FR3119478A1 - building access control system - Google Patents

Abstract

Building access control system This building access control system comprises an access control unit (12) comprising a reading head (98). The read head comprises: - a box received inside a through hole in a front panel of the access unit, - a short-distance receiver (150, 152) able to establish a short-distance wireless link information transmission wire with an electronic key only over a distance of less than 10 meters, and - a long-distance transceiver (154) able to establish a long-distance wireless link to connect the access center to a server access rights via a public packet-switched network. The short range receiver (150, 152) and the long range transceiver (154) are housed inside the read head housing (98). Fig. 3

Description

building access control system

The invention relates to a building access control system and to a reading head for this access control system.

Known building access control systems include:
- a transponder key reading head mounted on a front facade located close to an access door to be unlocked, and
- an access control module located behind the front facade to authorize and, alternately, prohibit access to the building according to an access code received by the reading head.

For this, the access control module uses a memory in which access rights are stored. If the access code received corresponds to these access rights, the access control module commands the unlocking of the access door.

To remotely update these access rights, the access control system also comprises a transceiver capable of establishing a long-distance link, via a cellular network, with a server of access rights. access. This access rights server contains the information needed to update the access rights used by the access control module.

Unlike the access control module, this long distance transceiver cannot be placed behind the front cover because this is usually made of metal. Thus, in known access control systems, this long distance transceiver is placed elsewhere in the building.

During the installation of such a known access control system, it is therefore necessary, on the one hand, to proceed with the installation of the read head near the access door and, on the other hand , proceed with the installation of the long distance transceiver.

• une serrure électrique déplaçable, en réponse à la réception d'une commande d'ouverture :
  • depuis une position verrouillée dans laquelle elle maintient une porte d'accès au bâtiment dans une position fermée,
  • vers une position déverrouillée dans laquelle la porte d'accès peut être librement déplacée vers une position ouverte,
• une clé électronique comportant une mémoire non-volatile dans laquelle est enregistré un code d'accès,
• un module de contrôle d'accès comportant une mémoire contenant des droits d'accès pré-enregistrés, ce module de contrôle d'accès étant apte à comparer un code d'accès reçu aux droits d'accès pré-enregistrés dans sa mémoire et, dans le cas où le code d'accès reçu correspond aux droits d'accès pré-enregistrés, à générer et à transmettre la commande d'ouverture à la serrure électrique, et dans le cas où le code d'accès reçu ne correspond pas aux droits d'accès pré-enregistrés, à inhiber la génération de la commande d'ouverture,
• un serveur de droits d'accès permettant à un administrateur du système de mettre à jour les droits d'accès enregistrés dans la mémoire du module de contrôle d'accès,
• une niche solidaire du bâtiment et située à proximité d'une porte d'accès,
• une centrale d'accès solidaire du bâtiment, cette centrale d'accès comportant :
  • une façade avant qui referme la niche, cette façade avant comportant :
    • un orifice traversant, et
    • un côté extérieur situé du côté opposé à la niche,
  • une tête de lecture comportant :
    • un boîtier qui isole mécaniquement, de l'environnement extérieur, les différents composants électroniques de cette tête de lecture, ce boîtier étant reçu à l'intérieur de l'orifice traversant et comportant une partie avant directement exposée sur le côté extérieur de la façade avant et une partie arrière reçue à l'intérieur de la niche et attachée, sans aucun degré de liberté, à la façade avant,
    • un récepteur courte distance apte :
      • à établir une liaison courte distance sans-fil de transmission d'informations avec la clé électronique uniquement sur une distance inférieure à 10 mètres, et
      • à recevoir le code d'accès de cette clé électronique par l'intermédiaire de cette liaison courte distance puis à le transmettre au module de contrôle d'accès,
        ce récepteur courte-distance étant logé à l'intérieur du boîtier, et
  • un émetteur-récepteur longue distance apte à établir une liaison longue distance sans-fil pour raccorder la centrale d'accès au serveur de droits d'accès par l'intermédiaire d'un réseau public à commutation de paquets,

dans lequel l'émetteur-récepteur longue distance est logé à l'intérieur du boîtier de la tête de lecture.The invention aims to provide an access control system that is simpler to install. It therefore relates to such a system for controlling access to a building, this system comprising:

• a movable electric lock, in response to receiving an opening command:
  • from a locked position in which it holds an access door to the building in a closed position,
  • to an unlocked position in which the access door can be freely moved to an open position,
• an electronic key comprising a non-volatile memory in which an access code is stored,
• an access control module comprising a memory containing pre-recorded access rights, this access control module being capable of comparing an access code received with the access rights pre-recorded in its memory and, in the event that the access code received corresponds to the pre-recorded access rights, in generating and transmitting the opening command to the electric lock, and in the event that the access code received does not correspond to the pre-recorded access rights, to inhibit the generation of the opening command,
• an access rights server enabling a system administrator to update the access rights stored in the memory of the access control module,
• a niche attached to the building and located near an access door,
• a central access unit integral with the building, this central access unit comprising:
  • a front facade which closes the niche, this front facade comprising:
    • a through hole, and
    • an exterior side located on the side opposite the niche,
  • a reading head comprising:
    • a casing which mechanically isolates, from the external environment, the various electronic components of this read head, this casing being received inside the through-hole and comprising a front part directly exposed on the exterior side of the front facade and a rear part received inside the niche and attached, without any degree of freedom, to the front facade,
    • a short distance receiver capable of:
      • to establish a short-distance wireless information transmission link with the electronic key only over a distance of less than 10 meters, and
      • to receive the access code of this electronic key via this short distance link then to transmit it to the access control module,
        this short-range receiver being housed inside the case, and
  • a long-distance transceiver capable of establishing a long-distance wireless link to connect the access center to the access rights server via a public packet-switched network,

wherein the long distance transceiver is housed inside the reader head housing.

