Access control system

Abstract

The invention relates to an access control system, of the type implementing: - at least one door (P); - a fleet of badges (1), - at least one badge reader (2); - a telecommunications module (3) capable of communicating with the badge reader via a proximity network (R), - a computer platform (4), the system comprising at least one smartphone (5) including a computer application (50) forming an exchange interface with the computer platform (4), and the computer platform being configured to: - after receiving a smartphone identifier, send a proximity network search request to the smartphone (5); - receive a network identifier from the smartphone (5); - and, if the network identifier is the same as the network name of the proximity network, issue a door opening instruction.

Description

Domaine Technique

[0001] The field of the invention is that of the design and manufacture of an access control system.

[0002] More specifically, the invention relates to an access control system for an area using keys, each bearing a unique identifier, recognized by recognition devices located at the entrances and exits of the area to be controlled.

[0003] An access control system allows entry and exit into an area.

[0004] This system implements recognition devices that are located at the entrances and exits of this area to be controlled.

[0005] The entrances and exits of this area include doors whose opening and closing can be controlled by the system.

[0006] The term "door" is more generally understood to mean a device blocking a passage, for a pedestrian or a vehicle, such as a barrier, an airlock, a turnstile, a door in the literal sense of the term.

[0007] The terms "opening" and "closing" refer to the movement of the door from a position where the passage is closed to a position where the passage is open. It is also understood that opening or closing can only refer to the activation of the door's locking mechanisms in a position where the passage is closed.

[0008] Traditionally, current access control systems implement: a fleet of badges, each with a computer number; at least one badge reader connected to the door, the reader incorporating a computer identifier and proximity communication means; a telecommunications module comprising: first means of communication capable of communicating with the proximity communication means of the badge reader via a proximity network, a network name being assigned to the proximity network; second means of long-distance communication; a computer platform comprising platform communication means capable of communicating with the second means of communication of the telecommunications module and including a database listing the computer numbers of the badges, the computer identifiers of the badge readers, and the names of the proximity networks.The IT platform further includes a computer unit configured to: receive a digital door opening request including a badge number and a badge reader identifier, verify a match between the badge number and a badge reader identifier, and, after verifying the match, issue a door opening or non-opening instruction to the badge reader.

[0009] The designer of such a system naturally aims to ensure its security, to guarantee as far as possible reliable access control, that is to say, not allowing access to unauthorized persons.

[0010] However, a potential vulnerability exists due to the implementation of the proximity network enabling communication between the badge reader and the telecommunications module.

[0011] Indeed, most current proximity networks, especially Bluetooth (trademark) type networks, are vulnerable and can allow malicious individuals to infiltrate the system implementing them in order to, in the context of access control systems, gain unauthorized access to a controlled area.

[0012] This is obviously a major drawback for access control systems implementing such means of proximity communication.

[0013] The main objective of the invention is therefore to overcome this drawback of the prior art.

[0014] More specifically, the invention aims to provide an access control system, of the type implementing a proximity communication network classically implemented to allow the exchange of data between a badge reader and a telecommunications module intended to communicate with a remote computer platform, which increases the security of the system.

[0015] The invention also aims to provide such an access control system that is simple and practical for the user submitting to access control as an authorized person.

[0016] These objectives, as well as others that will emerge subsequently, are achieved through the invention, which relates to an access control system of the type implementing: at least one door; a fleet of badges, each with a unique computer number; at least one badge reader connected to the door, the reader incorporating a computer identifier and proximity communication means; a telecommunications module comprising: first means of communication capable of communicating with the proximity communication means of the badge reader via a proximity network, a network name being assigned to the proximity network, second means of long-distance communication, a computer platform comprising platform communication means capable of communicating with the second means of communication of the telecommunications module and including a database listing the computer numbers of the badges, the computer identifiers of the badge readers and the names of proximity networks, the database of the computer platform including a list of smartphone identifiers,The IT platform further includes a computer unit configured to: receive a digital door opening request including a badge number and a badge reader identifier, verify a match between the badge number and a badge reader identifier, and, after verifying the match, issue a door opening or non-opening instruction to the badge reader.

