Distributed Access Control System for Robust Identity Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems are vulnerable due to reliance on a central master controller and lack robustness, as they do not prevent the transfer of identity credentials, allowing unauthorized access when the master controller is down or not functioning properly.
Innovation Solution
A distributed access control system where each access controller locally stores identity data and sends enter and exit messages to neighboring controllers, eliminating the need for a central master unit and ensuring the system remains operational even if parts of the network are down.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a central master controller is used to track user locations and validate access requests, then access control validation can be centralized, but the system becomes vulnerable and unreliable when the master controller fails
Solution Approach 1:
The patent divides the centralized access control system into multiple distributed access controllers, each responsible for a specific area. Each controller independently stores user location data and validates access requests for its area, eliminating the single point of failure represented by the central master controller. This segmentation distributes the validation function across multiple independent nodes in the network.
Solution Approach 2:
The patent extracts the location tracking and validation functionality from the central master controller and embeds it directly into each access controller. Each controller maintains its own copy of user location information and can independently validate access requests without needing to communicate with or depend on the central controller, removing the system's vulnerability to central controller failure.
2Ease of operation
If identity credentials are transferred between users, then credential sharing is enabled, but unauthorized access occurs when the credential holder is not actually present in the registered area
Solution Approach 1:
The patent implements a feedback mechanism where each access controller continuously updates user location information in the network whenever a user enters or exits an area. When an access request is made, the controller verifies the user's current location against the request, providing real-time feedback on whether the credential holder is actually present in the registered area. This prevents unauthorized access through transferred credentials while allowing legitimate users to share credentials when appropriate.
Data Source
Figure 1~2
Figure 3
Figure 4~5
AI summary
The present invention relates to a method and an apparatus for controlling access from a first area to a second area. The method comprises the steps of: receiving, at a first access controller, an identity signal from an identifier input device, checking in a storage of the first access controller for data indicating that the identity represented by the identity signal is registered as present in the first area, if the identity is registered as present in the first area then one access criterion is fulfilled. If a predetermined access requirement, which at least require fulfilment of one access criterion, is fulfilled then the following acts are performed: generating a pass signal at the first access controller, sending an enter message to a second controller controlling access from the second area to a third area, said enter message including at least said identity and data indicating that the identity is present in an access area of the second controller, and sending an exit message to a third controller controlling access to the first area, said exit message including at least said identity and data indicating that the identity is not present in an access area of the third controller.