reading device 612 to make an access control decision quickly enough to allow user 104 access through door 616 if user 104 is identified as a valid and trusted user while within the door action boundary. In some embodiments, this prompt access control decision may enable door 616 to open in an automated manner without requiring user 104 to remove their credentials or portable device 108 from their pocket, purse, bag, or other storage area while enabling door 616 to open automatically for user 104.

[0113] Reference now Fig. 9, additional details regarding the operation of the reader system 404 components will be described in accordance with at least some embodiments of the present invention. The operation process begins when the credential controller 524 receives credential information from the reader unit 412, 416 and forwards the information to the intent analyzer 532 (step S901). In some embodiments, the credential information obtained at the credential controller 524 may include a credential ID along with other information associated with the credential. As a non-limiting example, the credential ID may be received at a signal from which RSSI, ToF, and / or AoA may also be obtained. Therefore, the credential information provided to the intent analyzer 532 may include the credential ID along with other associated signal information such as RSSI, ToF, and / or AoA.

[0114] The process continues when the facial controller 520 provides biometric information related to one or more users in the sensing range 620 to the intent analyzer 532 (step S902). The information provided to the intent analyzer 532 in this step may include a list of biometric information in a raw or processed state currently captured by the capture device 216. For example, a list of facial handles, facial position in pixels, facial size in pixels, distance from the sensor 616, and other information may be provided to the intent analyzer 532. As can be appreciated, the distance information received for a particular face may be associated with a particular credential ID (e.g., via RSSI, ToF, and / or AoA information). The intent analyzer 532 may provide the biometric information and credential information to the credential matcher 536 for further processing (step S903). In particular, the intent analyzer 532 may assume that the facial handle is consistent from frame to frame, and if the user's intent is positively identified as wanting to pass through a door, the associated biometric and credential information of the user 104 may be provided to the credential matcher 536 .

[0115] The credential matcher 536 may use the credential information (e.g., credential ID, RSSI, ToF, AoA, etc.) together with the biometric information (e.g., current biometric information, pixel information, facial size information, distance information, etc.) to begin performing a facial recognition process (step S904). Specifically, the credential matcher 536 may request the facial controller 520 to verify that the current biometric information matches a biometric template selected from a template library of the user 104 approaching the door. The facial controller 520 may compare the biometric information to the biometric template and generate a match score (step S905). The credential matcher 536 may check the match score against a predetermined match threshold as known in the biometric access control art (step S906). The credential matcher 536 may be programmed to stop the comparison on the first match (e.g., where the first match score meets or exceeds the predetermined match threshold). If there is no match, the process will end. However, if there is a match, the credential matcher 536 will instruct the access controller protocol 544 to send a message to the door controller 116 (step S907). In some embodiments, the credential matcher 536 will provide the credential ID of the now permitted user 104 to the access controller protocol, which will cause the access controller protocol to provide an actuation signal to the controller 116 (step S908).

[0116] Reference now Fig.10 , a method 1000 of maintaining security of a door or entrance and permitting automated actuation of the door or entrance will be described according to embodiments of the present invention. It should be appreciated that the method 1000 may be performed in conjunction with any of the access control systems, readers, reading devices, doors, and / or entrances depicted and described herein. Furthermore, while the steps of the method 1000 are shown in a particular order, embodiments of the present invention contemplate that one or more steps may be performed concurrently with each other or in an order different from that depicted.

[0117] The method 1000 begins with a start operation (step 1004) and continues when a credential or portable device is detected within the active reading range of a reader, a reading device, or a reader system (hereinafter referred to as a "reader" for convenience) (step 1008). When the credential or portable device is detected, the method 1000 continues with the reader exchanging information with the credential or portable device (step 1012). In some embodiments, the devices may perform mutual authentication to establish a baseline trust level. After authentication, the credential or portable device may provide credential information to the reader in the form of a credential ID and other information stored in a memory of the credential or portable device.

