Building access control using a mobile device

Abstract

The invention relates to building access control using a mobile device. A system includes a door lock module for locking and unlocking a door and a mobile device running an access control application configured to receive access rights from a server and store the access rights in the mobile device. The access control application identifies a door ID of a door to a secure area, and determines whether the access rights stored in the mobile device permit a user assigned to the mobile device to access the secure area of the facility. If yes, the access control application transmits an access control request to the door lock module to unlock the door; and if not, not transmitting the access control request. The access control application is configured to transmit to the server a log entry corresponding to each access request initiated by the mobile device.

Description

TECHNICAL FIELD

[0001] The present disclosure relates generally to methods of gaining access to secure areas, and more specifically to methods of gaining access to secure areas using mobile devices. BACKGROUND

[0002] Access control systems are commonly used to track and restrict the movement of people within a facility. Some areas of a facility can be accessible to all or nearly all people within the facility. A cafeteria can be an example of an area that all or nearly all people within the facility can have access to. Some areas of a facility can only be accessible to a few people, while others do not have access to those areas. A computer server room can be an example of an area that has restricted access. Some access control systems rely on access card readers and access cards to identify people and determine who has access to certain areas. Some access control systems rely on cameras and video processing to identify people and determine who has access to certain areas. Each of these access control systems requires a large amount of hardware. It is desirable to have systems and methods for providing access control without all of the hardware of traditional access control systems. It is desirable to have systems and methods where a person's mobile device acts as a virtual controller when granting or denying access to a secure area. SUMMARY

[0003] The present disclosure relates generally to access control systems, and more particularly to using a mobile device running an access control application to obtain access to a secure area of a facility. An example can be found in a system for controlling access to a secure area of a facility. An illustrative system includes a door lock module for locking and unlocking a door to the secure area of the facility, the door lock module including a wireless communication module supporting a first wireless communication protocol (e.g., WIFI) and a second wireless communication protocol (e.g., BLUETOOTH). A mobile device includes a wireless communication module supporting the first wireless communication protocol and the second wireless communication protocol, and runs an access control application. The illustrative system also includes a wireless gateway located in the facility and including a wireless communication module supporting the first wireless communication protocol. The wireless gateway is configured to independently communicate with the door lock module and the mobile device via the first wireless communication protocol. The wireless gateway is operably coupled to a server. The access control application of the mobile device is configured to receive access permissions from the server via the first wireless communication protocol of the wireless communication module of the wireless gateway, and store the access permissions in a memory of the mobile device. The access permissions define whether a particular user assigned to the mobile device has access permissions to open the door and enter the secure area of the facility. The access control application of the mobile device is configured to: identify a door ID of the door to the secure area; and determine whether the access permissions stored in the memory of the mobile device grant the particular user assigned to the mobile device access to the secure area of the facility; and if so, transmit a door access request to the door lock module via the second wireless communication protocol to unlock the door to the secure area of the facility; and if not, not transmit the door access request to the door lock module via the second wireless communication protocol to unlock the door to the secure area of the facility. The access control application of the mobile device is configured to transmit a log entry to the server corresponding to each door access request initiated by the mobile device via the first wireless communication protocol of the wireless communication module of the wireless gateway.

[0004] Another example can exist in a system for controlling access to a secure area of a facility. The illustrative system includes a door lock module for locking and unlocking a door to the secure area of the facility, the door lock module including a wireless communication module supporting a first wireless communication protocol (e.g., WIFI) and a second wireless communication protocol (e.g., BLUETOOTH). A mobile device includes a wireless communication module supporting the first wireless communication protocol and the second wireless communication protocol, and runs an access control application. The illustrative system also includes a wireless gateway located in the facility and including a wireless communication module supporting the first wireless communication protocol. The wireless gateway is configured to independently communicate with the door lock module and the mobile device via the first wireless communication protocol. The wireless gateway is operably coupled to a server. The access control application of the mobile device is configured to receive access permissions from the server via the first wireless communication protocol of the wireless communication module of the wireless gateway, and store the access permissions in a memory of the mobile device. The access permissions define whether a particular user assigned to the mobile device has access permissions to open the door and enter the secure area of the facility. The access control application of the mobile device is configured to identify a door ID of the door to the secure area. The access control application of the mobile device is configured to determine whether the mobile device is able to successfully communicate with the server via the wireless gateway.

