Access control system using temporary IP connection

Abstract

A method and system are provided for temporarily enabling an IP (Internet Protocol) connection for an access control system. The method and system perform a number of operations, which include: a server receiving a request to update the settings of an access control reader; the server sending a first command to the access control reader via a wired link to temporarily switch communication with the server from a first communication mode to an IP communication mode; the server sending an IP packet containing configuration information to update the settings of the access control reader to the access control reader; and, after the settings of the access control reader have been updated, the server sending a second command to the access control reader to switch from communication using the IP communication mode to communication using the first communication mode.

Description

BACKGROUND ART

[0001] Access control readers are widely used in various environments to control access to restricted areas. These readers are typically connected to a server that manages access control policies and settings. To update the settings of an access control reader, the server needs to communicate with the reader and transmit the updated setting information. Conventionally, such communication is performed using a wired link and a specific communication protocol supported by the reader. SUMMARY OF THE INVENTION

[0002] In some aspects, the techniques described herein relate to a method, the method comprising: receiving, by a server, a request for updating settings of an access control reader; transmitting, by the server, a first instruction for temporarily switching communication with the server from a first communication mode to an IP (Internet Protocol) communication mode to the access control reader via a wired link; transmitting, from the server to the access control reader, an IP packet including setting information for updating the settings of the access control reader, which may include, or alternatively may include, firmware updates and / or setting updates; after the settings of the access control reader are updated, transmitting, by the server, a second instruction for switching communication using the IP communication mode to communication using the first communication mode to the access control reader.

[0003] In some aspects, the techniques described herein relate to a method, wherein the first communication mode includes an OSDP (Open Supervised Device Protocol) communication mode. In some embodiments, the techniques described herein relate to methods, wherein the access control reader communicates with the server using the first communication mode via a wired link, and the access control reader communicates with the server using the IP communication mode via the wired link used in the first communication mode.

[0004] In some embodiments, the techniques described herein relate to methods, wherein the access control reader communicates with the server using the first communication mode via a first physical connection, and the access control reader communicates with the server using the IP communication mode via a second connection different from the first physical connection.

[0005] In some embodiments, the techniques described herein relate to methods, wherein the second connection comprises a wireless connection, and further includes causing the access control reader to activate a WiFi device to establish an IP connection with the server.

[0006] In some embodiments, the techniques described herein relate to methods, wherein the IP packets are transmitted from the server to the access control reader via a private IP connection. In some embodiments, the techniques described herein relate to methods, which further include establishing a secure IP connection between the server and the access control reader in response to the transmission of the first instruction to the access control reader.

[0007] In some embodiments, the techniques described herein relate to methods, wherein the access control reader is configured to transmit access control information to the server using the first communication mode and to receive updated configuration information (e.g., firmware updates and / or configuration updates) from the server using the IP communication mode.

[0008] In some embodiments, the techniques described herein relate to methods in which the data rate associated with the IP communication mode is greater than the data rate associated with the first communication mode. In some embodiments, the techniques described herein relate to methods, which further include activating a local PHY (physical) controller in the access control reader in response to receiving the first instruction.

[0009] In some embodiments, the techniques described herein relate to methods, which further include causing the access control reader to deactivate the local PHY controller in response to receiving the second instruction.

[0010] In some embodiments, the techniques described herein relate to methods, the methods further comprising the server receiving a message from the access control reader indicating that the access control reader has completed switching to the IP communication mode.

[0011] In some embodiments, the techniques described herein relate to methods, and a message indicating that the access control reader has completed switching to the IP communication mode is received using the first communication mode.

[0012] In some embodiments, the techniques described herein relate to methods, and a message indicating that the access control reader has completed switching to the IP communication mode is received using the IP communication mode.

[0013] In some embodiments, the techniques described herein relate to methods, wherein the first instruction is transmitted from the server to the access control reader via an I / O (input / output) module connected to the server.

[0014] In some embodiments, the techniques described herein relate to methods, wherein the I / O module is connected to a plurality of access control readers, and the plurality of access control readers include the access control readers.

[0015] In some embodiments, the techniques described herein relate to methods, wherein the request for updating the settings of the access control reader includes a time, date, or period that permits the access control reader to operate using the IP communication mode. The time, date, or period is transmitted to the access control reader, and if the current time does not match the time, date, or period received from the server, the access control reader is instructed to automatically cease operation in the IP communication mode.

[0016] In some embodiments, the techniques described herein relate to a system, which includes one or more processors connected to a memory containing non-temporary computer instructions, which, when executed by the one or more processors, cause the one or more processors to perform a plurality of operations, the plurality of operations including: a server receiving a request to update the settings of an access control reader; the server sending a first instruction to the access control reader via a wired link to temporarily switch communication with the server from a first communication mode to an IP communication mode; the server sending an IP packet containing configuration information to update the settings and / or firmware of the access control reader to the access control reader; and, after the settings of the access control reader have been updated, the server sending a second instruction to the access control reader to switch from communication using the IP communication mode to communication using the first communication mode.

[0017] In some embodiments, the techniques described herein relate to a system, and the first communication mode includes the OSDP communication mode. In some embodiments, the techniques described herein relate to a system, wherein the access control reader communicates with the server using the first communication mode via a wired link, and the access control reader communicates with the server using the IP communication mode via the wired link used in the first communication mode.

[0018] In some embodiments, the techniques described herein relate to a non-temporary computer-readable medium that stores non-temporary computer-readable instructions, and when the non-temporary computer-readable instructions are executed by one or more processors, the one or more processors cause a plurality of operations, the plurality of operations including: a server receiving a request to update the settings of an access control reader; the server sending a first instruction to the access control reader via a wired link to temporarily switch communication with the server from a first communication mode to an IP (Internet Protocol) communication mode; the server sending an IP packet containing configuration information to update the settings of the access control reader to the access control reader; and, after the settings of the access control reader have been updated, the server sending a second instruction to the access control reader to switch from communication using the IP communication mode to communication using the first communication mode. [Brief explanation of the drawing]

[0019] [Figure 1] Figure 1 is a block diagram of an exemplary access control system, illustrating several examples. [Figure 2] Figure 2 shows an exemplary access control device using multiple communication modes, with several examples. [Figure 3] Figure 3 is a flowchart illustrating the exemplary operation of an access control system, using several examples. [Figure 4]Figure 4 is a block diagram showing an exemplary software architecture that can be used in combination with the various hardware architectures described herein. [Figure 5] Figure 5 is a block diagram showing multiple components of a machine, with several examples. [Modes for carrying out the invention]

[0020] This document describes exemplary methods and systems for updating access control systems (e.g., physical or logical access control systems) via IP. For illustrative purposes, numerous specific details are provided in the following description to facilitate understanding of the examples. However, it will be apparent to those skilled in the art that some of the examples described herein can be implemented without these specific details.

