AU2014262233B2 - Method and apparatus for a merged power-communication cable in door security environment - Google Patents

Abstract

A method controlling access to a door using a merged power communication cable. An access controlled door lock in door is operated using merged power-communication cable. Access control identification mechanism in door may operate using merged power-communication cable. The access controlled door lock may include a piezoelectric controlled door lock or a standalone door lock or a solenoid controlled door lock. A processing module may operate in door to control access with power interface receiving at least part of the electrical power from the merged power-communication cable. The invention includes a strike plate containing a magnetic sensor aligns by a latch hole to a latch included an access control door lock. The invention also includes using a door conduit to provide the merged power-communication cable to at least the processing module in the door. Door 18 Access control card reader 310 Local - -- Access Security controlled Door Closet door lock Latch Control oor80 Side &oDtaol F r Door 14 8 430dui Request Power EXIt switch 30 Door Frame Fig. 1A 4 Prior Art 16Door Door Side Local Security Door Closet 50 Frame 50 Access - Switch Dram Door Control 3920 Frm conduit Module 46 Fig. 1 B

Description

METHOD AND APPARATUS FOR A MERGED POWER-COMMUNICATION CABLE IN DOOR SECURITY ENVIRONMENT TECHNICAL FIELD: [1] The invention relates to an access controlled door lock in a door, as well as a conduit providing the merged power-communications cable for interactions and power delivery for components within the door. BACKGROUND OF THE INVENTION [2] The invention relates to improving security and access control for doors using a merged power communication cable, which allows the entire access control identification mechanism to reside within the door. [3] Today, an access control system for a door requires at least an access control identification mechanism, an access controlled door lock, a way to generate a Request-to-Exit (REX) signal, and a door position sensor. These elements are used to form the prior art access control system involving a power network and a data-communications network. An equipment closet is usually physically located near the door being controlled. The equipment closet contains a door lock power supply and a data communications node. The power network couples to the door lock power supply. The data communications network couples to the data-communications node. The data-communications node communicates with a central security node, often through a communications network. [4] There are several problems with the access control door systems of the prior art. Installing an access controlled door lock system involves a lot of wiring, entailing high installation expenses. The power network and the data-communications networks require many different cables wired to each door being controlled. Once the wiring has been installed, each interface from the equipment closet to the door must be tested. Such testing costs personnel time and may cause delays in deploying an access control system in multiple door environments, such as industrial, commercial and government buildings. Additionally, maintenance and repair is complicated by the wiring complexity. These complications cost the user money. [5] Some common terms used to describe communications follow, based upon on the web site glossary of technical terms from the web site http://www.its.bldrdoc.gov/fs-1037/dir-001/_0063.htm, accessed in 2004. [6] The Open Systems Interconnection-Reference Model (OSI-RM) refers to an abstract description of the digital communications between application processes running in distinct systems. The model employs a hierarchical structure of seven layers. Each layer performs value-added service at the request of the adjacent higher layer and, in turn, requests more basic services from the adjacent lower layer: [7] The Physical Layer is Layer 1, the lowest of seven hierarchical layers of the OSI-RM. The Physical layer performs services requested by the Data Link Layer. There are three major functions and services performed by the physical layer. First, establishment and termination of a connection to a communications medium. Second, participation in the process whereby the communication resources are effectively shared among multiple users, e.g., contention resolution and flow control. And third, conversion between the representation of digital data in user equipment and the corresponding signals transmitted over a communications channel. [8] The Data Link Layer is Layer 2 of the OSI-RM. This layer responds to service requests from the Network Layer and issues service requests to the Physical Layer. The Data Link Layer provides the functional and procedural means to transfer data between network entities and to detect and possibly correct errors that may occur in the Physical Layer. Note: Examples of data link protocols are HDLC and ADCCP for point-to-point or packet-switched networks and LLC for local area networks. [9] The Network Layer is Layer 3 of the OSI-RM. This layer responds to service requests from the Transport Layer and issues service requests to the Data Link Layer. The Network Layer provides the functional and procedural means of transferring variable length data sequences from a source to a destination via one or more networks while maintaining the quality of service requested by the Transport Layer. The Network Layer performs network routing, flow control, segmentation/desegmentation, and error control functions. [10] The Transport Layer is Layer 4 of the OSI-RM. This layer responds to service requests from the Session Layer and issues service requests to the Network Layer. The purpose of the Transport Layer is to provide transparent transfer of data between end users, thus relieving the upper layers from any concern with providing reliable and cost-effective data transfer. [11] The Session Layer is Layer 5 of the OSI-RM. This layer responds to service requests from the Presentation Layer and issues service requests to the Transport Layer. The Session Layer provides the mechanism for managing the dialogue between end-user application processes. It provides for either duplex or half-duplex operation and establishes checkpointing, adjournment, termination, and restart procedures. [12] The Presentation Layer is Layer 6 of the OSI-RM. This layer responds to service requests from the Application Layer and issues service requests to the Session Layer. The Presentation Layer relieves the Application Layer of concern regarding syntactical differences in data representation within the end 2 user systems. Note: An example of a presentation service would be the conversion of an EBCDIC-coded text file to an ASCII-coded file. [13] The Application Layer is Layer 7, the highest layer of the OSI-RM. This layer interfaces directly to and performs common application services for the application processes; it also issues requests to the Presentation Layer. The common application services provide semantic conversion between associated application processes. Note: Examples of common application services of general interest include the virtual file, virtual terminal, and job transfer and manipulation protocols. [14] Communications refers herein to at least one of the following First, information transfer, among users or processes, according to agreed conventions. Second, the branch of technology concerned with the representation, transfer, interpretation, and processing of data among persons, places, and machines. The meaning assigned to the data typically must be preserved during these operations. [15] Information transfer refers herein to the process of moving messages containing user information from a source to a sink. [16] Data refers here to representations of facts, concepts, or instructions in a formalized manner suitable for communication, interpretation, or processing .by humans or by automatic means. Any representations such as characters or analog quantities to which meaning is or might be assigned. [17] A Layer in a telecommunications network and/or an open systems architecture, refers herein to a group of related functions that are performed in a given level in a hierarchy of groups of related functions. In specifying the functions for a given layer, the assumption is made that the specified functions for the layers below are performed, except for the lowest layer. [18] Open systems architecture refers herein to a layered hierarchical structure, configuration, or model of a communications or distributed data processing system and/or a nonproprietary systems architecture. [19] The layered hierarchical structure, configuration, or model of a communications or distributed data processing system provides the following: the layered hierarchical structure enables system description, design, development, installation, operation, improvement, and maintenance to be performed at a given layer or layers in the hierarchical structure. The layered hierarchical structure allows each layer to provide a set of accessible functions that can be controlled and used by the functions in the layer above it. The layered hierarchical structure enables each layer to be implemented without affecting the implementation of other layers. The layered hierarchical structure allows the alteration of system performance by the modification of one or more layers without altering the existing equipment, procedures, and protocols at the remaining layers. 