[0118] Upon exchanging credential information, the reader may be configured to determine an estimated spatial relationship between itself and the credential or portable device (step 1016). In some embodiments, the estimated spatial relationship may be determined based on signal information obtained from a signal carrying the credential ID. As non-limiting examples, the reader may determine RSSI, ToF, AoA, or other parameters associated with a signal transmitted by the credential or portable device. The estimated spatial relationship may correspond to an estimated linear distance between the reader and the credential / portable device, an area or volume of space occupied by the credential / portable device, or an estimated point in the space occupied by the credential / portable device.

[0119] Based on the credential ID and the estimated spatial relationship, the reader may select a subset of templates from among the plurality of templates for further analysis (step 1020). Stated another way, the reader or a component thereof may utilize the estimated spatial relationship along with the credential ID (or other credential information) in conjunction with reducing the number of biometric templates considered during a biometric comparison from all of its available biometric templates (e.g., N templates) to a subset of all available biometric templates (e.g., at least N-1 templates). Reducing the number of biometric templates considered during subsequent comparison steps will help increase the speed at which a biometric match (or lack of a match) is made.

[0120] The method 1000 continues with the reader obtaining current biometric information of the user approaching the door (step 1024). In some embodiments, the current biometric information of the user may be associated with a particular credential ID based on the estimated spatial relationship. For example, if the user is detected to be a certain distance away from the image capture device and the credential ID is also estimated to be approximately the same distance away from the reader (within a predetermined tolerance), then the user may be associated with the credential ID. The biometric information of the particular user may then be compared with the template obtained with the corresponding credential ID (step 1028). In some embodiments, a simple comparison of the current biometric information with a single biometric template associated with the credential ID may be performed. If a strong correlation between a single credential ID and a biometric template cannot be achieved, then at least a subset of the total number of biometric templates may be compared with the current biometric information of the user approaching the door. If there is no match when comparing the current biometric information with the first biometric template (step 1032), then the method 1000 will continue to compare the current biometric information with other biometric templates (from among the selected subset) until there is a match or until all biometric templates have been analyzed and no matches exist.

[0121] If there is a match between the biometric template and the current biometric information, the method continues with the reader sending one or more signals to the controller (step 1036). In some embodiments, a match condition may exist when the current biometric information matches the biometric template within a certain predetermined tolerance. As a non-limiting example, a match score may be assigned based on the number of common features between the current biometric information and the biometric template. If the match score is sufficient (e.g., equal to or greater than a predetermined match score), then a positive match may exist. Otherwise, there is no positive match.

[0122] The signal sent to the controller may cause the controller to operate one or more actuators of the automated door as appropriate (step 1040). As a non-limiting example, if the door is a normally closed door, the control signal associated with identifying a match in step 1032 may cause the lock of the door to move to an unlocked state, and optionally the door may be actuated, rotated, slid, or swung so as to open the entrance and allow the user to pass through the now open entrance. It should be understood that these automated actuations of the door may occur where the user must physically present the credential / portable device to the reader (e.g., by placing the credential / portable device within a few centimeters of the reader). In some embodiments, a valid user may be permitted to pass through the door without requiring the user to stop as he or she walks toward the door. As another non-limiting example, if the door is a normally open door, the control signal associated with identifying a match in step 1032 may cause the door to remain in its current state (e.g., open and unlocked). If there is no match in step 1032, the door may move to a closed and / or locked state. The method ends thereafter (step 1044).

[0123] Reference now Fig.11 , a second method 1100 of maintaining security of a door or entrance and permitting automated actuation of the door or entrance will be described in accordance with embodiments of the present invention. It should be appreciated that the method 1100 may be performed in conjunction with any of the access control systems, readers, reading devices, doors, and / or entrances depicted and described herein. Furthermore, while the steps of the method 1100 are shown in a particular order, embodiments of the present invention contemplate that one or more steps may be performed simultaneously with one another or in an order different from that depicted. This particular method may be performed in conjunction with a door or entrance that is maintained in a normally open state.

