Two-Factor Authentication Physical Access Control System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current physical access control systems using RFID keycards are vulnerable to unauthorized access due to the inability to verify the authorized person holding the keycard and the ease of keycard cloning, which compromises security.
Innovation Solution
A PAC system integrating facial recognition software and mobile phone-based verification using Bluetooth Low Energy (BLE) handshakes for two-factor authentication, requiring both the person's biometrics and login credentials to grant access, with anti-spoofing techniques to ensure the presence of a real person.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If RFID keycard readers are used for access control, then ease of operation is improved, but security is worsened due to inability to verify the authorized person holding the keycard
Solution Approach 1:
The patent combines facial recognition technology with RFID keycard reading to create a multi-factor authentication system. The access control system now requires both biometric verification (facial recognition) and credential verification (RFID keycard) to grant access, merging two different authentication methods into a single unified system that addresses the security weakness of RFID alone while maintaining ease of operation.
Solution Approach 2:
The system introduces an intermediary verification process where the control unit acts as a mediator between the RFID keycard reader and the access grantor. It receives both the RFID credential data and facial recognition results, performs cross-validation, and only grants access when both verification methods confirm authorization, thereby preventing unauthorized access with stolen keycards.
2Ease of manufacture
If 125 Khz proximity cards are used for access control, then ease of manufacture is improved, but security is worsened due to ease of cloning or duplication
Solution Approach 1:
The system performs preliminary verification through facial recognition before granting access based on RFID keycard presentation. By requiring biometric authentication in advance of the actual access event, the system prevents cloning attacks because even if a keycard is duplicated, the cloned card cannot bypass the facial recognition verification step that occurs beforehand.
Solution Approach 2:
The patent merges RFID keycard authentication with facial recognition authentication in a unified access control system. This combination means that even though 125 Khz proximity cards remain easy to manufacture and clone, the overall security is enhanced because the cloned card alone is insufficient - it must be paired with the authorized person's biometric data to gain access.
3Device complexity
If keycard readers trust the presented keycard without verification, then device complexity is reduced, but security is worsened due to undetected unauthorized access
Solution Approach 1:
The system implements a feedback mechanism where the control unit receives verification results from both the RFID keycard reader and the facial recognition system, processes this feedback information, and makes an informed decision about access authorization. This feedback loop ensures that unauthorized access attempts are detected and prevented, addressing the security weakness of blind trust in presented keycards.
Solution Approach 2:
The control unit serves as an intermediary that actively verifies and cross-checks information from multiple sources (RFID keycard and facial recognition) before granting access. This intermediary verification process adds security without significantly increasing device complexity, as the control unit coordinates the verification process and makes the final authorization decision based on combined evidence.
Data Source
AI summary
A physical access control (PAC) system configured to perform a two-factor authentication prior to granting access to a secure area. The PAC system includes an access point device configured to perform facial recognition on a person proximate to the access point device, and perform wireless handshake with a mobile device associated with the person prior to granting or denying entry to the secure area.