ACCESS CONTROL SYSTEM FOR BUILDINGS

Description

[0001] The invention relates to a building access control system and a reading head for this access control system.

[0002] Known building access control systems include: a transponder key reading head mounted on a front panel located near an access door to be unlocked, and an access control module located behind the front panel for alternately authorizing and prohibiting access to the building based on an access code received by the reading head.

[0003] To do this, the access control module uses a memory in which access rights are stored. If the access code received corresponds to these access rights, the access control module commands the unlocking of the access door.

[0004] To remotely update these access rights, the access control system also includes a transceiver capable of establishing a long-distance link, via a cellular network, with an access rights server. This access rights server contains the information necessary to update the access rights used by the access control module.

[0005] Unlike the access control module, this long-distance transceiver cannot be placed behind the front facade because it is usually made of metal. Therefore, in known access control systems, this long-distance transceiver is placed elsewhere in the building.

[0006] When installing such a known access control system, it is therefore necessary, on the one hand, to install the reading head near the access door and, on the other hand, to install the long-distance transceiver.

[0007] Prior art is also known from US2016 / 232728A1, US2014 / 002236A1. However, this prior art does not concern situations where the front panel is a metal plate intended to resist acts of vandalism. EP3603460A1, on the other hand, does not describe how the long-distance transceiver is installed.

[0008] The invention aims to propose an access control system that is simpler to install. It therefore relates to such an access control system in accordance with claim 1.

[0009] The invention also relates to a reading head according to claim 8.

[0010] The invention will be better understood on reading the description which follows, given solely as a non-limiting example and made with reference to the drawings in which: there figure 1 is a schematic illustration of a building access control system; the figure 2is a schematic illustration, partly in vertical section, of a reading head used in the system of the figure 1 ; there figure 3 is a schematic illustration of the electronic architecture of the read head of the figure 2 ; there figure 4 is a schematic illustration, in vertical section, of the arrangement of various components inside the reading head of the figure 2 , and the Figure 5 is a flowchart of an access control process implemented in the system of the figure 1 .

[0011] In the remainder of this description, the features and functions well known to those skilled in the art are not described in detail.

[0012] In this description, detailed examples of embodiments are first described in a chapter I with reference to the figures. Then, in a chapter II, variants of these embodiments are presented. Finally, the advantages of the different embodiments are presented in a chapter III. Chapter I: Examples of embodiments

[0013] There figure 1 represents a system 2 for controlling access to a building 4 equipped with an access door 6. The door 6 is movable between an open position and a closed position. In the closed position, it prohibits access to the interior of the building 4. In the open position, a visitor or a resident can freely enter the interior of the building 4.

[0014] To control access to building 4, system 2 includes: an electric lock 10, an access control unit 12 connected to the lock 10, and electronic keys.

[0015] Typically, the system 2 may comprise several access control units to control access to several buildings or to different parts of the same building. The different electric locks and access control units then operate, respectively, as the lock 10 and the control unit 12. Thus, subsequently, these other electric locks and other access control units are not described in detail and have not been shown.

[0016] The lock 10 moves between a locked position and an unlocked position. In the locked position, it holds the door 6 in its closed position. In the unlocked position, the door 6 can be freely moved from its closed position to its open position. The lock 10 moves from its locked position to its unlocked position in response to receiving an opening command. Then, once this opening command is received, it remains in the unlocked position for a predetermined period of time, then automatically returns to its locked position at the end of this predetermined period of time.

[0017] The lock 10 is directly connected to the control unit 12 via a wired connection 13. The opening command is transmitted to the lock 10 via this connection 13.

[0018] To simplify the figure 1, only one electronic key 14 and one electronic key 16 have been shown. Keys 14 and 16 correspond to two different possible embodiments of an electronic key of system 2.

[0019] Key 14 is a transponder key also known as an "RFID tag" or "radio tag" or the English terms "RFID tag" and "RFID transponder". The acronym RFID stands for "Radio Frequency IDentification".

[0020] The key 14 does not have its own power source. The key 14 is powered by the central unit 12 via a short-distance wireless information transmission link 18. In this text, the term "short-distance link" refers to a link that can only be established over a distance of less than 10 m or 5 m. Beyond this distance, the short-distance link cannot be established and does not exist.