[0021] In a typical access control system, a centralized controller communicates with one or more access control readers via a physical wired connection. The access control readers can transmit access control information to the centralized controller via the OSDP communication protocol. The centralized controller can verify and authenticate access to a secure resource by processing the access control information received from the access control readers. The centralized controller can then send a command via the OSDP communication protocol to the access control readers indicating whether or not to allow access to the secure resource.

[0022] In some cases, it becomes necessary to update parameters, configuration information, and firmware of an access control reader, for example to improve various operations or enable new functions. In order to update parameters, configuration information, or firmware of an access control reader (collectively referred to simply as "configuration information" in the present specification) in a secure manner, this update is transmitted from a centralized controller to the access control reader via a physical wired connection in accordance with the OSDP communication protocol. However, since the OSDP communication protocol is designed to efficiently communicate access control information, the OSDP communication protocol has limitations (constraints) in terms of bandwidth and data rate. Therefore, transmitting an update to an access control reader using the OSDP protocol takes a great deal of time and consumes a large amount of resources. Access control readers are typically offline during the time it takes to update them using the OSDP protocol, and their overall use and functionality are limited and constrained. Therefore, although such systems generally function well, they cause various latencies in the operation of devices and may cause frustration to users.

[0023] The disclosed examples provide an intelligent solution that can quickly, securely, and efficiently update configuration information of an access control reader by temporarily operating an access control system in an IP communication mode. Furthermore, since the access control reader operates in IP communication mode and communicates with the centralized controller only during a user-specified period (for example, a user-specified date, time, and / or period), the risk of security breach is controlled and reduced. In this way, the access control reader can be updated quickly and efficiently, thereby improving the functionality of the entire system.

[0024] Specifically, in the plurality of disclosed examples, a server (for example, a centralized controller) receives a request for updating a setting of an access control reader. The server transmits, via a wired link to the access control reader, a first instruction for temporarily switching communication with the server using a first communication mode to communication with the server using an IP communication mode. The server transmits an IP packet including setting information for updating the setting of the access control reader to the access control reader. After the setting of the access control reader is updated, the server transmits, to the access control reader, a second instruction for switching communication using the IP communication mode to communication using the first communication mode.

[0025] FIG. 1 is a block diagram illustrating an exemplary system 100 according to various examples. The system 100 may be an access control system including a client device 120, one or more access control devices 110 that control access to a protected asset (asset) or secure resource through a lockable door or the like, and a server / controller 140 communicatively connected via a network 130 (for example, a LAN, a WAN such as the Internet, WiFi, BLE, an ultra-wideband (UWB) communication protocol, a telephone network, and other wired or wireless communication protocols).

[0026] The client device 120 and multiple access control devices 110 may be connected in a communicative manner using electronic messages (e.g., packets exchanged via the Internet, BLE, UWB, WiFi Direct, NFC, or any other protocol). Figure 1 shows a single access control device 110 and a single client device 120, but it will be understood that in other examples, multiple access control devices 110 and multiple client devices 120 may be included in the system 100. As used herein, the term “client device” can refer to any machine that interfaces to a communication network (such as network 130) to exchange credentials with the access control device 110, the server / controller 140, another client device 120, or any other component in order to gain access to an asset or resource protected by the access control device 110. In some examples, a client device may additionally or alternatively communicate directly with, for example, an access control device or another client device.

[0027] In some cases, some or all of the components and functions of the server / controller 140 can be included within the client device 120. The client device 120 may be, but is not limited to, a mobile phone, desktop computer, laptop, personal digital assistant (PDA), smartphone, wearable device (e.g., smartwatch), tablet, ultrabook, netbook, laptop, multiprocessor system, microprocessor-based or programmable consumer electronics, or any other communication device that a user can use to access the network.

[0028] The access control device 110 may be connected to a secure / protected resource (e.g., a door lock mechanism or a backend server) and may include an access reader device (also referred to as an access control reader) that controls the secure / protected resource (e.g., a door lock mechanism). The resource associated with the access control device 110 may include a door lock, a vehicle ignition system, or any other device that can allow or deny access to a physical component, or act to allow or deny access to a physical component. For example, in the case of a door lock, the access control device 110 may deny access, in which case the door lock remains locked and the door cannot be opened, or the access control device 110 may grant access, in which case the door lock is unlocked and the door can be opened. As another example, in the case of an ignition system, the access control device 110 can deny access, in which case the vehicle ignition system remains disabled and the vehicle cannot be started, or the access control device 110 can grant access, in which case the vehicle ignition can be activated and the vehicle can be started.

[0029] Physical access control encompasses a range of systems and methods for managing access, for example, by people, to a secure area or asset. Physical access control includes identifying authorized users or devices (e.g., vehicles, drones, etc.) and activating gates, doors, or other equipment used to protect the area, or control mechanisms, such as physical or electronic / software control mechanisms, to enable access to the secure asset. The access control device 110 forms part of a physical access control system (PACS), which may include readers (e.g., online or offline readers) that can hold authorization data (also referred to as access control information), and can determine whether multiple credentials (e.g., from credential devices or key devices such as radio frequency identification (RFID) chips in personal electronic devices such as cards, fobs, or mobile phones) are authorized for an actuator or control mechanism (e.g., turning off a door lock, door opener, software control mechanism, alarm, etc.), or the PACS may include a host server to which the readers and actuators are connected (e.g., via a controller) in a centrally managed configuration. In a centrally managed configuration, the readers can retrieve credentials from credential or key devices and pass those credentials to a PACS host server or headend system. The readers can transmit credentials over a wired or wireless link using the OSDP communication protocol / mode. Next, the host server determines whether the credentials grant permission to access a secure area or secure asset, and accordingly commands the actuator or other control mechanism by sending an allow / deny message to the reader via a wired or wireless link using the OSDP communication protocol / mode.While several examples of physical access control are used in this specification, this disclosure applies equally to use cases of logical access control systems (LACS), such as logical access to personal electronic devices, passenger identification in transportation services, and access and asset control in unmanned payment stores.