[0005] When the mobile device is able to successfully communicate with the server via the wireless gateway, the access control application of the mobile device is configured to determine whether the access permissions stored in the memory of the mobile device grant the particular user assigned to the mobile device access to the secure area of the facility; and if so, transmit a door access request to the door lock module via the wireless gateway (and sometimes server) via the first wireless communication protocol to unlock the door to the secure area of the facility; and if not, not transmit the door access request to the door lock module via the wireless gateway (and sometimes server) via the first wireless communication protocol to unlock the door to the secure area of the facility. When the mobile device is not able to successfully communicate with the server via the wireless gateway, the access control application of the mobile device is configured to determine whether the access permissions stored in the memory of the mobile device grant the particular user assigned to the mobile device access to the secure area of the facility; and if so, transmit a door access request to the door lock module via the second wireless communication protocol to unlock the door to the secure area of the facility; and if not, not transmit the door access request to the door lock module via the second wireless communication protocol to unlock the door to the secure area of the facility.

[0006] When the access control application of the mobile device is unable to successfully transmit log entries to the server via the wireless gateway, the access control application of the mobile device can buffer log entries corresponding to each access request initiated by the mobile device; and when the access control application of the mobile device is again able to successfully transmit log entries to the server via the wireless gateway, the access control application of the mobile device then subsequently uploads the buffered log entries to the server.

[0007] Another example can exist in a method for controlling access to a secure area of a facility. The illustrative method includes a mobile device receiving access rights from a server via a first wireless communication protocol of a wireless gateway, the wireless gateway being operably coupled to the server, the access rights defining whether a particular user assigned to the mobile device has access rights to open a door to access the secure area of the facility. The mobile device identifies a door ID of the door to the secure area and determines whether the access rights received via the first wireless communication protocol grant the particular user assigned to the mobile device access to the secure area of the facility; and if so, the mobile device transmits an access request to a door lock module associated with the door to unlock the door to the secure area of the facility via a second wireless communication protocol different from the first wireless communication protocol; and if not, the mobile device does not transmit the access request to the door lock module via the second wireless communication protocol to unlock the door to the secure area of the facility.

[0008] In some cases, the server can initiate opening of the door by transmitting an access request to the wireless gateway, which then sends the server's access request to the door lock module via the first wireless communication protocol of the wireless gateway. In some cases, the server can initiate opening of the door based on a request from an operator at an operator console operably connected to the server and / or a request from a mobile device, the request from the mobile device being sent to the wireless gateway via the first wireless communication protocol, which forwards the request to the server. In some cases, the server can determine whether access rights grant a particular user assigned to a mobile device access to a secure area of a facility before initiating opening of the door (rather than letting the mobile device make the determination).

[0009] Another example can reside in a non-transitory computer-readable medium storing instructions that, when executed by one or more processors of a mobile device, cause the one or more processors of the mobile device to receive, from a server via a first wireless communication protocol of a wireless gateway operatively coupled to the server, an entry permission defining whether a particular user assigned to the mobile device has entry permission to open a door to enter a secure area of a facility. The one or more processors are caused to identify a door ID of the door to the secure area and determine whether the entry permission received via the first wireless communication protocol grants the particular user assigned to the mobile device entry to the secure area of the facility; and if so, transmit, via a second wireless communication protocol different from the first wireless communication protocol, a gate access request to a door lock module associated with the door to unlock the door to the secure area of the facility; and if not, not transmit the gate access request to the door lock module via the second wireless communication protocol to unlock the door to the secure area of the facility.