[0021] Typically, key 14 has a transponder 20 equipped with: of a non-volatile memory 22 containing an access code 24, and an antenna 26 capable of transmitting the code 24 to the central unit 12 as soon as the link 18 is established.

[0022] This antenna 26 also serves to extract the energy necessary for the operation of the transponder 20 from the electromagnetic signals radiated by the central unit 12.

[0023] Here, key 14 is therefore a passive electronic key and does not include any other electronic elements than those described above.

[0024] In the case of using a transponder such as transponder 20, the link 18 is established over a maximum distance of less than 50 cm or 10 cm. The frequency of the electromagnetic wave used to establish the link 18 is typically equal to 13.56 MHz.

[0025] The key 16 comprises a transceiver 32 capable of establishing a short-distance wireless link 30 with the control unit 12. The link 30 here complies with the Bluetooth standard.

[0026] The key 16 comprises a memory 34 comprising an access code 36. The key 16 is capable of transmitting the code 36 to the control unit 12 via the link 30.

[0027] Unlike the key 14, the key 16 includes a battery 38 capable of powering the various electronic components of the key 16. The key 16 also includes a microprocessor capable of executing instructions stored in the memory 34 and a human-machine interface 40. The human-machine interface 40 typically includes a touch screen. For example, the key 16 is a smartphone. This smartphone is equipped with an application for transmitting the access code 36 to the control panel 12 via the link 30.

[0028] The control unit 12 is able to transmit the opening command to the lock 10 when the access code received is a valid access code. A valid access code is an access code authorized to unlock the lock 10. In the case where the access code received is not valid, that is to say it is not authorized to unlock the lock 10, no opening command is transmitted to the lock 10 and the latter therefore remains in its locked position.

[0029] An access code is valid if it matches pre-registered access rights. For example, these pre-registered access rights include a list of access codes authorized to unlock lock 10. If the received access code belongs to this list, then the access code is valid. Otherwise, the received access code is invalid.

[0030] In this embodiment, part of the access rights are recorded locally in a memory of the central unit 12. Under these conditions, from time to time, it is necessary to update the access rights recorded in the central unit 12. Such an update makes it possible, for example, to authorize a new key to unlock the lock 10 and / or, on the contrary, to prohibit an electronic key from unlocking the lock 10. For this, the central unit 12 is able to establish a long-distance wireless link 50 which connects the central unit 12 to an access rights server 60.

[0031] The link 50 is established via a public network 62. The network 62 is a packet-switched network. Here, the network 62 is a cellular network. A long-distance link is an information exchange link that can be established between transmitters and receivers located several kilometers apart.

[0032] The server 60 comprises in particular a microprocessor 64 and a memory 66. The microprocessor 64 is capable of executing instructions recorded in the memory 66. Here, the memory 66 comprises in particular the instructions of an access rights management module 68 and of a remote access control module 70. The memory 66 also comprises a database 72 comprising the access rights to be used to authorize and, alternately, prohibit the unlocking of each lock of the system 2. The database 72 therefore comprises in particular the access rights necessary to authorize and, alternately, prohibit the unlocking of the lock 10.

[0033] When the instructions of the management module 68 are executed, this module 68 interacts with an administration station 80 of the system 2. This station 80 is here connected to the server 60 via the network 62. Thus, the station 80 and the server 60 can be distant from each other.

[0034] Station 80 is, for example, a computer comprising: a central unit 82 equipped with software, such as an Internet browser, which allows interaction with the module 68; a screen 84, and a keyboard 86.

[0035] The module 68 allows an administrator to modify the access rights contained in the database 72. The module 68 is also capable of transmitting, via the link 50, an update of the access rights of the central unit 12. In response to the reception of this update, the central unit 12 updates the locally recorded access rights. Following this update, the locally recorded access rights are identical to the access rights recorded in the database 72.

[0036] When executed by the microprocessor 64, the module 70 is capable of comparing an access code received via the link 50, with the access rights recorded in the base 72 to determine whether the received access code is valid or invalid. When the received access code is valid, in response, the module 70 generates an opening command and transmits it to the access control unit 12 which sent this access code.

[0037] The access control module 70 is formed by the combination of the microprocessor 64 and the memory 66 containing the instructions of this module 70 and the database 72. To simplify the figure 1 , in this figure the reference 70 points only to the instructions of this module 70 in the memory 66.

