Supplementary reader module for an access control system, access control system with the supplementary reader module and procedure

Abstract

The invention relates to a supplementary reading module 3 for an access control system 1 with a radio interface 5 for reading an access identifier from a mobile device 6, with an access control device interface 4 for connecting to an access control device 2, wherein the access control device interface 4 is configured to receive a device data package based on an access identifier from the access control device 2, with a system interface 7 for transmitting a module data package within the access control system 1, wherein the supplementary reading module 3 is configured to provide and transmit the module data package based on the access identifier or the device data package.

Description

[0001] The invention relates to a supplementary reading module for an access control system, an access control system and a method for access control. State of the art

[0002] Buildings, production areas, or other sections are often protected by access control systems. These systems are implemented using technical equipment or technology to monitor and control access to specific areas, buildings, or resources. Access control systems are used to ensure that only authorized personnel gain entry.

[0003] For identification purposes, for example, electronic card readers for RFID cards, magnetic stripe cards or smart cards, biometric systems with fingerprint scanners, facial recognition, mobile phones, iris or retinal scanners or PIN codes with keypad entry of personal identification numbers are used.

[0004] Patent application DE 10 2021 207 700 A1 describes a modular access control system that supports various identification technologies, such as biometric methods, RFID cards, PIN codes, and mobile devices. The system enables multi-factor authentication to enhance security. A central management platform allows for easy configuration and real-time monitoring of all access events. It also offers interfaces to other security systems, such as video surveillance and alarm systems. The system is versatile and can be used in various locations, including corporate buildings, data centers, and residential complexes, offering flexible and adaptable solutions for diverse security requirements. Disclosure of the invention

[0005] A supplementary reading module with the features of claim 1, an access control system, and a method are proposed. Preferred or advantageous embodiments of the invention are described in the dependent claims, the following description, and the accompanying figures.

[0006] The invention relates to a supplementary reading module which is suitable and / or configured for an access control system. The supplementary reading module is in particular configured as an electronic assembly.

[0007] The supplementary reader module has a wireless interface for reading an access credential from a mobile device. The mobile device is typically a smartphone, mobile phone, wearable, or similar device. Preferably, an app is installed on the mobile device to enable the reading of the access credential.

[0008] The access identifier is primarily a sequence of digits. Preferably, the access identifier is limited to the use of digits. Optionally, the access identifier may include letters and / or special characters. The access identifier is a unique and / or exclusive identifier assigned, for example, by the access control system to an employee or user. In particular, the access identifier is unique within the access control system. Alternatively or additionally, the access identifier can be referred to as "metadata," which does not serve to identify a specific person but rather supports the infrastructure (technical, logical, logistical).

[0009] The supplementary reading module has an access control device interface which is suitable and / or designed for connection to an access control device.

[0010] The access control device may, in particular, include a card reader for receiving an access ID, a keypad for entering an access ID, a biometric identification device for recognizing the user and assigning an access ID to the recognized user. Specifically, the access control device may incorporate any technology that enables the direct or indirect determination of a user's access ID.

[0011] The access control device interface is designed to receive a device data packet from the access control device, based on the captured access identifier. This device data packet is therefore present at the access control device interface. The access control device interface is specifically designed as a wired interface.

[0012] The data packet, in particular the device data packet or other data packets within the disclosure, includes the access identifier, especially in unencrypted form. This means the access identifier can be directly extracted from the data packet without decoding. Preferably, the data packet does not contain a recipient and / or sender address. In this case, the path of the data packet is determined by the network structure and / or cabling.

[0013] The supplementary reader module has a system interface that is suitable and / or configured for transmitting a module data package within the access control system. The module data package is specifically configured as a data package, as previously described. In particular, the module data package is configured identically to the device data package. The system interface is specifically configured to send and / or output the module data package. The system interface is specifically configured as a wired interface.

[0014] The supplementary reading module is designed to provide and transmit the module data package based on the read access identifier or the device data package.