Embodiments of this access control system may include one or more of the following features:
1)
- the system comprises a remote access control module implemented in the access right server and a local access control module implemented in the access control unit,
- the local access control module is capable of first comparing the access code received, via the short-distance link, with the access rights pre-recorded in its memory and, in the event that the access code received corresponds to the access rights pre-recorded in its memory, to generate and transmit the opening command to the electric lock, and in the event that the access code received does not correspond to the rights access codes pre-recorded in its memory, to inhibit the generation of the opening command and to transmit, via the long-distance link, the access code received to the remote access control module, and
- the remote access control module is capable of comparing the access code received, via the long-distance link, with the access rights pre-recorded in its memory and, in the event that the code d access received corresponds to the access rights pre-recorded in its memory, to generate and transmit the opening command to the electric lock via the long-distance link, and in the event that the access code received does not correspond to the access rights pre-recorded in its memory, to inhibit the generation and transmission of the opening command.
2)
- the system comprises a remote access control module implemented in the access right server and a local access control module implemented in the access control unit,
- the read head comprises a module for detecting a failure of the local access control module, this detection module being able, only in response to the detection of a failure of the local access control module, to transmit the access code received to the remote access control module, via the long distance link, and
- the remote access control module is capable of comparing the access code received, via the long-distance link, with the access rights pre-recorded in its memory and, in the event that the code d access received corresponds to the access rights pre-recorded in its memory, to generate and transmit the opening command to the electric lock via the long-distance link, and in the event that the access code received does not correspond to the access rights pre-recorded in its memory, to inhibit the generation and transmission of the opening command.
3)
- the access control module is implemented in the access right server and the access control unit has no memory comprising access rights capable of being compared to an access code of a electronic key, and
- the read head is capable of systematically redirecting each access code received via the short-distance receiver to the long-distance transceiver and the long-distance transceiver is capable of systematically transmitting each access code received at the credential server via the long distance link.
4)
- the system comprises a local access control module and this local access control module is implemented inside the reading head, and
- the reading head comprises a wired interface connected, via a direct wired connection, to the electric lock, this wired interface being capable of transmitting the opening command to the electric lock via this connection direct wired.
5)
- the short-range receiver is chosen from the group consisting of an RFID ("Radio Frequency IDentification") tag reader, a transceiver conforming to the Bluetooth standard, a near-field transceiver, a a transceiver conforming to the Zigbee standard, and
- the long distance transceiver is a mobile cellular network transceiver.

• un boîtier qui isole mécaniquement, de l'environnement extérieur, les différents composants électroniques de cette tête de lecture, ce boîtier étant apte à être reçu à l'intérieur d'un orifice traversant d'une façade avant de la centrale d'accès et comportant une partie avant apte à être directement exposée sur un côté extérieur de la façade avant et une partie arrière apte à être reçue à l'intérieur d'une niche refermée par la façade avant et apte à être attachée, sans aucun degré de liberté, à la façade avant,
• un récepteur courte distance apte :
  • à établir une liaison courte distance sans-fil de transmission d'informations avec une clé électronique uniquement sur une distance inférieure à 10 mètres, et
  • à recevoir un code d'accès de cette clé électronique par l'intermédiaire de cette liaison courte distance puis à le transmettre à un module de contrôle d'accès, ce récepteur courte-distance étant logé à l'intérieur du boîtier,

dans lequel la tête de lecture comporte un émetteur-récepteur longue distance apte à établir une liaison longue distance sans-fil pour raccorder la tête de lecture à un serveur de droits d'accès par l'intermédiaire d'un réseau public à commutation de paquets, cet émetteur-récepteur longue distance étant logé à l'intérieur du boîtier de la tête de lecture.The invention also relates to a reading head of an access center for implementing the above system, in which the reading head comprises:

• a casing which mechanically isolates, from the external environment, the various electronic components of this read head, this casing being adapted to be received inside a through hole of a front facade of the access unit and comprising a front part capable of being directly exposed on an exterior side of the front facade and a rear part capable of being received inside a niche closed by the front facade and capable of being attached, without any degree of freedom, on the front facade,
• a short distance receiver capable of:
  • to establish a short distance wireless information transmission link with an electronic key only over a distance of less than 10 meters, and
  • to receive an access code from this electronic key via this short-distance link and then to transmit it to an access control module, this short-distance receiver being housed inside the box,

in which the read head comprises a long-distance transceiver capable of establishing a long-distance wireless link to connect the read head to an access rights server via a public packet-switched network , this long distance transceiver being housed inside the housing of the read head.