[0010] The foregoing summary was presented to provide a brief overview of some innovative features that are characteristic of the present disclosure and is not intended to be a complete description. A complete appreciation of the present disclosure can be gained by taking the entire specification, claims, drawings, and abstract as a whole. BRIEF DESCRIPTION OF DRAWINGS

[0011] The present disclosure can be more completely understood in consideration of the following description in connection with the accompanying drawings, in which:

[0012] Figure 1 is a schematic block diagram illustrating an example system for controlling entry into a secure area within a facility;

[0013] Figure 2A , Figure 2B and Figure 2C are together a flowchart illustrating an example series of steps as part of the example system of Figure 1 an entry control application running on a mobile device as part of the example system of

[0014] Figure 3A and Figure 3B are together a flowchart illustrating an example method for controlling entry into a secure area within a facility.

[0015] While the present disclosure is susceptible to various modifications and alternative forms, specifics thereof have been shown by way of example in the drawings and will be described in detail. It should be understood, however, that the intention is not to limit the present disclosure to the particular examples described. On the contrary, the intention is to cover all modifications, equivalents, and alternatives falling within the spirit and scope of the present disclosure. DETAILED DESCRIPTION

[0016] The following description should be read with reference to the accompanying drawings, which are drawn in scale wherein like numerals represent like elements throughout the several FIGS. The drawings, which are not necessarily to scale, depict examples that are illustrated in the context of the present disclosure. While examples of various elements are illustrated, one skilled in the art will recognize that many examples provided have suitable alternatives that can be utilized.

[0017] It is assumed herein that all numbers are modified in all instances by the term "about" unless the content clearly dictates otherwise. Expressions of a range of numerical values as endpoints include all numbers between the range (for example, 1 to 5 includes 1, 1.5, 2, 2.75, 3, 3.80, 4, and 5).

[0018] As used in this specification and the appended claims, the singular forms“a,”“an,” and“the” include plural referents unless the content clearly dictates otherwise. As used in this specification and the appended claims, the term“or” is generally employed in its sense of permitting either of the referenced items to be present.

[0019] It should be noted that recitations in the specification referring to“an embodiment,”“some embodiments,”“other embodiments,” etc., indicate that the embodiment or embodiments so described can include a particular feature, structure, or characteristic, but not every embodiment necessarily includes the particular feature, structure, or characteristic. Moreover, such phrases are not necessarily referring to the same embodiment. Further, where a particular feature, structure, or characteristic is described in connection with an embodiment, it is submitted that it is within the purview of one of ordinary skill in the art to effect such feature, structure, or characteristic in connection with other embodiments whether or not explicit

[0020] Figure 1 is a schematic block diagram illustrating an exemplary system 10 for controlling access to a secure area of a facility. The exemplary system 10 includes a door lock module 12 configured to lock and unlock a door 14 that provides access to a secure area of the facility. In some cases, the door lock module 12 can include a wireless communication module 16 that supports a first wireless communication protocol and a second wireless communication protocol. As an example, the first wireless communication protocol can be one of WIFI, Bluetooth, and Zigbee, and the second wireless communication protocol can be a different one of WIFI, Bluetooth, and Zigbee. As another example, the first wireless communication protocol can be WIFI, and the second wireless communication protocol can be Bluetooth. These are just examples.

[0021] The system 10 includes a server 18. In some cases, an operator console 20 can be operably coupled with the server 18 and can allow an operator to view information provided by the server 18 and to provide information to the server 18, including making a door opening request. In some cases, the server 18 can be a cloud-based server. In some cases, the server 18 can be a desktop computer. A wireless gateway 22 can be located in the facility (i.e., at the edge) and can be operably coupled to the server 18 via a network 24. As an example, the network 24 can include the Internet. The wireless gateway 22 includes a wireless communication module 26 that supports a first wireless communication protocol (e.g., WIFI).

[0022] The exemplary system 10 includes a mobile device 28. In some cases, the mobile device 28 can be, for example, a tablet computer, a phablet, a laptop computer, a smart watch, or a smart phone. The mobile device 28 includes a controller 30 that can be considered to include one or more processors. The controller 30 executes an entry control application 32. In some cases, an operating system (OS) of the controller can support the entry control application 32. The controller 30 can be operably coupled with a memory 34 that stores entry permissions 36 and the like that define whether a particular user assigned to the mobile device 28 has access to one or more secure areas of the facility. The mobile device 28 includes a wireless communication module 38 that supports both a first wireless communication protocol (e.g., WIFI) and a second wireless communication protocol (e.g., BLUETOOTH). In some cases, the wireless gateway 22 can be configured to independently communicate with the door lock module 12 and the mobile device 28 via the first wireless communication protocol (sometimes via a separate communication channel).