[0015] One consideration of the invention is that new or already integrated access control devices do not have a radio interface. On the other hand, mobile devices are increasingly being used as identification means in access control systems. The supplementary reader module makes it possible to technically enhance the access control device and add the function of reading an access ID from a mobile device. In this way, new access control devices can be modernized with the supplementary reader module, or existing access control devices can be easily and cost-effectively retrofitted with this function.

[0016] The supplementary reader module relies on an intervention in the access control system, which can also be described as "man-in-the-middle" technology. Specifically, the supplementary reader module is arranged serially between the access control device and the other access control system components, particularly at the controller. Alternatively, this architecture can be described as serial linking, daisy-chaining, intermediary, mediator, insertion, or similar. If an access ID is captured via the access control device, this ID is transmitted as a module data packet. Similarly, if an access ID is captured via the wireless interface and thus by the supplementary reader module, this ID is also transmitted as a module data packet.This creates a smart way to extend the access control system, and in particular the access control device, to include the function of reading an access identifier from a mobile device.

[0017] In a preferred implementation, the supplementary reading module is configured to forward the device data packet unchanged or potentially with signal enhancement as a module data packet. In this case, the device data packet is passed through the supplementary reading module and forwarded as a module data packet. Alternatively, the supplementary reading module reads the device data packet and recreates the module data packet based on it. Both variants lead to the same technical result but differ only in their technical implementation.

[0018] In a preferred configuration, the access control device interface is configured to receive a presence signal from the access control device. Such presence signals are used to indicate the functionality or presence of the access control device within the access control system. The supplementary reader module is configured to provide and transmit the presence signal at the system interface. Thus, the presence signal from the access control device is either passed through or the presence signal from the access control device is captured and / or read by the supplementary reader module, regenerated, and output again. The latter alternative has the advantage that the presence signal can be configured to be output only when both the presence signal from the access control device is present and the supplementary reader module is in an operational state.

[0019] In particular, the access control device interface and the system interface are designed to use the same communication protocol. This ensures that the access control system, especially the controller, cannot distinguish whether the module data packet was generated by the access control device or by the supplementary reading module.

[0020] In a preferred implementation, the communication protocol is the Wiegand protocol. The Wiegand protocol is a widely used communication standard for data exchange between access control devices, especially card readers, and such access control systems. It is based on two data lines, Data0 and Data1, which transmit binary data in the form of pulses. A signal on Data0 represents a '0' bit, while a signal on Data1 represents a '1' bit. For example, the pulses are generated by pulling the level down to low (0V). That is, in the idle state, both levels are high (often 5V). When a 1 is transmitted, D1 briefly goes low; when a 0 is transmitted, D0 briefly goes low. These signals are voltage changes generated by the access control device and / or the supplementary reader module and are detected by the access control system, especially the controller.

[0021] The preferred Wiegand format consists of 26 bits: 8 bits for the facility code, 16 bits for an ID, and 2 parity bits for error detection. However, variants with 34, 37, or more bits exist, allowing for the transmission of more data. Transmission is asynchronous and serial, meaning the bits are sent sequentially without requiring synchronous timing. The combination of the facility code and the ID forms the access identifier. The access identifier can also have a different meaning—for example, with a bit count of more than 20 bits, particularly with the number of bits mentioned before or after—such as all bits forming only the ID as the access identifier.

[0022] One advantage of the Wiegand protocol is its robustness and reliability, particularly in safety-critical applications such as the access control system presented here. It is insensitive to electromagnetic interference, making it ideal for use in environments with high levels of electrical noise. Furthermore, it is relatively easy to implement and requires no complex hardware components. Because of these characteristics, the Wiegand protocol has been a standard in access control technology for decades and is used in a wide variety of applications, from simple door openers to complex security systems in businesses and government agencies. Its widespread adoption and support from numerous manufacturers make it a long-lasting and proven technology. Therefore, its ability to complement new or existing access control devices with an add-on reader module is particularly advantageous.