[0017] According to the invention, the access control system comprises at least one smartphone including a computer application forming an interface with the computer platform, the computer application being configured to send a smartphone identifier to the computer platform without going through the local area network, the computer unit of the computer platform also being configured to: after receiving the smartphone identifier, send a proximity network search request to the smartphone; receive a network identifier from the smartphone and compare it with the network name of the proximity network through which the communication module and the badge reader communicate with each other; and, if the network identifier is the same as the network name of the proximity network, issue a door opening instruction.

[0018] Thus, thanks to the invention, the security of the access control system is increased, particularly with regard to the proximity communication network traditionally used directly between the badge and the badge reader.

[0019] Indeed, an authorized user (i.e., referenced at the level of the computer platform thanks to their smartphone identifier coupled with the computer application allowing exchange with the computer platform) connects directly to the computer platform via the telecommunications module, without going through the local communication network.

[0020] The data transmitted by the user's smartphone to the IT platform allows the latter to identify the specific local communication network associated with the badge reader (a local communication network with a unique identifier). The IT platform therefore recognizes the badge reader next to which the user is physically located.

[0021] Once the user has been identified as an authorized person by the IT platform, an opening instruction can be issued by the IT platform, without the user's smartphone having to connect to the local communication network.

[0022] It is understood that an access control system according to the invention is also very simple and practical to use for the user, who just has to open the computer application loaded on his smartphone to identify himself and transmit to the computer platform the badge reader in the vicinity of which the user is physically located, the badge reader being identified at the level of the computer platform by the network identifier assigned to the proximity communication network attached to the badge reader.

[0023] Note that the term "badge" includes digital badges, where badge readers can take the form of wireless access points, for example via Bluetooth (trademark).

[0024] According to a preferred solution, the IT platform database includes a list of different types of proximity networks, and the IT unit is configured to transmit this list of different types of proximity networks with the proximity network search query.

[0025] In this way, the user's smartphone can more quickly search for and identify the proximity network attached to the badge reader in the vicinity of which it is physically located.

[0026] Preferably, the opening instruction is sent to the badge reader via the telecommunications module.

[0027] This avoids transmitting the opening instruction via the user's smartphone, which would imply a connection between the smartphone and the badge reader via the proximity communication network.

[0028] According to a particular embodiment, the proximity network through which the telecommunications module and the badge reader communicate with each other is a Bluetooth type network.

[0029] Preferably, the database of the computer platform includes a list of smartphone identifiers.

[0030] This makes it easier to identify, at the level of the IT platform, the user carrying the smartphone.

[0031] According to an advantageous solution, the computer application of the smartphone(s) is configured to activate a means of proximity communication of the smartphone after opening the computer application.

[0032] In this way, the activation of the smartphone's proximity communication means is automatically activated by the computer application, that is, without the user having to worry about whether the proximity communication means is activated or not.

[0033] Advantageously, the computer application of the smartphone(s) is configured to issue an error notification if no proximity network is detected after the smartphone's proximity communication method has been activated.

[0034] The user carrying the smartphone is thus informed of the absence of a local communication network in their environment, and avoids having to wait excessively for the door to open.

[0035] According to a preferred solution, the computer application of the smartphone(s) is configured to remain disconnected from the proximity network through which the telecommunications module and the badge reader communicate with each other.

[0036] Thus, not only does the access control system according to the invention eliminate the need for the user's smartphone to connect to the proximity communication network of the badge reader, but the computer application dedicated to the system also avoids the connection that could occur automatically due to specific smartphone settings.

[0037] Other features to the advantage of the invention will become clearer upon reading the following description of a preferred embodiment of the invention, given by way of a simple illustrative and non-limiting example, and the single attached figure: there figure 1 schematically illustrates an access control system according to the invention.