[0038] In this embodiment, the control panel 12 may also receive an access code transmitted by a remote key 90. The key 90 communicates with the control panel 12 via a long-distance link established via the network 62. For example, the key 90 is identical to the key 16 except that it transmits the access code via a long-distance link established with the control panel 12.

[0039] There figure 2 represents in more detail the mechanical architecture of the control unit 12 in the particular case where it is devoid of a screen, button, microphone and loudspeaker. The control unit 12 therefore does not fulfill the functions of an electric doorman or intercom. In this particular case, the control unit 12 only comprises a front panel 102 and a reading head 98 mounted on this front panel.

[0040] In this embodiment, all of the electronic components of the central unit 12 are housed inside the head 98. Thus, in this particular embodiment, the central unit 12 and the reading head 98 are merged.

[0041] The head 98 is at least partly received inside a niche 100. Here, the niche 100 is a cavity, for example parallelepiped, dug in a vertical wall 101 of the building 4. For example, the wall 101 is a concrete wall of the building 4. The niche 100 is located close to the door 6, that is to say, generally, less than 50 m or less than 10 m or less than 3 m from this door 6. The cables making it possible to electrically connect the head 98 to the lock 10 and to an electrical power supply network open inside this niche 100.

[0042] Access to the interior of the niche 100, from outside the building 4, is prohibited by the front facade 102 which completely closes the niche 100. For this purpose, the periphery of the orthogonal projection of the facade 102 on the wall 101 completely surrounds the entrance to the niche 100.

[0043] The 102 facade is designed to resist vandalism. For this purpose, it is typically a metal plate at least 1 mm thick.

[0044] The facade 102 is fixed, without any degree of freedom, on the wall 101.

[0045] This facade 102 comprises, in this embodiment, a single through orifice 104 which connects the exterior side of the facade 102 to its interior side facing the niche 100. This exterior side is the one which is directly exposed to the exterior of the building 4. In this embodiment, this orifice 104 is used to fix, without any degree of freedom, the reading head 98 on the wall 101. Typically, the cross-section of the orifice 104 is circular with a flat.

[0046] The head 98 comprises a housing 120. The housing 120 receives all of the electronic components of the head 98 and mechanically isolates them from the external environment. For example, the housing 120 has a protection rating greater than IP54.

[0047] The housing 120 has a front portion 122, a rear portion 124 and a shoulder 126 located between these front and rear portions.

[0048] The front part 122 is located on the outside of the facade 102. The rear part 124 passes through the orifice 104. The rear part 124 is the only part of the head 98 which is received inside the niche 100. The front 122 and rear 124 parts are located immediately after each other along a longitudinal axis 128 perpendicular to the plane in which the facade 102 mainly extends. Here, the housing 120 is a solid of revolution whose axis of revolution coincides with this axis 128.

[0049] The shoulder 126 extends in a plane perpendicular to the axis 128. The shoulder 126 bears on the entire periphery of the orifice 104 when the head 98 is mounted on the front 102. For this, the rear part 124 is cylindrical and threaded to form a screw onto which a nut 130 is screwed. Here the rear part 124 is a cylinder whose cross-section corresponds to that of the orifice 104 so that it can be introduced through this orifice 104. In this embodiment, the cross-section of the rear part 124 also includes a flat which, by cooperation in shape with the flat of the orifice 104, prevents the rotation of the head 98. To fix the head 98 on the front 102 without any degree of freedom, it is sufficient to screw the nut 130 onto the rear part 124 until the periphery of the orifice 104 is wedged between, on one side, the shoulder 126 and, on the opposite side, the nut 130.

[0050] The wire connections that electrically connect the head 98 to the lock 10 and to the power supply network exit from the rear part of the head 98.

[0051] There figure 3 represents the electronic architecture of the reading head 98. The head 98 comprises: a short-distance receiver 150 capable of establishing the link 18 to receive the access code 24 of the key 14, a short-distance transceiver 152 capable of establishing the link 30 to receive the access code 36 of the key 16, a long-distance transceiver 154 capable of establishing the link 50 to communicate with the server 60 and receive the access code of the key 90, a wired interface 156 capable of transmitting the opening command on the wired link 13, a power supply interface 158 capable of connecting the head 98 to an external power supply network, a microprocessor 160 capable of executing instructions recorded in a memory, a memory 162 containing the instructions and the data necessary for the execution of the method of the Figure 5 , and a bus 163 allowing the exchange of information between the different electronic components of the head 98.