[0023] In a preferred implementation, the radio interface is configured as an NFC device, a Bluetooth device, in particular a BLE device, and / or as a UWB device.

[0024] The NFC (Near Field Communication) interface enables wireless communication over short distances of approximately 4 centimeters. It is commonly used in smartphones, credit cards, and access control systems. NFC operates at a frequency of 13.56 MHz and allows for fast and secure data exchange between devices simply by bringing them close or tapping them together.

[0025] The Bluetooth or BLE interface enables wireless communication over short to medium distances, typically up to 100 meters. In this case, reading from the supplementary reading module is only possible if the distance is short, in particular less than 50 cm, and specifically less than 10 cm.

[0026] The UWB (Ultra-Wideband) interface enables highly precise wireless communication over short distances with an accuracy of a few centimeters. UWB utilizes an extremely wide frequency spectrum of several gigahertz and transmits very short pulses lasting only a fraction of a nanosecond. This technology offers a high data transmission rate and is ideal for real-time tracking, precise positioning, and the transmission of large amounts of data in a short time. With UWB technology, it is particularly easy to ensure that the mobile device is in the immediate vicinity of the supplementary reader module.

[0027] In a preferred configuration, the supplementary reading module is configured to read the access credentials from the mobile device via the wireless interface based on a certificate structure. Preferably, the supplementary reading module includes a private and a public key, which form a key pair within a Public Key Infrastructure (PKI) structure. The PKI structure is a system of policies, processes, procedures, and components for managing, securing, and distributing digital certificates and public keys. It serves to ensure the security of electronic communications and transactions by providing mechanisms for the secure creation, management, verification, and revocation of certificates. Preferably, in a first step, the public key is transmitted from the mobile device to the supplementary reading module.The augmentation reader module is trained to verify and validate the public key using its own public key. Subsequently, the augmentation reader module sends a challenge message to the mobile device. The mobile device signs the challenge message and sends the signed message back to the augmentation reader module. The module then verifies the signature against the previously transmitted and validated public key of the mobile device. If the verification is successful, the augmentation reader module extracts the access credentials from the previously transmitted and validated public key of the mobile device.

[0028] From a design perspective, it is preferable for the supplementary reader module to be a self-contained unit. This can be installed, for example, in a flush-mounted box or in another manner between the access control device and the access control system, particularly the controller. This makes retrofitting the access control device especially easy. Alternatively, the supplementary reader module can be integrated as a separate assembly into existing access control devices, with the supplementary reader module being connected to the access control device via its interface. This allows the supplementary reader module to be used independently of the access control device's hardware and software configuration.

[0029] Optionally, the supplementary reading module can be reset to factory settings by short-circuiting the device interfaces of the radio interface and / or the access control device interface.

[0030] Another object of the invention is formed by an access control system which is suitable and / or designed for access control of a building, a production area, a factory plant, an office building, etc.

[0031] The access control system includes the access control device as previously described. The access control device is configured to capture the access identifier and provide the device data packet.

[0032] Furthermore, the access control system includes the supplementary reader module, as previously described. The access control system also includes the controller, as previously described, for receiving the module data packet. The controller has multiple communication interfaces, one of which is directly connected to the supplementary reader module and, via the supplementary reader module, indirectly to the access control device. The communication interfaces also serve as the addresses of the connected components. This greatly simplifies the network, as the data packet does not need to have sender and / or receiver addresses, since the sender and receiver are defined by the communication interface and the cable connection.

[0033] The controller is connected to the access control device via the supplementary reading module, using two data lines for data and / or signal transmission of the access identifier in the form of a data packet. Specifically, these two data lines correspond to the Data0 and Data1 data lines as defined in the Wiegand protocol.

