Dynamic e-ink secure resource control reader

Abstract

A system for controlling access to a protected resource is described. The system accesses, by an access control device, a set of data associated with configuration of an electronic ink (e-ink) display of the access control device and generates an image based on the set of data. The system powers on the e-ink display in response to receiving the set of data. The system, after powering on the e-ink display of the access control device, programs the e-ink display to present the generated image and powers off the e-ink display of the access control device after programming the e-ink display, the e-ink display continuing to present the generated image after being powered off.

Description

DYNAMIC E-INK SECURE RESOURCE CONTROL READERPRIORITY APPLICATION(S)

[0001] This application claims priority to Indian Provisional Patent Application No. 202411078904, filed on October 17, 2024, the disclosure of which is incorporated by reference herein in its entirety.BACKGROUND

[0002] Access control readers, often encased in simple black box enclosures, are widely deployed in various environments to manage entry to secure areas. These devices must balance security with user convenience, ensuring that only authorized individuals gain access while maintaining a seamless user experience. The evolution of access control technology has led to the integration of advanced features such as biometric authentication, wireless communication, and energy-efficient displays, enhancing both functionality and aesthetic appeal. As these systems continue to evolve, they play a pivotal role in safeguarding sensitive locations while adapting to the diverse needs of modern infrastructure.BRIEF SUMMARY

[0003] In some aspects, the techniques described herein relate to a system including: one or more hardware processors; and at least one machine-storage medium for storing instructions that, when executed by the one or more hardware processors, cause the one or more hardware processors to perform operations including: accessing, by an access control device, a set of data associated with configuration of an electronic ink (e-ink) display of the access control device; generating an image based on the set of data; powering on the e-ink display in response to receiving the set of data; after powering on the e-ink display of the access control device, programming the e-ink display to present the generated image; and powering off the e-ink display of the access control device after programming the e-ink display, the generated image continuing to present the generated image after being powered off.

[0004] In some aspects, the techniques described herein relate to a system, wherein the operations include: receiving, from an administrator of the access control device, a visualrepresentation of a location at which the access control device is installed as the set of data.

[0005] In some aspects, the techniques described herein relate to a system, wherein the visual representation includes a logo of a venue at the location.

[0006] In some aspects, the techniques described herein relate to a system, wherein the operations include: determining a time of day, time of year, season, or event information based on a current time; identifying the image corresponding to the determined time of day, time of year, season, or event information; and generating the image using the identified image.

[0007] In some aspects, the techniques described herein relate to a system, wherein the operations include: determining that a current time corresponds to a specified condition associated with modifying the e-ink display; in response to determining that the current time corresponds to the specified condition, selecting the image based on the current time; and powering on the e-ink display in response to determining that the current time corresponds to the specified condition for programming the e-ink display.

[0008] In some aspects, the techniques described herein relate to a system, wherein the specified condition corresponds to an event, an updated score that is presented on the e- ink display, room information, a specified season, a specified holiday, health information, facility information, or a timer.

[0009] In some aspects, the techniques described herein relate to a system, wherein the operations include: establishing a communication session between the access control device and a mobile device; receiving, as the set of data, a credential from the mobile device; and obtaining, as the generated image, a visual representation associated with the credential.

[0010] In some aspects, the techniques described herein relate to a system, wherein the operations include: determining whether to grant access to a protected resource based on the credential; and selecting, as the visual representation, access granted or access denied information in response to determining whether to grant access to the protected resource based on the credential, the access granted or access denied information being displayed by the e-ink display for a threshold period of time.

[0011] In some aspects, the techniques described herein relate to a system, wherein the operations include: after the threshold period of time elapses, re-powering the e-ink display to re-present a default image.

[0012] In some aspects, the techniques described herein relate to a system, wherein the visual representation includes an animation associated with a user of the mobile device, a name of the user of the mobile device, a greeting for the user, or picture of the user of the mobile device.

[0013] In some aspects, the techniques described herein relate to a system, wherein the operations include: selecting a text size for information presented by the e-ink display based on the credential.

[0014] In some aspects, the techniques described herein relate to a system, wherein the operations include: generating a code as the visual representation; presenting the code on the e-ink display; and determining that an interaction of the mobile device based on the code satisfies an access criterion.

[0015] In some aspects, the techniques described herein relate to a system, wherein the operations include: causing the mobile device to scan the code presented on the e-ink display; causing the mobile device to access a link associated with the code in response to scanning the code; and authenticating the mobile device in response to the link being accessed by the mobile device, wherein the access control device grants access to a protected resource in response to receiving the credential and in response to authenticating the mobile device in response to the link being accessed by the mobile device.

[0016] In some aspects, the techniques described herein relate to a system, wherein the operations include: receiving input, via a capacitive keypad overlaid on the e-ink display, the input including a set of keys corresponding to the code presented on the e-ink display; determining that the input corresponds to the code; and authenticating the mobile device in response to determining that the input corresponds to the code, wherein the access control device grants access to a protected resource determining that the input corresponds to the code presented on the e-ink display.

[0017] In some aspects, the techniques described herein relate to a system, wherein the code includes at least one of a quick reference (QR) code, a text pattern, a drawing pattern, or a sequence of alphanumeric characters.

[0018] In some aspects, the techniques described herein relate to a system, wherein the operations include: capturing, as the set of data, an image of a body part of a user in front of the access control device using a camera of the access control device; and generating, as the image, a representation of a gesture performed by the body part.

[0019] In some aspects, the techniques described herein relate to a system, wherein the image corresponds to an environment in which the access control device is physically installed.

[0020] In some aspects, the techniques described herein relate to a system, wherein the image displayed on the e-ink display dynamically changes over time.

[0021] In some aspects, the techniques described herein relate to a method including: accessing, by an access control device, a set of data associated with configuration of an electronic ink (e-ink) display of the access control device; generating an image based on the set of data; powering on the e-ink display in response to receiving the set of data; after powering on the e-ink display of the access control device, programming the e-ink display to present the generated image; and powering off the e-ink display of the access control device after programming the e-ink display, the generated image continuing to present the generated image after being powered off.

[0022] In some aspects, the techniques described herein relate to a machine-storage medium for storing instructions that, when executed by one or more hardware processors, cause the one or more hardware processors to perform operations including: accessing, by an access control device, a set of data associated with configuration of an electronic ink (e-ink) display of the access control device; generating an image based on the set of data; powering on the e-ink display in response to receiving the set of data; after powering on the e-ink display of the access control device, programming the e-ink display to present the generated image; and powering off the e-ink display of the access control device after programming the e-ink display, the generated image continuing to present the generated image after being powered off.BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS

[0023] To easily identify the discussion of any particular element or act, the most significant digit or digits in a reference number refer to the figure number in which that element is first introduced.

[0024] FIG. 1 is a diagrammatic representation of a networked environment in which the present disclosure may be deployed, in accordance with some examples.

[0025] FIG. 2 illustrates a diagram of an environment for accessing a secure resource, in accordance with some examples.

[0026] FIG. 3 illustrates a routine for accessing a secure resource, in accordance with some examples.

[0027] FIG. 4 is a block diagram illustrating a representative software architecture, which may be used in conjunction with various hardware architectures herein described, in accordance with some examples.

[0028] FIG. 5 is a diagrammatic representation of a machine in the form of a computer system within which a set of instructions may be executed for causing the machine to perform any one or more of the methodologies discussed herein, in accordance with some examples.DETAILED DESCRIPTION

[0029] Example methods and systems for an access control system are described. In the following description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the disclosed examples. It will be evident, however, to one of ordinary skill in the art that examples of the disclosure may be practiced without these specific details.

[0030] Current physical access control readers often incorporate liquid crystal display (LCD) displays to provide basic information, such as access status or user prompts. While these displays offer a straightforward way to communicate with users, they come with significant drawbacks. One of the primary issues is their high power consumption. LCDs require constant backlighting to remain visible, which means they draw power continuously, even when the device is not actively engaged. This constant energy demand can lead to increased operational costs and frequent maintenance, as power sources need regular replacement or recharging.