[0052] Here, the receiver 150 is also capable of transmitting data to the key 14 via the link 18.

[0053] The memory 162 contains in particular the instructions of a local access control module 164 and of a failure detection module 165. The memory 162 also contains a database 166 containing the access rights recorded locally in the head 98.

[0054] When executed by the microprocessor 160, the local module 164 performs substantially the same functions as the remote module 70 except that it is executed locally. The module 164 is formed by the combination of the microprocessor 160 and the memory 162 containing the instructions of this module 164 and the database 166. To simplify the figure 3 , in this figure, the reference 164 points only to the instructions of this module 164 stored in the memory 162.

[0055] When the instructions of the module 165 are executed by the microprocessor 160, the module 165 is able to detect a failure of the module 164. In response to the detection of a failure of the module 164, the module 165 transmits the received access code to the remote access control module 70. The module 165 is formed by the combination of the microprocessor 160 and the memory 162 containing the instructions of this module 165.

[0056] The interfaces 156, 158, the microprocessor 160 and the memory 162 are fixed on a printed circuit 168 ( Figure 4 ). The bus 163 is for example produced in a metallization layer of this printed circuit 168.

[0057] The receiver 150 is a transponder reader. It includes in particular an antenna 170 connected to an electronic adaptation circuit 172.

[0058] The transceiver 152 is a transceiver compliant with the Bluetooth standard and, more specifically, with the BLE (“Bluetooth Low Energy”) standard. The transceiver 152 comprises an antenna 174 and an electronic adaptation circuit 176.

[0059] The transceiver 154 is here a transceiver compliant with the LTE-M (“Long-Term Evolution for Machine”) standard. It notably comprises an antenna 178 and an electronic adaptation circuit 180.

[0060] The electronic adaptation circuits make it possible to transform the electrical signals generated by an antenna into data transmitted on the bus 163. The circuits 176 and 180 also make it possible to transform data received via the bus 163 into an electrical signal that the antenna radiates in the form of electromagnetic waves. These different adaptation circuits are fixed on the printed circuit 168 ( Figure 4 ).

[0061] There figure 4represents the arrangement of the antennas 170, 174 and 178 inside the front part 122 of the housing 120 of the head 98. Starting from the shoulder 126 and moving away from the rear part 124, we successively encounter: the printed circuit 168; a ferrite plate 200, and an antenna support 202.

[0062] The printed circuit board 168, the plate 200 and the support 202 all extend primarily parallel to a plane perpendicular to the axis 128.

[0063] The antennas 170, 174 and 178 are produced on the support 202. They extend mainly in a plane perpendicular to the axis 128. The support 202 is made of an electrically insulating material. Here, by electrically insulating material is meant a material whose electrical conductivity at 20°C is less than 10 -4< S / m or 10 -10< S / m. For example, the support 202 is a printed circuit and the antennas 170, 174 and 178 are produced in a metallization layer of this printed circuit.

[0064] The plate 200 has through holes for wire connections that connect the antennas 170, 174 and 178 to the corresponding matching circuits on the printed circuit 168. The plate 200 isolates the antennas 170, 174 and 178 from the metal facade 102. It makes it possible to limit the disturbances that the facade 102 can cause on the operation of these antennas. For this purpose, the plate 200 is made of a ferromagnetic and electrically insulating material. Here the plate 200 is made of ferrite. The composition of the ferrite used is, for example, chosen from the group consisting of iron oxides Fe 2 O 3 XO or, X0 is chosen from the group consisting of manganese, zinc, cobalt, nickel or other suitable materials.

[0065] The operation of system 2 will now be described with reference to the method of the Figure 5 .

[0066] For example, the method begins with a phase 300 of updating the access rights recorded in the memory 162 of the head 98.

[0067] More precisely, during a step 302, an administrator connects to the server 60 using the administration station 80. The access rights management module 68 is then executed by the microprocessor 64.

[0068] During a step 304, the station 80 acquires the administrator's commands and transmits them to the management module 68 which, in response, updates the access rights recorded in the base 72 according to the commands received.

[0069] Then, during a step 306, the access rights of the head 98 are updated according to the access rights recorded in the database 72. For this, the server 60 connects to the head 98 and establishes the link 50. Then the server 60 transmits to the head 98 the update to be carried out. In response, the head 98 updates the access rights recorded in the database 166 according to the update received. Once the update has been carried out, the access rights contained in the database 166 are, typically, identical to those contained in the database 72.