[0034] The controller can forward the access credentials within the access control system for further processing, whereby the access control system controls an actuator, such as a door opener or similar device. Alternatively, the controller can directly control the actuator.

[0035] Optionally, the controller is connected to the access control device via at least one signal line for transmitting an access signal and / or an audible control signal, either by way of an intermediate, bypassing, or parallel connection of the supplementary reading module. Preferably, at least two, and preferably exactly three, signal lines are provided, wherein one of the signal lines transmits a positive access signal, which, for example, activates a green LED in the access control device; wherein one of the signal lines transmits a negative access signal, which, for example, activates a red LED in the access control device; and wherein one of the signal lines transmits an audible control signal, which activates a buzzer or other acoustic output device.If the access credential is valid and the actuator is activated, the positive access signal and the audible control signal are transmitted. If the access credential is invalid, the negative access signal is transmitted. The signal lines can be routed through the supplementary reader module, either all or only some of them. Alternatively, the supplementary reader module and the access control device can be connected in parallel via the signal lines, or a selection thereof. In this case, the supplementary reader module provides feedback, which can be transmitted to the mobile device, for example, via the wireless interface. Alternatively, the signal lines can bypass the supplementary reader module and be connected exclusively to the access control device. In this case, the integration and implementation of the supplementary reader module is simplified, as only the data lines need to be connected to the supplementary reader module.

[0036] In a preferred configuration, the access control system features multiple supplementary reader modules, which are positioned between the access control device and the controller. Specifically, the supplementary reader modules are arranged in series. This allows for any number of radio interfaces for reading an access identifier from a mobile device, which can be spatially separated. In particular, two or more supplementary reader modules can be connected in series on the same data line (with or without a reader). This achieves a logical ORing of the supplementary reader modules and thus of the radio interfaces. When any supplementary reader module generates a module data packet, it is routed through all other supplementary reader modules to the controller.This would allow BLE readers, in particular, to be mounted spatially distributed as supplementary reading modules, all of which logically control the same door or unit. One use case would be, for example, two curved staircases / ramps leading to the same door, one to the right and one to the left. Or an underground parking garage entrance with a car lane and a bicycle lane, both leading to the same roller door. It can be spatially advantageous to mount a separate supplementary reading module for the cyclist and the car driver.

[0037] Similar systems are used for physical card readers at barriers, such as factory entrances or toll plazas. Often, two readers are installed at different heights, allowing car drivers to easily reach reader 1 (e.g., at 1.20m) and truck drivers to easily reach reader 2 (at 2.50m). Both open the same barrier. This setup can be replicated using multiple additional reader modules and is particularly useful for retrofitting existing systems.

[0038] Another object of the invention relates to a method for access control, in particular for operating the access control system as previously described, wherein the access control system is first provided.

[0039] At an arbitrary initial point in time, the access control device detects an access event. The access control device generates a device data packet and sends it to the supplementary reader module. The supplementary reader module forwards the device data packet to the controller as a module data packet. Alternatively, the supplementary reader module generates the module data packet based on the device data packet. The controller is configured to grant access and, in particular, to directly and / or indirectly control an actuator, such as a door opener, a turnstile, an automatic door, or the like.

[0040] At a second, arbitrarily chosen time, the supplementary reader module reads an access code from the mobile device. Based on this access code, the module data package is generated and forwarded to the controller.

[0041] At both times, the controller is trained to create an access authorization and, in particular, to directly and / or indirectly control an actuator, for example a door opener, a turnstile, an automatic door or the like.

[0042] A hardware module was therefore developed that utilizes the standardized interface between the reader / access control device and the door controller, thus operating independently of the reader / access control device hardware. This add-on reader module can be connected between the reader / access control device and the door controller (like a "man-in-the-middle") and provides mobile access services without affecting the reader / access control device itself. The form factor can vary from a standalone device that connects to existing Wiegand cabling to a module that is part of a third-party product.On a commercial level, this idea offers numerous possibilities, ranging from selling it as a standalone device for retrofit scenarios, to offering it as a retrofit module for readers / access control devices from any supplier, to selling it to readers / access control device suppliers for integration of the supplementary reading module into their readers / access control devices.

