Access Control Authentication Queues for Reusable BLE Connections
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Access control systems using longer-range wireless technologies like BLE face limitations in maintaining simultaneous connections, leading to deadlocks and high costs with high-end modules, especially in scenarios with multiple users attempting access to restricted areas.
Innovation Solution
Implementing a method where mobile devices establish a connection, authenticate, and are added to an authenticated devices queue with a reconnection parameter, then disconnect, allowing reuse of connections by others, combined with facial recognition or intent detection to verify user presence and intent.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the access control system maintains simultaneous connections with multiple mobile devices, then more users can access the system at the same time, but the connection management becomes complex and resource consumption increases
Solution Approach 1:
The patent segments the connection management process into distinct states: authentication queue, authenticated state, and disconnected state. Mobile devices are processed in batches through queuing, and connections are established individually rather than simultaneously for all users, reducing the complexity of managing multiple active connections at once.
Solution Approach 2:
The system performs preliminary authentication actions before establishing full connections. Mobile devices are authenticated in advance and placed in an authenticated devices queue, allowing the system to prepare user credentials and authorization data before actual access occurs, thereby simplifying real-time connection management.
2Productivity
If high-end BLE modules are used to support more simultaneous connections, then the system can handle more users, but the cost increases significantly
Solution Approach 1:
The patent implements dynamic connection management where the system adjusts the number of active connections based on actual user needs. Connections are established and terminated dynamically as users access and leave the restricted area, allowing the system to maintain high productivity without requiring high-end hardware capable of supporting maximum simultaneous connections continuously.
Solution Approach 2:
The system changes the operational parameters of BLE connections by using lower-end modules with adjusted connection capacities. Instead of relying on high-end modules to handle all users simultaneously, the system manages connection parameters dynamically, establishing connections on-demand and releasing them after use, thereby reducing hardware costs while maintaining functionality.
3Productivity
If the system maintains connections with mobile devices that do not intend to access the restricted area, then connection reuse is improved, but unauthorized access may occur
Solution Approach 1:
The system implements feedback mechanisms through intent detection and authentication verification. Before establishing full access connections, the system detects user intent and verifies authentication credentials. This feedback loop ensures that connections are maintained only with users who both intend to access the area and provide valid authentication, preventing unauthorized access while improving connection reuse efficiency.
Solution Approach 2:
The system performs preliminary intent detection and authentication actions before establishing access connections. By verifying user intent and authentication credentials in advance and placing authenticated devices in a queue, the system ensures that only authorized users with legitimate intent receive connections, thereby maintaining security while improving the efficiency of connection reuse for authorized users.
4Reliability
If the system uses facial recognition and intent detection to verify user presence, then access security is improved, but the authentication process becomes more complex
Solution Approach 1:
The patent segments the authentication process into separate verification stages: mobile device authentication, intent detection, and facial recognition verification. By dividing the authentication process into discrete, manageable segments that can be processed sequentially or in parallel independently, the system improves security through multiple verification factors without creating an overly complex integrated authentication workflow.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for authentication queuing in access control systems is provided. The method may include establishing, by an access control system, a first wireless connection with a mobile device. The method further includes authenticating the mobile device over the first wireless connection. The method also includes adding the mobile device to a first authenticated devices queue associated with a first physical access point. The method includes sending a reconnection parameter to the mobile device. The method additionally includes disconnecting the first wireless connection to the mobile device.