[0038] With reference to the figure 1 An access control system according to the invention implements, in a conventional manner: at least one door P; a fleet of badges 1 each having a computer number; at least one badge reader 2, connected to the door P to control its opening or keeping it closed (or its locking / unlocking), a unique computer identifier being assigned to the badge reader 2 which also includes proximity communication means 20; a telecommunication module 3 comprising: first means of communication 30, allowing the exchange of data with the badge reader 2, these first means of communication 30 being therefore capable of communicating with the proximity communication means 20 of the badge reader, this via a proximity network R to which a unique network name is assigned, second means of communication 31 of the long-distance type, a computer platform 4, present in a management site, intended to ensure access control.

[0039] According to a particular embodiment, the proximity network through which the telecommunications module and the badge reader communicate with each other is a Bluetooth type network.

[0040] The computer platform includes platform communication means 40 capable of communicating with the second communication means 31 of telecommunication module 3.

[0041] It includes a 42-bit database listing: computer numbers of badges; computer identifiers of badge readers; names of proximity networks.

[0042] Furthermore, the IT platform 4 includes an IT unit 41 configured to ensure traditional operation between the fleet bases and the badge reader, i.e., to: receive a digital door opening request including a computer badge number and a badge reader identifier, verify a match between the computer badge number and the badge reader identifier, issue, after verifying the match, a door opening or non-opening instruction to the badge reader.

[0043] For the system to function according to the invention, an initial step is carried out, for example, during system commissioning. During this initial step E1, the badge reader 2 transmits, via its proximity communication means 20, its unique computer identifier and the network name of the proximity network R to the telecommunication module 3, which communicates with the proximity communication means 20 of the badge reader 2 via the first communication means 30. For registration, the telecommunication module 3 transmits the computer identifier and the network name of the proximity network R to the computer platform 4 via the second long-distance communication means 31 and the platform communication means 40 (step E2).

[0044] According to the principle of the invention, the access control system includes at least one smartphone 5 (in practice, the system includes a fleet of smartphones, each owned by a user of the system), this smartphone including a computer application 50 forming an interface for exchanges with the computer platform 4.

[0045] This computer application 50 is configured to allow the issuance, to the computer platform 4, of a smartphone identifier (step E3).

[0046] Each smartphone is configured by the manufacturer to include an identifier equivalent to a computer's IP address. This smartphone identifier is designated by the IMEI code, which stands for "International Mobile Equipment Identity".

[0047] In this context, IT unit 41 of the IT platform is further configured to: after receiving the smartphone identifier, send a proximity network search request to smartphone 5 (step E4); receive a network identifier from the smartphone (step E6) and compare it with the network name of the proximity network through which the telecommunications module and the badge reader communicate with each other; and, if the network identifier is the same as the network name of the proximity network, issue a door opening instruction (step E7).

[0048] Thus, in practice, a user who wishes to obtain the opening of a door, for example the access door to the common areas of a residential building, uses his smartphone 5 to open the computer application 50. Once opened, the computer application triggers a communication with the remote computer platform 4, and transmits to it the IMEI code of the smartphone held by the user.

[0049] Next, the computer platform responds to the smartphone by communicating a request to search for nearby networks in the user's environment, and more specifically a search for a network identifier.

[0050] The smartphone identifies a local communication network, if available, and captures its network identifier (step E5). Following this, the smartphone transmits the network identifier to the IT unit of the IT platform, which compares the received network identifier with the local network names contained in the IT platform's database. If the received network identifier matches the network name of the local network R through which the badge reader 2 and the telecommunications module 3 communicate, the IT unit 3 of the IT platform issues an instruction to open door P.

[0051] Note that the computer platform's database includes a list of different types of proximity networks, and its computer unit is configured to transmit, to the smartphone, the list of different types of proximity networks simultaneously with the proximity network search request.

[0052] The database of the computer platform includes, in addition to the parameters listed above, a list of smartphone identifiers held by users of the system.

