Distributed Access Server Appliances for Physical Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing networked physical security access control systems require high maintenance costs and complex IT infrastructure due to their proprietary nature and reliance on central servers, making them costly and resource-intensive to deploy and maintain, especially in distributed systems.
Innovation Solution
A distributed networked physical security access control system utilizing multiple access server appliances in peer-to-peer communication to maintain consistency and high availability without a central server, leveraging existing IT infrastructure and eliminating the need for client or server software installation, with redundant data replication and distributed databases for secure access control across multiple locations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a central server architecture is used for access control systems, then centralized management and control are improved, but maintenance costs and IT infrastructure complexity increase
Solution Approach 1:
The system divides the centralized access control functionality into multiple distributed access server appliances, each capable of independent operation. These appliances are segmented across different physical locations but maintain logical connectivity through peer-to-peer communication, eliminating the single central server dependency while preserving centralized management capabilities.
Solution Approach 2:
The system creates redundant copies of the access control system across multiple appliances. Each appliance maintains identical software configurations and can serve as a backup for others, ensuring that if one appliance fails, others can take over its functions. This copying approach eliminates single points of failure while maintaining centralized control through synchronized configurations.
2Reliability
If distributed systems are deployed to reduce single point of failure, then system availability is improved, but software integration requirements and training costs increase
Solution Approach 1:
The access server appliances are designed as universal units that can perform multiple functions: they can operate as primary access controllers, backup units, or both simultaneously. The appliances support various access control methods (card readers, biometrics, keypads) and can be deployed in different configurations without requiring different hardware or software, simplifying integration while providing high availability.
Solution Approach 2:
The system allows dynamic parameter changes in appliance configurations through automated synchronization. When one appliance's configuration is modified, the changes are automatically propagated to other appliances, maintaining system consistency without requiring manual reconfiguration. This parameter synchronization reduces integration complexity while preserving distributed architecture benefits.
3Reliability
If proprietary access control systems are used, then security control functionality is improved, but maintenance costs and technician training requirements increase
Solution Approach 1:
The access server appliances are designed to be self-configuring and self-maintaining. They automatically synchronize their configurations with other appliances in the network, perform self-diagnostics, and can be remotely managed through a web interface. This self-service capability reduces the need for specialized technicians and lowers maintenance costs while preserving robust security control functionality.
Solution Approach 2:
Instead of requiring specialized proprietary software installed on each appliance, the system inverts the approach by using standard web browsers as the interface. The management functionality is delivered through web pages that run in any modern browser, eliminating the need for proprietary client software and reducing maintenance requirements while maintaining full security control capabilities.
4Reliability
If redundant data replication is implemented across appliances, then system availability and failover capability are improved, but network communication requirements and data synchronization overhead increase
Solution Approach 1:
The access server appliances pre-synchronize their configurations and data before failures occur. Configuration changes are automatically propagated to all appliances in advance, so when a failure happens, the backup appliances are already ready to take over immediately. This preliminary synchronization action minimizes the actual failover time and ensures continuous availability.
Solution Approach 2:
The system maintains continuous peer-to-peer communication between appliances, constantly exchanging configuration updates and status information. This continuous data flow ensures that all appliances remain synchronized without requiring periodic bulk updates, reducing synchronization overhead while maintaining ready-to-failover states. The useful action of data synchronization continues continuously at a low level rather than interrupting during failures.
Data Source
AI summary
A distributed networked physical security access control system for controlling a plurality of security access devices includes access server appliances in communication with a primary network. At least one access server appliance includes an appliance management module accessible through a web browser in communication with the primary network. The appliance management module configures the access server appliances to a user specified security configuration. The access server appliances are in peer-to-peer communication on the primary network to bridge the access server appliances for providing consistency in each of the access server appliances.