[0043] All that is needed is a receiver for radio data, such as Mobile Access BLE data, that also understands Wiegand, specifically translates it into Wiegand, and can transmit it. This Mobile Access capability does not need to be integrated into the electronics of the access control device. Therefore, the form factor is preferably chosen so that the add-on reader module can be concealed behind the access control device or in a flush-mounted box. The add-on reader module is connected to the existing wiring of the access control device. It acts as a "man-in-the-middle" on the power and data connections of the access control device. Thus, there are two Wiegand transmitters (standard access control device + add-on reader module) connected to the controller, transmitting (and receiving) over the same wires.

[0044] Further features, advantages, and effects of the invention will become apparent from the following description of preferred embodiments of the invention and the accompanying figures. These show: Fig. 1 a block diagram of an access control system as an embodiment of the invention; Fig. 2. A detailed representation from the access control system for a first alternative; Fig. 3. A detailed representation from the access control system for a second alternative.

[0045] The Fig. Figure 1 shows a schematic block diagram of an access control system 1 as an embodiment of the invention. The access control system 1 is used in buildings, government offices, factories, and other applications to implement access control at doors, turnstiles, etc.

[0046] Access control system 1 comprises one or more access control devices 2, where access control device 2 is configured, for example, as a card reader for ID cards. Access control device 2 is configured to read an access identifier, in this example, from the ID card. Alternatively, access control device 2 can have a keypad for entering the access identifier or a PIN code, which is digitally linked to the access identifier. It is also possible for access control device 2 to capture biometric data, which is linked to the access identifier. Activating access control device 2 provides the access identifier. Access control device 2 creates a device data package based on the access identifier, which contains the access identifier.The access control device 2 has a connection interface 14 for outputting the device data packet.

[0047] The access control system 1 has a supplementary reader module 3 for the access control device 2. Thus, at least one, some, or all of the access control devices 2 can be assigned such a supplementary reader module 3.

[0048] The supplementary reading module 3 has an access control device interface 4, wherein the access control device interface 4 is configured to receive the device data package from the access control device 2.

[0049] The supplementary reader module 3 has a radio interface 5 which can read an access identifier from a mobile device 6. The radio interface 5 is configured, for example, as an NFC interface, Bluetooth interface, BLE interface, and / or NFC interface. The access identifier is read, for example, using a certificate structure, thus ensuring increased security. It can be configured that the radio interface 5 is only activated for reading when it is ensured that the mobile device 6 is in close proximity, i.e., at a distance of less than, for example, 20 cm from the supplementary reader module 3 and / or the radio interface 5.

[0050] The supplementary reading module 3 has a system interface 7, which is configured to output a module data package containing an access identifier. On the one hand, the module data package can be configured to correspond to the device data package, thus containing the access identifier read from the access control device 2. On the other hand, the module data package can be configured to be based on the access identifier read from the mobile device 6.

[0051] Access control system 1 includes a controller 8, which receives the module data packet and compares the access ID with a database or similar system within access control system 1. If the access ID is valid, the controller 8 grants permission and activates an actuator 9, which may be a door opener, turnstile, swing door, etc., thus granting the desired access and allowing a user to pass through. Alternatively, the controller 8 can forward the access ID, with the verification of the access ID, the permission, and / or the control of the actuator 9 being performed, for example, by a central unit 10.

[0052] Thus, the access identifier can alternatively be transmitted to the access control system 1 via the access control device 2 or the supplementary reading module 3.