[0124] Method 1100 begins with a start operation (step 1104) and continues upon detecting that a user is approaching a door or entrance (step 1108). Detection of the user may be facilitated by an image capture device, a biometric sensor, a reader, or a combination thereof. As the user approaches the door, method 1100 continues by initiating a biometric and / or credential analysis process (step 1112). In some embodiments, the biometric and / or credential analysis process may be similar to method 1000 or any other biometric or credential analysis process depicted and described herein.

[0125] The method 1100 continues by determining whether the user approaching the door / entrance is identified as an authorized user allowed through the door / entrance (step 1116). If this query is answered affirmatively, the door / entrance is maintained in its open state (step 1132). The method 1100 may continue by optionally updating the reader log to reflect that the identified user was granted access through the door / entrance and that the user actually passed through the door / entrance (step 1136). Thereafter, the method ends (step 1140).

[0126] Referring back to step 1116, if the query is answered in the negative, the method proceeds by determining whether the user is within a predetermined safety limit (step 1120). The predetermined safety limit may correspond to being a predetermined distance away from a door. As a non-limiting example, the predetermined safety limit may correspond to a door motion limit. If the user is determined to be inside the predetermined safety limit, the door / entrance may be transitioned to a closed / secure state until the user exits the safety limit (step 1128). If the user is not within the predetermined safety limit, the biometric and / or credential analysis process may continue for the user (and any other detected users) (step 1124). The method 1100 then returns to step 1116.

[0127] Reference now Fig.12 , a method 1200 for managing templates at a reader will be described according to embodiments of the present invention. It should be appreciated that the method 1200 may be performed in conjunction with any of the access control systems, readers, reading devices, doors, and / or portals depicted and described herein. Furthermore, while the steps of the method 1200 are shown in a particular order, embodiments of the present invention contemplate that one or more steps may be performed simultaneously with one another or in an order different from that depicted. The method 1200 may be performed in conjunction with managing one or more different biometric template types. Examples of such template types include, without limitation, retinal templates, infrared signature templates, weight templates, iris templates, sclera templates, body shape templates, and gait templates.

[0128] The method 1200 begins with a start operation (step 1204) and continues when a credential or portable device is detected as being within a read range of a reader (step 1208). The read range of the reader may correspond to an active read zone or the like. The method continues by optionally performing an authentication between the reader and the credential / portable device (step 1212). As may be appreciated, this authentication step may include mutual authentication or one-way authentication.

[0129] Once the device has properly completed the authentication process, method 1200 continues by determining that the reader does not have a template stored for the detected credential / portable device (step 1216). Therefore, the reader may determine that the presentation of the credential / portable device corresponds to the first use of the credential / portable device with the reader. In this case, the reader may request one or more biometric templates from the detected credential / portable device (step 1220). This request may be transmitted via a secure (e.g., encrypted) wireless communication link. In response to receiving the request, the credential / portable device may generate an appropriate response including one or more biometric templates in the payload of the message for transmission to the reader (step 1224). The template may be transmitted to the reader via a secure communication channel (e.g., encrypted channel) in one or more messages.

[0130] The reader may receive the biometric template at the credential interface and forward the template along to an appropriate secure area of ​​memory (step 1228). In some embodiments, the biometric template may be stored in a secure memory device local to the reader (e.g., within a housing common with other components of the reader). Alternatively, the biometric template may be stored in a remote memory device (e.g., a remote database, a separate memory device, etc.).

[0131] Since the memory device used to store the biometric template may have a finite amount of storage space, it may be desirable to ensure that the memory is not completely consumed by expired biometric templates or otherwise become stale due to lack of use by the reader. Therefore, the method 1200 continues with the reader determining whether the biometric template received from the credential / portable device has expired (step 1232). If this query is answered in the negative, the biometric template is maintained in the memory and can be used for subsequent use (step 1236). Subsequent use of the biometric template may include retrieving the biometric template from the permanent storage area and placing the biometric template into a cache memory for comparison with biometric information associated with a user approaching the reader (which is mounted relatively close to the door).