3 [20] Examples of independent alterations by modifying one or more layers include the following. Converting from wire to optical fibers at a physical layer without affecting the data-link layer or the network layer except to provide more traffic capacity. And altering the operational protocols at the network level without altering the physical layer. [21] Connection refers here to at least one of the following: A provision for a signal to propagate from one point to another, such as from one circuit, line, subassembly, or component to another. An association established between functional units for conveying information. [22] Communications medium refers herein to at least one of the following: In telecommunications, the transmission path along which a signal propagates, such as a wire pair, coaxial cable, waveguide, optical fiber, or radio path. The material on which data are or may be recorded, such as plain paper, paper tapes, punched cards, magnetic tapes, magnetic disks, or optical disks. [23] A channel refers herein to at least one of the following: A connection between initiating and terminating nodes of a circuit. A single path provided by a transmission medium via either physical separation, such as by multipair cable or electrical separation, such as by frequency- or time-division multiplexing. A path for conveying electrical or electromagnetic signals, usually distinguished from other parallel paths. Used in conjunction with a predetermined letter, number, or codeword to reference a specific radio frequency. The portion of a storage medium, such as a track or a band, that is accessible to a given reading or writing station or head. In a communications system, the part that connects a data source to a data sink. [24] A transfer refers herein to sending information from one location and to receive it at another. [25] A packet refers herein to a sequence of binary digits, which may including data and/or control signals, that is transmitted and/or switched as a composite whole. The data, control signals, and possibly error control information, are typically arranged in a specific format. [26] A format refers herein to the arrangement of bits or characters within a group, such as a word, message, or language. [27] A group refers herein to the following within the context of frequency division multiplexing and/or in the context of a set of characters forming a unit for transmission of cryptographic treatment. A group in frequency-division multiplexing refers herein to a specific number of associated voice channels and/or data channels, either within a supergroup or as an independent entity. [28] Routing refers herein to the process of determining and prescribing the path or method to be used for establishing telephone connections or forwarding messages. 4 129] TCP/IP refers herein to Transmission Control Protocol/Internet Protocol, which is a set of communications protocols required to communicate over a channel with the Internet. A TCP/IP Stack refers herein to the method of interacting with the Internet, which is often implemented as software running on a computer. The Internet Protocol refers herein to a packet switching protocol used as the network layer in the TCP/IP stack. [30] To summarize. Methods and apparatus are needed which simplify installation of access control systems for doors. A simple, modular approach is needed for installing and operating an access control system for a door. Access control systems are needed which can be installed in a door with a minimum of wiring. Access control systems are needed which interact across standard communications networks with centralized security systems. SUMMARY OF THE INVENTION [31] The invention includes a preferred mechanism for controlling access through a door, which electrically couples to security and power networks through a merged power-communication cable. This is the invention's access control module. When installed, the access control module preferably couples with a position magnet located in a strike plate mounted in the door frame. The access control module preferably includes an access control identification mechanism, an access controlled door lock, a door position sensor, and a Request Exit switch. Today the access control identification mechanism is preferably an access control scanning device, which is further preferably an access control card reader. The invention includes many alternatives on the elements of the access control module, which will be disclosed in the detailed description to follow. [32] The invention has the advantages of providing network interacting door locks without any additional power wiring. It supports security software models such as door objects as discussed on the www.sbd.us web site. It allows door security control to easily employ one or more communication networks to update access to each door equipped with the invention. [33] The invention includes a method of controlling access to the door using a merged power communication cable. Electrical power is provided from the merged power-communication cable through a means for managing the electrical power to a processing module, an access control identification mechanism and an access controlled door lock. The processing module interacts with the access control identification mechanism and with the merged power-communication cable to control the access controlled door lock. The processing module and the access controlled door lock are located in the door. Preferably, the access control identification mechanism is also located in the door. 5 6 [34] The invention also includes a method of using the access control module to make an access controlled door. By way of example, an installation estimate based upon this method shows an access door total of less than half the estimated cost of the prior art approach. 5 [35] In one aspect the present invention provides an apparatus, including: a door; a door frame; a strike plate attached to said door frame; a position magnet attached to said strike plate; 10 exactly one door conduit connected to said door and said door frame; exactly one merged power-communication cable passing through said door conduit, said merged power-communication cable comprising exactly one communication channel; an access control module positioned in said door on a latch side of said 15 door, said access control module including: a power interface connected to said merged power-communication cable; a communication interface connected to said merged power communication cable; 20 a processing module connected to said communication interface and to said power interface; and an access controlled door lock connected to said processing module wherein all communications between said access control module and a security network pass through said merged power-communication cable, and all electrical 25 power to said access control module passes through said merged power communications cable. BRIEF DESCRIPTION OF THE DRAWINGS 30 [36] Figure 1A shows a simplified schematic of a typical prior art access controlled door; 6a [37] Figure 1 B shows a schematic of the inventions access control module coupling a merged power- communication cable through a door conduit and aligned with a position magnet mounted in a door frame on the door latch side; 5 [38] Figure 2A shows a preferred embodiment of the access control module, the merged power- communication cable, and the strike plate of Figure IB; [39] Figures 2B shows the door frame side of the strike plate of Figure 2A; 10 [40] Figures 2C to 2E show alternative embodiments of the hinge conduit of Figures IB, 2A, 3A, 3D, 4A, 4B, and 16B, used to provide the merged power communication cable; [41] Figure 3A shows the door coupled with the door conduit providing a 15 merged power- communication cable into the door to certain embodiments of the access control module of Figures IB and 2A; [42] Figure 3B shows a typical view of the secured side of the door of Figure IB and 3A, including the access controlled door lock, and the REquest eXit switch; 20 [43] Figure 3C shows a typical view of the unsecured side of the door of Figures IB, 3A, and 3B, including at least one access control identification mechanism and the access controlled door lock; 25 [44] Figure 3D shows the hinge side of the door at which the door conduit of Figures IB and 3A couples with the door frame; [45] Figure 3E shows a placement of the door position sensor on the door latch side of the door of Figures IB and 3A; 30 6b [45a] Figure 4A shows the access control module of Figures IB and 3 A, where the means for interacting includes a first communications coupling between the processing module and the communication channel; [46] Figure 4B shows the access control module of Figure 4A where the means for interacting further 5 includes the access identifier coupling to the communication channel, and the access control coupling to the communication channel; [46] Figure 4B shows the access control module of Figure 4A where the means tor mnteractug further includes the access identifier coupling to the communication channel, and the access control coupling to the communication channel; [47] Figure 5A shows the access control module of Figure 3A where the processing module includes the means for managing and the means for interacting; [48] Figure 5B shows a refinement of the processing module of Figures 3A, and 4A to SA, where the communication interface, is an implementation of the means for interacting and is controllably coupled to the power interface, which is an implementation of the means for managing; [49] Figures 6A and 6B show the processing module of Figure 3A, and 4A to 5B, including a processing computer, which is first accessibly coupled to the processing memory; [50] Figure 7A shows an embodiment of the communication interface of Figures 6A and 6B including a communication interface computer; [51] Figure 7B shows an embodiment of the access control identification mechanism including an access identification computer, an access control scanning device, an identification interface, and an access identification memory; [52] Figure 8A shows a communication interface including a channel interface cryptically coupled with the encryption module, and providing the first communications coupling; [53] Figure 8B shows the encryption module including at least one of a send-encryption mechanism and/or a receive-encryption mechanism; [54] Figure 8C shows that an access control scanning device may include at least one of the following: the access control card reader, the access control biometric sensor, which may in turn include any of the following: a facial biometric sensor, a fragrance biometric sensor, a fingerprint biometric sensor, a skin residue DNA biometric sensor, and a skin characteristic sensor; [55] Figure 8D shows a security state for the door, which may take any one of the values of a secure door, a forced open door, a held open door, and an unlocked door; [56] Figure 9 shows a preferred implementation of the access control module of Figures lB, 2A, 3A, and 4A to 5A, including the processing computer, the power interface, the channel interface, and the peripheral interface; [57] Figure 10A shows a detail flowchart of the processing program system of Figures 2A, 6A, 6B, and 9; 7 [58] Figure 1 OB shows a detail flowchart of Figure I0A further interacting with the access control identification mechanism and the merged power-communication cable to control the access controlled door lock; [59] Figure 1IA shows a detail flowchart of Figure l0B further incorporating the access identification to create an access directive; [60] Figure 11 B shows a detail flowchart of Figure 1 1A, and alternatively, part of the communications program system of Figures 7A and 9, for sending the access identification via the merged power-communication cable to create a sent-identification; [61] Figure 12A shows a detail flowchart of Figure 11 B, further processing the access identification; [62] Figure 12B shows a detail flowchart of Figure 11 A, and part of the communications program system of Figures 7A and 9, for receiving the access directive; [63] Figure 12C shows a detail flowchart of Figure 12B further processing the access directive message to create the access directive; [64] Figure 13 shows a detail flowchart of Figure lOB further receiving the access identification; 165] Figure 14A shows a detail flowchart of Figure 10B, alternatively part of the access identification program system of Figures 7B and 9, further receiving the access identification; [66] Figure 14B shows a detail flowchart of the processing program system of Figures 6A, 6B and 9; [67] Figure 15A shows a detail flowchart of Figure 10A further managing the electrical power; [68] Figure 15B shows a detail flowchart of Figure I0A further interacting; [69] Figure 15C shows a detail flowchart of Figure 10B further controlling the access controlled door lock; [70] Figure 17A shows the access controlled door look including a piezoelectric controlled door lock; [71] Figure 17B shows alternatively, the access controlled door lock including a standalone door lock powered by an internal power storage device; [72] Figure 17C shows the access controlled door lock including an access controlled cylinder lock; [73] Figure 17D shows the access controlled door lock including an access controlled mortise lock; 8 [74] Figure 17E shows an alternative access controlled door lock including a standalone door look which is not powered by an internal power storage device; and [75] Figure 17F shows alternatively, the access controlled door lock including a solenoid controlled door lock. DETAILED DESCRIPTION [76] The invention includes a method of using an access control module 2000 to make an access controlled door as shown in Figure 1B. By way of example, an installation estimate based upon this method shows an access door total of less than half the estimated cost of the prior art approach shown in Figure 1A. The inventor has recognized a need for improvement, and provided a solution to a significant installation cost problem. [77] Figure 1A shows a schematic of a door 10 implementing the access control technology of the prior art. The access control technology of today requires separate installation of an access control card reader 310, a Request Exit Switch 30, a door position sensor 40 and an access controlled door lock 80. Each of these units requires separate wiring through at least one door conduit 300, which must provide power and communications wiring to each of these modules. The door frame 8 must further include a position magnet 46, which must work successfully with the door position sensor 40. During installation the position magnet 46 must be aligned with the door position sensor 40. Often these units must be installed in the door and tested one at a time, which dramatically increases the installation time and cost. The cost of running the many separate wires dramatically adds to the installation time and cost. At the local security closet, each of the control and data connections, as well as the power connections, for each of the installed units, must also be built and tested. [78] Figure lB shows a schematic of the door 10 using a preferred access control module 2000, which in turn uses a merged power-communication cable 50, The merged power-communication cable 50 is provided through the door conduit 300 to a security network 5002, as will be discussed in Figure 16B. The access control module will be discussed further in Figures 2, 3A, 4A, 4B, 5A, 6A, 6B, and 9. [79] The invention has the advantage of providing network interacting door locks without any addition power wiring. It supports security software models such as door objects. It allows door security control to easily employ one or more communication networks to update access to each door equipped with the invention. 