[0031] Additionally, the visual appeal of LCD displays in access control readers is often lacking. The technology typically offers limited color ranges and contrast, resulting in a less engaging and aesthetically pleasing user interface. In environments where design and user experience are important, such as corporate offices or high-end residential buildings, the utilitarian appearance of LCDs can detract from the overall ambiance. This lack of visual sophistication may not align with the branding or aesthetic goals of the installation environment, leading to a disconnect between the device and its surroundings. Furthermore, the static nature of LCD displays means they are often underutilized, displaying the same information repeatedly without the ability to adapt orchange dynamically. This limitation can result in a monotonous user experience, failing to capture the attention or interest of users. As a result, the potential for these displays to enhance user interaction and engagement is significantly diminished, highlighting the need for more innovative and energy-efficient display solutions in access control systems.

[0032] The disclosed system addresses these challenges by integrating electronic ink (e-ink) displays into physical access control readers. Unlike LCDs, e-ink displays consume power only when updating the display, allowing them to maintain an image without continuous energy draw. This significantly reduces power consumption, making the system more energy-efficient and cost-effective over time. The bistable nature of e- ink technology ensures that the display remains visible even when the device is not actively engaged, aligning with the low-power requirements of access control systems. Moreover, e-ink displays offer a visually appealing alternative to traditional LCDs. With high contrast and readability in various lighting conditions, they provide a more engaging user interface that can dynamically change to display personalized messages, animations, or branding elements. This adaptability enhances the user experience by offering a more interactive and aesthetically pleasing interface, which can be customized to fit the specific needs and design preferences of the installation environment. By addressing both the power inefficiencies and visual limitations of conventional systems, the current solution represents a significant advancement in access control technology.

[0033] Electronic ink (e-ink) displays are a type of display technology that mimics the appearance of ink on paper. Unlike traditional displays that use backlighting to illuminate pixels, e-ink displays rely on ambient light, making them more energyefficient and easier on the eyes. The technology operates by using microcapsules filled with charged black and white particles suspended in a clear fluid. When an electric field is applied, the particles move to the top or bottom of the microcapsules, creating visible text or images. This bistable nature allows e-ink displays to retain an image even when power is removed, making them ideal for applications where low power consumption is crucial, such as e-readers and digital signage.

[0034] Specifically, the disclosed techniques access, by an access control device, a set of data associated with configuration of an e-ink display of the access control device and generate an image based on the set of data. The disclosed techniques power on the e-ink display in response to receiving the set of data. The disclosed techniques, after poweringon the e-ink display of the access control device, program the e-ink display to present the generated image and power off the e-ink display of the access control device after programming the e-ink display, the e-ink display continuing to present the selected image after being powered off.

[0035] The innovative e-ink access control reader solution revolutionizes the user experience in access control systems by addressing the limitations of traditional technologies. One of the key features is its customizable appearance, allowing organizations to tailor the reader's design to match their branding or aesthetic preferences. With interchangeable covers or skins, the e-ink reader can seamlessly integrate into various environments, enhancing the visual appeal and reinforcing brand identity.

[0036] Another significant advancement is the dynamic animation library, which enables administrators to pre-load a variety of animations into the reader. These animations can be personalized for specific users or events, such as birthdays or achievements, making the access experience more engaging and enjoyable. This level of personalization extends to user-specific customization, where individuals can select their favorite colors, animation styles, or personal greetings, creating a tailored interaction with the access control system.

[0037] The e-ink reader also incorporates seasonal themes, allowing it to adapt its appearance and animations based on holidays or seasons. This feature not only enhances the atmosphere of the environment but also fosters a sense of community and engagement among users. Additionally, the reader provides interactive feedback through subtle animations or color changes, confirming successful access or indicating errors, thus improving user confidence and satisfaction. Integration with smart building systems further elevates the functionality of the e-ink reader. By displaying relevant information such as alerts, notifications, or building updates, the reader keeps users informed while interacting with the access control system. This integration supports multi-user profiles, ensuring that diverse user preferences are accommodated, and accessibility features like voice prompts or larger text options make the system inclusive for all users.

[0038] Energy efficiency remains a cornerstone of the e-ink reader's design, leveraging the low power consumption benefits of traditional e-ink technology. The device operates efficiently, requiring energy only when updating the display, which aligns with the sustainability goals of modern infrastructure. Additionally, the reader supports multi-factor authentication, offering enhanced security through features like dynamic PIN input and gesture recognition, which add layers of interactivity and security to the access process.

[0039] Overall, the e-ink reader addresses the inefficiencies and limitations of conventional systems by providing a customizable, interactive, and energy-efficient solution. Its ability to adapt to various user needs and environmental contexts makes it a versatile and forward-thinking choice for access control applications, ensuring a secure and engaging user experience.

[0040] FIG. 1 is a block diagram showing an example access control system 100, according to various examples. The access control system 100 can include a client device 120 (e.g., mobile device) and PAC device 110. The client device 120 and the PAC device 110 are communicatively coupled over a network 130 (e.g., Internet, BLE, ultra- wideband (UWB) communication protocol, Near Field Communication (NFC), and / or telephony network). While the disclosed techniques are discussed in the context of physical access control (PAC) devices, similar techniques are applicable to any other type of access control device, such as a logical access control (LAC) device.

[0041] As used herein, the term “client device” may refer to any machine that interfaces to a communications network (such as network 130) to exchange credentials with an access control device, such as the PAC device 110, a server / controller associated with the access control device, another client device 120, or any other component to obtain access to a logical or physical asset or resource protected by the access control device. In some examples, the client device 120 can additionally or alternatively communicate directly with, for example, an access control device or another client device 120. The client device 120 can include or store one or more credentials which can be provided to the access control device 110 for obtaining access to a protected physical or logical asset or resource.

[0042] A client device 120 may be, but is not limited to, a mobile phone, desktop computer, laptop, portable digital assistant (PDA), smart phone, a wearable device (e.g., a smart watch), tablet, ultrabook, netbook, multi-processor system, microprocessor-based or programmable consumer electronics, physical card, or any other communication device that a user may use to access a network.

[0043] The access control device (e.g., the PAC device 110) can include an access reader device (also referred to as an access control reader) connected to asecure / protected resource (e.g., a door locking mechanism or backend server) that controls the secure / protected resource (e.g., door locking mechanism). The resource associated with the access control device can include a door lock, an ignition system for a vehicle, or any other device that grants or denies access to a physical component or that can be operated to grant or deny access to the physical component. For example, in the case of a door lock, the access control device can deny access, in which case the door lock remains locked and the door cannot be opened; or can grant access, in which case the door lock becomes unlocked to allow the door to be opened. As another example, in the case of an ignition system, the access control device can deny access, in which case the vehicle ignition system remains disabled and the vehicle cannot be started; or can grant access, in which case the vehicle ignition becomes enabled to allow the vehicle to be started.

[0044] Physical access control (PAC) covers a range of systems and methods to govern access, for example by people, to secure areas or secure assets. Physical access control includes identification of authorized users or devices (e.g., vehicles, drones, etc.) and actuation of a gate, door, or other facility used to secure an area, or actuation of a control mechanism, for example, a physical or electronic / software control mechanism, permitting access to a secure asset. The access control device may form part of a physical access control system (PACS), which can include a reader (e.g., an online or offline reader) that may hold authorization data (also referred to access control information) and can be capable of determining whether credentials (e.g., from credential or key devices such as radio frequency identification (RFID) chips in cards, fobs, or personal electronic devices such as mobile phones) are authorized for an actuator or control mechanism (e.g., door lock, door opener, software control mechanism, turning off an alarm, etc.), or a PACS can include a host server to which readers and actuators are connected (e.g., via a controller) in a centrally managed configuration.

[0045] In centrally managed configurations, readers can obtain credentials from credential or key devices (e.g., from one or more client devices 120) and pass those credentials to the PACS host server or headend system. The readers can send the credentials over a wired or wireless link, such as network 130. The host server then determines whether the credentials authorize access to the secure area or secure asset (or resource) and commands the actuator or other control mechanism of the PAC device 110accordingly by sending an allow / deny message back to the reader over the wired or wireless link. While examples in physical access control are used herein, the disclosure applies similarly to logical access control system (LACS) use cases (e.g., logical access to personal electronic devices, logical access to personal online or electronic accounts or documents, etc.).