Embodiments of this read head may include one or more of the following features:
1)
- the housing of the read head comprises a shoulder located between the front and rear parts of the housing, this shoulder extending in a plane perpendicular to a longitudinal axis, and
- the rear part of the case is threaded to receive a fixing nut of this case on the front facade.
2)
- the short-distance receiver comprises a first antenna to establish the short-distance wireless link, this first antenna being located inside the front part of the case,
- the long-distance transceiver comprises a second antenna, distinct from the first antenna, this second antenna being located inside the front part of the casing,
- the reading head comprises a ferrite plate which extends mainly in a plane perpendicular to the longitudinal axis, this ferrite plate being located inside the front part and interposed between, on one side, the shoulder and, on the other side, the first and second antennae.

The invention will be better understood on reading the following description, given solely by way of non-limiting example and made with reference to the drawings in which:
- the is a schematic illustration of a building access control system;
- the is a schematic illustration, partly in vertical section, of a reading head used in the system of the ;
- the is a schematic illustration of the electronic architecture of the read head of the ;
- the is a schematic illustration, in vertical section, of the arrangement of various components inside the playback head of the , and
- the is a flowchart of an access control method implemented in the system of the .

In the rest of this description, the characteristics and functions well known to those skilled in the art are not described in detail.

In this description, detailed examples of embodiments are first described in a chapter I with reference to the figures. Then, in a chapter II, variants of these embodiments are presented. Finally, the advantages of the different embodiments are presented in a chapter III.

Chapter I: Examples of embodiments

The represents a system 2 for access control to a building 4 equipped with a door 6 for access. The door 6 is movable between an open position and a closed position. In the closed position, it prohibits access to the interior of building 4. In the open position, a visitor or resident can freely enter the interior of building 4.

To control access to building 4, system 2 includes:
- an electric lock 10,
- a central 12 access connected to the lock 10, and
- electronic keys.

Typically, system 2 can include several access control units to control access to several buildings or to different parts of the same building. The various electric locks and central access units then operate, respectively, like the lock 10 and the central unit 12. Thus, subsequently, these other electric locks and other central access units are not described in detail and are not been represented.

The lock 10 moves between a locked position and an unlocked position. In the locked position, it holds the door 6 in its closed position. In the unlocked position, the door 6 can freely be moved from its closed position to its open position. The lock 10 moves from its locked position to its unlocked position in response to receiving an opening command. Then, once this opening command has been received, it remains in the unlocked position for a predetermined period, then automatically returns to its locked position at the end of this predetermined period.

The lock 10 is directly connected to the control unit 12 via a wired link 13. The opening command is transmitted to the lock 10 via this link 13.

To simplify the , only an electronic key 14 and an electronic key 16 have been shown. Keys 14 and 16 correspond to two different possible embodiments of an electronic key of system 2.

Key 14 is a transponder key also known by the term “RFID tag” or “radio tag” or the English terms “RFID tag” and “RFID transponder”. The acronym RFID stands for "Radio Frequency IDentification".

Key 14 does not have its own power source. The key 14 is powered by the central 12 via a short-distance wireless information transmission link 18. In this text, "short distance link" means a link that can only be established over a distance of less than 10 m or 5 m. Beyond this distance, the short distance link cannot be established and does not exist.

Typically, the key 14 includes a transponder 20 equipped:
- A non-volatile memory 22 containing an access code 24, and
- An antenna 26 able to transmit the code 24 to the central 12 as soon as the link 18 is established.

This antenna 26 is also used to extract the energy necessary for the operation of the transponder 20 from the electromagnetic signals radiated by the central unit 12.

Here, the key 14 is therefore a passive electronic key and does not include any electronic elements other than those described above.

In the case of the use of a transponder such as the transponder 20, the link 18 is established over a maximum distance of less than 50 cm or 10 cm. The frequency of the electromagnetic wave used to establish link 18 is typically equal to 13.56 MHz.

The key 16 includes a transceiver 32 capable of establishing a short distance wireless link 30 with the central unit 12. The link 30 here complies with the Bluetooth standard.

The key 16 comprises a memory 34 comprising an access code 36. Key 16 is capable of transmitting code 36 to control unit 12 via link 30.

Unlike key 14, key 16 includes a battery 38 capable of powering the various electronic components of key 16. Key 16 also includes a microprocessor capable of executing instructions recorded in memory 34 and a man-machine interface 40. The man-machine interface 40 typically includes a touch screen. For example, key 16 is a smart phone known as a "Smartphone". This smartphone is equipped with an application to transmit the access code 36 to the central 12 via the link 30.

The central unit 12 is capable of transmitting the opening command to the lock 10 when the access code received is a valid access code. A valid access code is an access code authorized to unlock the lock 10. In the event that the access code received is not valid, i.e. it is not authorized to unlock the lock 10, no opening command is transmitted to the lock 10 and the latter therefore remains in its locked position.

An access code is valid if it corresponds to pre-recorded access rights. For example, these pre-recorded access rights include a list of access codes authorized to unlock the lock 10. If the access code received belongs to this list, then the access code is valid. Otherwise, the access code received is invalid.

In this embodiment, part of the access rights are saved locally in a memory of the central 12. Under these conditions, from time to time, it is necessary to update the access rights saved in the central 12 Such an update makes it possible, for example, to authorize a new key to unlock the lock 10 and/or, on the contrary, to prohibit an electronic key from unlocking the lock 10. For this, the control unit 12 is suitable to establish a long distance wireless link 50 which connects the central 12 to a server 60 of access rights.