[0023] In response to receiving the access request, the server 18 can be configured to transmit an unlock command to the door lock module 12 of the door 14 to unlock the door 14 to a secure area of the facility via the first wireless communication protocol of the wireless communication module 26 of the wireless gateway 22. In some cases, the server 18 can be configured to receive the access request to unlock the door 14 from the wireless gateway 22 that receives the access request from the mobile device 28 via the first wireless communication protocol of the wireless communication module 26 of the wireless gateway 22. In some cases, the server 18 can determine whether the entry permissions permit a particular user assigned to the mobile device to access a secure area of the facility (rather than letting the mobile device make that determination). In some cases, the server 18 can be configured to receive the access request to unlock the door 14 from the operator console 20 that is operably coupled to the server 18.

[0024] In some cases, the mobile device 28 can include a reader 35 that can be used by the access control application 32 to identify a user of the mobile device 28 in order to determine whether the user has access rights to gain access to a particular space within a facility. The reader 35 can include a PIN code 35a. The reader 35 can include a fingerprint 35b. The reader 35 can include a facial ID 35c. In some cases, the access control application 32 can be configured to use one or two-step verification based on preconfigured privileges and access levels of the user saved on the mobile device 28. In one-step verification, the access control application 32 will grant access directly when the door ID matches the preconfigured data of the door.

[0025] In two-step verification, the access control application 32 will grant access when the door ID matches the preconfigured data of the door and the user verifies their credentials using the reader 34. For example, the user can verify their credentials by entering a PIN code that matches the PIN code 35a. As another example, the user can verify their credentials using biometric data such as a fingerprint that matches the fingerprint 35b or by providing a facial ID that matches the facial ID 35c.

[0026] During a creation process for creating a mobile credential for a particular user, a system administrator can assign appropriate credentials for the user. This can include parameters useful in performing two-step verification as well as device-specific information such as mobile device specifications and OS (operating system) version. A regular user can obtain their credentials via two-step verification using a PIN code. Another user with higher security clearance can obtain their credentials via two-step verification using a fingerprint or facial ID verification. Other users can obtain their credentials with any combination of PIN and / or fingerprint and / or facial ID. Other processes are also contemplated.

[0027] The access control application 32 of the mobile device 28 can be configured to perform a number of steps related to access control. Figure 2A 、 Figure 2B and Figure 2Cis a flowchart showing an exemplary series of steps 40 that the entry control application 32 can be configured to perform. The entry control application 32 can be configured to receive, from the server 18 via the first wireless communication protocol of the wireless communication module 26 of the wireless gateway 22, entry permissions and store the entry permissions in the memory 34 of the mobile device 28, the entry permissions defining whether a particular user assigned to the mobile device 28 has entry permissions to open the door 14 and enter the secure area of the facility, as indicated by block 42. The entry control application 32 can be configured to identify the door ID of the door 14 leading to the secure area, as indicated by block 44. The entry control application 32 can be configured to determine whether the entry permissions stored in the memory 34 of the mobile device 28 grant the particular user assigned to the mobile device 28 entry to the secure area of the facility and, if so, transmit a door access request to the door lock module 12 via the second wireless communication protocol to unlock the door 14 leading to the secure area of the facility and, if not, not transmit a door access request to the door lock module 12 via the second wireless communication protocol to unlock the door 14 leading to the secure area of the facility, as indicated by block 46. The entry control application 32 can be configured to transmit, to the server via the first wireless communication protocol of the wireless communication module 26 of the wireless gateway 22, a log entry corresponding to each door access request initiated by the mobile device, as indicated by block 48. As an example, each log entry for each door access request can include the door ID associated with the door access request, the mobile device identifier (e.g., MAC address or International Mobile Equipment Identity (IMEI)) of the mobile device associated with the door access request, and a timestamp associated with the door access request.