[0132] When it is determined that the biometric template has expired (e.g., due to lack of use within a specified time frame or due to a timing failure), the method 1200 continues by removing the template from the secure storage area (step 1240). In addition, if the now expired template still exists in the cache or any other memory device, the instance of the template may also be removed, overwritten, or otherwise marked as unusable. Thereafter, the method ends (step 1244).

[0133] Reference now Fig.13 , a method 1300 of evaluating a user's intent to enter a door or entrance will be described according to an embodiment of the present invention. It should be understood that the method 1300 can be performed in conjunction with any of the access control systems, readers, reading devices, doors, and / or entrances depicted and described herein. In addition, although the steps of the method 1300 are shown in a particular order, embodiments of the present invention contemplate that one or more steps may be performed concurrently with each other or in an order different from that depicted.

[0134] The method 1300 begins with a start operation (step 1304) and continues when a user is detected within the field of view of a camera (step 1308). It should be appreciated that a biometric sensor other than an image capture device or camera may be used, in which case the sensing region of the device may be equivalent to the field of view of the camera.

[0135] The method 1300 continues with the reader and the credential / portable device exchanging information between each other (step 1312). In some embodiments, this information exchange may include information sufficient to complete the authentication process. The exchanged information may further include a credential ID or some other credential information transmitted from the credential / portable device to the reader. If the biometric templates are not already stored in the reader's local memory, the reader may further obtain one or more biometric templates from the user's credential / portable device (step 1316).

[0136] The method continues by analyzing the user's intent as they approach the door / entrance (step 1320). In some embodiments, motion, path of travel, estimated trajectory of travel, gestures, gaze detection, and other aspects of the user's activity may be analyzed to determine whether the user exhibits intent to pass through the door / entrance. If the user is identified as having a positive intent to enter the door / entrance (step 1324), the method initiates a comparison of the user's biometric information obtained from the camera (or other biometric sensor) with one or more templates stored in the reader's memory or otherwise accessible to the reader (step 1328).

[0137] During this comparison step, the reader may determine whether there is a match between the user's current biometric information and any of the biometric templates being compared thereto (step 1332). If there is no match between the current biometric information and the biometric templates available to the reader, then the door / entrance will be maintained in a secure state (step 1336). However, if there is a suitable match, then one or more appropriate control signals will be transmitted to a controller associated with the reader (step 1340). In response thereto, the controller may enable door control as appropriate (step 1344). For example, the controller may cause a door lock to move to an unlocked state and / or automatically move a door from a closed state to an open state. Thereafter, the method ends (step 1348).

[0138] Referring back to step 1324, if the reader does not detect a positive intent to enter, then the method will return to step 1320 and further intent analysis will be performed. In some embodiments, by placing intent analysis ahead of the biometric comparison stage, it may be possible to further reduce the number of biometric comparisons performed at the reader. In particular, it becomes possible to limit the biometric comparison to only those users who have been identified as exhibiting a positive intent to enter the door / entrance. This may also reduce the number of biometric templates retrieved from the template library for comparison with the current biometric information - again further reducing the amount of time to complete the biometric comparison process.

[0139] Although the above description describes specific tasks as being performed by a reader or by a portable device of an access control system, some or all of these tasks may be performed by other components of the access control system without departing from the scope of the present invention. Furthermore, although specific components are shown as being incorporated into a reader system or reading device, it should be understood that some components may be located remotely from the reader system or reading device. For example, a template database or library may be maintained remotely from the reading device without departing from the scope of the present invention.

[0140] Furthermore, while embodiments of the present invention have been discussed in conjunction with automated doors (e.g., doors that open automatically), it should be appreciated that embodiments of the present invention are not so limited. For example, it should be clear that embodiments of the present invention contemplate usage in a simple system that only unlocks a door (even if the door does not open automatically).