Link 50 is established through a public network 62. Network 62 is a packet-switched network. Here, network 62 is a cellular network. A long-distance link is an information exchange link that can be established between transmitters and receivers located several kilometers from each other.

The server 60 notably comprises a microprocessor 64 and a memory 66. The microprocessor 64 is capable of executing instructions recorded in the memory 66. Here, the memory 66 notably comprises the instructions of a module 68 for managing access rights and of a remote module 70 for access control. The memory 66 also comprises a database 72 comprising the access rights to be used to authorize and, alternately, prohibit the unlocking of each lock of the system 2. The base 72 therefore comprises in particular the access rights necessary to authorize and, alternately, prohibit the unlocking of the lock 10.

When the instructions of the management module 68 are executed, this module 68 interacts with an administration station 80 of the system 2. This station 80 is here connected to the server 60 via the network 62. Thus, the station 80 and the server 60 can be far from each other.

The station 80 is for example a computer comprising:
- A central unit 82 equipped with software, such as an Internet browser, which allows interaction with the module 68;
- a screen 84, and
- an 86 keyboard.

The module 68 allows an administrator to modify the access rights contained in the database 72. The module 68 is also capable of transmitting, via the link 50, an update of the access rights of the central unit 12. In response to the reception of this update, the central unit 12 updates the locally saved access rights. At the end of this update, the access rights saved locally are identical to the access rights saved in the database 72.

When executed by microprocessor 64, module 70 is capable of comparing an access code received via link 50 to the access rights stored in database 72 to determine if the access code received is valid or invalid. When the access code received is valid, in response, the module 70 generates an opening command and transmits it to the access control unit 12 which sent this access code.

The access control module 70 is formed by the combination of the microprocessor 64 and the memory 66 containing the instructions of this module 70 and the database 72. To simplify the , in this figure the reference 70 points only to the instructions of this module 70 in the memory 66.

In this embodiment, the central 12 can also receive an access code transmitted by a remote key 90. Key 90 communicates with central 12 via a long distance link established through network 62. For example, key 90 is identical to key 16 except that it transmits the access code by via a long-distance link established with the central 12.

The represents in more detail the mechanical architecture of the control unit 12 in the particular case where the latter has no screen, button, microphone and loudspeaker. The central unit 12 therefore does not fulfill the functions of an electric doorman or intercom. In this particular case, the central unit 12 comprises only a front face 102 and a reading head 98 mounted on this front face.

In this embodiment, all of the electronic components of the control unit 12 are housed inside the head 98. Thus, in this particular embodiment, the control unit 12 and the reading head 98 are combined.

The head 98 is at least partly received inside a niche 100. Here, the niche 100 is a cavity, for example parallelepiped, dug in a vertical wall 101 of the building 4. For example, the wall 101 is a concrete wall of building 4. Niche 100 is located close to door 6, that is to say, generally, less than 50 m or less than 10 m or less than 3 m from this door 6 The cables making it possible to electrically connect the head 98 to the lock 10 and to an electrical power supply network emerge inside this niche 100.

Access to the interior of the niche 100, from outside the building 4, is prohibited by the front facade 102 which completely closes the niche 100. For this purpose, the periphery of the orthogonal projection of the facade 102 on the wall 101 completely surrounds the entrance to niche 100.

The facade 102 is designed to resist acts of vandalism. For this, it is typically a metal plate at least 1 mm thick.

The facade 102 is fixed, without any degree of freedom, on the wall 101.

This facade 102 comprises, in this embodiment, a single through hole 104 which connects the exterior side of the facade 102 to its interior side facing the niche 100. This exterior side is that which is directly exposed to the exterior of the building. 4. In this embodiment, this orifice 104 is used to fix, without any degree of freedom, the reading head 98 on the wall 101. Typically, the cross section of the orifice 104 is circular with a flat.

The head 98 comprises a casing 120. The casing 120 receives all the electronic components of the head 98 and mechanically isolates them from the external environment. For example, the box 120 has a protection index greater than IP54.

The casing 120 comprises a front part 122, a rear part 124 and a shoulder 126 located between these front and rear parts.

The front part 122 is located on the exterior side of the facade 102. The rear part 124 passes through the orifice 104. The rear part 124 is the only part of the head 98 which is received inside the niche 100. The parts front 122 and rear 124 are located immediately one after the other along a longitudinal axis 128 perpendicular to the plane in which the facade 102 mainly extends. Here, the housing 120 is a solid of revolution whose axis of revolution coincides with this axis 128.

The shoulder 126 extends in a plane perpendicular to the axis 128. The shoulder 126 bears against the entire periphery of the orifice 104 when the head 98 is mounted on the facade 102. For this, the part rear part 124 is cylindrical and threaded to form a screw onto which a nut 130 is screwed. embodiment, the cross section of the rear part 124 also comprises a flat which, by form cooperation with the flat of the orifice 104, prevents the rotation of the head 98. To fix without any degree of freedom the head 98 on the front 102, it suffices to screw the nut 130 onto the rear part 124 until the periphery of the orifice 104 is wedged between, on one side, the shoulder 126 and, on the opposite side, the nut 130.

The wire links which electrically connect the head 98 to the lock 10 and to the power supply network come out from the rear part of the head 98.