[0030] Generally, the access control device 110 may include one or more of the following: memory, a processor, one or more antennas, a communication module, a network interface device, a user interface, and a power supply or power supply circuit. The memory of the access control device 110 may be used in connection with the execution of application programming or instructions by the processor of the access control device 110, and for temporary or long-term storage of credential or authorization data such as program instructions or instruction sets and / or credential data, credential authorization data, or access control data or instructions. For example, the memory may include executable instructions used by the processor to operate other components of the access control device 110 and / or to make access decisions based on credential or authorization data. The memory of the access control device 110 may include a computer-readable medium which may be any medium that contains, stores, communicates, or transfers data, program code, or instructions used by or in connection with the access control device 110. The computer-readable medium may be, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device. More specific examples of suitable computer-readable media include, but are not limited to, electrical connections having one or more wires, or tangible storage media such as portable computer diskettes, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), dynamic RAM (DRAM), any solid-state storage device, common compact disk read-only memory (CD-ROM), or other optical or magnetic storage devices. Computer-readable media is a concept that encompasses all physical, non-temporary, or similar examples of computer-readable storage media, although it should not be confused with computer-readable storage media.

[0031] The processor of the access control device 110 can correspond to one or more computer processing devices or resources. For example, the processor can be provided as silicon, such as a field-programmable gate array (FPGA), an application-specific integrated circuit (ASIC), any other type of integrated circuit (IC) chip, or a collection of IC chips. More specifically, the processor can be provided as a microprocessor, a central processing unit (CPU), or multiple microprocessors or CPUs configured to execute the internal memory and / or instruction set stored in the memory of the access control device 110.

[0032] The antenna of the access control device 110 can correspond to one or more antennas and may be configured to provide wireless communication between the access control device 110 and a credential device or key device (e.g., client device 120). The antenna may be configured to operate using one or more wireless communication protocols and operating frequencies, including but not limited to IEEE 802.15.1, Bluetooth, BLE, NFC, ZigBee®, GSM (Global System for Mobile communications)®, CDMA (Code Division Multiple Access), Wi-Fi, RF, UWB, etc. For example, one or more antennas may be one or more RF antennas and thus capable of transmitting / receiving RF signals that are received / transmitted by a credential or key device having an RF transceiver over free space.

[0033] The communication module of the access control device 110 can be configured to communicate with one or more different systems or devices located remotely or locally to the access control device 110, such as one or more client devices 120 and / or a server / controller 140, according to any appropriate communication protocol. In some cases, the communication module of the access control device 110 is configured to operate according to IP communication mode when the access control device 110 is receiving configuration information updates from the controller 140. After the access control device 110 is updated, the communication module of the access control device 110 automatically switches to communication according to a slower communication mode, such as the OSDP communication protocol / mode. In some cases, this communication module uses the same wired or wireless link between the access control device 110 and the controller 140 for all communication modes. In some cases, this communication module uses one wired or wireless link between the access control device 110 and the controller 140 to communicate access control information and another wired or wireless link to communicate or receive configuration information updates from the controller 140 via IP communication mode.

[0034] The network interface device of the access control device 110 includes hardware that enables communication with one or more client devices 120 and / or other devices such as a server / controller 140 (e.g., a PACS server) over a communication network such as network 130, using one of several transport protocols (e.g., Frame Relay, IP, Transmit Control Protocol (TCP), User Datagram Protocol (UDP), Hypertext Transfer Protocol (HTTP), etc.). Exemplary communication networks may include local area networks (LANs), wide area networks (WANs), packet data networks (e.g., the Internet), mobile phone networks (e.g., cellular networks), POTS (Plain Old Telephone) networks, wireless data networks (e.g., the IEEE 802.11 standard family known as Wi-Fi®, the IEEE 802.16 standard family known as WiMax®), the IEEE 802.15.4 standard family, and peer-to-peer (P2P) networks. In some examples, a network interface device may include Ethernet® ports or other physical jacks, Wi-Fi cards, network interface cards (NICs), cellular interfaces (e.g., antennas, filters, and associated circuitry), etc. In some examples, a network interface device may include multiple antennas to wirelessly transmit signals using at least one of the following techniques: single-input multiple-output (SIMO), multiple-input multiple-output (MIMO), or multiple-input single-output (MISO).In some cases, parts of the hardware used to communicate with the network 130 via IP communication mode may be disabled by default. These parts of the hardware may be enabled for a period specified by the user to allow the access control device 110 to be updated via IP communication mode. In this way, updates can be sent to the access control device 110 via IP communication mode, which has a substantially higher data rate, rather than using the OSDP protocol, which has a relatively lower data rate. Once these updates are complete, the access control device 110 reverts to operating using the slower OSDP communication mode.

[0035] The user interface of the access control device 110 may include one or more input devices and / or display devices. Suitable user input devices that may be included in the user interface include, but are not limited to, one or more buttons, a keyboard, a mouse, a touch-sensitive surface, a stylus, a camera, a microphone, etc. Suitable user output devices that may be included in the user interface include, but are not limited to, one or more LEDs, an LCD panel, a display screen, a touchscreen, one or more lights, a speaker, etc. It should also be understood that the user interface may include combined user input and user output devices, such as a touch-sensitive display.

[0036] Network 130 includes, or may operate with, an ad-hoc network, an intranet, an extranet, a virtual private network (VPN), a LAN, a wireless network, a wireless LAN (WLAN), a WAN, a wireless WAN (WWAN), a metropolitan area network (MAN), BLE, UWB, the Internet, part of the Internet, part of the Public Switched Telephone Network (PSTN), a POTS network, a cellular telephone network, a wireless network, a Wi-Fi® network, another type of network, or a combination of two or more such networks. For example, a network or part of a network may comprise a wireless or cellular network, and the combination may be a CDMA connection, a GSM® connection, or other type of cellular or wireless connection. In this example, the connection may implement any of the following: single-carrier radio transmission technology (1xRTT), evolutionary data optimization (EVDO) technology, general packet radio service (GPRS) technology, enhanced data rates for GSM Evolution (EDGE) technology, the 3G Partnership Project (3GPP®), including 3G, 4G, 5G, Universal Mobile Telecommunications System (UMTS), High Speed ​​Packet Access (HSPA), Worldwide Interoperability for Microwave Access (WiMAX), Long Term Evolution (LTE) standards, protocols defined by various standardization bodies, other long-distance data transfer technologies, and various types of data transfer technologies.

[0037] In one example, when client device 120 approaches access control device 110 (e.g., enters the range of the BLE communication protocol), client device 120 transmits its credentials over network 130. In some cases, the credentials may be selected from multiple credentials based on the current geographical location of client device 120. For example, client device 120 may store multiple credentials, each associated with a different geographical location. When client device 120 enters a certain distance (e.g., within 10 meters) from a geographical location associated with one of the multiple credentials, client device 120 retrieves the associated credentials from local memory.