[0028] In some cases, when the entry control application 32 of the mobile device 28 is unable to successfully transmit log entries to the server 18 via the wireless gateway 22, the entry control application 32 can be configured to buffer the log entries corresponding to each door access request initiated by the mobile device 28 and, when the entry control application 32 of the mobile device 28 is again able to successfully transmit log entries to the server 18 via the wireless gateway 22, the entry control application can be configured to subsequently upload the buffered log entries to the server 18, as indicated by block 50. The entry control application 32 can be configured to determine whether the mobile device 28 is able to successfully communicate with the server 18 via the wireless gateway 22, as indicated by block 52, and, when the mobile device 28 is unable to successfully communicate with the server 18 via the wireless gateway 22, transmit a door access request to the door lock module 12 via the second wireless communication protocol to unlock the door 14 leading to the secure area of the facility if the entry permissions 36 stored in the memory 34 of the mobile device 28 grant the particular user assigned to the mobile device 28 entry to the secure area of the facility, as indicated by block 54.

[0029] In some cases, and continuing with the example above, the entry control application 32 of the mobile device 28 can be configured to determine whether the mobile device 28 is able to successfully communicate with the server 18 via the wireless gateway 22, as indicated by block 52. When the mobile device 28 is unable to successfully communicate with the server 18 via the wireless gateway 22, the entry control application 32 can be configured to transmit a door access request to the door lock module 12 via the second wireless communication protocol to unlock the door 14 leading to the secure area of the facility if the entry permissions 36 stored in the memory 34 of the mobile device 28 grant the particular user assigned to the mobile device 28 entry to the secure area of the facility, as indicated by block 54. Figure 2BThe entry control application 32 can be configured to determine whether the mobile device 28 is able to successfully communicate with the server 18 via the wireless gateway 22, as indicated by block 56, and when the mobile device 28 is able to successfully communicate with the server 18 via the wireless gateway 22, the entry control application 32 of the mobile device 28 is configured to determine whether the entry permissions 36 stored in the memory 34 of the mobile device 28 grant a particular user assigned to the mobile device 28 entry into the secure area of the facility, and if so, transmit a gate access request to the door lock module 12 via the wireless gateway 22 (and sometimes the server 18) via the first wireless communication protocol to unlock the door 14 to the secure area of the facility, and if not, do not transmit a gate access request to the door lock module 12 via the wireless gateway 22 via the first wireless communication protocol to unlock the door 14 to the secure area of the facility, as indicated by block 58. When the mobile device 28 is not able to successfully communicate with the server 18 via the wireless gateway 22, the entry control application 32 can be configured to determine whether the entry permissions 36 stored in the memory 34 of the mobile device 28 grant a particular user assigned to the mobile device 28 entry into the secure area of the facility, and if so, transmit a gate access request to the door lock module 12 via the second wireless communication protocol to unlock the door 14 to the secure area of the facility, and if not, do not transmit a gate access request to the door lock module 12 via the second wireless communication protocol to unlock the door 14 to the secure area of the facility, as indicated by block 60.

[0030] In some cases, and continuing Figure 2C The entry control application 32 can be configured to identify the door ID of the door 14, as indicated by block 62. The entry control application 32 can be configured to identify the door ID of the door 14 by reading the door ID from the wireless communication module of the door lock module 12 via the second wireless communication protocol, as indicated by block 62a. The entry control application 32 can be configured to identify the door ID of the door 14 by reading the door ID from an NFC tag placed at or near the door 14 to the secure area, as indicated by block 62b. The entry control application 32 can be configured to identify the door ID of the door 14 by scanning a barcode, QR code, tag, or image placed at or near the door 14 to the secure area, as indicated by block 62c. The entry control application 32 can be configured to identify the door ID of the door 14 by reading the door ID from a Bluetooth beacon placed at or near the door 14 to the secure area, the Bluetooth beacon operating based on battery power or wirelessly harvested energy, as indicated by block 62d.