The represents the electronic architecture of the reading head 98. The head 98 comprises:
- a short distance receiver 150 able to establish the link 18 to receive the access code 24 of the key 14,
- a short distance transceiver 152 capable of establishing the link 30 to receive the access code 36 of the key 16,
- a long distance transceiver 154 able to establish the link 50 to communicate with the server 60 and receive the access code of the key 90,
- a wired interface 156 capable of transmitting the opening command on the wired link 13,
- a power supply interface 158 capable of connecting the head 98 to an external power supply network,
- a microprocessor 160 capable of executing instructions stored in a memory,
- a memory 162 containing the instructions and the data necessary for the execution of the method of the , and
- a bus 163 allowing the exchange of information between the various electronic components of the head 98.

Here receiver 150 is also able to transmit data to key 14 via link 18.

The memory 162 contains in particular the instructions of a local module 164 of access control and of a module 165 of failure detection. Memory 162 also contains a database 166 containing the access rights stored locally in head 98.

When executed by microprocessor 160, local module 164 performs substantially the same functions as remote module 70 except that it is executed locally. The module 164 is formed by the combination of the microprocessor 160 and the memory 162 containing the instructions of this module 164 and the base 166 of data. To simplify the , in this figure, the reference 164 points only to the instructions of this module 164 recorded in the memory 162.

When the instructions of the module 165 are executed by the microprocessor 160, the module 165 is capable of detecting a failure of the module 164. In response to the detection of a failure of the module 164, the module 165 transmits the access code received to the 70 remote access control module. Module 165 is formed by the combination of microprocessor 160 and memory 162 containing the instructions of this module 165.

The interfaces 156, 158, the microprocessor 160 and the memory 162 are fixed on a printed circuit 168 ( ). The bus 163 is for example made in a metallization layer of this printed circuit 168.

Receiver 150 is a transponder reader. It includes in particular an antenna 170 connected to an electronic circuit 172 for adaptation.

The 152 transceiver is a transceiver that complies with the Bluetooth standard and, more specifically, with the BLE (Bluetooth Low Energy) standard. The transceiver 152 comprises an antenna 174 and an electronic circuit 176 for adaptation.

The transceiver 154 here is a transceiver conforming to the LTE-M (“Long-Term Evolution for Machine”) standard. It comprises in particular an antenna 178 and an electronic circuit 180 for adaptation.

The electronic adaptation circuits make it possible to transform the electrical signals generated by an antenna into data transmitted on the bus 163. The circuits 176 and 180 also make it possible to transform a data item received via the intermediary of the bus 163 into an electrical signal that the antenna radiates in the form of electromagnetic waves. These various adaptation circuits are fixed on the printed circuit 168 ( ).

The represents the arrangement of the antennas 170, 174 and 178 inside the front part 122 of the casing 120 of the head 98. Starting from the shoulder 126 and moving away from the rear part 124, one encounters successively:
- the printed circuit 168;
- a ferrite plate 200, and
- A support 202 of antennas.

Circuit board 168, plate 200, and carrier 202 all extend primarily parallel to a plane perpendicular to axis 128.

Antennas 170, 174 and 178 are made on support 202. They mainly extend in a plane perpendicular to axis 128. Support 202 is made of an electrically insulating material. Here, by electrically insulating material is meant a material whose electrical conductivity at 20° C. is less than 10 ^-4 S/m or 10 ^-10 S/m. For example, support 202 is a printed circuit and antennas 170, 174 and 178 are made in a metallization layer of this printed circuit.

The plate 200 includes through holes for wire connections which connect the antennas 170, 174 and 178 to the corresponding matching circuits on the printed circuit 168. The plate 200 isolates the antennas 170, 174 and 178 from the metal facade 102 . It makes it possible to limit the disturbances that the facade 102 can cause on the operation of these antennas. For this purpose, the plate 200 is made of a ferromagnetic and electrically insulating material. Here the plate 200 is made of ferrite. The composition of the ferrite used is, for example, chosen from the group consisting of iron oxides Fe ₂ O ₃ XO or, X0 is chosen from the group consisting of manganese, zinc, cobalt, nickel or other materials appropriate.

The operation of system 2 will now be described with reference to the method of .

For example, the method begins with a phase 300 of updating the access rights recorded in the memory 162 of the head 98.

More specifically, during a step 302, an administrator connects to the server 60 using the administration station 80. The access rights management module 68 is then executed by the microprocessor 64.

During a step 304, the station 80 acquires the administrator's commands and transmits them to the management module 68 which, in response, updates the access rights recorded in the base 72 according to the commands received.

Then, during a step 306, the access rights of the head 98 are updated according to the access rights recorded in the database 72 of the database. For this, the server 60 connects to the head 98 and establishes the link 50. Then the server 60 transmits to the head 98 the update to be performed. In response, the head 98 updates the access rights recorded in the base 166 according to the update received. Once the update has been completed, the access rights contained in base 166 are typically identical to those contained in base 72.

This update is for example triggered periodically or in response to a particular command acquired by the administration station 80.

The update phase 300 then ends and an access control phase 310 begins.

During a step 312, the short distance link 18 between the key 14 and the head 98 is established. This link is established automatically as soon as the key 14 is close enough to the head 98.

Then, during a step 314, the key 14 transmits its access code 24 to the head 98 via the link 18.