[0038] In one example, the client device 120 directly supplies credentials to the access control device 110. In some cases, the access control device 110 transmits the credentials to the server / controller 140. The server / controller 140 in Figure 1 includes an authentication system 142 and a configuration update system 144. The server / controller 140 may further include several components described with reference to Figures 4 and 5, such as a processor and memory that store several instructions that, when executed by the processor, cause the processor to control several functions of the server / controller 140.

[0039] The server / controller 140 searches the list of credentials stored in the authentication system 142 to determine whether the received credentials match any of the credentials in the list of credentials authorized to access secure assets or resources (e.g., doors or secure areas) protected by the access control device 110. In response to determining that the received credentials are authorized to access the access control device 110, the server / controller 140 instructs the access control device 110 to perform an action that grants access to the client device 120 (e.g., instructing the access control device 110 to unlock the door). In another example, the client device 120 provides credentials to the server / controller 140. The server / controller 140 searches the list of credentials stored in the authentication system 142 to determine whether the received credentials match any of the credentials in the list of credentials authorized to access secure assets or resources (e.g., doors or secure areas) protected by the access control device 110. In response to determining that the received credentials are authorized to access the access control device 110, the server / controller 140 instructs the access control device 110 (associated with the received credentials and located within geographical distance of the client device 120) to perform an action that grants access to the client device 120 (for example, instructing the access control device 110 to unlock the door).

[0040] In some cases, the configuration update system 144 receives a request to update one or more access control devices 110. The request may identify the access control devices 110 by their ID numbers or other unique identifiers. Based on the ID numbers or unique identifiers of the access control devices 110, the configuration update system 144 may initiate updating the configuration parameters of the access control devices 110. In some cases, the request may identify a specific set of multiple access control devices 110 that need to be updated. The configuration update system 144 may then initiate updating the configuration parameters of each of the multiple access control devices 110 in that set.

[0041] In some examples, the controller 140 is connected to one or more I / O modules 146. Each I / O module 146 is connected to a set of access control devices 110. The controller 140 can send commands to the access control devices 110 via the I / O modules 146 to switch operating modes. For example, the controller 140 can send a command to switch the operating mode for one or more access control devices 110. This command is sent to one I / O module 146. The I / O module 146 then forwards the command to one or more access control devices 110 connected to it. Similarly, any messages or information received by the I / O module 146 from one or more access control devices 110 can be sent back to the controller 140 for processing.

[0042] The request may indicate a time, date, and / or period during which an update of the access control device 110 may be performed. In such a case, the configuration update system 144 may wait to start the update process until the current time matches the time, date, and / or period indicated in the request. At that point, the configuration update system 144 may send a first command to the access control device 110 (or to multiple access control devices 110 indicated in the request). The first command may instruct the access control device 110 to switch from communication using a first communication mode (e.g., OSDP mode) to communication using IP communication mode.

[0043] The access control device 110 receives a first command and can activate one or more IP communication devices (e.g., a PHY controller or a WiFi device) to enable communication with the controller 140 via IP communication mode / IP communication protocol. The access control device 110 can perform various IP handshake operations with the controller 140 to establish a private or public IP connection with the controller 140 via the network 130. Once the access control device 110 has completed switching to IP communication mode, it sends a message to the configuration update system 144 (e.g., a PACS server) indicating that it is operating in IP communication mode and is ready to receive updated configuration information. In some examples, this message is sent from the access control device 110 to the controller 140 using the conventional OSDP mode. In some examples, this message is sent from the access control device 110 to the controller 140 using IP communication mode.

[0044] In response to receiving a message from the access control device 110 indicating that it is operating in IP communication mode, the configuration update system 144 retrieves configuration information from storage. The configuration update system 144 generates an IP packet containing the configuration information. The configuration update system 144 sends the IP packet containing the configuration information to the access control device 110 via IP communication mode. In some cases, this IP packet is sent over the same physical link used by the access control device 110 to send access control information according to OSDP communication mode. In some cases, this IP packet is sent over a completely different physical link from the physical link used by the access control device 110 to send access control information according to OSDP communication mode.

[0045] The access control device 110 receives an IP packet containing configuration information. In response, the access control device 110 modifies or updates the local configuration information using the updated configuration information. After completing the configuration information update, the access control device 110 notifies the configuration update system 144 that the update is complete. Furthermore, in response to completing the configuration information update (or in response to receiving all data related to the configuration information from the controller 140), the access control device 110 automatically switches from operation using IP communication mode to operation using OSDP communication mode or another mode used to exchange access control information and to communication with the controller 140. For example, the configuration update system 144 may send a second command to the access control device 110 indicating that the updated confirmation information has been fully transmitted and instructing the access control device 110 to switch to using OSDP communication mode. In response to receiving the second command, the access control device 110 automatically switches from operation using IP communication mode to operation using OSDP communication mode.

[0046] In some examples, the access control device 110 may receive a message or command from the user specifying the timing (time) at which the access control device 110 is permitted to operate in IP communication mode, and / or the length of time for which the access control device 110 is permitted to operate in IP communication mode. The access control device 110 may receive a message from the configuration update system 144 indicating that updated configuration information is available. The access control device 110 can access local configuration information to determine whether it is the timing (time) at which the access control device 110 is permitted to operate in IP communication mode. In response to determining that the current time matches the time specified in the local configuration information as the timing (time) at which the access control device 110 is permitted to operate in IP communication mode, the access control device 110 may send a message to the configuration update system 144 indicating that the access control device 110 is ready to operate in IP communication mode to receive updates.

[0047] In response to receiving a message from the access control device 110, the configuration update system 144 can send a first command to the access control device 110 to operate using IP communication mode. The access control device 110 can then switch to operating in IP communication mode and subsequently receive updated configuration information from the configuration update system 144 via IP communication mode.

[0048] Figure 2 shows an exemplary access control device 110 in several examples. The access control device 110 (e.g., a PACS control device) may include an OSDP communication protocol 210, an IP communication protocol 220, configuration information 230, and / or an IP communication device 240. The access control device 110 may be configured to operate using the OSDP communication protocol 210 in its initial state (default). The access control device 110 may transmit access control information to the controller 140 using the OSDP communication protocol 210.