[0031] In some cases, the entry control application 32 can be configured to identify an angle of arrival (AOA) of the mobile device 28 associated with the access request and to include the angle of arrival (AOA) associated with the access request in the corresponding log entry, as indicated at block 64. The AOA describes a relative angle at which the person carrying the mobile device 28 approached the door 14. For example, the person carrying the mobile device 28 can have approached the door 14 from a first side of the door (e.g., to enter the secure area) or can have approached the door 14 from another side of the door 14 (e.g., to exit the secure area). In some cases, the entry control application 32 can be configured to identify an angle of departure (AOD) of the mobile device 28 associated with the access request and to include the angle of departure (AOD) associated with the access request in the corresponding log entry, as indicated at block 66. The AOD describes a relative direction at which the person carrying the mobile device 28 departed the door 14. The AOA and / or the AOD can be used to maintain an accurate count of the number of people currently in the secure area.

[0032] In some cases, the entry control application 32 of the mobile device 28 can default to transmitting an access request to the door lock module via the second wireless communication protocol to unlock a door to a secure area of a facility. In other cases, the entry control application 32 of the mobile device 28 can default to transmitting an access request to the wireless gateway 22 (and sometimes the server 18) via the first wireless communication protocol to unlock a door to a secure area of a facility. In some cases, the entry control application 32 of the mobile device 28 can be configured to determine whether the mobile device 28 is able to successfully communicate with the server 18 via the wireless gateway 22.

[0033] When the mobile device 28 is able to successfully communicate with the server 18 via the wireless gateway 22, the access control application 32 of the mobile device 28 can determine whether the access rights 36 stored in the memory 34 of the mobile device 28 grant the particular user assigned to the mobile device 28 access to the secure area of the facility; and if so, transmit a door access request to the door lock module 12 via the wireless gateway 22 (and sometimes the server 18) via the first wireless communication protocol to unlock the door 14 to the secure area of the facility; and if not, do not transmit a door access request to the door lock module 12 via the wireless gateway 22 (and sometimes the server 18) via the first wireless communication protocol to unlock the door 14 to the secure area of the facility. Alternatively, the access control application 32 of the mobile device 28 can transmit a door access request to the server 18 via the wireless gateway 22 via the first wireless communication protocol, and the server 18 can determine whether the particular user assigned to the mobile device 28 has access rights to the secure area of the facility, and if so, the server 18 can transmit a door access request to the wireless gateway 22, which then sends a door access request to the door lock module 12 via the first wireless communication protocol to open the door 14. Alternatively, the access control application 32 of the mobile device 28 can transmit a door access request to the wireless gateway 22 via the first wireless communication protocol, and the wireless gateway 22 can determine whether the particular user assigned to the mobile device 28 has access rights to the secure area of the facility, and if so, the wireless gateway 22 can transmit a door access request to the door lock module 12 via the first wireless communication protocol to unlock the door 14.

[0034] When the mobile device 28 is not able to successfully communicate with the server 18 via the wireless gateway 22, the access control application 32 of the mobile device 28 can be configured to determine whether the access rights 36 stored in the memory 34 of the mobile device 28 grant the particular user assigned to the mobile device 28 access to the secure area of the facility; and if so, transmit a door access request to the door lock module 12 via the second wireless communication protocol to unlock the door 14 to the secure area of the facility; and if not, do not transmit a door access request to the door lock module 12 via the second wireless communication protocol to unlock the door 14 to the secure area of the facility. When the access control application 32 of the mobile device 28 is not able to successfully transmit a log entry to the server 18 via the wireless gateway 22, the access control application 32 of the mobile device 28 can buffer a log entry corresponding to each door access request initiated by the mobile device 28; and when the access control application 32 of the mobile device 28 is able to successfully transmit a log entry to the server 18 via the wireless gateway 22 again, the access control application of the mobile device can then subsequently upload the buffered log entries to the server 18.