[0141] As can be seen from the above description, the system disclosed herein can be used to allow an access control system to identify a trusted environment and to impose a specific set of access control requirements when identifying a trusted environment. The system disclosed herein can also be used to allow an access control system to identify an untrusted environment and to impose a specific set of access control requirements when identifying an untrusted environment. Specific details are given in the description to provide a thorough understanding of the embodiments. However, those skilled in the art will understand that the embodiments can be practiced without these specific details. Those skilled in the art will also understand that the various embodiments described above can be used in combination with each other without departing from the scope of the present invention. In the present invention, well-known circuits, processes, algorithms, structures, hardware, and techniques have been shown and described without unnecessary details in order to avoid obscuring the embodiments.

Claims

1. A physical access control system, comprising: biometric sensors, which are installed in proximity to physical access control points; and A reader comprising: a reader unit proximate to the physical access control point and comprising at least one antenna that enables the reader to communicate wirelessly with one or more access control credentials within a reading range of the at least one antenna surrounding the physical access control point; a processor coupled to the at least one antenna; and A memory coupled to the processor, wherein instructions executable by the processor are stored in the memory, the instructions comprising: an instruction to obtain an access control identifier ID of an access control credential within the reading range of the at least one antenna; instructions for determining a particular user among a plurality of users within the reading range who exhibits an intent to enter the physical access control point, wherein the particular user is determined to exhibit an intent to enter the door by moving within a predetermined distance of the physical access control point, by following a path leading to the physical access control point, or by gaze detection; instructions for using the access control ID associated with the particular user to reduce a number of biometric templates analyzed by the processor in connection with determining whether to allow a bearer of the access control credential to gain access through the physical access control point, wherein the number of biometric templates is reduced from N templates to at least N-1 templates; instructions to perform a comparison of biometric information obtained via the biometric sensor with one or more of the reduced number of biometric templates; determining, based on the comparing, that the biometric information satisfies instructions belonging to a template associated with the one or more biometric templates in the reduced number of biometric templates; and Instructions that allow the reader to send a signal to automatically actuate the door or a component of the door in response to determining that the biometric information satisfies the module.

2. The physical access control system of claim 1, wherein the biometric template comprises a facial template.

3. The physical access control system of claim 1, wherein at least some of the biometric templates are stored in a cache memory of the reader.

4. The physical access control system of claim 1, wherein the biometric template comprises one or more of a retina template, an infrared signature template, a weight template, an iris template, a sclera template, a body shape template, and a gait template.

5. A physical access control system according to claim 1, wherein the instructions include instructions to determine an estimated spatial relationship between the reader unit and the access control credentials of the specific user, wherein the estimated spatial relationship includes an estimated distance between the access control credentials of the specific user and the reader unit, wherein the estimated distance is determined using at least one of RSSI and ToF.

6. A physical access control system according to claim 5, wherein the estimated spatial relationship further includes an angle of arrival between the access control credential of the specific user and the reader unit as measured by radio signals exchanged between the access control credential of the specific user and the reader unit.

7. The physical access control system of claim 6, wherein the instructions further include instructions for determining the user's intent to enter the physical access control point in conjunction with determining whether the analyzed access control credentials are carried by the user.

8. The physical access control system of claim 1 , wherein a biometric template of a first user is stored on a respective access control credential and then initially transmitted to the reader upon first presenting the respective access control credential to the reader, and wherein the biometric template of the first user is then stored in a cache memory of the reader after receiving the biometric template of the first user from the respective access control credential.

9. The physical access control system of claim 1, wherein the at least one access control credential comprises a mobile communication device and wherein the at least one antenna enables communication via a proximity-based communication protocol.

10. The physical access control system of claim 9, wherein the proximity-based communication protocol comprises Bluetooth.