[0046] In general, the access control device can include one or more of a memory, a processor, one or more antennas, a communication module, a network interface device, a user interface, a display, and a power source or supply. The memory of the access control device can be used in connection with the execution of application programming or instructions by the processor of the access control device, and for the temporary or long-term storage of program instructions or instruction sets and / or credential or authorization data, such as credential data, credential authorization data, or access control data or instructions. For example, the memory can contain executable instructions that are used by the processor to run other components of access control device and / or to make access determinations based on credential or authorization data.

[0047] The memory of the access control device (e.g., PAC device 110 and / or client device 120) can include a transitory or non-transitory computer-readable medium. The computer-readable medium can be, for example, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device. More specific examples of suitable computer-readable medium include, but are not limited to, an electrical connection having one or more wires or a tangible storage medium such as a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), Dynamic RAM (DRAM), any solid-state storage device in general, a compact disc read-only memory (CD-ROM), or other optical or magnetic storage device. Computer-readable media includes, but is not to be confused with, computer-readable storage medium, which is intended to cover all physical, non- transitory, or similar examples of computer-readable media.

[0048] The processor of the access control device can correspond to one or more computer processing devices or resources. For instance, the processor can be provided as silicon, as a Field Programmable Gate Array (FPGA), an Application-Specific Integrated Circuit (ASIC), any other type of Integrated Circuit (IC) chip, a collection of IC chips, or the like. As a more specific example, the processor can be provided as a microprocessor,Central Processing Unit (CPU), or plurality of microprocessors or CPUs that are configured to execute instructions sets stored in an internal memory and / or memory of the access control device.

[0049] The antenna of the access control device can correspond to one or multiple antennas and can be configured to provide for wireless communications between access control device and a credential or key device (e.g., client device 120). The antenna can be arranged to operate using one or more wireless communication protocols and operating frequencies including, but not limited to, the IEEE 502.15.1, Bluetooth, BLE, NFC, ZigBee, Global System for Mobile communications (GSM), Code Division Multiple Access (CDMA), Wi-Fi, RF, UWB, and the like. By way of example, the antenna(s) can be RF antenna(s), and as such, may transmit / receive RF signals through free-space to be received / transferred by a credential or key device having an RF transceiver.

[0050] A communication module or communication component of the access control device can be configured to communicate according to any suitable communications protocol with one or more different systems or devices either remote or local to the access control device, such as one or more client devices 120 and / or servers / controllers. In some cases, the communication module of the access control device is configured to perform the disclosed authentication protocol securely.

[0051] In some cases, the communication module uses a same wired or wireless link between the access control device and the server / controller for all the communication modes. In some cases, the communication module uses one wired or wireless link between the access control device and the server / controller to communicate access control information and uses a different wired or wireless link to communicate or receive configuration information updates from the server / controller over the Internet Protocol (IP) communication mode.

[0052] The network interface device of the access control device (any functionality / configuration described in association with the access control device is similarly applicable to the PAC device 110 and vice versa) includes hardware to facilitate communications with other devices, such as a one or more client devices 120 and / or server / controller (e.g., a PACS server), over a communication network, such as network 130, utilizing any one of a number of transfer protocols (e.g., frame relay, IP, transmission control protocol (TCP), user datagram protocol (UDP), hypertext transferprotocol (HTTP), etc.). Example communication networks can include a local area network (LAN), a wide area network (WAN), a packet data network (e.g., the Internet), mobile telephone networks (e.g., cellular networks), Plain Old Telephone (POTS) networks, wireless data networks (e.g., IEEE 502.11 family of standards known as WiFi, IEEE 502.16 family of standards known as WiMax), IEEE 502.15.4 family of standards, and peer-to-peer (P2P) networks, among others. In some examples, network interface device can include an Ethernet port or other physical jack, a Wi-Fi card, a Network Interface Card (NIC), a cellular interface (e.g., antenna, filters, and associated circuitry), or the like. In some examples, network interface device can include a plurality of antennas to wirelessly communicate using at least one of single-input multiple-output (SIMO), multiple-input multiple-output (MIMO), or multiple-input single-output (MISO) techniques.

[0053] A user interface of the access control device can include one or more input devices and / or display devices. Examples of suitable user input devices that can be included in the user interface include, without limitation, one or more buttons, a keyboard or keypad, a mouse, a touch-sensitive surface, a stylus, a camera, a microphone, etc. Examples of suitable user output devices that can be included in the user interface include, without limitation, one or more LEDs, an LCD panel, a display screen, a touchscreen, one or more lights, a speaker, and so forth. It should be appreciated that the user interface can also include a combined user input and user output device, such as a touch-sensitive display or the like. Any reference to operations performed by the access control device apply to the PAC device 110, shown in FIG. 1.

[0054] The network 130 may include, or operate in conjunction with, an ad hoc network, an intranet, an extranet, a virtual private network (VPN), a LAN, a wireless network, a wireless LAN (WLAN), a WAN, a wireless WAN (WWAN), a metropolitan area network (MAN), BLE, UWB, the Internet, a portion of the Internet, a portion of the Public Switched Telephone Network (PSTN), a POTS network, a cellular telephone network, a wireless network, a Wi-Fi® network, another type of network, or a combination of two or more such networks. For example, a network or a portion of a network may include a wireless or cellular network and the coupling may be a CDMA connection, a GSM connection, or other type of cellular or wireless coupling. In this example, the coupling may implement any of a variety of types of data transfer technology, such as Single Carrier Radio Transmission Technology (IxRTT), Evolution-Data Optimized (EVDO) technology, General Packet Radio Service (GPRS) technology, Enhanced Data rates for GSM Evolution (EDGE) technology, third Generation Partnership Project (3 GPP) including 3G, fourth generation wireless (4G) networks, fifth generation wireless (5G) networks, Universal Mobile Telecommunications System (UMTS), High Speed Packet Access (HSPA), Worldwide Interoperability for Microwave Access (WiMAX), Long Term Evolution (LTE) standard, others defined by various standard setting organizations, other short range or long range protocols, or other data transfer technology.

[0055] The PAC device 110 can include an e-ink display. The e-ink display can be configured to receive power from a power supply of the PAC device 110. The e-ink display can route energy or power from the power supply to each individual microcapsule of a plurality of microcapsules. The microcapsule can be energized to change a state of the particles to cause the microcapsule to appear black, white, or gray. After the power is removed or stops being supplied to the e-ink display, an image can continue to be perceived on the e-ink display based on the state in which each of the microcapsules were set last. A controller of the PAC device 110 and / or the e-ink display can control which microcapsules receive energy so that in combination the microcapsules appear to depict a particular image. In the case of generating or depicting an animation or video, the PAC device 110 temporarily and periodically powers on / off the e-ink display to periodically change the image depicted by the microcapsules incrementally to make the e-ink display appear to show an animation.

[0056] In some cases, the PAC device 110 can include a capacitive display or layer that is placed on top of a portion or the entirety of the e-ink display. The capacitive display or layer can be configured to detect touch input in order to map the touch input to certain functions or keys. The PAC device 110 can decode the positioning of the touch input to a corresponding function or key and can use that information to determine whether to grant / deny access to a user, such as based on a two-factor authentication protocol. The PAC device 110 can, in some cases, receive a credential from the client device 120. Then, after verifying that the credential is authorized to access the resource protected by the PAC device 110, the PAC device 110 can present a code on the e-ink display and detect interaction between the client device 120 and the code presented on the e-ink display. For example, the PAC device 110 can detect touch input that selects different regions of the capacitive display corresponding to the code. The PAC device 110 candetermine whether the touch input matches a sequence of alphanumeric characters represented by the code and can then grant / deny access to the protected resource based on this determination. In some cases, the PAC device 110 can instruct the e-ink display to present a keypad underneath the capacitive display. This helps the user understand where to touch the capacitive display to select buttons or keys corresponding to the code. This two layer / level of protection significantly enhances the level of security the PAC device 110 provides to access the protected resource.