9 Tables 1 and 2 show installation estimates for the prior art door of Figure 1A and the invention's door of Figure 1B. Item Remark Cost Electric lock premium over mechanical lock Assume a mortise lock $400 Wired hinge premium over a mechanical binge Assume a wired hinge $100 Door board for connections at the door Typical of many systems $500 Portion of access panel or Smart Remote Box Assume 16 card reader capacity $750 Cost of Smart Remote Box with 16 portions for a fully with 12 Volt and 24 Volt utilized panel including 40 hours installation at $75 per DC power supplies hour Access control card reader Typical prior art switch plate $400 style Door contact In edge of door as in Figs lB or $10 1B Request-to-Exit Switch PIR Device $150 Install equipment at door 6 hours at $75 per hour $450 Wire cost from Smart Remote Box to door and wire at door 150 feet at $0.50 per foot $75 Wire installation cost to door 160 feet, 4 hours at $75 per $300 hour Junction box for door, back box for card reader, plus any $500 conduit stubs to ceiling Programming 1 hour at $75 per hour $75 Sub total $3710 Warranty, overhead and profit at 15% $557 Access door total $4,267 Table 1 illustrates an installation estimate for the access controlled door of Figure 1A using the prior art, indicating a total cost of over $4,200 (US). Item Remark Cost Access control module premium over a mechanical lock. This Assume a mortise lock $900 assumes a mortise lock at $400, so the access control module at $1,300 Wired hinge premium over a mechanical hinge Assume a wired hinge $100 Portion of access panel or Smart Remote Box with 1 Rack Assume 16 access control card $100 Unit in an IDF closet with 16 portions for a fully utilized reader capacity with panel panel including 2 hours installation at $75 per hour cost at $1,600 Off-the-shelf PoE IP switch 24 port at $1,000, but only 17 $65 used Install equipment at door 1 hours at $75 per hour $75 Wire cost from Smart Remote Box to door and wire at door 150 feet at $0.10 per foot $15 Wire installation cost to door 160 feet, 2 hours at $75 per $150 hour Conduit stubs from hinge to ceiling $50 Programming 1 hour at $75 per hour $75 Sub total $1530 Warranty, overhead and profit at 15% $230 Access door total $1760 10 [80] Table 2 illustrates an installation estimate for the door 10 of Figure IB, using the invention's access control module 2000, indicating a total of $1,760 (US), less than half the estimated cost of the prior art approach. [81] The invention includes a preferred mechanism for controlling access through a door 10. The mechanism, known herein as the access-control module 2000, electrically couples to security and power networks through a merged power-communication cable 50 as shown in Figures IB and 16B. Figures 2A, 3A, 4A to 5A, and 9 show examples of the invention's access control module 2000. When installed, the access control module 2000 preferably couples with a position magnet 46 located in a strike plate 60 mounted in the door frame 8. The access control module 2000 may preferably include an access control identification mechanism 20, an access controlled door lock 80, a door position sensor 40, and a Request Exit switch 30. The invention includes many alternatives of the elements of the access control module, which will be disclosed in the detailed description to follow. [82] The merged power-communication cable 50, shown in the Figures, uses a single cable to provide both a communications protocol and to distribute power. The merged power-communications cable will support both delivering electrical power and providing at least one communications channel. The merged power-communication cable 50 includes at least two wires. One example of a merged power-communication cable 50 is the various versions of the Power over Ethernet (PoE) cable standard. The Power over Ethernet cable may preferably support a standard CAT-5 or CAT-6 cable. [83] The use of the merged power-communication cable 50 to exclusively supply all electrical power and communications to the access control module 2000 in the door 10 has numerous advantages. The invention includes a door conduit 300 as shown in Figures 2C to 2E. Each door conduit 300 includes exactly the merged power-communication cable 50 conveyed in a protected passage 302 between a first conduit opening 304 and a second conduit opening 306, which are mounted on the door frame 8 and door hinge side 12. [84] The merged power-communication cable 50 may further preferably include at least one merged power-communication coupling 48 as shown in Figure 2A. As shown in Figure 2C, the merged power communication cable 50 may preferably include two of the merged power-communication couplings 48. The merged power-communication coupling 48 may further preferably embody a RJ-45 connector. The access control module 2000 may further preferably include a power-communications mating coupling 56 for coupling to the merged power-communication coupling 48 as shown in Figure 2A. [85] The invention includes a preferred module for controlling access through the door 10, which electrically couples to security and power networks through the merged power-communication cable 50. This module is an example of the invention's access control module 2000 as shown in Figures IB, 2A, 3A, 4A to 5A, 7B, and 9. The access control module 2000 preferably includes an access control 11 identification mechanism 20, an access controlled door lock 80, a door position sensor 40, and a Request Exit switch 30. [86] The invention includes the door 10 made using the access control module 2000 as shown in Figures IB, 3A, 4A, 4B, and 16B. The door conduit 300 may be assembled on the door hinge side 12 of the door 10 as shown in Figures 2B to 2D, and 3D. The invention includes the door 10 mounted in the door frame 8. Preferably, the position magnet 46 is included in the strike plate 60 supporting alignment of the door position sensor 40 by aligning the first latch 66 to the first latch entry 62 included in the strike plate 60, as shown in Figures 2A and 2B. It may be further preferred that a dead bolt latch 68 also align to a second latch entry 64 in the strike plate 60. The position magnet 46 is further preferred to be located on the face of the strike plate 60 facing the door frame 8. [87] In Figures 1A and 1B, the Request Exit Switch 30 is available for use on the secure door side 16 as further shown in Figure 3B. The access control identification mechanism 20 is available on the unsecured door side 18 of the door 10 as shown in Figure 3C. A typical application, such as in a hotel, has the secure door side 16 of the door 10 facing the interior of a room, apartment, and/or suite. Often, the request exit switch 30 is built into an integrated door lock, which also includes the access controlled door lock 80. In many situations, the access controlled door lock 80 and the Request eXit switch 30 may be integrated into a single lock set. This is often the preferred mode of the invention. A typical view of the unsecured door side 18 includes at least one access control identification mechanism 20 and the access controlled door lock 80. [88] The door position sensor 40 of Figures 3A and 3E may include an open circuit presenting two contacts, which couple with a conductive strip 46 mounted in the door frame 8. Alternatively, the door position sensor 40 may interact with a position magnet 46 mounted in the door frame 8. The door position sensor 40 may preferably be located at the top of the door 10, adjacent to the door frame 8, and not necessarily visible. [89] The access control identification mechanism 20 of Figures 2A, 3A, 4A to 5A, and 9, may preferably include an access control scanning device 378 as shown in Figures 8C and 9, which is further preferred to include an access control card reader 310. The access control identification mechanism 20 may include an access control biometric sensor 312. The access control biometric sensor 312 may include at least one of the following. A facial biometric sensor 314. A fragrance biometric sensor 316. A fingerprint biometric sensor 318. A skin residue DNA biometric sensor 320. And a skin characteristic biometric sensor 322. [90] In certain preferred embodiments, the access control scanning device 378 of Figure 7B is an access control card reader 310. In certain preferred embodiments, there may be more than one access 12 control scanning device 378. To simplify the discussion and Figures, this discussion will focus on just one such device. This is not meant to limit the scope of the claims. [91] In certain preferred embodiments, an access control biometric sensor 312 may be used. This may lead to creating a biometric access sensor identification 340. Creating the biometric