[0070] This update is for example triggered periodically or in response to a particular command acquired by administration station 80.

[0071] The update phase 300 then ends and an access control phase 310 begins.

[0072] In a step 312, the short-distance connection 18 between the key 14 and the head 98 is established. This connection is established automatically as soon as the key 14 is sufficiently close to the head 98.

[0073] Then, during a step 314, the key 14 transmits its access code 24 to the head 98 via the link 18.

[0074] In a step 316, in response, the module 165 checks whether the module 164 is able to function correctly. For example, the module 164 is considered not to be able to function correctly, and therefore faulty, when its execution is blocked, for example, by an execution problem.

[0075] If the module 164 is able to operate correctly, during a step 320, the access code 24 is transmitted to the local access control module 164.

[0076] During a step 322, in response to the reception of the access code 24, the local module 164 compares it to the access rights pre-recorded in the database 166.

[0077] If the access code 24 received corresponds to the access rights pre-recorded in the base 166 then, during a step 324, the module 164 generates the opening command and transmits it to the lock 10 via the wired link 13.

[0078] During a step 326, in response to receiving the opening command, the lock 10 moves to its unlocked position and the user can then open the door 6.

[0079] If the received access code 24 does not correspond to the access rights pre-recorded in the base 166 then, during a step 328, the module 164 does not generate the opening command and transmits the received access code 24 to the remote access control module 70 via the link 50 and the network 62.

[0080] During a step 330, the remote module 70 compares the received access code 24 with the access rights of the control unit 12 recorded in the database 72.

[0081] If the received access code 24 corresponds to the access rights recorded in the base 72 then, during a step 332, the remote module 70 generates the opening command and transmits it to the head 98 via the link 50 and the network 62.

[0082] During a step 334, the head 98 receives the opening command and transmits it to the lock 10 via the wired connection 13. Then, the method continues with step 326.

[0083] If the received access code 24 does not correspond to the access rights recorded in the base 72 then, during a step 336, the module 70 does not generate the opening command. In this case, no opening command is generated and the lock 10 remains in its locked position.

[0084] If the module 165 detects that the module 164 is faulty, during a step 340, the module 165 immediately transmits the received access code 24 to the remote access control module 70. Then, the method continues with step 330.

[0085] Phase 310 has been described in the particular case of key 14. However, the operation of access control with key 16 or key 90 is identical except that the access code is transmitted via, respectively, links 30 and 50. Chapter II: Variants Access control panel variants:

[0086] Alternatively, the central unit 12 also performs the functions of an electric doorman. In this case, the front facade includes, in addition to the orifice 104, additional orifices to receive the various elements of a human-machine interface. This human-machine interface allows a visitor, present in front of the central unit 12, to call a resident of the building and then communicate with this resident via this interface. In response, the resident can trigger the generation and transmission of the opening command to the lock 10 by pressing a button on their handset. For this purpose, typically, the human-machine interface of the central unit 12 then includes the following elements: a microphone, a loudspeaker, one or more call buttons to trigger the call of a resident. Optionally, this human-machine interface also includes a camera to film the visitor.

[0087] Alternatively, the local access control module 164 is omitted. In this case, the microprocessor 160 of the head 98 is configured to systematically transmit to the remote access control module 70 the access code received via the links 18, 30 or 50. Then, the method proceeds as described from step 330 of the method of the Figure 5 . On the other hand, steps 322 and 324 are omitted.

[0088] Alternatively, the local access control module 164 is implemented in a housing mechanically independent of the housing 120 of the reading head 98. In this case, typically, the head 98 is connected by a wired connection to this local access control module which is itself connected by the wired connection 13 to the lock 10. Thus, in such an embodiment, the head 98 is not directly connected by a wired connection to the lock 10. In this case, the fault detection module 165 detects a fault if, for example, the wired connection between the reading head and the local access control module is cut or if the local access control module does not respond.

[0089] In a simplified embodiment, the module 165 for detecting the failure of the local access control module 164 is omitted. In this case, the remote access control module 70 is not used to compensate for a failure of the local access control module 166.