[0057] In an example, as the client device 120 approaches the PAC device 110 (e.g., comes within range of a BLE communication protocol), the client device 120 transmits credentials of the client device 120 over the network 130. In one example, the client device 120 provides the credentials directly to the PAC device 110. In such cases, the PAC device 110 communicate the credentials to the server / controller. The server / controller (not shown) includes an authorization system (not shown). The server / controller, client device 120, and / or the PAC device 110 can further include elements described with respect to FIG. 4 and FIG. 5, such as a processor and memory, having instructions stored thereon, that when executed by the processor, causes the processor to control the functions of the server / controller, client device 120, and / or the PAC device 110.

[0058] The server / controller searches a list of credentials stored in the authorization system to determine whether the received credentials match credentials from the list of authorized credentials for accessing a secure asset or resource (e.g., door or secure area) protected by the PAC device 110. In response to determining that the received credentials are authorized to access the PAC device 110, the server / controller instructs the PAC device 110 to perform an operation granting access for the client device 120 (e.g., instructing the PAC device 110 to unlock a lock of a door).

[0059] In some examples, prior to granting access to the resource protected by the PAC device 110, the PAC device 110, and / or the server / controller, and / or the client device 120 can perform operations to verify that the client device 120 is within a specified distance of the client device 120. This can be performed before, substantially simultaneous with, and / or after verifying that the credentials received from the client device 120 are authorized to access the asset or resource.

[0060] Specifically, the client device 120 can scan BLE signals (or other suitable signals) transmitted by the PAC device 110 over the network 130. The client device 120can determine whether the BLE signals of a particular PAC device 110 satisfy a proximity threshold or criterion. In response, the client device 120 establishes a communication session (via BLE and / or WiFi) with the PAC device 110. The PAC device 110 can, either before verifying proximity or after verifying proximity, request additional information from the client device 120. Specifically, the PAC device 110 can request a credential to be provided by the client device 120.

[0061] In some examples, the proximity between the client device 120 and the PAC device 110 can be determined by an interaction the client device 120 performs with respect to a visual code presented on the e-ink display of the PAC device 110. The client device 120 can scan a quick-reference (QR) code presented on the e-ink display to then access a link represented by the QR code. If the link is accessed within a specified threshold period of time, the PAC device 110 determines that the client device 120 satisfies the proximity threshold. In some cases, the PAC device 110 presents a visual code (e.g., drawing, pattern, sequence of digits) on the e-ink display and determines whether the visual code is physically input, via a capacitive touch-screen or display of the PAC device 110, within a threshold period of time. In such cases, the PAC device 110 determines that the client device 120 satisfies the proximity threshold.

[0062] FIG. 2 illustrates a diagram 202 of an environment for accessing a secure resource, in accordance with some examples. For example, as shown in the diagram 202, an access control device 204 (e.g., the PAC device 110) can include an e-ink display 206 and an outer panel 214. The access control device 204 can dynamically update information presented on the e-ink display 206 and / or the outer panel 214 based on various criteria.

[0063] The access control device 204 is designed to access a set of data to configure the e-ink display 206. It generates an image based on this data, powers on the display, and programs it to present the image. Notably, the e-ink display maintains the image even after being powered off, showcasing its energy efficiency. The e-ink display 206 can be configured to show visual representations of the location, such as logos or branding elements, enhancing the device's integration into its surroundings. This adaptability allows the device to align with the aesthetic and branding requirements of the venue.

[0064] For example, the access control device 204 can receive, from an administrator, configuration information that specifies various conditions for modifying information that is presented by the e-ink display 206 and that specifies which images or animationsto present when each condition is met. In some cases, the access control device 204 can store a default image, such as a logo or picture of an environment in which the access control device 204 is physically installed or placed. The access control device 204 can instruct the e-ink display 206 to, by default, present the default image. In such cases, the e-ink display 206 can present the default image and then be powered off. The access control device 204 can receive a set of data associated with a new image to display on the e-ink display 206 (e.g., the access control device 204 can receive a credential from a user and identify an image or animation associated with that credential). In such cases, the access control device 204 temporarily powers on the e-ink display 206, updates the image in the e-ink display 206 to display the new image, and then powers off the e-ink display 206. The access control device 204 can activate a timer and when the timer reaches a threshold (e.g., 45 seconds), the access control device 204 automatically temporarily powers on the e-ink display 206, updates the image in the e-ink display 206 to display the default image, and then powers off the e-ink display 206.

[0065] For example, the access control device 204 can store in a database or memory mappings between different credentials and user supplied or selected images / animations. When a specific credential is received that matches the list of credentials in the database, the access control device 204 retrieves the selected image and instructs the e-ink display 206 to temporarily display that selected image before returning to displaying the default image. This way, different users can have different customized images presented when the users approach the access control device 204 (within a threshold proximity). In some cases, the access control device 204 can determine whether the credential received from the client device 120 is authorized to access a protected resource of the access control device 204. If so, the access control device 204 instructs the e-ink display 206 to present a customized image 208 associated with the credential and to indicate that access to the protected resource is granted. In response to determining that the credential is unauthorized to access the protected resource, the access control device 204 instructs the e-ink display 206 to temporarily present a message indicating access is unauthorized and prevented. The access control device 204 can provide interactive feedback through subtle animations or color changes when a user successfully gains access. For example, a green glow or a cheerful animation can confirm successful access, while a red animation can indicate an error or denied access.

[0066] Users can have the option to customize the animations and messages displayed on their access control reader. This could include selecting their favorite colors, animation styles, or even personal greetings, leading to a more tailored experience. The customized image 208 can be presented in a way that is eye-catching, such as by sliding, fading, or having a dynamic pattern that replaces the default image of the e-ink display 206. The e-ink display 206 can be designed with interchangeable covers or skins, allowing organizations to change the reader's color, texture, and design to match their branding or aesthetic preferences. Users can select from a variety of themes or colors, creating a unique look for different environments.

[0067] The access control device 204 can also modify the displayed image based on specific conditions, such as time of day or events, ensuring that relevant and timely information is presented to users. This includes real-time updates like event information or scores, providing users with current data. A library of animations can be pre-loaded into the e-ink display 206, allowing administrators to choose different animations for specific users or events. This could include celebratory animations for birthdays or special achievements, making the access experience more personal and enjoyable. For example, the e-ink display 206 can be programmed to change its appearance and animations based on seasons or holidays. For instance, it could display festive animations during the holiday season, enhancing the overall atmosphere of the environment. In such cases, the access control device 204 can monitor the current time or time of day. The access control device 204 can determine whether the current time or time of day matches a specified condition (e.g., the access control device 204 can determine that the current time is associated with a particular event, holiday, season, birthday, and so forth). In such cases, the access control device 204 can retrieve the customized image 208 associated with the specified condition and instruct the e-ink display 206 to present the customized image 208 as the default image for a specified period of time (e.g., until the next specified condition is met).

[0068] The outer panel 214 can include a separate or same e-ink display as the e-ink display 206. The outer panel 214 can be independently controlled relative to the e-ink display 206 to present various information and customizations. The outer panel 214 can change colors based on a user's preferences. This way, the access control device 204, the outer panel 214, and / or the e-ink display 206 in combination enable greater customization of the reader panel's appearance. Users could modify themes or displaypatterns according to their needs or preferences, such as updating the look for festive seasons like Christmas, Organisation theme colours. This feature adds a dynamic and visually engaging element to the overall design.

[0069] Communication with a mobile device is another key feature, allowing the device to receive credentials and display access-related information. The e-ink display 206 can show messages like access granted or denied, animations, or personalized greetings, thereby enhancing user interaction. For authentication purposes, the access control device 204 can generate and present codes on the e-ink display 206, such as QR codes or patterns, enabling secure user interaction with the display.