access sensor identification 340 may further involve the use of a biometric sensor template 350. [92] The invention includes a method of controlling access to the door 10 using the merged power communication cable 50. Electrical power 52 is provided from the merged power-communication cable through the means for managing 100 electrical power to a processing module 1000, the access control identification mechanism 20 and the access controlled door lock 80. The processing module 1000 interacts 200 with the access control identification mechanism 20 and with the merged power communication cable 50 to control the access controlled door lock 80. The processing module 1000 and the access controlled door lock 80 are located in the door 10. Preferably, the access control identification mechanism 20 is also located in the door 10. [93] The access control module 2000 preferably implements this method. The access control module 2000 preferably includes the following: The means for managing 100 electrical power from the merged power-communication cable 50 to the processing module 1000, the access control identification mechanism 20 and the access controlled door lock 80, as shown in Figures 3A, 5A, 5B, 6B and 9. The means for interacting 200 between the processing module 1000, the merged power-communication cable 50 and the access control identification mechanism 20 is used to control 84 the access controlled door lock 80 as shown in Figures 3A, and 4A to 5B. [94] In Figure 3A, the access control module 2000 includes the following. A means for managing 100 electrical power 52 from the merged power-communication cable 50 to the processing module 1000, the access control identification mechanism 20 and the access controlled door lock 80. And includes a means for interacting 200 with the processing module 1000, the merged power communication cable 50 and the access control identification mechanism 20 to control 84 the access controlled door lock 80. The access control module 2000 preferably includes a processing module 1000, an access control identification mechanism 20, an access controlled door lock 80, a request exit switch 30, and a door position sensor 40. Preferably the processing module 1000 is interacting 200 with at least one communication channel 54 of the merged power-communication cable 50. [95] The invention includes operating the processing module 1000 in the door 10 to control access through the door 10 as shown in Figures 3A, 4A to 6B, and 9. The processing module 1000 receives at least part of the electrical power 52 from the merged power-communication cable 50. The processing module 1000 interacts with the access control identification mechanism 20 and with the merged power communication cable 50 to control the access controlled door lock 80. 13 196] There are numerous alternative interconnection, control and communication schemes which various embodiments of the access control module 2000 may use. As a starting point, consider the processing module 1000 of Figure 3A, and Figure 4A to Figure 5B including a processing computer 1100, which is first accessibly coupled 1102 to the processing memory 1200, as shown in Figures 6A, 6B and 9. The processing memory 1200 includes the processing program system 1300, the access identification 1220, and access directive 1210.The processing memory 1200 may further preferably include the access identification message 1230 and/or the access directive message 1240. [97] In Figures 6A, 6B, and 9, the processing computer 1100 uses the first communications coupling 202 to communicate via the communication interface 210 with the communication channel 54. The communication interface 210 may preferably embody an implementation of the means for interacting 200. [98] In Figures 6A, 6B, and 9, the processing computer 1100 uses the peripheral interface coupling 802 to communicate and control via the peripheral interface 800. The processing computer 1100 communicates and controls the access control identification mechanism 20 via the access identifier coupling 24 and via the peripheral interface 800. The processing computer 1100 communicates and controls the access controlled door look 80 via the access control coupling 84 and via the peripheral interface 800. The processing computer 1100 communicates and controls the Request EXit Switch 30 to provide the sensed requesttoexit state 32 via the peripheral interface 800. The processing computer 1100 communicates and controls the door position sensor 40 to provide the sensed door position 42 and via the peripheral interface 800. [99] Some of the following figures show flowcharts of at least one method of the invention, possessing arrows with reference numbers. These arrows will signify of flow of control and sometimes data supporting implementations including at least one program operation or program thread executing upon a computer, inferential links in an inferential engine, state transitions in a finite state machine, and dominant learned responses within a neural network. [100] The operation of starting a flowchart refers to at least one of the following. Entering a subroutine in a macro instruction sequence in a computer. Entering into a deeper node of an inferential graph. Directing a state transition in a finite state machine, possibly while pushing a return state. And triggering a collection of neurons in a neural network. The starting of a flowchart is denoted by an oval with the word "Start" in its interior. [101] The operation of termination in a flowchart refers to at least one or more of the following. The completion of those operations, which may result in a subroutine return, traversal of a higher node in an inferential graph, popping of a previously stored state in a finite state machine, return to dormancy of 14 the firing neurons of the neural network. The operation of termination is denoted by an oval with the word "Exit" in its interior. [102] A computer as used herein will include, but is not limited to an instruction processor. The instruction processor includes at least one instruction processing element and at least one data processing element. Each data processing element is controlled by at least one of the instruction processing elements. [103] The invention also includes the processing module 1000 implemented as means for its operations. These means may include at least one of any of the following: a computer, a finite state machine, a neural network and an inferential engine. [104] The operations of the processing module 1000 may be implemented as program steps in a processing program system 1300 controlling at least one computer, the processing computer 1100. The program steps residing in a processing memory 1200 may be accessibly coupled with the processing computer 1100. As used herein, any memory may include at least one volatile memory address and/or at least one non-volatile memory address. The content of a volatile memory address may be altered by a loss of electrical power. Whereas the content of a non-volatile memory address is unaffected by the loss of electrical power. [105] In certain embodiments of the invention, the means for managing 100 the electrical power 52 may include a power interface 100. Figure 10A shows a detail flowchart of the processing program system 1300 of Figures 6A, 6B, and 9 for the inventions method. Operation 1312 supports managing the power interface 100 to distribute the electrical power 52. Operation 1322 supports interacting with the access control identification mechanism 20 and the merged power-communication cable 50 to control 84 the access controlled door lock 80. [106] The means for managing 100, possibly implemented as the power interface 100, may provide a third electrical power 102 to the means for interacting 200. The means for interacting 200 may include, and/or be implemented as, a communication interface 210 interacting with the merged power communication cable 50 as in Figures 5A and 5B. The power interface 100 may preferably provide a second electrical power 82 to the access controlled door lock 80. [107] The processing module 1000 may operate as in Figure 4A. The power interface 100 receives at least part of the electrical power 52 from the merged power-communication cable 50 and provides a third electrical power 102 to a communication interface 210 which interacts 200 with the merged power-communication cable 50. The power interface 100 may provide a second electrical power 82 to the access controlled door lock 80. 