[0090] The head 98 may include one or more short-range transceivers. For example, one of the transceivers 150, 152 is omitted. Other short-range transceivers may be used instead of or in addition to those previously described. Any transceiver capable of establishing a wireless personal area network may be used. These personal area networks are better known by the acronym WPAN ("Wireless Personal Area Network"). For example, the short-range transceiver may be selected from the group consisting of an RFID ("Radio Frequency IDentification") tag reader, a Bluetooth-compliant transceiver, a near-field transceiver, or a Zigbee-compliant transceiver. A near-field transceiver is a transceiver using near-field communication, better known by the acronym NFC ("Near Field Communication").In another simplified embodiment, the receiver 150 is only capable of receiving data transmitted by the key 14.

[0091] Similarly, other embodiments of the transceiver 154 are possible. Any transceiver capable of establishing a wireless wide area network may be used. These wireless wide area networks are better known as cellular networks or by the acronym WWAN ("Wireless Wide Area Network").

[0092] In another embodiment, the ferrite plate 200 is omitted. Such an embodiment is for example used when the front panel 102 is made of an electrically insulating material.

[0093] The plate 200 may also be placed between the shoulder 126 and the printed circuit 168 instead of being placed between the printed circuit 168 and the support 202.

[0094] In a particular embodiment, the printed circuit additionally comprises one or more metallization layers in which the antennas 170, 174 and 178 are made. In this case, the printed circuit 168 additionally fulfills the function of the support 202 and the support 202, mechanically independent of the printed circuit 168, is then omitted. In this case, the ferrite plate 200 is placed between this printed circuit and the shoulder 126.

[0095] It is also possible to integrate the plate 200 inside the printed circuit 168. For example, for this, in addition to one or more metallization layers, the printed circuit comprises a layer made of ferrite. If the antennas 170, 174 and 178 are also made in this printed circuit, then they are made in metallization layers located on the side of the ferrite layer opposite the shoulder 126.

[0096] Other shapes are possible for the housing 120. For example, as a variant, the housing 120 is a cylinder of square or rectangular cross-section. The axis of revolution of this cylinder is the axis 128. In this case, typically, the front part of the housing 120 is flush with the front facade 102 through the orifice 104. Its rear part is then typically equipped with fixing lugs which allow it to be attached, without any degree of freedom, to the inner side of the front facade. Access Rights Server Variants:

[0097] In a simplified embodiment, the remote access control module 70 is omitted. In this case, the local access control module 164 does not send the received access code to the server 60 if this access code does not correspond to the access rights recorded in the base 166. Similarly, the module 165 is omitted. Electronic key variants:

[0098] Many other embodiments are possible for the electronic key. In particular, the head 98 can be simplified to include only one of the transmitters 150 or 152. In this case, one of the keys 14 and 16 cannot be used to unlock the lock 10. Other variants:

[0099] In this application, the memories of the electronic keys, the central unit 12 and the server 60 have been represented in the form of a single memory block to simplify the description. However, in practice, these memories may each be composed of several distinct memory blocks. For example, the executable instructions and the data to be processed may be recorded in two distinct memory blocks. The memory may also comprise one or more memory blocks which fulfill particular functions such as, for example, the cache memory function.

[0100] The niche 100 is not necessarily a cavity dug in a wall. It can also correspond to the interior cavity of a box fixed, without any degree of freedom, on a wall of the building 4. In a particular embodiment, the niche 100 can also be arranged inside the door 6. In this case, the lock 10 is also housed in the door 6.

[0101] Door 6 is not necessarily an entrance door to a building. It can also be an access door to a room inside the building, such as a garage or a garbage room.

[0102] Alternatively, the updating of the access rights in the base 166 is triggered, for example at regular intervals, by the central unit 12 and not by the server 60. In this case, the central unit 12 connects at regular intervals to the server 60 to check whether an update of the access rights is available. If so, this update is downloaded via the link 50 and then used to update the access rights recorded in the base 166.

[0103] The link 50 can also be used to transmit to the access center 12 other information than updates to access rights. For example, it can be used to transmit an update of the instructions and modules stored in the memory 162. It can also be used to transmit to the server 60 or another server information such as a history of access to the building 4 or any other information collected by the access center.