[0070] Additionally, the device can capture images or gestures using an integrated camera, enhancing security and user engagement. The dynamic nature of the e-ink display allows it to change over time, providing updated information or animations as needed. The e-ink display 206 can display the gesture performed by the user, such as a wave or a specific hand movement, enhancing the interactivity of the system. This feature can serve as a visual confirmation of the action taken, making the access process more intuitive and engaging. For example, the access control device 204 can capture an image of a hand or user in front of the access control device 204 using a camera of the access control device 204. The access control device 204 can identify a gesture performed by the hand and can instruct the e-ink display 206 to present an image that mimics or looks like the gesture that is captured in the image.

[0071] In some cases, the access control device 204 determines that the credential received from the client device 120 corresponds to a visual impairment. In such cases, the access control device 204 can modify the default size of text or images presented by the e-ink display 206 to increase the size of the text or images. For example, the e-ink display 206 can present an image that includes a keypad with a larger set of keys than those presented by default. The access control device 204 can then detect input via a touch screen that is overlaid on the e-ink display 206 to determine whether the input matches a code 210 presented by the e-ink display 206 as a multi -factor or two-factor authentication. If the input matches the code 210, the access control device 204 can then grant access to the protected resource assuming that the credential is authorized to access that resource.

[0072] The access control device 204 can be equipped with a network interface that allows it to receive data updates from a remote server or a local network. Thisconnectivity ensures that the device 204 can access the latest score information (e.g., of a sporting event) as it becomes available. Upon receiving the score data, the hardware processors of the access control device 204 execute instructions stored in the machinestorage medium to process and format the data for display. This involves converting the raw data into a visual representation that can be rendered on the e-ink display 206. The formatting process takes into account the display's resolution and contrast capabilities to ensure optimal readability.

[0073] The e-ink display 206 is then powered on, and the formatted score data is programmed into the display. The bistable nature of the e-ink technology allows the e- ink display 206 to maintain the image without continuous power, making it an energyefficient solution for real-time updates. This feature is particularly advantageous in environments where power conservation is important. To ensure that the scores are updated in real-time, the access control device 204 periodically checks for new data. This can be achieved through scheduled polling of the server or by receiving push notifications when new scores are available. The software architecture of the access control device 204 supports these communication protocols, enabling seamless data updates.

[0074] In addition to displaying scores, the access control device 204 can be configured to present additional information, such as team logos or event details, alongside the scores. This customization is facilitated by the ability of the access control device 204 to access and process various data types, enhancing the user experience by providing a comprehensive view of the event.

[0075] The access control device 204 can be equipped with a network interface that allows it to receive data updates from a hospital management system. This connectivity ensures that the access control device 204 can access the latest room information as it becomes available. Upon receiving the room data, the hardware processors of the access control device 204 execute instructions stored in the machine-storage medium to process and format the data for display. This involves converting the raw data into a visual representation that can be rendered on the e-ink display 206. The formatting process takes into account the display's resolution and contrast capabilities to ensure optimal readability. The e-ink display 206 is then powered on, and the formatted room data is programmed into the display. To ensure that the room information is updated in realtime, the access control device 204 periodically checks for new data. This can beachieved through scheduled polling of the hospital management system or by receiving push notifications when updates are available. The device 204's software architecture supports these communication protocols, enabling seamless data updates.

[0076] In addition to displaying room information, the system can be configured to present additional details, such as patient names or care instructions, alongside the room number. This customization is facilitated by the ability of the access control device 204 to access and process various data types, enhancing the user experience by providing comprehensive and relevant information.

[0077] The access control device 204 can be equipped with a network interface that allows it to receive data updates from a scheduling system. This connectivity ensures that the access control device 204 can access the latest meeting room information as it becomes available. Upon receiving the meeting data, the hardware processors of the access control device 204 execute instructions stored in the machine-storage medium to process and format the data for display. This involves converting the raw data into a visual representation that can be rendered on the e-ink display 206. The formatting process takes into account the display's resolution and contrast capabilities to ensure optimal readability. The e-ink display 206 is then powered on, and the formatted meeting data is programmed into the display. To ensure that the meeting room information is updated in real-time, the access control device 204 periodically checks for new data.This can be achieved through scheduled polling of the scheduling system or by receiving push notifications when updates are available. The software architecture of the access control device 204 supports these communication protocols, enabling seamless data updates.

[0078] For example, the e-ink display 206 can show the current meeting title, organizer's name, and start and end times. It can also display additional details such as the agenda or a welcome message for attendees. This customization is facilitated by the ability of the access control device 204 to access and process various data types, enhancing the user experience by providing comprehensive and relevant information.

[0079] FIG. 3 illustrates a routine 300 (e.g., method or process) in accordance with some examples. The operations discussed in connection with FIG. 3 can be performed sequentially, in parallel, and in any suitable order. The operations discussed in FIG. 3 can be performed by the access control system 100.

[0080] In operation 302, the PAC device 110 accesses a set of data associated with configuration of an electronic ink (e-ink) display of the PAC device 110 (e.g., the access control device), as discussed above.

[0081] In operation 304, the PAC device 110 generates an image based on the set of data, as discussed above.

[0082] In operation 306, the PAC device 110 powers on the e-ink display in response to receiving the set of data, as discussed above.

[0083] In operation 308, the PAC device 110, after powering on the e-ink display, programs the e-ink display to present the generated image, as discussed above.

[0084] In operation 312, the PAC device 110 powers off the e-ink display after programming the e-ink display, the e-ink display continuing to present the generated image after being powered off, as discussed above.

[0085] FIG. 4 is a block diagram illustrating an example of a software architecture 402 that may be installed on a machine, according to some examples. FIG. 4 is merely a nonlimiting example of a software architecture, and it will be appreciated that many other architectures may be implemented to facilitate the functionality described herein. The software architecture 402 may be executing on hardware such as a machine 500 of FIG.5 that includes, among other things, processors 510, memory 504, and input / output (I / O) components 542. A representative hardware layer 444 is illustrated and can represent, for example, the machine 500 of FIG. 5. The representative hardware layer 444 comprises one or more processing units 446 having associated executable instructions 448. The executable instructions 448 represent the executable instructions of the software architecture 402. The hardware layer 444 also includes memory 504, which also have the executable instructions 448. The hardware layer 444 may also comprise other hardware 452, which represents any other hardware of the hardware layer 444, such as the other hardware illustrated as part of the machine 500.

[0086] The instructions 448 may be transmitted or received over the network using a transmission medium via a network interface device (e.g., a network interface component included in the communication components 540) and utilizing any one of a number of well-known transfer protocols (e.g., hypertext transfer protocol (HTTP)). Similarly, the instructions 448 may be transmitted or received using a transmission medium via the coupling (e.g., a peer-to-peer coupling) to the devices. The terms “transmission medium” and “signal medium” mean the same thing and may be usedinterchangeably in this disclosure. The terms “transmission medium” and “signal medium” shall be taken to include any intangible medium that is capable of storing, encoding, or carrying the instructions 448 for execution by the machine 500, and include digital or analog communications signals or other intangible media to facilitate communication of such software. Hence, the terms “transmission medium” and “signal medium” shall be taken to include any form of modulated data signal, carrier wave, and so forth. The term “modulated data signal” means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal.

[0087] The terms “machine-readable medium,” “computer-readable medium,” and “device-readable medium” mean the same thing and may be used interchangeably in this disclosure. The terms are defined to include both machine-storage media and transmission media. Thus, the terms include both storage devices / media and carrier waves / modulated data signals.

[0088] As used herein, the terms “machine-storage medium,” “device-storage medium,” and “computer-storage medium” mean the same thing and may be used interchangeably in this disclosure. The terms refer to a single or multiple storage devices and / or media (e.g., a centralized or distributed database, and / or associated caches and servers) that store executable instructions and / or data. The terms shall accordingly be taken to include, but not be limited to, solid-state memories, and optical and magnetic media, including memory internal or external to processors. Specific examples of machinestorage media, computer-storage media, and / or device-storage media include nonvolatile memory, including by way of example semiconductor memory devices, e.g., erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), field-programmable gate arrays (FPGAs), and flash memory devices; magnetic disks such as internal hard disks and removable disks; magneto-optical disks; and CD-ROM and DVD-ROM disks. The terms “machinestorage medium,” “computer-storage medium,” and “device-storage medium” are non- transitory computer-readable media and specifically exclude carrier waves, modulated data signals, and other such media, at least some of which are covered under the term “signal medium.”