During a step 316, in response, the module 165 checks whether the module 164 is able to operate correctly. For example, module 164 is considered not able to function correctly, and therefore faulty, when its execution is blocked, for example, by an execution problem.

If the module 164 is able to operate correctly, during a step 320, the access code 24 is transmitted to the local access control module 164.

During a step 322, in response to receiving the access code 24, the local module 164 compares it with the access rights pre-recorded in the database 166.

If the access code 24 received corresponds to the access rights pre-recorded in the base 166 then, during a step 324, the module 164 generates the opening command and transmits it to the lock 10 via the wire connection 13.

During a step 326, in response to receiving the opening command, the lock 10 moves to its unlocked position and the user can then open the door 6.

If the access code 24 received does not correspond to the access rights pre-recorded in the base 166 then, during a step 328, the module 164 does not generate the opening command and transmits the access code 24 received to the remote access control module 70 via the link 50 and the network 62.

During a step 330, the remote module 70 compares the access code 24 received with the access rights of the central 12 recorded in the database 72 of the database.

If the access code 24 received corresponds to the access rights recorded in the base 72 then, during a step 332, the remote module 70 generates the opening command and transmits it to the head 98 via link 50 and network 62.

During a step 334, the head 98 receives the opening command and transmits it to the lock 10 via the wired link 13. Then, the method continues with step 326.

If the access code 24 received does not correspond to the access rights recorded in the base 72 then, during a step 336, the module 70 does not generate the opening command. In this case, no opening command is generated and the lock 10 remains in its locked position.

If the module 165 detects that the module 164 is faulty, during a step 340, the module 165 immediately transmits the access code 24 received to the remote module 70 for access control. Then, the method continues with step 330.

Phase 310 has been described in the particular case of key 14. However, the operation of access control with key 16 or key 90 is identical except that the access code is transmitted via, respectively, links 30 and 50.

Chapter II: Variants

Variants of the access control unit:

As a variant, the central unit 12 also fulfills the functions of an electric doorman. In this case, the front facade comprises, in addition to the orifice 104, additional orifices to receive the various elements of a man-machine interface. This man-machine interface allows a visitor, present in front of the central 12, to call a resident of the building and then to communicate with this resident via this interface. In response, the resident can trigger the generation and transmission of the opening command to the lock 10 by pressing a button on his handset. To this end, typically, the man-machine interface of the control unit 12 then comprises the following elements: a microphone, a loudspeaker, one or more call buttons to trigger a call from a resident. Optionally, this man-machine interface also includes a camera to film the visitor.

Alternatively, the local access control module 164 is omitted. In this case, the microprocessor 160 of the head 98 is configured to systematically transmit to the remote access control module 70 the access code received via the links 18, 30 or 50. Then, the process takes place as described from step 330 of the method of . On the other hand, steps 322 and 324 are omitted.

Alternatively, the local access control module 164 is implemented in a box mechanically independent of the box 120 of the read head 98. In this case, typically, the head 98 is connected by a wired link to this local access control module which is itself connected by the wired link 13 to the lock 10. Thus, in such an embodiment, the head 98 is not directly connected by a wired connection to the lock 10. In this case, the failure detection module 165 detects a failure if, for example, the wired connection between the reading head and the local module access control is cut off or if the local access control module does not respond.

In a simplified embodiment, the module 165 for detecting the failure of the local module 164 for access control is omitted. In this case, the remote access control module 70 is not used to compensate for a failure of the local access control module 166.

Head 98 may comprise a single or more than two short range transceivers. For example, one of the transceivers 150, 152 is omitted. Other short distance transceivers can be used instead of or in addition to those previously described. Any transceiver capable of establishing a personal wireless network can be used. These personal networks are better known by the acronym WPAN ("Wireless Personal Area Network"). For example, the short distance transceiver can be chosen from the group consisting of an RFID ("Radio Frequency IDentification") tag reader, a transceiver conforming to the Bluetooth standard, a transmitter- near-field receiver, a transceiver conforming to the Zigbee standard. A near-field transceiver is a transceiver using near-field communication better known by the acronym NFC ("Near Field Communication"). In another simplified embodiment, receiver 150 is only able to receive data transmitted by key 14.

Similarly, other embodiments of transceiver 154 are possible. Any transceiver capable of establishing a wireless wide area network can be used. These wireless wide area networks are better known by the term cellular network or by the acronym WWAN ("Wireless Wide Area Network").

In another embodiment, the ferrite plate 200 is omitted. Such an embodiment is for example used when the front facade 102 is made of an electrically insulating material.

Plate 200 can also be placed between shoulder 126 and printed circuit 168 instead of between printed circuit 168 and support 202.

In a particular embodiment, the printed circuit additionally comprises one or more metallization layers in which the antennas 170, 174 and 178 are made. 202, mechanically independent of printed circuit 168, is then omitted. In this case, the ferrite plate 200 is placed between this printed circuit and the shoulder 126.

It is also possible to integrate the plate 200 inside the printed circuit 168. For example, for this, in addition to one or more layers of metallization, the printed circuit includes a layer made of ferrite. If the antennas 170, 174 and 178 are also made in this printed circuit, then they are made in metallization layers located on the side of the ferrite layer opposite the shoulder 126.