[0049] The access control device 110 may receive a notification (or instruction) from the controller 140, for example via the OSDP communication protocol 210, indicating that an update to the configuration information is available. In response to receiving such instruction, the access control device 110 may activate the IP communication device 240 to enable the access control device 110 to operate using the IP communication protocol 220. The IP communication device 240 may include a PHY controller, a WiFi device, a LAN device, or any other physical hardware that can be used to generate IP packets and process IP packets for transmission over an IP communication link. The access control device 110 may send a message to the controller 140, using the IP communication protocol 220 and / or via the OSDP communication protocol 210, indicating that the access control device 110 is ready to receive the update. In response, the controller 140 may send the updated configuration information to the IP communication device 240 in an IP packet. The IP communication device 240 processes the IP packet and retrieves the updated configuration information from it. The access control device 110 may then modify the locally stored configuration information 230 based on the updated configuration information. The access control device 110 may then notify the controller 140 that the update is complete. The access control device 110 may then automatically switch to operation using the OSDP communication protocol 210, or switch in response to receiving a command from the controller 140. In such cases, the IP communication device 240 may be deactivated or powered off, for example, to conserve power / energy.

[0050] Figure 3 is a flowchart illustrating an exemplary process or method 300 of the access control system 100, in several examples. Process 300 may be implemented as a set of computer-readable instructions to be executed by one or more processors, thereby allowing the operation of process or method 300 to be performed partially or entirely by multiple functional components of system 100. Therefore, process or method 300 is described illustratively with reference to it below. However, in other examples, at least some of the multiple operations of process or method 300 may be deployed on various other hardware configurations. Some or all of the multiple operations of process or method 300 may be in parallel, out of order, or omitted entirely.

[0051] In operation 301, the server / controller 140 (e.g., PACS server) receives a request to update the settings of the access control reader, as described above. In operation 302, the server / controller 140 sends a first command via the wired link to the access control reader to temporarily switch from communication with the server using the first communication mode to communication with the server using the IP communication mode, as described above.

[0052] In operation 303, the server / controller 140 sends an IP packet containing configuration information to the access control reader to update the settings of the access control reader, as described above.

[0053] In operation 304, after the settings of the access control reader have been updated, the server / controller 140 sends a second command to the access control reader to switch from communication using the IP communication mode to communication using the first communication mode, as described above.

[0054] Figure 4 is a block diagram illustrating an exemplary software architecture 406 that may be used in conjunction with various hardware architectures described herein. Figure 4 is a non-limiting example of a software architecture, and it will be understood that many other architectures may be implemented to enable the functions described herein. The software architecture 406 can run on hardware such as the machine 500 in Figure 5, which includes a processor 504, memory 514, and I / O components 518. A typical hardware layer 452 is shown, for example, the machine 500 in Figure 5. The typical hardware layer 452 includes a processing unit 454 having a plurality of executable instructions 404. The plurality of executable instructions 404 represent a plurality of executable instructions of the software architecture 406, including implementations of methods, components, etc., described herein. The hardware layer 452 also includes a memory and / or storage device memory / storage 456, which also has a plurality of executable instructions 404. The hardware layer 452 may also include other hardware 458. The software architecture 406 can be deployed in any one or more of the components shown in Figure 1.

[0055] In the exemplary architecture of Figure 4, the software architecture 406 can be conceptualized as a stack of layers, each providing a specific function. For example, the software architecture 406 may include multiple layers such as an operating system 402, multiple libraries 420, multiple frameworks / middleware 418, multiple applications 416, and a presentation layer 414. Operationally, multiple applications 416 and / or other components within their layers can invoke API calls 408 through the software stack and receive messages 412 in response to API calls 408. The illustrated multiple layers are representative in nature, and not all software architectures have all layers. For example, some mobile or dedicated operating systems may not provide multiple frameworks / middleware 418, while others may. Other software architectures may include additional or different layers.

[0056] The operating system 402 may manage multiple hardware resources and provide multiple common services. The operating system 402 may include, for example, a kernel 422, multiple services 424, and multiple drivers 426. The kernel 422 can act as an abstraction layer between the hardware layer and other software layers. For example, the kernel 422 may be responsible for memory management, processor management (e.g., scheduling), component management, networking, security settings, etc. Multiple services 424 may provide other common services to other software layers. Multiple drivers 426 are responsible for controlling or interfaceing with the underlying hardware. For example, depending on the hardware configuration, multiple drivers 426 may include a display driver, camera driver, BLE driver, UWB driver, Bluetooth® driver, flash memory driver, serial communication driver (e.g., USB (Universal Serial Bus) driver), Wi-Fi® driver, audio driver, power management driver, etc.

[0057] Multiple libraries 420 provide a common infrastructure used by applications 416 and / or other components and / or layers. Libraries 420 provide functions that enable other software components to perform tasks more easily than directly interface with the functions of the basic operating system 402 (e.g., the kernel 422, multiple services 424 and / or multiple drivers 426). Multiple libraries 420 may include system libraries 444 (e.g., the C standard library) that may provide functions such as memory allocation functions, string manipulation functions, and mathematical functions. In addition, multiple libraries 420 may include API libraries 446 such as media libraries (e.g., libraries that support the presentation and manipulation of various media formats such as MPREG4, H.264, MP3, AAC, AMR, JPG, PNG), graphics libraries (e.g., the OpenGL framework which can be used to render two-dimensional (2D) and three-dimensional (3D) graphics content on a display), database libraries (e.g., SQLite which can provide various relational database functions), and web libraries (e.g., WebKit which can provide web browsing functions). Multiple libraries 420 may also include a wide variety of other libraries 448 to provide many other APIs to multiple applications 416 and other software components / devices.

[0058] Multiple frameworks / middleware 418 (sometimes referred to simply as middleware) provide a higher-level common infrastructure that can be used by multiple applications 416 and / or other software components / devices. For example, multiple frameworks / middleware 418 may provide various graphical user interface functions, high-level resource management, high-level location services, etc. Multiple frameworks / middleware 418 may also provide a wide range of other APIs that can be used by multiple applications 416 and / or other software components / devices, some of which may be specific to a particular operating system 402 or platform.

[0059] Multiple applications 416 include built-in applications 438 and / or third-party applications 440. Typical examples of built-in applications 438 may include, but are not limited to, contact applications, browser applications, book reader applications, location-based applications, media applications, messaging applications, and / or game applications. Third-party applications 440 may include applications developed by entities other than the vendor of a particular platform using the ANDROID® or IOS® Software Development Kit (SDK), and may be mobile software running on a mobile operating system such as IOS®, ANDROID®, WINDOWS® Phone, or other mobile operating systems. Third-party applications 440 may call API calls 408 provided by the mobile operating system (such as operating system 402) to enable the functions described herein.

[0060] Multiple applications 416 may use built-in operating system functions (e.g., kernel 422, services 424, and / or drivers 426), multiple libraries 420, and multiple frameworks / middleware 418 to create a UI for interacting with multiple users of the system. Alternatively or additionally, in some systems, user interaction may occur via a presentation layer, such as a presentation layer 414. In these systems, the "logic" of an application / component can be separated from the aspects of the application / component that interact with the user.