15 [108] The invention also includes the processing module 1000 implemented as means ror is operations. These means may include at least one of the following: a computer, a finite state machine, a neural network and an inferential engine. As used herein a computer includes at least one instruction processor and at least one data processor, where each of the data processors is controlled by at least one of the instruction processors. [109] The operations of the processing module 1000 may be implemented as program steps in a processing program system 1300 controlling at least one computer, the processing computer 1100, as shown in Figures 6A, 6B, and 9. The program steps reside in a processing memory 1200 accessibly coupled with the processing computer 1100. The processing memory 1200 may include volatile and/or non-volatile memory addresses. [110] Figure 9 shows a preferred implementation of the access control module 2000 of Figure 3A, and Figure 4A to Figure 5A, including the processing computer 1100, the power interface 100, the channel interface 220, and the peripheral interface 800, which have been previously discussed. [111] In Figure 9, the method of operating the access control module 2000 is shown as the processing computer 1100 directed by the communications program system 3000, the access identification program system 3300, and the processing program system 1300. To simplify the discussion, these potentially separate operational aspects will be primarily discussed in terms of the processing program system 1300, with specific reference made to operations which might frequently be performed by the access identification computer 370 and/or the communication interface computer 230. One skilled in the art will recognize that some or all of these operations may just as readily be performed by the access identification computer 370 and/or the communication interface computer 230. [112] In certain preferred embodiments, the processing module 1000 interactions may include the following. Receiving an access identification 1220 from the access control identification mechanism 20. Incorporating the access identification 1220 to create an access directive 1210. The processing module 1000 controlling the access controlled door lock 80 based upon the access directive 1210. [113] Figure 10B shows a detail flowchart of operation 1322 of Figure 10A interacting with the access control identification mechanism 20 and the merged power-communication cable 50 to control 84 the access controlled door lock 80. Operation 1352 supports receiving the access identification 1220 from the access control identification mechanism 20. Operation 1362 supports incorporating the access identification 1220 to create an access directive 1210. Operation 1372 supports controlling the access controlled door lock 80 based upon the access directive 1210. [114] In certain preferred embodiments, the processing module 1000 may further interact as follows. The processing module 1000 may receive a sensed door position 42 from a door position sensor 40. The 16 processing module 1000 may receive a sensed requesttoexit state 32 from a Request Exit switch 30, also sometimes known as a REX switch. Controlling the access controlled door lock 80 may be further based upon the sensed door position 42, the sensed request toexit state 32 and the access directive 1210. [115] Figure 15B shows a detail flowchart of operation 1322 of Figure 10A. Operation 1772 supports receiving a sensed door position 42 from the door position sensor 40 of Figures 3A, 3B, 3E, 5A, and 9. Operation 1782 supports receiving a sensed request toexit state 32 from a Request EXit switch 30. [116] Figure 15C shows a detail flowchart of operation 1372 of Figure 10B further controlling the access controlled door lock 80. Operation 1792 supports controlling the access controlled door lock 80 based upon the sensed door position 42, the sensed request toexit state 32, and the access directive 1210. [117] Figure. 16A shows a detail flowchart of operation 1792 of Figure 15C further controlling the access controlled door lock 80. Operation 1812 supports determining a security state 270 of Figure 8D for the door 10 based upon the sensed door position 42, the sensed requesttoexit state 32, and the access directive 1210. Operation 1822 supports performing the access directive 1210 upon the access controlled door lock 80. Operation 1832 supports sending the security state 270. [118] Figure 4A shows the access control module 2000 of Figure 3A where the means for interacting 200 includes a first communications coupling 202 between the processing module 1000 and the communication channel 54. Figure 4B shows the access control module 2000 of Figure 4A where the means for interacting 200 further includes the access identifier coupling 24 to the communication channel 54, and the access control coupling 84 to the communication channel 54. [119] The access control module 2000 may preferably support a TCP/IP stack 246 in any of several alternative embodiments. By way of example, the communication interface 210 may support the TCP/IP stack 246 stack for interactions with the merged power-communication cable 50 as shown in Figure 7A. The access control identification mechanism 20 may support the TCP/IP stack 246 as shown in Figure 7B. The processing module 1000 may support the TCP/IP stack 246 as shown in Figure 9. [120] The communication interface 210 may preferably include a communication interface computer 230 as shown in Figure 7A. The communication interface computer 230 may accessibly couple with a communication interface memory 240, interactively couple with the merged power-communication cable 50 and controllably couple with the access controlled door lock 80. [121] The access controlled door lock 80 may include a piezoelectric controlled door lock 700 as shown in Figure 17A. Alternatively, the access controlled door look 80 may include a standalone door lock 710, as shown in Figure 17E, and powered by an internal power storage device 714, which 17 typically drives a Direct Current (DC) motor as shown in Figure 17B. The access controlled door lock 80 may include an access controlled cylinder door lock 720 as shown in Figures 2A and 17C. The access controlled door lock 80 may include an access controlled mortise door lock 730 as shown in Figure 17D. Alternatively, the access controlled door lock 80 may include a solenoid controller door lock 722, as shown in Figure 17F. [122] The invention also includes a door conduit 300 providing the merged power-communication cable 50 to at least the processing module 1000 in the door 10. The door conduit 300 includes a protected passage capable of passing the merged power-communication cable 50 from a door frame 8 conduit-opening to a door 10 conduit-opening inside the door 10. The protected passage may also act as a mechanical hinge for the door. Figure 3D shows the door latch side 14 of the door 10 of Figures 1B, 2C, 2D, and 3A, where the door conduit 300 of Figure 2C to 3A, couples with the door frame 8. [1233 The components of the access control module 2000 may be organized in several ways to suit the needs of various environments. The processing module 1000 may includes the means for managing 100 and the means for interacting 200 as in Figures 5A and 5B. The means for managing 100, and/or the power interface 100, may include at least one computer, at least one finite state machine, an inferential engine and/or a neural network. [124] Figure 5B shows a refinement of the processing module 1000 Figures 3A, and 4A to 5A. The communication interface 210, which is an implementation of the means for interacting 200, is controllably coupled 104 to the power interface 100, which is an implementation of the means for managing 100. The power interface 100 provides at least part of the electrical power 52. as a third electrical power 102 received by the means for interacting 200. There is no single central computer shown. However, either or both the power interface 100 and/or the communication interface 210 may include at least one computer. [125] Figure 7A shows an embodiment of the communication interface 210 of Figures 6A and 6B including a communication interface computer 230. The communication interface computer 230 is second accessibly coupled 242 to the communication interface memory 240. The communications program system 3000 includes program steps residing in the communication interface memory 240 to direct the operations of the communication interface 210. The communication interface memory 240 may also include, both through use of the communications program system 3000 and other resources, the TCP/IP stack 246. The communication interface 210 may include an encryption module 250. The communication interface 210 may store the access identification message 1230 and/or the access directive message 1240. The channel interface 220 interacts with the communication channel 54 to support communication via the merged power-communication cable 50. The communication interface computer 230 is fifth coupled 222 with the channel interface 220. 