11. A method of maintaining security of a door and permitting automated actuation of the door by means of a reader proximate to the door, the method comprising: obtaining access control identifiers (IDs) of access control credentials within a reading range of at least one antenna of the reader, the at least one antenna enabling the reader to wirelessly communicate with one or more access control credentials within a reading range of the at least one antenna around the door; determining a specific user among a plurality of users within the reading range who exhibits an intention to enter the door, wherein the specific user is determined to exhibit an intention to enter the door by moving within a predetermined distance of the door, by walking along a path leading to the door, or by gaze detection; selecting one or more templates from a database containing a plurality of templates based on the access control ID associated with the particular user when the access control credential of the particular user is within the reading range of the at least one antenna, wherein the number of templates in the selected one or more templates is less than the plurality of templates; obtaining biometric information of a user approaching the reader; comparing the obtained biometric information to only templates belonging to the selected one or more templates; determining, based on the comparing, that the biometric information satisfies a template belonging to the selected one or more templates; and In response to determining that the biometric information satisfies the template, the reader is enabled to send a signal to automatically actuate the door or a component of the door.

12. The method of claim 11, wherein the plurality of templates include facial templates and wherein the obtained biometric information includes an image of the user captured by a camera having a field of view that at least partially overlaps the read range of the at least one antenna.

13. The method according to claim 11, further comprising: storing the template in a cache memory of the reader for a predetermined amount of time or until a predetermined event occurs; and After the predetermined amount of time has expired or the predetermined event has occurred, the template is caused to be removed from the cache.

14. The method according to claim 11, further comprising: assigning a pending access-granted status to the user in proximity to the reader in response to determining that the biometric information satisfies the template belonging to the selected one or more templates; Waiting for the user approaching the reader to enter an intent zone; and Only after determining that the user approaching the reader has entered the intended zone is the reader permitted to send a signal to automatically actuate the door or the component of the door.

15. A method according to claim 11, wherein the particular user's intention to enter the door can also be measured at least in part by the user's facial size, the number of pixels between the user's eyes, the number of pixels filled by the user's face, or by the determined estimated spatial relationship between the access control credential and the reader.

16. The method according to claim 11, further comprising: Whenever the specific user approaches the reader together with the access control credential of the specific user, the access control ID associated with the specific user is read from the access control credential of the specific user.

17. A method for allowing access to a secure asset, the method comprising: acquiring credential information from each of one or more credential devices within an effective read area of ​​a reading system; associating the credential information with one or more corresponding facial templates and temporarily storing the one or more corresponding facial templates; capturing biometric information of a user at the reading system; comparing the biometric information of the user to one or more temporarily stored facial templates; and In the event that there is a sufficient match between the biometric information of the user and any of the one or more temporarily stored facial templates, the user is allowed access to secure assets.

18. The method of claim 17, further comprising receiving, at the reader system, a facial template of the user from a credential device of the user.

19. The method according to claim 17, further comprising: capturing one or more images of the user; as well as A facial template is generated for the user using the one or more images.

20. The method of claim 17, wherein associating the credential information with one or more corresponding facial templates comprises associating only valid credential information with one or more corresponding facial templates.

21. A method according to claim 17, wherein allowing the user to access the secure asset if there is a sufficient match between the biometric information of the user and any one of the one or more temporarily stored facial templates includes allowing the user to access the secure asset if there is a sufficient match between the biometric information of the user and any one of the one or more temporarily stored facial templates and the credential information corresponding to the user is valid.

22. The method of claim 17, wherein the effective read area of ​​the reading system is defined by a read range of the reading system.

23. The method of claim 17, wherein the active read zone of the reader system is defined by a communication protocol used between the reader system and each of the one or more credential devices.

24. The method of claim 17, further comprising removing an expired facial template from the one or more corresponding facial templates from temporary storage.

25. The method of claim 24, wherein the expired facial template expires due to non-use of the reading system within a specified time frame.

26. A non-transitory computer readable medium comprising executable code which, when executed by one or more processors, causes the one or more processors to perform the method of any one of claims 17 to 25.

27. A system for allowing access to a secure asset, the system comprising: at least one processor; as well as A memory storing instructions which, when executed by the at least one processor, cause the at least one processor to perform the method according to any one of claims 17 to 25.

28. A system according to claim 27, comprising at least one reader unit, which is configured to obtain credential information from each of one or more credential devices, and a capture device located outside the reader unit and configured to capture the biometric information of the user.

Images