[0061] Figure 5 is a block diagram showing several components of a machine 500 that can read multiple instructions from a machine-readable medium (e.g., a machine-readable storage medium) and execute any one or more of the methods described herein, in several examples. Specifically, Figure 5 shows a schematic diagram of the machine 500 in an exemplary form of a computer system in which instructions 510 (e.g., software, programs, applications, applets, or other executable code) can be executed to cause the machine 500 to execute any one or more of the methods discussed herein.

[0062] Therefore, instruction 510 may be used to implement the devices or components described herein. Instruction 510 translates a general, unprogrammed machine 500 into a specific machine 500 programmed to perform the described and illustrated functions in the described manner, such as a client device 120, an access control device 110, or a server / controller 140. In an alternative example, machine 500 may operate as a standalone device or be coupled with other machines (e.g., networked). In a networked configuration, machine 500 may operate as a server machine or client machine in a server-client network environment, or as a peer machine in a peer-to-peer (or distributed) network environment. Machine 500 may include, but is not limited to, a server computer, a client computer, a personal computer (PC), a tablet computer, a laptop computer, a netbook, a set-top box (STB), a personal digital assistant (PDA), an entertainment media system, a mobile phone, a smartphone, a mobile device, a wearable device (e.g., a smartwatch), a smart home device (e.g., a smart appliance), another smart device, a web appliance, a network router, a network switch, a network bridge, or any other machine capable of sequentially or otherwise executing instructions 510 that specify the actions to be performed by Machine 500. Furthermore, although only a single Machine 500 is illustrated, the term “machine” shall also be interpreted as including a collection of machines that individually or jointly execute instructions 510 to perform any one or more of the methods described herein.

[0063] Machine 500 may include a processor 504, memory / storage 506, and I / O components 518, which may be configured to communicate with each other via a bus 502, etc. In one example, the processor 504 (e.g., a central processing unit (CPU), a reduced instruction set computing (RISC) processor, a composite instruction set computing (CISC) processor, a graphics processing unit (GPU), a digital signal processor (DSP), an ASIC, a radio frequency integrated circuit (RFIC), another processor, or any suitable combination thereof) may include, for example, processors 508 and 512 capable of executing instruction 510. The term “processor” is intended to include a multi-core processor 504 which may have two or more independent processors (sometimes called “cores”) capable of executing instructions simultaneously. Figure 5 shows multiple processors 504, but machine 500 may include a single processor with a single core, a single processor with multiple cores (e.g., a multi-core processor), multiple processors with a single core, multiple processors with multiple cores, or any combination thereof.

[0064] The memory / storage 506 may include a memory 514 such as main memory or other memory storage, a database 510, and a storage unit 516, both of which are accessible to the processor 504 via a bus 502, etc. The storage unit 516 and the memory 514 store instructions 510 that embody any one or more of the methods or functions described herein. The instructions 510 may also reside, fully or partially, in the memory 514, in the storage unit 516, in at least one of the processor 504 (e.g., in the processor's cache memory), or in any suitable combination thereof, while being executed by the machine 500. Thus, the memory 514, the storage unit 516, and the memory of the processor 504 are examples of machine-readable media.

[0065] The I / O component 518 may include a wide variety of components for receiving inputs, providing outputs, generating outputs, transmitting information, exchanging information, capturing measurements, etc. The specific I / O component 518 included in a particular machine depends on the type of machine 500. For example, a portable device such as a mobile phone is likely to include a touch input device or other such input mechanism, while a headless server machine is unlikely to include such a touch input device. It will be understood that the I / O component 518 may include many other components not shown in Figure 5. The I / O component 518 is grouped according to function simply to simplify the following description, and this grouping is by no means limiting. In various examples, the I / O component 518 may include an output component 526 and an input component 528. The output component 526 may include visual components (e.g., displays such as plasma display panels (PDPs), LED displays, LCDs, projectors, or cathode ray tubes (CRTs)), auditory components (e.g., speakers), tactile components (e.g., vibration motors, resistance mechanisms), and other signal generators. The input component 528 may include alphanumeric input components (e.g., keyboards, touchscreens configured to accept alphanumeric input, photo-optical keyboards, or other alphanumeric input components), point-based input components (e.g., mice, touchpads, trackballs, joysticks, motion sensors, or other pointing devices), tactile input components (e.g., physical buttons, touchscreens that provide the position and / or force of touch or touch gestures, or other tactile input components), and voice input components (e.g., microphones).

[0066] In further examples, the I / O component 518 may include a wide variety of other components, such as a biometric component 539, a motion component 534, an environmental component 536, or a position component 538. For example, the biometric component 539 may include components that detect facial expressions (e.g., hand expressions, facial expressions, voice expressions, gestures, or eye tracking), measure biosignals (e.g., blood pressure, heart rate, body temperature, sweating, or electroencephalography), and identify people (e.g., voice recognition, retinal recognition, facial recognition, fingerprint recognition, or electroencephalography-based recognition). The motion component 534 may include acceleration sensor components (e.g., accelerometers), gravity sensor components, rotation sensor components (e.g., gyroscopes), and so on. The environmental component 536 may include, for example, a lighting sensor component (e.g., a photometer), a temperature sensor component (e.g., one or more thermometers that detect ambient temperature), a humidity sensor component, a pressure sensor component (e.g., a barometer), an acoustic sensor component (e.g., one or more microphones that detect background noise), a proximity sensor component (e.g., an infrared sensor that detects nearby objects), a gas sensor (e.g., a gas detection sensor that detects the concentration of harmful gases for safety or measures airborne pollutants), or other components that can provide displays, measurements, or signals corresponding to the surrounding physical environment. The position component 538 may include, for example, a position sensor component (e.g., a GPS receiver component), an altitude sensor component (e.g., an altimeter or barometer that detects air pressure from which altitude can be derived), a compass sensor component (e.g., a magnetometer), and the like.

[0067] Communication can be implemented using a wide variety of technologies. The I / O component 518 may include a communication component 540 capable of connecting the machine 500 to the network 537 or device 529 via connections 524 and 522, respectively. For example, the communication component 540 may include a network interface component or another suitable device for interface with the network 537. In further examples, the communication component 540 may include a wired communication component, a wireless communication component, a cellular communication component, an NFC component, a Bluetooth® component (e.g., Bluetooth® Low Energy), a Wi-Fi® component, and other communication components that provide communication via other modalities. Device 529 may be either another machine or a wide variety of peripheral devices (e.g., peripheral devices connected via USB).