[0104] Alternatively, the transmission of the access code received by the central unit 12 to the remote module 70 in the event of failure of the local module 164 or in the event of a lack of correspondence between the access code received and the access rights recorded in the base 166, can be implemented independently of the fact that the long-distance transceiver 154 is located inside the reading head 98. For example, its functionalities can be implemented in an access control system in which the reading head comprises only the transceivers 150 and 152 and the transceiver 154 is implemented in a housing separate from the housing 120 and connected to the central unit 12 via a wired link. Chapter III: Advantages of the described embodiments

[0105] The installation of the system 2 is simplified by the fact that the transceiver 154 is also housed inside the reading head 98. Indeed, thanks to this, in a single operation, namely the fixing of the head 98 on the front panel 102, the installer installs both the long-distance transceiver 154 and the short-distance transceivers 150 and 152.

[0106] Transmitting the received access code to the remote access control module 70 in the event that the local access control module 164 has not been able to identify a match with the access rights recorded in the database 166 makes it possible to overcome a delay in updating the access rights of this database 166. It is therefore possible to space out the updates of the access rights of the database 166 without increasing the probability that a user of a new key will be denied access to the building 4 because the access rights in the database 166 have not yet been updated. This therefore makes it possible to reduce the number of connections between the central unit 12 and the server 60.

[0107] Automatically redirecting the access code to the remote access control module 70 in the event of a failure of the local access control module 164 makes it possible to immediately compensate for a failure of this local module. In particular, control of access to the building remains active even if the local access control module 164 is faulty.

[0108] Implementing only the remote access control module 70 simplifies the architecture of the access control unit 12. For example, this simplifies the production of the reading head 98 since it no longer includes a local access control module.

[0109] Implementing the local access control module 164 inside the reading head 98 further simplifies the installation of the system 2. Indeed, in this case, the installation of the head 98 on the facade 102 also allows the local access control module 164 to be installed at the same time. It is therefore no longer necessary to install, in addition to the reading head, an additional box in which this local access control module 164 is implemented.

[0110] The presence of the ferrite plate 200 between the antennas 170, 174, and 178 and the shoulder 126 makes it possible to limit disturbances to the operation of these antennas when the reading head 98 is mounted on a facade 102 made of electrically conductive materials.

Claims

1. A building access control system, the system comprising: - an electric lock (10) movable, in response to receiving an opening command: - from a locked position in which it holds a door providing access to the building in a closed position, - to an unlocked position in which the access door can be freely moved to an open position, - an electronic key (14, 16, 90) comprising a non-volatile memory (22, 34) in which an access code is stored, - an access control module (70, 164) comprising a memory (66, 162) containing prerecorded access rights, this access control module being capable of comparing a received access code with the access rights pre-stored in its memory and, if the received access code corresponds to the pre-stored access rights, generating and transmitting the opening command to the electric lock, and, if the received access code does not correspond to the pre-registered access rights, to inhibit the generation of the opening command, - an access rights server (60) enabling a system administrator to update the access rights stored in the memory of the access control module, - a niche (100) integral with the building and located near an access door, - an access control unit (12) integral with the building, this access control unit comprising: - a front panel (102) that closes the niche, this front panel being designed to resist vandalism and comprising for this purpose a metal plate at least 1 mm thick that has: - a through hole (104), and - an outer side located on the side opposite the niche, - a reading head (98) comprising: - a housing (120) which mechanically isolates the various electronic components of this reading head, this housing being received inside the through hole and comprising a front part (122) directly exposed on the outer side of the front panel and a rear part (124) received inside the recess and attached, without any degree of freedom, to the front panel, - a short-range receiver (150, 152) capable of: - establish a short-range wireless information transmission link (18, 30) with the electronic key only over a distance of less than 10 metres, and - receiving the access code of this electronic key via this short-range link and then transmitting it to the access control module, this short-range receiver (150, 152) comprising a first antenna (170, 174) for establishing the short-range wireless link, and this short-range receiver being housed inside the casing and the first antenna (170, 174) being located inside the front part of the casing, and - a long-distance transceiver (154) capable of establishing a long-distance wireless link (50) to connect the access centre to the access rights server via a public packet-switched network, this long-distance transceiver comprising for this purpose a second antenna (178) distinct from the first antenna, characterised in that the long-distance transceiver (154) is housed inside the housing (120) of the reading head (98) and the second antenna is located inside the front part of the housing.