[0053] If the opening instruction is issued by the computer platform, it is transmitted to the badge reader 2 via the telecommunications module 3.

[0054] Furthermore, the computer application integrated into users' smartphones is configured to activate a means of proximity communication from the smartphone after the computer application is opened.

[0055] Furthermore, the system's smartphone application is configured to display an error notification if a nearby network is not detected after the smartphone's proximity communication feature is activated. For example, a notification may appear on the smartphone screen stating: "Bluetooth must be enabled to use this function."

[0056] After searching for a network by the smartphone, if no associated network is available, the smartphone screen displays an error message such as: "you must be within 5 meters of the reader that controls the opening of the door".

[0057] According to an advantageous feature of the computer application, it is configured to keep the smartphone disconnected from the proximity network through which the telecommunications module and the badge reader communicate with each other.

[0058] The application is therefore linked to the user with the smartphone, granting them remote access rights to predetermined access points managed at the platform level (step E6). The platform's database thus associates the list of smartphone identifiers with their corresponding access rights, or potentially a list of application identifiers with their associated rights.

Claims

1. Access control system, of the type implementing: - at least one door (P); - a fleet of badges (1) each having a computer number, - at least one badge reader (2), connected to the door (P), the badge reader (2) integrating a computer identifier and proximity communication means (20); - a telecommunications module (3) comprising: - first communication means (30) capable of communicating with the proximity communication means (20) of the badge reader (2) via a proximity network (R), a network name being assigned to the proximity network, - second communication means (31) of the long-distance type, - a computer platform (4) comprising platform communication means (40) capable of communicating with the second communication means (31) of the telecommunications module (3) and including a database (42) listing the computer numbers of the badges,the computer identifiers of the badge readers and the proximity network names, the database (42) of the computer platform including a list of smartphone identifiers, the computer platform (4) further comprising a computer unit (41) configured to: - receive a digital door opening request including a badge computer number and a badge reader identifier, - verify a match between the badge computer number and a badge reader identifier, - issue, after verification of the match, a door opening or non-opening instruction to the badge reader, , characterized in thatit includes at least one smartphone (5) including a computer application (5) forming an interface for exchange with the computer platform (4), the computer application (50) being configured to send a smartphone identifier to the computer platform (4) without going through the local communication network, and in that The computer unit (41) of the computer platform (4) is also configured to: - after receiving the smartphone identifier, send a proximity network search request to the smartphone (5); - receive a network identifier from the smartphone (5) and compare it with the network name of the proximity network through which the telecommunications module (3) and the badge reader (2) communicate with each other; - and, if the network identifier is the same as the network name of the proximity network, issue a door opening instruction.

2. Access control system according to claim 1, characterized in that the database (42) of the IT platform includes a list of different types of proximity networks and in that The computer unit (41) is configured to transmit the list of different types of proximity networks with the proximity network search query.

3. Access control system according to any one of the preceding claims, characterized in that The opening instruction is sent to the badge reader (2) via the telecommunications module (3).

4. Access control system according to any one of the preceding claims, characterized in that the proximity network (R) through which the telecommunications module (3) and the badge reader (2) communicate with each other is a Bluetooth type network.

5. Access control system according to any one of the preceding claims, characterized in thatThe database (42) of the computer platform includes a list of smartphone identifiers.

6. Access control system according to any one of the preceding claims, characterized in that The computer application (50) of the smartphone(s) (5) is configured to activate a means of proximity communication of the smartphone after opening the computer application.

7. Access control system according to claim 6, characterized in that The computer application (50) of the smartphone(s) is configured to issue an error notification if no proximity network is detected after the proximity communication means of the smartphone has been activated.

8. Access control system according to any one of the preceding claims, characterized in thatthe computer application (50) of the smartphone(s) is configured to keep the smartphone disconnected from the proximity network (R) through which the telecommunications module (3) and the badge reader (2) communicate with each other.

Images