[0068] Furthermore, the communication component 540 may include components that can detect identifiers or are capable of operating to detect identifiers. For example, the communication component 540 may include an RFID tag reading component, an NFC smart tag detection component, an optical reader component (e.g., an optical sensor for detecting one-dimensional barcodes such as Universal Product Code (UPC) barcodes, QR (Quick Response) codes, Aztec codes, Data Matrix, Dataglyph, MaxiCode, PDF417, Ultra Code, UCC RSS-2D barcodes, and other optical codes), or an acoustic detection component (e.g., a microphone for identifying tagged audio signals). In addition, various types of information can be derived through the communication component 540, such as location via IP (Internet Protocol) geolocation, location via Wi-Fi® signal triangulation, and location by detection of NFC beacon signals that may indicate a specific location.

[0069] <Glossary> In this context, “carrier signal” refers to any intangible medium capable of storing, encoding, or carrying temporary or non-temporary instructions for machine execution, including digital or analog communication signals or other intangible medium to enable communication of such instructions. Temporary or non-temporary instructions may be transmitted or received over a network by using a transmission medium via a network interface device, or by using any one of a number of well-known transport protocols.

[0070] In this context, “client device” means any machine that interfaces to a communication network to obtain resources from one or more server systems or other client devices, or that communicates directly with such other devices or server systems. A client device may be, but is not limited to, a mobile phone, desktop computer, laptop, PDA, smartphone, tablet, ultrabook, netbook, laptop, multiprocessor system, microprocessor-based or programmable consumer electronics, game console, STB, or any other communication device that a user may use to access a network.

[0071] In this context, “communication network” means one or more parts of a network, which may be an ad hoc network, intranet, extranet, VPN, LAN, BLE network, UWB network, WLAN, WAN, WWAN, MAN, Internet, part of the Internet, part of the PSTN, POTS network, cellular telephone network, wireless network, Wi-Fi® network, another type of network, or a combination of two or more such networks. For example, a network or part of a network may comprise a wireless or cellular network, and the coupling may be a CDMA connection, a GSM® connection, or other types of cellular or wireless connections. In this example, the coupling may implement any of the various types of data transfer technologies, such as 1 xRTT, EVDO technology, GPRS technology, EDGE technology, 3GPP including 3G, 4G networks, UMTS, HSPA, WiMAX, LTE standards, and others defined by various standardization bodies, other long-range protocols, or other data transfer technologies.

[0072] In this context, “machine-readable medium” refers to a component, device, or other tangible medium capable of temporarily or permanently storing instructions and data, and may, but is not limited to, RAM, ROM, buffer memory, flash memory, optical media, magnetic media, cache memory, other types of storage (e.g., erasable programmable read-only memory (EEPROM)), and / or any suitable combination thereof. The term “machine-readable medium” should be interpreted as including a single or multiple medium capable of storing instructions (e.g., a centralized or distributed database, or associated caches and servers). The term “machine-readable medium” is also considered to include any medium, or combination of multiple media, capable of storing instructions for machine execution (e.g., code), such that when the instructions are executed by one or more processors of the machine, the machine causes the machine to execute one or more of the methodologies described herein. Thus, “machine-readable medium” refers to a single storage device, as well as a “cloud-based” storage system or storage network comprising multiple storage devices. The term “machine-readable medium” excludes signals themselves.

[0073] In this context, a component refers to a device, physical entity, or logic whose boundaries are defined by function or subroutine calls, branching points, application programming interface APIs, or other techniques that provide partitioning or modularization of specific processing or control functions. Components can be combined with other components through interfaces to perform machine operations. A component is a packaged, functional hardware unit designed to be used together with other components, and is often part of a program that performs a specific function among several related functions. A component can constitute either a software component (e.g., code embodied in a machine-readable medium) or a hardware component. A “hardware component” is a tangible unit capable of performing a specific operation and can be configured or arranged in a specific physical manner. In various examples, one or more computer systems (e.g., a standalone computer system, a client computer system, or a server computer system) or one or more hardware components of a computer system (e.g., a processor or a group of processors) may be configured by software (e.g., an application or application portion) as hardware components that operate to perform specific operations as described herein.

[0074] Hardware components may also be implemented mechanically, electronically, or in any appropriate combination thereof. For example, a hardware component may have dedicated circuitry or logic permanently configured to perform a specific operation. A hardware component may be a special-purpose processor such as an FPGA (Field-Programmable Gate Array) or ASIC. Alternatively, a hardware component may have programmable logic or circuitry configured by software to perform a specific operation temporarily. For example, a hardware component may have software that runs on a general-purpose processor or other programmable processor. When configured by such software, the hardware component is no longer a general-purpose processor, as it becomes a specific machine (or a specific component of a machine) independently tuned to perform the configured function. It will be understood that the decision to implement a hardware component mechanically, in dedicated and permanently configured circuitry, or in temporarily configured circuitry (e.g., configured by software) may be made based on cost and time considerations. Therefore, the term “hardware component” (or “hardware implementation component”) should be understood to encompass tangible entities that are physically constructed, permanently configured (e.g., hardwired), or temporarily configured (e.g., programmed) in order to operate in a particular way or to perform certain operations described herein. Considering multiple examples of hardware components being temporarily configured (e.g., programmed), each of the multiple hardware components does not need to be configured or instantiated in any single instance.For example, if the hardware components consist of general-purpose processors configured by software to function as special-purpose processors, the general-purpose processors may be configured as different special-purpose processors at different times (e.g., with different hardware components). The software may be configured accordingly, for example, to configure a particular processor or group of processors to function as a specific hardware component in one instance of time, while configuring a different hardware component in another instance of time.

[0075] Hardware components can provide information to other hardware components and receive information from other hardware components. Therefore, the described hardware components can be considered to be communicated together. When multiple hardware components exist simultaneously, communication can be achieved by signal transmission between or within two or more of the hardware components (e.g., via appropriate circuits and buses). In multiple examples where multiple hardware components are configured or instantiated at different times, communication between such hardware components may be achieved, for example, through the storage and retrieval of information in memory structures accessed by the multiple hardware components. For example, one hardware component may not only perform an operation but also store the output of that operation in a memory device that is communicated together. Another hardware component can then retrieve and process the stored output by accessing the memory device at a later date.