[0089] In the example architecture of FIG. 4, the software architecture 402 may be conceptualized as a stack of layers, where each layer provides particular functionality. For example, the software architecture 402 may include layers such as an operating system436, libraries 428, framework / middl eware 422, applications 416, and a presentation layer 414. Operationally, the applications 416 or other components within the layers may invoke application programming interface (API) calls API calls 424 through the software stack and receive a response, returned values, and so forth (illustrated as messages 426) in response to the API calls 424. The layers illustrated are representative in nature, and not all software architectures have all layers. For example, some mobile or special-purpose operating systems may not provide a framework / middleware 422 layer, while others may provide such a layer. Other software architectures may include additional or different layers.

[0090] The operating system 436 may manage hardware resources and provide common services. The operating system 436 may include, for example, a kernel 438, services 440, and drivers 442. The kernel 438 may act as an abstraction layer between the hardware and the other software layers. For example, the kernel 438 may be responsible for memory management, processor management (e.g., scheduling), component management, networking, security settings, and so on. The services 440 may provide other common services for the other software layers. The drivers 442 may be responsible for controlling or interfacing with the underlying hardware. For instance, the drivers 442 may include display drivers, camera drivers, Bluetooth® drivers, flash memory drivers, serial communication drivers (e.g., Universal Serial Bus (USB) drivers), Wi-Fi® drivers, audio drivers, power management drivers, and so forth depending on the hardware configuration.

[0091] The libraries 428 may provide a common infrastructure that may be utilized by the applications 416 and / or other components and / or layers. The libraries 428 typically provide functionality that allows other software modules to perform tasks in an easier fashion than by interfacing directly with the underlying operating system 436 functionality (e.g., kernel 438, services 440, or drivers 442). The libraries 428 may include system libraries 430 (e.g., C standard library) that may provide functions such as memory allocation functions, string manipulation functions, mathematic functions, and the like. In addition, the libraries 428 may include API libraries 432 such as media libraries (e.g., libraries to support presentation and manipulation of various media formats such as MPEG4, H.264, MP3, AAC, AMR, JPG, and PNG), graphics libraries (e.g., an OpenGL framework that may be used to render 2D and 3D graphic content on a display), database libraries (e.g., SQLite that may provide various relational database functions), web libraries (e.g., WebKit that may provide web browsing functionality), and the like. Thelibraries 428 may also include a wide variety of other libraries 434 to provide many other APIs to the applications 416 and other software components / modules.

[0092] The frameworks / middleware 422 (also sometimes referred to as middleware) may provide a higher-level common infrastructure that may be utilized by the applications 416 or other software components / modules. For example, the frameworks / middleware 422 may provide various graphical user interface functions, high-level resource management, high-level location services, and so forth. The frameworks / middleware 422 may provide a broad spectrum of other APIs that may be utilized by the applications 416 and / or other software components / modules, some of which may be specific to a particular operating system or platform.

[0093] The applications 416 include built-in applications 418 and / or third-party applications 420. Examples of representative built-in applications 418 may include, but are not limited to, a home application, a contacts application, a browser application, a book reader application, a location application, a media application, a messaging application, or a game application.

[0094] The third-party applications 420 may include any of the built-in applications 418, as well as a broad assortment of other applications. In a specific example, the third-party applications 420 (e.g., an application developed using the Android™ or iOS™ software development kit (SDK) by an entity other than the vendor of the particular platform) may be mobile software running on a mobile operating system such as iOS™, Android™, or other mobile operating systems. In this example, the third-party applications 420 may invoke the API calls 424 provided by the mobile operating system such as the operating system 436 to facilitate functionality described herein.

[0095] The applications 416 may utilize built-in operating system functions (e.g., kernel 438, services 440, or drivers 442), libraries (e.g., system libraries 430, API libraries 432, and other libraries 434), or framework / middleware 422 to create user interfaces to interact with users of the system. Alternatively, or additionally, in some systems, interactions with a user may occur through a presentation layer, such as the presentation layer 414. In these systems, the application / module “logic” can be separated from the aspects of the application / module that interact with the user.

[0096] Some software architectures utilize virtual machines. In the example of FIG. 4, this is illustrated by a virtual machine 404. The virtual machine 404 creates a software environment where applications / modules can execute as if they were executing on ahardware machine (e.g., the machine 500 of FIG. 5). The virtual machine 404 is hosted by a host operating system (e.g., the operating system 436) and typically, although not always, has a virtual machine monitor, which manages the operation of the virtual machine 404 as well as the interface with the host operating system (e.g., the operating system 436). A software architecture executes within the virtual machine 404, such as an operating system 412, libraries 410, frameworks 408, applications 416, or a presentation layer 406. These layers of software architecture executing within the virtual machine 404 can be the same as corresponding layers previously described or may be different.

[0097] FIG. 5 is a diagrammatic representation of the machine 500 within which instructions 508 (e.g., software, a program, an application, an applet, an app, or other executable code) for causing the machine 500 to perform any one or more of the methodologies discussed herein may be executed. For example, the instructions 508 may cause the machine 500 to execute any one or more of the methods described herein. The instructions 508 transform the general, non-programmed machine 500 into a particular machine 500 programmed to carry out the described and illustrated functions in the manner described. The machine 500 may operate as a standalone device or may be coupled (e.g., networked) to other machines. In a networked deployment, the machine 500 may operate in the capacity of a server machine or a client machine in a server-client network environment, or as a peer machine in a peer-to-peer (or distributed) network environment. The machine 500 may comprise, but not be limited to, a server computer, a client computer, a personal computer (PC), a tablet computer, a laptop computer, a netbook, a set-top box (STB), a PDA, an entertainment media system, a cellular telephone, a smart phone, a mobile device, a wearable device (e.g., a smart watch), a smart home device (e.g., a smart appliance), other smart devices, a web appliance, a network router, a network switch, a network bridge, or any machine capable of executing the instructions 508, sequentially or otherwise, that specify actions to be taken by the machine 500. Further, while only a single machine 500 is illustrated, the term “machine” shall also be taken to include a collection of machines that individually or jointly execute the instructions 508 to perform any one or more of the methodologies discussed herein.

[0098] The machine 500 may include processors 502, memory 504, and I / O components 542, which may be configured to communicate with each other via a bus 544. In an example, the processors 502 (e.g., a Central Processing Unit (CPU), a Reduced Instruction Set Computing (RISC) processor, a Complex Instruction SetComputing (CISC) processor, a Graphics Processing Unit (GPU), a Digital Signal Processor (DSP), an ASIC, a Radio-Frequency Integrated Circuit (RFIC), another processor, or any suitable combination thereof) may include, for example, a processor 506 and a processor 510 that execute the instructions 508. The term “processor” is intended to include multi-core processors that may comprise two or more independent processors (sometimes referred to as “cores”) that may execute instructions contemporaneously. Although FIG. 5 shows multiple processors 502, the machine 500 may include a single processor with a single core, a single processor with multiple cores (e.g., a multi-core processor), multiple processors with a single core, multiple processors with multiples cores, or any combination thereof.

[0099] The memory 504 includes a main memory 512, a static memory 514, and a storage unit 516, both accessible to the processors 502 via the bus 544. The main memory 504, the static memory 514, and storage unit 516 store the instructions 508 embodying any one or more of the methodologies or functions described herein. The instructions 508 may also reside, completely or partially, within the main memory 512, within the static memory 514, within machine-readable medium 518 within the storage unit 516, within at least one of the processors 502 (e.g., within the processor’s cache memory), or any suitable combination thereof, during execution thereof by the machine 500.