[0053] Communication between the access control device 2 and the supplementary reader module 3, as well as between the supplementary reader module 3 and the controller 8, is wired and, in this embodiment, via two data lines, Data0 and Data1, which are located in the Fig. 1 are designated with the reference number 11. Wiegand also includes supply lines + / -. A communication protocol, such as the Wiegand protocol or a related protocol, is used for communication, whereby the access identifier is transmitted unencrypted as a bit sequence in the data packet, i.e., in the device data packet and in the module data packet. The bit sequence can have a length of, for example, 24 bits or another bit length. The access identifier is uniquely assigned within access control system 1.

[0054] When implementing the device data packet in the supplementary reading module 3, it can be arranged in two ways: firstly, the device data packet is passed through or forwarded by the supplementary reading module 3, and then forms the module data packet. Alternatively, the access identifier is read from the device data packet and incorporated into a module data packet, which is then transmitted.

[0055] The controller 8 has multiple communication interfaces 16, with the supplementary reading module 3, and thus indirectly the access control device 2, being connected to one of the communication interfaces 16 via data lines 11. Through this connection to the communication interface 16, the controller 8 and / or the access control system 1 know the identity of the access control device 2 and / or the supplementary reading module 3. Therefore, a sender and / or receiver address, as provided for, for example, in the Wiegand protocol, can be omitted from the device data packet and / or the module data packet.

[0056] If no access ID is present or no device data packet is transmitted, the access control device 2 transmits a presence signal via data lines 11. The presence signal is, for example, a high signal on both data lines 11. If the supplementary reader module 3 also lacks an access ID, the presence signal from the access control device 2 is passed through. Alternatively, the presence signal is read by the supplementary reader module 3, which then generates a presence signal that is output via the system interface 7.

[0057] In addition to the data lines 12, the access control device 2 is connected directly or indirectly to the controller 8 and, in particular, to the communication interface 16 via one or more signal lines 13. One of the signal lines 13 transmits a positive access signal, which, for example, activates a green LED in the access control device 2. One of the signal lines 13 transmits a negative access signal, which, for example, activates a red LED in the access control device 2. One of the signal lines 13 transmits an audible control signal, which activates a buzzer or other acoustic output device in the access control device 2.

[0058] Firstly, the signal lines 13 can be configured to bypass the supplementary reader module 3 and be connected only to the access control device 2. Alternatively, the access control device 2 and the supplementary reader module 3 can be connected in parallel via the signal lines 13. It is also possible for the signal lines 13 to be looped through the supplementary reader module 3. The latter two options have the advantage that the information contained in the signal lines 13 is also available to the supplementary reader module 3 and can, for example, be forwarded to the mobile device 6 to inform the user.

[0059] Furthermore, a ground wire and a power supply wire can be provided as cable connections, which can be connected to the access control device 2 and the supplementary reader module 3 in the same way. Thus, it is possible to have a first cable connection between the controller 8 and the supplementary reader module 3, and a second cable connection between the supplementary reader module 3 and the access control device 2, comprising the data lines 11, the signal lines 13, and the power supply lines. The supplementary reader module 3 is particularly easy to integrate into this configuration. Alternatively, the first and second cable connections may only have the data lines 11, with the signal lines 13 and / or the power supply lines either supplying the access control device 2 and the supplementary reader module 3 in parallel, as described, or bypassing the supplementary reader module 3 for data and signal purposes.

[0060] The Fig. Figure 2 shows a schematic block diagram of the access control device 2, the supplementary reading module 3, and the controller 8 as a further embodiment of how these are integrated into the access control system 1 in the Fig. 1. The access control device 2 has a microcontroller 15, which controls the access control device 2. The connection interface 14 is connected to the output of the microcontroller 15. The connection interface 14 is connected to the access control device interface 4. Thus, the connection of the supplementary reader module 3 only takes place at the connection interface 14, so that the supplementary reader module 3 can be connected independently of the hardware or software of the access control device 2. In this embodiment, the supplementary reader module 3 is designed as a single unit, which can be easily integrated, for example, in a flush-mounted box or in another space-saving manner. The supplementary reader module 3 of this embodiment is particularly well suited to complement existing access control devices 2.