18 [12o] The access control identification mechanism 20 of Figures 2A, 3A, 4A to 5A, and 9 may include the following. Figure 7B shows an embodiment of the access control identification mechanism 20, which includes an access identification computer 370, an access control scanning device 378, an identification interface 374, and an access identification memory 360. The access identification computer 370 is third accessibly coupled 362 to the access identification memory 360. The access identification program system 3300 includes at least one program step residing in the access identification memory 360, which implements, at least in part, the access identification method(s) used by the invention's embodiments. The access identifier coupling 24 interacts with the identification interface 374. The identification interface 374, in turn, access-ident-couples 372 with the access identification computer 370. The access identification computer 370 access-ID-couples 376 with the access control scanning device 378. The access identification computer 370, directed by program steps of the access identification program system 3300, communicates via the access-ID-couples 376 with the access control scanning device 378 to create the access identification 1220. [127] The discussion of the means for interacting 200, and more specifically the communication interface 210 continues. Figures 7A, 8A, and 9 show the communication interface 210 including a channel interface 220, which provides the first communications coupling 202. The channel interface 220 couples with at least one communication channel 54. [128] The operation of the access control module 2000 may include using encryption to limit the potential compromising the data content through reading or writing on the security network 5002 shown in Figure 16B. Interactions of the processing module 1000 with the merged power-communication cable 50 may use encryption. [129] In Figure 8A, the channel interface 220 is cryptically coupled 252 with the encryption module 250. Figure 8B shows the encryption module 250 including at least one of a send-encryption mechanism 254 and/or a receive-encryption mechanism 256. [130] In Figures 3A, 4A to 5A, and 9, the processing module 1000 interacts 200 with the access control identification mechanism 20, and with the merged power-communication cable 50, to control 84 the access controlled door lock 80. At least the processing module 1000 and the access controlled door lock 80 are located in the door 10. Preferably, the access control identification mechanism 20 is also located in the door 10. [131] Figure 11A shows a detail flowchart of operation 1362 of Figure 10B further incorporating the access identification 1220 to create an access directive 1210. Operation 1502 supports sending the access identification 1220 via the merged power-communication cable 50 to create a sent-identification. Operation 1512 supports receiving the access directive 1210 from the merged power-communication cable 50 based upon the sent-identification. 19 [132] Figure 11B shows a detail flowchart of operation 1512 of Figure 11A, and alternatively, part of the communications program system 3000 of Figures 7A and 9, for sending the access identification 1220 via the merged power-communication cable 50 to create a sent-identification. Operation 1532 supports processing the access identification 1220 to create an access identification message 1230. Operation 1542 supports sending the access identification message 1230 to create the sent identification. [133] Figure 12A shows a detail flowchart of.operation 1532 of Figure 11B, further processing the access identification 1220. Operation 1562 supports processing the access identification 1220 based upon the send-encryption mechanism 254 of Figure 8B to- create the access identification message 1230. [134] Figure 12B shows a detail flowchart of operation 1512 of Figure 11A, and part of the communications program system 3000 of Figures 7A and 9, for receiving the access directive 1210. Operation 1582 supports receiving an access directive message 1240 from the merged power communication cable 50 based upon the sent-identification. Operation 1592 supports processing the access directive message 1240 to create the access directive 1210. [135] Figure 12C shows a detail flowchart of operation 1592 of Figure 12B further processing the access directive message 1240 to create the access directive 1210. Operation 1592 supports processing the access directive message 1240 based upon the receive-encryption mechanism 256 of Figure 8C to create the access directive 1210. [136] The discussion of the access control identification mechanism 20 continues. Figure 13 shows a detail flowchart of operation 1352 of Figure 10B further receiving the access identification 1220. Operation 1612 supports receiving the access identification 1220 from the access control card reader 310 of Figure 8C. Operation 1622 supports receiving the access identification 1220 from the access control biometric sensor 312. Operation 1632 supports receiving the access identification 1220 from a facial biometric sensor 314. Operation 1642 supports receiving the access identification 1220 from a fragrance biometric sensor 316. Operation 1652 supports receiving the access identification 1220 from a fingerprint biometric sensor 318. Operation 1662 supports receiving the access identification 1220 from a skin residue DNA biometric sensor 320 or a skin characteristic biometric sensor 322. [137] The discussion of receiving the access identification 1220 continues. Figure 14A shows a detail flowchart of operation 1352 of Figure 10B, alternatively part of the access identification program system 3300 of Figures 7B and 9. Operation 1682 supports receiving a biometric access sensor identification 340 from the access control biometric sensor 312. Operation 1692 supports processing the biometric access sensor identification 340 based upon the biometric sensor template 350 to create the access identification 1220. 20 21 [138] The discussion of the biometric sensor template 350 continues. Figure 14B shows a detail flowchart of the processing program system 1300 of Figures 6A, 6B and 9. Operation 1712 supports receiving the biometric sensor template 350 from the merged power-communication cable 50. Operation 1722 supports sending the biometric sensor template to the access control identification mechanism. [139] The discussion of managing the electrical power 52 continues. Figure 15A shows a detail flowchart of operation 1312 of Figure 10A. Operation 1742 supports providing a first electrical power 22 to the access control identification mechanism 20. Operation 1752 supports providing a second electrical power 82 to the access controlled door lock 80. [140] The discussion of the use of various aspects of the invention in a security network 5002 continues. Figure 16B shows the door 10 made with a first instance 2000-lof the access control module 2000 coupled by a first cable instance 50-1 of the merged power-communication cable 50. The first cable instance 50-1 is routed through the door conduit 300 to the security network 5002. The first cable instance 50-1 may be seen in network diagrams to be a direct part of the security network 5002. [141] In Figure 16B, the second instance 2000-2 of the access control module 2000 is shown to couple by a second cable instance 50-2 of the merged power communication cable 50 to a Power over Ethernet switch 3920. The Power over Ethernet switch 3920 may communicatively couple 3902 to a controller 3900, all of which may be included in a local security closet. The controller 3900 may be shown in network diagrams communicating over the security network 5002 with a server 5000. The server 5000 may have dedicated security activities, or else provide a transfer point to a security management station which may be located at a distance from the door 10 and/or the server 5000. [142] The preceding embodiments have been provided by way of example and are not meant to constrain the scope of the following claims.