[0100] The I / O components 542 may include a wide variety of components to receive input, provide output, produce output, transmit information, exchange information, capture measurements, and so on. The specific I / O components 542 that are included in a particular machine will depend on the type of machine. For example, portable machines such as mobile phones may include a touch input device or other such input mechanisms, while a headless server machine will likely not include such a touch input device. It will be appreciated that the I / O components 542 may include many other components that are not shown in FIG. 5. In various examples, the I / O components 542 may include output components 528 and input components 530. The output components 528 may include visual components (e.g., a display such as a plasma display panel (PDP), a light emitting diode (LED) display, a liquid crystal display (LCD), a projector, or a cathode ray tube (CRT)), acoustic components (e.g., speakers), haptic components (e.g., a vibratory motor, resistance mechanisms), other signal generators, and so forth. The input components 530 may include alphanumeric input components (e.g., a keyboard, atouch screen configured to receive alphanumeric input, a photo-optical keyboard, or other alphanumeric input components), point-based input components (e.g., a mouse, a touchpad, a trackball, a joystick, a motion sensor, or another pointing instrument), tactile input components (e.g., a physical button, a touch screen that provides location and / or force of touches or touch gestures, or other tactile input components), audio input components (e.g., a microphone), and the like.

[0101] In further examples, the I / O components 542 may include biometric components 532, motion components 534, environmental components 536, or position components 538, among a wide array of other components. For example, the biometric components 532 include components to detect expressions (e.g., hand expressions, facial expressions, vocal expressions, body gestures, or eye tracking), measure biosignals (e.g., blood pressure, heart rate, body temperature, perspiration, or brain waves), identify a person (e.g., voice identification, retinal identification, facial identification, fingerprint identification, or electroencephalogram-based identification), and the like. The motion components 534 include acceleration sensor components (e.g., accelerometer), gravitation sensor components, rotation sensor components (e.g., gyroscope), and so forth. The environmental components 536 include, for example, illumination sensor components (e.g., photometer), temperature sensor components (e.g., one or more thermometers that detect ambient temperature), humidity sensor components, pressure sensor components (e.g., barometer), acoustic sensor components (e.g., one or more microphones that detect background noise), proximity sensor components (e.g., infrared sensors that detect nearby objects), gas sensors (e.g., gas detection sensors to detection concentrations of hazardous gases for safety or to measure pollutants in the atmosphere), or other components that may provide indications, measurements, or signals corresponding to a surrounding physical environment. The position components 538 include location sensor components (e.g., a GPS receiver component), altitude sensor components (e.g., altimeters or barometers that detect air pressure from which altitude may be derived), orientation sensor components (e.g., magnetometers), and the like.

[0102] Communication may be implemented using a wide variety of technologies. The I / O components 542 further include communication components 540 operable to couple the machine 500 to a network 520 or devices 522 via a coupling 524 and a coupling 526, respectively. For example, the communication components 540 may include a networkinterface component or another suitable device to interface with the network 520. In further examples, the communication components 540 may include wired communication components, wireless communication components, cellular communication components, Near Field Communication (NFC) components, Bluetooth® components (e.g., Bluetooth® Low Energy), Wi-Fi® components, and other communication components to provide communication via other modalities. The devices 522 may be another machine or any of a wide variety of peripheral devices (e.g., a peripheral device coupled via a USB).

[0103] Moreover, the communication components 540 may detect identifiers or include components operable to detect identifiers. For example, the communication components 540 may include Radio Frequency Identification (RFID) tag reader components, NFC smart tag detection components, optical reader components (e.g., an optical sensor to detect one-dimensional bar codes such as Universal Product Code (UPC) bar code, multi-dimensional bar codes such as Quick Response (QR) code, Aztec code, Data Matrix, Dataglyph, MaxiCode, PDF417, Ultra Code, UCC RSS-2D bar code, and other optical codes), or acoustic detection components (e.g., microphones to identify tagged audio signals). In addition, a variety of information may be derived via the communication components 540, such as location via Internet Protocol (IP) geolocation, location via Wi-Fi® signal triangulation, location via detecting an NFC beacon signal that may indicate a particular location, and so forth.

[0104] The various memories (e.g., memory 504, main memory 512, static memory 514, and / or memory of the processors 502) and / or storage unit 516 may store one or more sets of instructions and data structures (e.g., software) embodying or used by any one or more of the methodologies or functions described herein. These instructions (e.g., the instructions 508), when executed by processors 502, cause various operations to implement the disclosed examples.

[0105] The instructions 508 may be transmitted or received over the network 520, using a transmission medium, via a network interface device (e.g., a network interface component included in the communication components 540) and using any one of a number of well-known transfer protocols (e.g., hypertext transfer protocol (HTTP)). Similarly, the instructions 508 may be transmitted or received using a transmission medium via the coupling 526 (e.g., a peer-to-peer coupling) to the devices 522.

[0106] Although examples have been described, it will be evident that various modifications and changes may be made to these examples without departing from the broader scope of the present disclosure. Accordingly, the specification and drawings are to be regarded in an illustrative rather than a restrictive sense. The accompanying drawings that form a part hereof, show by way of illustration, and not of limitation, specific examples in which the subject matter may be practiced. The examples illustrated are described in sufficient detail to enable those skilled in the art to practice the teachings disclosed herein. Other examples may be utilized and derived therefrom, such that structural and logical substitutions and changes may be made without departing from the scope of this disclosure. This Detailed Description, therefore, is not to be taken in a limiting sense, and the scope of various examples is defined only by the appended claims, along with the full range of equivalents to which such claims are entitled.

[0107] Such examples of the inventive subject matter may be referred to herein, individually and / or collectively, by the term "invention" merely for convenience and without intending to voluntarily limit the scope of this application to any single invention or inventive concept if more than one is in fact disclosed. Thus, although specific examples have been illustrated and described herein, it should be appreciated that any arrangement calculated to achieve the same purpose may be substituted for the specific examples shown. This disclosure is intended to cover any and all adaptations or variations of various examples. Combinations of the above examples, and other examples not specifically described herein, will be apparent to those of skill in the art upon reviewing the above description.

[0108] The Abstract of the Disclosure is provided to allow the reader to quickly ascertain the nature of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims. In addition, in the foregoing Detailed Description, it can be seen that various features are grouped together in a single example for the purpose of streamlining the disclosure. This method of disclosure is not to be interpreted as reflecting an intention that the claimed examples require more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive subject matter lies in less than all features of a single disclosed example. Thus the following claims are hereby incorporated into the Detailed Description, with each claim standing on its own as a separate example.

[0109] In view of the disclosure above, various examples are set forth below. It should be noted that one or more features of an example, taken in isolation or combination, should be considered within the disclosure of this application.

[0110] Example 1. A system comprising: one or more hardware processors; and at least one machine-storage medium for storing instructions that, when executed by the one or more hardware processors, cause the one or more hardware processors to perform operations comprising: accessing, by an access control device, a set of data associated with configuration of an electronic ink (e-ink) display of the access control device; generating an image based on the set of data; powering on the e-ink display in response to receiving the set of data; after powering on the e-ink display of the access control device, programming the e-ink display to present the generated image; and powering off the e-ink display of the access control device after programming the e-ink display, the e- ink display continuing to present the generated image after being powered off.

[0111] Example 2. The system of Example 1, wherein the operations comprise: receiving, from an administrator of the access control device, as the set of data a visual representation of a location at which the access control device is installed.

[0112] Example 3. The system of Example 2, wherein the visual representation comprises a logo of a venue at the location.

[0113] Example 4. The system of any one of Examples 1-3, wherein the operations comprise: determining a time of day, time of year, season, or event information based on a current time; identifying the image corresponding to the determined time of day, time of year, season, or event information; and generating the image using the identified image.

[0114] Example 5. The system of any one of Examples 1-4, wherein the operations comprise: determining that a current time corresponds to a specified condition associated with modifying the e-ink display; in response to determining that the current time corresponds to the specified condition, selecting the image based on the current time; and powering on the e-ink display in response to determining that the current time corresponds to the specified condition for programming the e-ink display.

[0115] Example 6. The system of Example 5, wherein the specified condition corresponds to an event, an updated score that is presented on the e-ink display, room information, a specified season, a specified holiday, health information, facility information, or a timer.

[0116] Example 7. The system of any one of Examples 1-6, wherein the operations comprise: establishing a communication session between the access control device and a mobile device; receiving, as the set of data, a credential from the mobile device; and obtaining, as the generated image, a visual representation associated with the credential.