[0035] Figure 3A and Figure 3Bis a flowchart showing an illustrative method 68 for controlling access to a secure area of a facility. The method 68 includes a mobile device (such as the mobile device 28) receiving an access permission (such as the access permission 36) from a server (such as the server 18) via a first wireless communication protocol of a wireless gateway (such as the wireless gateway 22) operably coupled to the server, the access permission defining whether a particular user assigned to the mobile device has access permission to open a door to access the secure area of the facility, as indicated by block 70. The mobile device identifies a door ID of a door (such as the door 14) leading to the secure area, as indicated by block 72. The mobile device determines whether the access permission received via the first wireless communication protocol grants the particular user assigned to the mobile device access to the secure area of the facility; and if so, the mobile device transmits a door access request to a door lock module (such as the door lock module 12) associated with the door to unlock the door leading to the secure area of the facility via a second wireless communication protocol different from the first wireless communication protocol; and if not, the mobile device does not transmit the door access request to the door lock module via the second wireless communication protocol to unlock the door leading to the secure area of the facility, as indicated by block 74.

[0036] In some cases, the method 68 can include determining whether the mobile device is able to successfully communicate with the server via the wireless gateway, as indicated at block 76. When the mobile device is not able to successfully communicate with the server via the wireless gateway, the mobile device determines whether the access permission received via the first wireless communication protocol grants the particular user assigned to the mobile device access to the secure area of the facility; and if so, the mobile device transmits the door access request to the door lock module associated with the door to unlock the door leading to the secure area of the facility via the second wireless communication protocol; and if not, the mobile device does not transmit the door access request to the door lock module via the second wireless communication protocol to unlock the door leading to the secure area of the facility, as indicated at block 78.

[0037] Continuing Figure 3BWhen the mobile device is able to successfully communicate with the server via the wireless gateway, the mobile device transmits an access request to the door lock module via the wireless gateway and sometimes the server via the first wireless communication protocol to unlock a door to a secure area of the facility, and if not, the mobile device does not transmit an access request to the door lock module via the wireless gateway and the server via the first wireless communication protocol to unlock a door to a secure area of the facility, as indicated by block 80. In some cases, the mobile device, the wireless gateway, and / or the server determine whether entry is permitted for a particular user assigned to the mobile device to enter the secure area of the facility prior to transmitting the access request to the door lock module. The mobile device can transmit a log entry corresponding to each access request initiated by the mobile device to the server via the first wireless communication protocol of the wireless gateway, as indicated by block 82. In some cases, the method 68 can further include, when the mobile device is unable to successfully communicate with the server via the wireless gateway, the mobile device buffering a log entry corresponding to each access request initiated by the mobile device; and when the mobile device is able to successfully communicate with the server via the wireless gateway again, the mobile device subsequently uploading the buffered log entries to the server, as indicated at block 84.

[0038] While several illustrative embodiments of the disclosure have been described, it will be apparent to those skilled in the art that other embodiments can be made and utilized without departing from the scope of the description. It will be understood by those skilled in the art that the present disclosure is in no way limited to the examples described and illustrated, but rather, many modifications and variations are possible. It is therefore, to be understood that within the scope of the appended claims, the disclosure can be practiced otherwise.

Claims

1. A system for controlling access to a secure area of ​​a facility, the system comprising: A door lock module for locking and unlocking doors leading to the security area of ​​the facility, the door lock module including a wireless communication module supporting a first wireless communication protocol and a second wireless communication protocol; A mobile device that runs a control application, the mobile device including a wireless communication module that supports the first wireless communication protocol and the second wireless communication protocol; server; A wireless gateway, located within the facility, includes a wireless communication module supporting the first wireless communication protocol, the wireless gateway being configured to communicate independently with the door lock module and the mobile device via the first wireless communication protocol, and the wireless gateway being operatively coupled to the server; The access control application of the mobile device is configured as follows: The wireless communication module of the wireless gateway receives access permission from the server via the first wireless communication protocol and stores the access permission in the memory of the mobile device. The access permission defines whether a specific user assigned to the mobile device has access permission to open the door and enter the security area of ​​the facility. The door ID that identifies the door leading to the security area; Determine whether the access permission stored in the memory of the mobile device allows the specific user assigned to the mobile device to enter the secure area of ​​the facility; If so, an access control request is transmitted to the door lock module via the second wireless communication protocol to unlock the door leading to the security area of ​​the facility; and if not, the access control request is not transmitted to the door lock module via the second wireless communication protocol to unlock the door leading to the security area of ​​the facility. as well as The first wireless communication protocol of the wireless communication module of the wireless gateway transmits log entries corresponding to each access control request initiated by the mobile device to the server.