[0076] Hardware components can initiate communication with input or output devices, or they can operate on resources (e.g., collections of information). Various operations of the exemplary methods described herein may be performed at least partially by one or more processors that are configured, either temporarily (e.g., by software) or permanently, to perform the operations in question. Whether temporarily or permanently configured, such processors may constitute a processor implementation component that operates to perform one or more operations or functions described herein. As used herein, “processor implementation component” refers to a hardware component implemented using one or more processors. Similarly, the methods described herein may be at least partially processor-implemented, with a particular processor or a set of processors being an example of the hardware. For example, at least part of the operations of a method may be performed by one or more processors or processor implementation components. Furthermore, one or more processors may operate to support the performance of the operations in a “cloud computing” environment or as “software as a service” (SaaS). For example, at least part of an operation (action) may be performed by a group of computers (as an example of a machine containing multiple processors), and these operations may be accessible via a network (e.g., the Internet) and via one or more suitable interfaces (e.g., APIs). The execution of a particular operation may reside not only within a single machine but may also be distributed among processors deployed across multiple machines. In some examples, the processor or processor implementation component may be located in a single geographical location (e.g., a home environment, an office environment, or a server farm). In other examples, the processor or processor implementation component may be distributed across multiple geographical locations.

[0077] In this context, "processor" means any circuit or virtual circuit (a physical circuit emulated by logic running on an actual processor) that not only manipulates data values ​​according to control signals (e.g., "commands," "opcodes," "machine codes," etc.) but also generates corresponding output signals applied to operate a machine. A processor may be, for example, a CPU, RISC processor, CISC processor, GPU, DSP, ASIC, RFIC, or any combination thereof. A processor may also be a multicore processor having two or more independent processors (sometimes called "cores") that can execute instructions simultaneously.

[0078] You may make changes and modifications to the disclosed examples without departing from the scope of this disclosure. These and other changes or modifications are intended to be included within the scope of this disclosure as set forth in the following claims.

[0079] This abstract of the disclosure is provided for the purpose of enabling readers to quickly identify an overview of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the claims or their meaning. In addition, it will be found that in the prior detailed description, various features are grouped into a single example for the purpose of simplifying the disclosure. Such a method of disclosure should not be interpreted as reflecting an intention that the claimed example requires more features than are explicitly described in each claim. Rather, as reflected in the following claims, the subject matter of the invention may be established by fewer features than all the features of the single disclosed example combined. Accordingly, the appended claims are incorporated into the detailed description, and each claim stands as an independent example.

Claims

1. It is a method, The server receives a request to update the settings of the access control reader, The server transmits a first command to the access control reader via a wired link to temporarily switch communication with the server from a first communication mode to an IP (Internet Protocol) communication mode. Sending an IP packet containing configuration information for updating the settings of the access control reader from the server to the access control reader, A method comprising: after the settings of the access control reader have been updated, the server sending a second command to the access control reader to switch from communication using IP communication mode to communication using a first communication mode.

2. The method according to claim 1, wherein the first communication mode includes an OSDP (Open Supervised Device Protocol) communication mode.

3. The access control reader communicates with the server using the first communication mode via a wired link. The method according to claim 1 or 2, wherein the access control reader communicates with the server using the IP communication mode via the wired link used in the first communication mode.

4. The access control reader communicates with the server using the first communication mode via the first physical connection. The method according to any one of claims 1 to 3, wherein the access control reader communicates with the server using the IP communication mode via a second connection different from the first physical connection.

5. The second connection described above includes a wireless connection. The method according to claim 4, further comprising the access control reader activating a Wi-Fi device to establish an IP connection with the server.

6. The method according to any one of claims 1 to 5, wherein the IP packet is transmitted from the server to the access control reader via a private IP connection.

7. The method according to any one of claims 1 to 6, further comprising establishing a secure IP connection between the server and the access control reader in response to transmitting the first command to the access control reader.

8. The method according to any one of claims 1 to 7, wherein the access control reader is configured to transmit access control information to the server using the first communication mode and to receive updated configuration information from the server using the IP communication mode.

9. The method according to any one of claims 1 to 8, wherein the data rate associated with the IP communication mode is greater than the data rate associated with the first communication mode.

10. The method according to any one of claims 1 to 9, further comprising activating a local PHY (physical) controller on the access control reader in response to receiving the first command.

11. The method according to claim 10, further comprising causing the access control reader to deactivate the local PHY controller in response to receiving the second command.

12. The method according to any one of claims 1 to 11, further comprising the server receiving a message from the access control reader indicating that the access control reader has completed switching to the IP communication mode.

13. The method according to claim 12, wherein the message is received using the first communication mode.

14. The method according to claim 12 or 13, wherein the message is received using the IP communication mode.

15. The method according to any one of claims 1 to 14, wherein the first instruction is transmitted from the server to the access control reader via an I / O (input / output) module connected to the server.

16. The method according to claim 15, wherein the I / O module is connected to a plurality of access control readers, and the plurality of access control readers include the access control readers.

17. The method according to any one of claims 1 to 16, wherein the request for updating the settings of the access control reader includes at least one of a time, date, and period that permits the access control reader to operate using the IP communication mode.

18. The method according to claim 17, wherein at least one of the aforementioned time, date, and period is transmitted to the access control reader, and if the current time does not match at least one of the aforementioned time, date, and period received from the server, the access control reader is instructed to automatically stop operating in the IP communication mode.

19. It is a system, The system comprises one or more processors connected to memory containing non-temporary computer-readable instructions, wherein, when the instructions are executed by the one or more processors, the one or more processors cause the one or more processors to perform a plurality of operations, and the plurality of operations are The server receives a request to update the settings of the access control reader, The server transmits a first command to the access control reader via a wired link to temporarily switch communication with the server from a first communication mode to an IP (Internet Protocol) communication mode. Sending an IP packet containing configuration information for updating the settings of the access control reader from the server to the access control reader, A system comprising the following steps: after the settings of the access control reader are updated, the server sends a second command to the access control reader to switch from communication using IP communication mode to communication using a first communication mode.

20. A non-temporary computer-readable medium containing non-temporary computer-readable instructions, wherein, when the non-temporary computer-readable instructions are executed by one or more processors, the one or more processors cause a plurality of operations to be performed, The server receives a request to update the settings of the access control reader, The server transmits a first command to the access control reader via a wired link to temporarily switch communication with the server from a first communication mode to an IP (Internet Protocol) communication mode. Sending an IP packet containing configuration information for updating the settings of the access control reader from the server to the access control reader, A non-temporary computer-readable medium, comprising the following steps: after the settings of the access control reader are updated, the server sends a second command to the access control reader to switch from communication using IP communication mode to communication using a first communication mode.

21. A computer-readable medium that, when executed by one or more processors, carries computer-readable instructions that cause the one or more processors to perform the method according to any one of claims 1 to 18.

22. It is a system, One or more processors, A system comprising a computer-readable medium that stores computer-readable instructions, which, when executed by the one or more processors, cause the one or more processors to perform the method according to any one of claims 1 to 18.

Images