[0117] Example 8. The system of Example 7, wherein the operations comprise: determining whether to grant access to a protected resource based on the credential; and selecting, as the visual representation, access granted or access denied information in response to determining whether to grant access to the protected resource based on the credential, the access granted or access denied information being displayed by the e-ink display for a threshold period of time.

[0118] Example 9. The system of Example 8, wherein the operations comprise: after the threshold period of time elapses, re-powering the e-ink display to re-present a default image.

[0119] Example 10. The system of any one of Examples 7-9, wherein the visual representation comprises an animation associated with a user of the mobile device, a name of the user of the mobile device, a greeting for the user, or picture of the user of the mobile device.

[0120] Example 11. The system of Example 10, wherein the operations comprise: selecting a text size for information presented by the e-ink display based on the credential.

[0121] Example 12. The system of any one of Examples 7-11, wherein the operations comprise: generating, as the visual representation, a code; presenting the code on the e- ink display; and determining that an interaction of the mobile device based on the code satisfies an access criterion.

[0122] Example 13. The system of Example 12, wherein the operations comprise: causing the mobile device to scan the code presented on the e-ink display; causing the mobile device to access a link associated with the code in response to scanning the code; and authenticating the mobile device in response to the link being accessed by the mobile device, wherein the access control device grants access to a protected resource in response to receiving the credential and in response to authenticating the mobile device in response to the link being accessed by the mobile device.

[0123] Example 14. The system of any one of Examples 12-13, wherein the operations comprise: receiving input, via a capacitive keypad overlaid on the e-ink display, theinput comprising a set of keys corresponding to the code presented on the e-ink display; determining that the input corresponds to the code; and authenticating the mobile device in response to determining that the input corresponds to the code, wherein the access control device grants access to a protected resource determining that the input corresponds to the code presented on the e-ink display.

[0124] Example 15. The system of any one of Examples 12-14, wherein the code comprises at least one of a quick reference (QR) code, a text pattern, a drawing pattern, or a sequence of alphanumeric characters.

[0125] Example 16. The system of any one of Examples 1-15, wherein the operations comprise: capturing, as the set of data, an image of a body part of a user in front of the access control device using a camera of the access control device; and generating, as the image, a representation of a gesture performed by the body part.

[0126] Example 17. The system of any one of Examples 1-16, wherein the image corresponds to an environment in which the access control device is physically installed.

[0127] Example 18. The system of any one of Examples 1-17, wherein the image displayed on the e-ink display dynamically changes over time.

[0128] Example 19. A method comprising: accessing, by an access control device, a set of data associated with configuration of an electronic ink (e-ink) display of the access control device; generating an image based on the set of data; powering on the e-ink display in response to receiving the set of data; after powering on the e-ink display of the access control device, programming the e-ink display to present the generated image; and powering off the e-ink display of the access control device after programming the e- ink display, the e-ink display continuing to present the generated image after being powered off.

[0129] Example 20. A machine-storage medium for storing instructions that, when executed by one or more hardware processors, cause the one or more hardware processors to perform operations comprising: accessing, by an access control device, a set of data associated with configuration of an electronic ink (e-ink) display of the access control device; generating an image based on the set of data; powering on the e-ink display in response to receiving the set of data; after powering on the e-ink display of the access control device, programming the e-ink display to present the generated image; and powering off the e-ink display of the access control device after programming the e-ink display, the e-ink display continuing to present the generated image after being powered off.

Claims

CLAIMSWhat is claimed is:

1. A system comprising: one or more hardware processors; and at least one machine-storage medium for storing instructions that, when executed by the one or more hardware processors, cause the one or more hardware processors to perform operations comprising: accessing, by an access control device, a set of data associated with configuration of an electronic ink (e-ink) display of the access control device; generating an image based on the set of data; powering on the e-ink display in response to receiving the set of data; after powering on the e-ink display of the access control device, programming the e-ink display to present the generated image; and powering off the e-ink display of the access control device after programming the e-ink display, the e-ink display continuing to present the generated image after being powered off.

2. The system of claim 1, wherein the operations comprise: receiving, from an administrator of the access control device, as the set of data a visual representation of a location at which the access control device is installed.

3. The system of claim 2, wherein the visual representation comprises a logo of a venue at the location.

4. The system of claim 1, wherein the operations comprise: determining a time of day, time of year, season, or event information based on a current time; identifying the image corresponding to the determined time of day, time of year, season, or event information; and generating the image using the identified image.

5. The system of claim 1, wherein the operations comprise: determining that a current time corresponds to a specified condition associated with modifying the e-ink display;in response to determining that the current time corresponds to the specified condition, selecting the image based on the current time; and powering on the e-ink display in response to determining that the current time corresponds to the specified condition for programming the e-ink display.

6. The system of claim 5, wherein the specified condition corresponds to an event, an updated score that is presented on the e-ink display, room information, a specified season, a specified holiday, health information, facility information, or a timer.

7. The system of claim 1, wherein the operations comprise: establishing a communication session between the access control device and a mobile device; receiving, as the set of data, a credential from the mobile device; and obtaining, as the generated image, a visual representation associated with the credential.

8. The system of claim 7, wherein the operations comprise: determining whether to grant access to a protected resource based on the credential; and selecting, as the visual representation, access granted or access denied information in response to determining whether to grant access to the protected resource based on the credential, the access granted or access denied information being displayed by the e-ink display for a threshold period of time.

9. The system of claim 8, wherein the operations comprise: after the threshold period of time elapses, re-powering the e-ink display to represent a default image.

10. The system of claim 7, wherein the visual representation comprises an animation associated with a user of the mobile device, a name of the user of the mobile device, a greeting for the user, or picture of the user of the mobile device.

11. The system of claim 10, wherein the operations comprise: selecting a text size for information presented by the e-ink display based on the credential.

12. The system of claim 7, wherein the operations comprise: generating, as the visual representation, a code; presenting the code on the e-ink display; and determining that an interaction of the mobile device based on the code satisfies an access criterion.

13. The system of claim 12, wherein the operations comprise: causing the mobile device to scan the code presented on the e-ink display; causing the mobile device to access a link associated with the code in response to scanning the code; and authenticating the mobile device in response to the link being accessed by the mobile device, wherein the access control device grants access to a protected resource in response to receiving the credential and in response to authenticating the mobile device in response to the link being accessed by the mobile device.

14. The system of claim 12, wherein the operations comprise: receiving input, via a capacitive keypad overlaid on the e-ink display, the input comprising a set of keys corresponding to the code presented on the e-ink display; determining that the input corresponds to the code; and authenticating the mobile device in response to determining that the input corresponds to the code, wherein the access control device grants access to a protected resource after determining that the input corresponds to the code presented on the e-ink display.

15. The system of claim 12, wherein the code comprises at least one of a quick reference (QR) code, a text pattern, a drawing pattern, or a sequence of alphanumeric characters.

16. The system of claim 1, wherein the operations comprise: capturing, as the set of data, an image of a body part of a user in front of the access control device using a camera of the access control device; and generating, as the image, a representation of a gesture performed by the body part.

17. The system of claim 1, wherein the image corresponds to an environment in which the access control device is physically installed.

18. The system of claim 1, wherein the image displayed on the e-ink display dynamically changes over time.

19. A method comprising: accessing, by an access control device, a set of data associated with configuration of an electronic ink (e-ink) display of the access control device; generating an image based on the set of data; powering on the e-ink display in response to receiving the set of data; after powering on the e-ink display of the access control device, programming the e-ink display to present the generated image; and powering off the e-ink display of the access control device after programming the e-ink display, the e-ink display continuing to present the generated image after being powered off.

20. A machine-storage medium for storing instructions that, when executed by one or more hardware processors, cause the one or more hardware processors to perform operations comprising: accessing, by an access control device, a set of data associated with configuration of an electronic ink (e-ink) display of the access control device; generating an image based on the set of data; powering on the e-ink display in response to receiving the set of data; after powering on the e-ink display of the access control device, programming the e-ink display to present the generated image; and powering off the e-ink display of the access control device after programming the e-ink display, the e-ink display continuing to present the generated image after being powered off.

Images