2. The system of claim 1, wherein when the access control application of the mobile device is unable to successfully transmit log entries to the server via the wireless gateway, the access control application of the mobile device is configured to buffer log entries corresponding to each access control request initiated by the mobile device; and when the access control application of the mobile device is able to successfully transmit log entries to the server again via the wireless gateway, the access control application of the mobile device is configured to subsequently upload the buffered log entries to the server.

3. The system of claim 1, wherein the access control application of the mobile device is configured to: Determine whether the mobile device can successfully communicate with the server via the wireless gateway; and When the mobile device is unable to successfully communicate with the server via the wireless gateway, and the access permission stored in the memory of the mobile device allows the specific user assigned to the mobile device to enter the secure area of ​​the facility, the access control request is transmitted to the door lock module via the second wireless communication protocol to unlock the door leading to the secure area of ​​the facility.

4. The system of claim 1, wherein the access control application of the mobile device is configured to: Determine whether the mobile device can successfully communicate with the server via the wireless gateway; When the mobile device is able to successfully communicate with the server via the wireless gateway, the access control application of the mobile device is configured to: determine whether the access permission stored in the memory of the mobile device allows the specific user assigned to the mobile device to enter the secure area of ​​the facility; If yes, an access control request is transmitted to the door lock module via the wireless gateway through the first wireless communication protocol to unlock the door leading to the security area of ​​the facility; and if no, the access control request is not transmitted to the door lock module via the wireless gateway through the first wireless communication protocol to unlock the door leading to the security area of ​​the facility. as well as When the mobile device is unable to successfully communicate with the server via the wireless gateway, the access control application of the mobile device is configured to: determine whether the access permission stored in the memory of the mobile device allows the specific user assigned to the mobile device to enter the secure area of ​​the facility; If yes, an access control request is transmitted to the door lock module via the second wireless communication protocol to unlock the door leading to the security area of ​​the facility; and if no, the access control request is not transmitted to the door lock module via the second wireless communication protocol to unlock the door leading to the security area of ​​the facility.

5. The system of claim 1, wherein the server is configured to: receive an access control request to unlock the door, and in response, transmit an unlock command to the door lock module of the door via the first wireless communication protocol of the wireless gateway to unlock the door leading to the security area of ​​the facility.

6. The system of claim 5, wherein the server is configured to receive the access control request to unlock the door from one or more of the following: The wireless gateway receives the access control request from the mobile device via the first wireless communication protocol of the wireless communication module of the wireless gateway; and An operator console, which is operatively coupled to the server.

7. The system of claim 1, wherein the access control application of the mobile device is configured to identify the door ID of the door via one or more of the following: The door ID is read from the wireless communication module of the door lock module via the second wireless communication protocol; Read the door ID from an NFC tag placed at or near the door leading to the secure area; and Scan the barcode placed at or near the door leading to the secure area.

8. The system of claim 1, wherein each log entry for each access control request includes the door ID associated with the access control request, the mobile device identifier associated with the access control request, and the timestamp associated with the access control request.

9. The system of claim 8, wherein the access control application for the mobile device is configured to: Identify the angle of arrival (AOA) of the mobile device associated with the access control request; and Each log entry for each access control request includes the angle of arrival (AOA) associated with the access control request.

10. A method for controlling access to a secure area of ​​a facility, the method comprising: The mobile device receives access permission from the server via a first wireless communication protocol of a wireless gateway operatively coupled to the server. The access permission defines whether a specific user of the mobile device has access permission to open a door to enter the security area of ​​the facility. The mobile device identifies the door ID of the door leading to the secure area; as well as The mobile device determines whether the access permission received via the first wireless communication protocol permits the specific user assigned to the mobile device to enter the secure area of ​​the facility; If so, the mobile device transmits an access control request to the door lock module associated with the door via a second wireless communication protocol different from the first wireless communication protocol to unlock the door leading to the security area of ​​the facility; and if not, the mobile device does not transmit the access control request to the door lock module via the second wireless communication protocol to unlock the door leading to the security area of ​​the facility.

Images