[0061] The Fig. Figure 3 shows the same representation as the Fig.2 An alternative embodiment, wherein the supplementary reading module 3 is integrated into the housing of the access control device 2. The access control device interface 4 and the connection interface 14 can also be configured together.

[0062] The connection interface 14 and / or the communication interface 16 are designed as Wiegand interfaces and / or Wiegand protocol compliant. QUOTES INCLUDED IN THE DESCRIPTION

[0000] This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited patent literature

[0000] DE 10 2021 207 700 A1

[0004]

Claims

[1] Supplementary reading module (3) for an access control system (1) with a radio interface (5) for reading an access identifier from a mobile device (6), with an access control device interface (4) for connection to an access control device (2), wherein the access control device interface (4) is configured to receive a device data packet based on an access identifier from the access control device (2), with a system interface (7) for the transmission of a module data package within the access control system (1), wherein the supplementary reading module (3) is configured to provide and transmit the module data package on the basis of the access identifier or the device data package. [2] Supplementary reading module (3) according to claim 1, characterized by, that the supplementary reading module (3) is configured to output the device data package as the module data package at the system interface (7) or that the module data package is generated on the basis of the device data package. [3] Supplementary reading module (3) according to any one of the preceding claims, characterized by , that the access control device interface (4) is configured to receive a presence signal from the access control device (2), wherein the supplementary reading module (3) is configured to provide and / or transmit the presence signal at the system interface (7). [4] Supplementary reading module (3) according to any one of the preceding claims, characterized by , that the access control device interface (4) and the system interface (7) are configured to use the same communication protocol. [5] Supplementary reading module (3) according to claim 4, characterized by that the protocol is designed as a Wiegand protocol. [6] Supplementary reading module (3) according to any one of the preceding claims, characterized by , that the radio interface (5) is configured as an NFC device, Bluetooth device, in particular a BLE device, and / or as a UWB device. [7] Supplementary reading module (3) according to any one of the preceding claims, characterized by , that the supplementary reading module (3) is designed to read the access identifier via the radio interface (5) on the basis of a certificate structure. [8] Supplementary reading module (3) according to any one of the preceding claims, characterized by , that the supplementary reading module (3) is designed as an independent installation unit. [9] Access control system (1) with an access control device (2), wherein the access control device (2) is configured to capture an access identifier and provide a device data packet, with the supplementary reading module (3) according to one of the preceding claims, and with a controller (8) for taking over the module data package. [10] Access control system (1) according to claim 9, characterized by , that the controller (8) is connected to the access control device (2) via two data lines (11) for the transmission of the access identifier through the interposition of the supplementary reading module (3). [11] Access control system (1) according to claim 9 or 10, characterized by , that the controller (8) is connected to the access control device (2) via at least one signal line (13) for the transmission of an access signal and / or tone control signal by means of an intermediate, bypassing or parallel connection of the supplementary reading module (3). [12] Access control system (1) according to any one of claims 9 to 11, characterized by, that the access control system (1) has a plurality of supplementary reading modules (3), wherein the supplementary reading modules (3) are arranged signal-wise between the access control device (2) and the controller (8). [13] Method for access control, in particular for operating the access control system (1) according to any one of claims 9 to 12, wherein the access control system (1) is provided, wherein at an arbitrary first time, an access control device (2) detects an access recognition, forms a device data packet and sends this to an augmentative reading module (3), wherein the augmentative reading module (3) forwards the device data packet as a module data packet to a controller (8) or generates the module data packet based on the device data packet and forwards it to the controller (8), wherein the controller (8) is configured to create an authorization for access; wherein at a second arbitrary time point the supplementary reading module (3) reads an access recognition from a mobile device (6), generates the module data package on the basis of the access recognition and forwards it to the controller (8), wherein the controller (8) is trained to create an authorization for access.

Images