Other shapes are possible for housing 120. For example, alternatively, housing 120 is a cylinder of square or rectangular cross-section. The axis of revolution of this cylinder is the axis 128. In this case, typically, the front part of the casing 120 is flush with the front face 102 through the orifice 104. Its rear part is then typically equipped with fixing lugs which allow it to be attached, without any degree of freedom, to the inside of the front panel.

Credentials server variants:

In a simplified embodiment, the remote access control module 70 is omitted. In this case, the local access control module 164 does not send the access code received to the server 60 if this access code does not correspond to the access rights recorded in the base 166. Similarly, the module 165 is omitted.

Variants of electronic keys:

Many other embodiments are possible for the electronic key. In particular, the head 98 can be simplified to include only one of the transmitters 150 or 152. In this case, one of the keys 14 and 16 cannot be used to unlock the lock 10.

Other variants:

In this application, the memories of the electronic keys, of the control unit 12 and of the server 60 have been represented in the form of a single memory block to simplify the description. However, in practice, these memories can each be composed of several distinct memory blocks. For example, the executable instructions and the data to be processed can be stored in two separate memory blocks. The memory can also comprise one or more memory blocks which fulfill particular functions such as, for example, the cache memory function.

The niche 100 is not necessarily a cavity dug into a wall. It can also correspond to the interior cavity of a box fixed, without any degree of freedom, on a wall of the building 4. In a particular embodiment, the niche 100 can also be arranged inside the door 6. In this case, lock 10 is also housed in door 6.

Door 6 is not necessarily an entrance door to a building. It can also be an access door to a room located inside the building such as, for example, a garage or a garbage room.

As a variant, the updating of the access rights in the base 166 is triggered, for example at regular intervals, by the central unit 12 and not by the server 60. In this case, the central unit 12 connects at regular intervals to the server 60 to check if an access rights update is available. If so, this update is downloaded via link 50 and then used to update the access rights recorded in base 166.

The link 50 can also be used to transmit to the access center 12 information other than access rights updates. For example, it can be used to transmit an update of the instructions and modules stored in the memory 162. It can also be used to transmit to the server 60 or to another server information such as a history of accesses to the building 4 or any other information noted by the access centre.

As a variant, the transmission of the access code received by the central unit 12 to the remote module 70 in the event of failure of the local module 164 or in the event of a lack of correspondence between the access code received and the access rights recorded in base 166, can be implemented regardless of whether long distance transceiver 154 is located within read head 98. For example, its functionalities can be implemented in an access control system in which the reading head comprises only the transceivers 150 and 152 and the transceiver 154 is implemented in a box separate from the box 120 and connected to the central 12 via a wired connection.

Chapter III: Advantages of the Embodiments Described

The installation of system 2 is simplified thanks to the fact that the transceiver 154 is also housed inside the reading head 98. Indeed, thanks to this, in a single operation, namely the fixing of the head 98 on the facade 102, the installer installs both the long distance transceiver 154 and the short distance transceivers 150 and 152 .

Transmitting the access code received to the remote access control module 70 in the event that the local access control module 164 has not been able to identify a match with the access rights recorded in the database 166, makes it possible to compensate for a delay in updating the access rights of this base 166. It is therefore possible to space out the updates of the access rights of the base 166 without thereby increasing the probability that a user of a new key is denied access to building 4 because the access rights in the base 166 have not yet been updated. This therefore makes it possible to reduce the number of connections between the central unit 12 and the server 60.

The fact of automatically redirecting the access code to the remote access control module 70 in the event of failure of the local access control module 164 makes it possible to immediately remedy a failure of this local module. In particular, building access control remains active even though the local access control module 164 is faulty.

Implementing only the remote access control module 70 simplifies the architecture of the access control unit 12. For example, this simplifies the production of the reading head 98 since the latter no longer comprises a local access control module.

The fact of implementing the local access control module 164 inside the read head 98 simplifies the installation of the system 2 even more. Indeed, in this case, the installation of the head 98 on the façade 102 also makes it possible at the same time to install the local module 164 for access control. It is therefore no longer necessary to install, in addition to the read head, an additional box in which this local access control module 164 is implemented.

The presence of the ferrite plate 200 between the antennas 170, 174, and 178 and the shoulder 126 makes it possible to limit the disturbances in the operation of these antennas when the reading head 98 is mounted on a facade 102 made of electrically conductive materials.

Claims (9)

System for controlling access to a building, this system comprising:

• an electric lock (10) movable, in response to receiving an opening command:
  • from a locked position in which it holds an access door to the building in a closed position,
  • to an unlocked position in which the access door can be freely moved to an open position,
• an electronic key (14, 16, 90) comprising a non-volatile memory (22, 34) in which an access code is stored,
• an access control module (70, 164) comprising a memory (66, 162) containing pre-recorded access rights, this access control module being capable of comparing an access code received with the rights accesses pre-recorded in its memory and, in the event that the access code received corresponds to the pre-recorded access rights, to generate and transmit the opening command to the electric lock, and in the event that the access code received does not correspond to the pre-recorded access rights, to inhibit the generation of the opening command,
• an access rights server (60) enabling a system administrator to update the access rights stored in the memory of the access control module,
• a niche (100) integral with the building and located near an access door,
• a central access unit (12) integral with the building, this central access unit comprising:
  • a front facade (102) which closes the niche, this front facade comprising:
    • a through hole (104), and
    • an exterior side located on the side opposite the niche,
  • a reading head (98) comprising:
    • a casing (120) which mechanically isolates, from the external environment, the various electronic components of this reading head, this casing being received inside the through-hole and comprising a front part (122) directly exposed on the outer side of the front facade and a rear part (124) received inside the niche and attached, without any degree of freedom, to the front facade,
    • a short distance receiver (150, 152) capable of:
      • to establish a short distance wireless information transmission link (18, 30) with the electronic key only over a distance of less than 10 meters, and
      • to receive the access code of this electronic key via this short distance link then to transmit it to the access control module,
        this short-range receiver being housed inside the case, and
  • a long-distance transceiver (154) capable of establishing a long-distance wireless link (50) to connect the access center to the access rights server via a public packet-switched network,