2. System according to claim 1, wherein: - the system comprises a remote access control module (70) implemented in the access rights server and a local access control module (164) implemented in the access control centre, - the local access control module is capable of first comparing the access code received via the short-distance link with the access rights pre-stored in its memory (162) and, if the access code received corresponds to the access rights pre-stored in its memory, generating and transmitting the opening command to the electric lock, and if the access code received does not correspond to the access rights pre-registered in its memory, to inhibit the generation of the opening command and to transmit, via the long-distance link, the access code received to the remote access control module (70), and - the remote access control module (70) is capable of comparing the access code received via the long-distance link with the access rights pre-registered in its memory (66) and, if the access code received corresponds to the access rights pre-registered in its memory (66), to generate and transmit the opening command to the electric lock via the long-distance link, and in the event that the received access code does not correspond to the access rights pre-registered in its memory (66), to inhibit the generation and transmission of the opening command.

3. System according to claim 1, wher n which: - the system comprises a remote access control module (70) implemented in the access rights server and a local access control module (164) implemented in the access control centre, - the reader head comprises a module (165) for detecting a failure of the local access control module, this detection module being capable, only in response to the detection of a failure of the local access control module, of transmitting the access code received to the remote access control module (70) via the long-distance link, and - the remote access control module (70) is capable of comparing the access code received via the long-distance link with the access rights pre-registered in its memory (66) and, if the access code received corresponds to the access rights pre-registered in its memory (66), to generate and transmit the opening command to the electric lock via the long-distance link, and in the event that the received access code does not correspond to the access rights pre-registered in its memory (66), to inhibit the generation and transmission of the opening command.

4. System according to claim 1, wherein: - the access control module (70) is implemented in the access rights server and the access control centre has no memory containing access rights that can be compared with an access code from an electronic key, and - the reader head (98) is capable of systematically redirecting each access code received via the short-range receiver (150, 152) to the long-range transceiver, and the long-range transceiver (154) is capable of systematically transmitting each access code received to the access rights server via the long-distance link.

5. System according to claim 1, wherein: - the system comprises a local access control module (164) and this local access control module is implemented inside the reader head, and - the reader head comprises a wired interface (156) connected via a direct wired link (13) to the electric lock, this wired interface being capable of transmitting the opening command to the electric lock via this direct wired link.

6. System according to any of claims 2 to 3, wherein: - the local access control module is implemented inside the read head, and - the reader head comprises a wired interface (156) connected, via a direct wired connection (13), to the electric lock, this wired interface being capable of transmitting the opening command to the electric lock via this direct wired connection.

7. System according to any of the preceding claims, wherein: - the short-range receiver (150, 152) is selected from the group consisting of an RFID ("Radio Frequency IDentification") tag reader, a Bluetooth-compliant transceiver, a near-field transceiver, a Zigbee-compliant transceiver, and - the long-range transceiver (154) is a mobile cellular network transceiver.

8. A reader head of an access control system for implementing a system according to any of the preceding claims, wherein the reader head comprises: - a casing (120) which mechanically isolates the various electronic components of this read head from the external environment, this casing being capable of being received inside a through-hole in a front panel of the access unit and comprising a front part (122) capable of being directly exposed on an outer side of the front panel and a rear part (124) capable of being received inside a recess closed by the front panel and capable of being attached, without any degree of freedom, to the front panel, - a short-range receiver (150, 152) capable of: - establish a short-range wireless information transmission link with an electronic key only over a distance of less than 10 metres, and - receiving an access code from this electronic key via this short-range link and then transmitting it to an access control module, this short-range receiver (150, 152) comprising a first antenna (170, 174) for establishing the short-range wireless link, and the short-range receiver being housed inside the casing and the first antenna (170; 174) being located inside the front part of the casing, characterised in that: - the reading head comprises a long-distance transceiver (154) capable of establishing a long-distance wireless link to connect the reading head to an access rights server via a public packet-switched network, this long-distance transceiver comprising for this purpose a second antenna (178) distinct from the first antenna, and this long-distance transceiver being housed inside the housing (120) of the reading head and the second antenna being located inside the front part of the housing,- the read head housing comprises a shoulder (126) located between the front and rear portions of the housing, this shoulder extending in a plane perpendicular to a longitudinal axis (128), and - the rear part of the housing is threaded to receive a nut for fixing this housing to the front face.

9. Read head according to claim 8, wherein the read head comprises a ferrite plate (200) extending mainly in a plane perpendicular to the longitudinal axis, this ferrite plate being located inside the front part and interposed between, on one side, the shoulder (176) and, on the other side, the first and second antennas.