22 [143] The terms "comprises," "comprising," "including," and "having," and variations thereof are inclusive and therefore specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.

Claims (19)

1. An apparatus, including: a door; a door frame; 5 a strike plate attached to said door frame; a position magnet attached to said strike plate; exactly one door conduit connected to said door and said door frame; exactly one merged power-communication cable passing through said door conduit, said merged power-communication cable including exactly one 10 communication channel; an access control module positioned in said door on a latch side of said door, said access control module including: a power interface connected to said merged power-communication cable; 15 a communication interface connected to said merged power communication cable; a processing module connected to said communication interface and to said power interface; and an access controlled door lock connected to said processing 20 module wherein all communications between said access control module and a security network pass through said merged power-communication cable, and all electrical power to said access control module passes through said merged power-communications cable.

2. The apparatus of Claim 1, wherein said access control identification 25 mechanism includes a card reader.

3. The apparatus of Claim 1, wherein said access control identification mechanism includes a fingerprint biometric sensor. 24

4. The apparatus of Claim 1, wherein said processing module is adapted to send an access directive message over said merged power-communication cable.

5. The apparatus of Claim 1, wherein said processing module further 5 includes: a processing computer coupled to said power interface; and a processing memory coupled to said processing computer.

6. The apparatus of Claim 5, wherein said access control module is adapted to send an access identification message to said processing computer. 10

7. The apparatus of Claim 5, further including a request exit switch coupled to said processing computer.

8. The apparatus of Claim 5, further including a door position sensor coupled to said processing computer, said door position sensor interacting with said magnet to form a sensed door position. 15

9. The apparatus of Claim 5, further including an encryption module coupled to said communication interface.

10. The apparatus of Claim 5, wherein said communication interface includes a communication interface computer and a communication interface memory coupled to said communication interface computer. 20

11. The apparatus of Claim 5, wherein said communication interface includes a channel interface.

12. The apparatus of Claim 11, where said processing computer is adapted to receive an access control directive from said channel interface.

13. The apparatus of Claim 1, wherein said processing module is adapted to 25 send a security state of a door over said merged power-communication cable. 25

14. The apparatus of Claim 13, wherein said security state represents a condition of a door selected from the group consisting of a secure door, a forced open door, a held open door, and an unlocked door.

15. The apparatus of Claim 1, where said processing module is adapted to 5 control said access controlled door lock in response to an access directive received over said merged power-communication cable.

16. The apparatus of Claim 1, wherein said access controlled door lock receives electrical power from said power interface.

17. The apparatus of Claim 1, wherein said merged power-communication 10 cable implements a form of Power Over Ethernet (POE) protocol.

18. The apparatus of Claim 1, wherein said processing module further includes: a processing computer; and a processing memory containing at least one program step of a processing 15 program system directing said processing computer, wherein said processing program system includes the program steps of: managing said power interface to distribute electrical power; and controlling said access controlled door lock. 20

19. The apparatus of Claim 18, wherein said processing program system further includes the program steps of: determining a security state for a door; and receiving an access directive message from said merged power communication cable. 25 EDMONDS H CHANDLER, JR WATERMARK PATENT AND TRADE MARKS ATTORNEYS P29156AU02