characterized in that the long range transceiver (154) is housed within the housing (120) of the read head (98). A system according to claim 1, wherein:
- the system comprises a remote access control module (70) implemented in the access right server and a local access control module (164) implemented in the access control unit,
- the local access control module is capable of first comparing the access code received, via the short-distance link, with the access rights pre-recorded in its memory (162) and, in the case where the access code received corresponds to the access rights pre-recorded in its memory, to generate and transmit the opening command to the electric lock, and in the case where the access code received does not correspond not to the pre-recorded access rights pre-recorded in its memory, to inhibit the generation of the opening command and to transmit, via the long-distance link, the access code received to the remote module ( 70) access control, and
- the remote access control module (70) is able to compare the access code received, via the long-distance link, with the access rights pre-recorded in its memory (66) and, in if the access code received corresponds to the access rights pre-recorded in its memory (66), to generate and transmit the opening command to the electric lock via the long distance link, and in the event that the access code received does not correspond to the access rights pre-recorded in its memory (66), inhibiting the generation and transmission of the opening command. A system according to claim 1, wherein:
- the system comprises a remote access control module (70) implemented in the access right server and a local access control module (164) implemented in the access control unit,
- the read head comprises a module (165) for detecting a failure of the local access control module, this detection module being capable, only in response to the detection of a failure of the local control module of access, to transmit the access code received to the remote access control module (70), via the long-distance link, and
- the remote access control module (70) is able to compare the access code received, via the long-distance link, with the access rights pre-recorded in its memory (66) and, in if the access code received corresponds to the access rights pre-recorded in its memory (66), to generate and transmit the opening command to the electric lock via the long distance link, and in the event that the access code received does not correspond to the access rights pre-recorded in its memory (66), inhibiting the generation and transmission of the opening command. A system according to claim 1, wherein:
- the access control module (70) is implemented in the access right server and the access control unit has no memory comprising access rights capable of being compared with an access code an electronic key, and
- the read head (98) is capable of systematically redirecting each access code received via the short distance receiver (150, 152) to the long distance transceiver and the long distance transceiver (154 ) is capable of systematically transmitting each access code received to the access rights server via the long-distance link. A system according to any preceding claim, wherein:
- the system comprises a local access control module (164) and this local access control module is implemented inside the reading head, and
- the reading head comprises a wired interface (156) connected, via a direct wired connection (13), to the electric lock, this wired interface being capable of transmitting the opening command to the electric lock by via this direct wired connection. A system according to any preceding claim, wherein:
- the short distance receiver (150, 152) is chosen from the group consisting of an RFID ("Radio Frequency IDentification") tag reader, a transceiver conforming to the Bluetooth standard, a transceiver in the near field, of a transceiver conforming to the Zigbee standard, and
- the long distance transceiver (154) is a mobile cellular network transceiver. Reading head of an access central unit for implementing a system in accordance with any one of the preceding claims, in which the reading head comprises:

• a casing (120) which mechanically isolates, from the external environment, the various electronic components of this reading head, this casing being capable of being received inside a through hole of a front facade of the control unit access and comprising a front part (122) adapted to be directly exposed on an exterior side of the front facade and a rear part (124) adapted to be received inside a niche closed by the front facade and adapted to be attached, without any degree of freedom, to the front facade,
• a short distance receiver (150, 152) capable of:
  • to establish a short distance wireless information transmission link with an electronic key only over a distance of less than 10 meters, and
  • to receive an access code from this electronic key via this short-distance link and then to transmit it to an access control module, this short-distance receiver being housed inside the box,

characterized in that the reading head comprises a long-distance transceiver (154) able to establish a long-distance wireless link to connect the reading head to an access rights server via a network public packet-switched device, said long distance transceiver being housed inside the housing (120) of the reader head. Reading head according to claim 7, in which:
- the housing of the reading head comprises a shoulder (126) located between the front and rear parts of the housing, this shoulder extending in a plane perpendicular to a longitudinal axis (128), and
- the rear part of the case is threaded to receive a fixing nut of this case on the front facade. Reading head according to claim 8, in which:
- the short-distance receiver (150, 152) comprises a first antenna (170, 174) to establish the short-distance wireless link, this first antenna being located inside the front part of the case,
- the long distance transceiver (154) comprises a second antenna (178), distinct from the first antenna, this second antenna being located inside the front part of the casing,
- the reading head comprises a ferrite plate (200) which extends mainly in a plane perpendicular to the longitudinal axis, this ferrite plate being located inside the front part and interposed between, on one side , the shoulder (176) and, on the other side, the first and second antennae.