KR101883476B1 - Access Control System - Google Patents

Abstract

According to a preferred embodiment of the present invention, in an access control system having a plurality of door portions, a connection between a door portion and an access control portion is connected through a USB device so that a door control portion controls a large number of door portions In addition, when a USB device connected to a specific port is disconnected and a different port is connected to another port, the same port is recognized as a separate port. .

Description

[0001] ACCESS CONTROL SYSTEM [0002]

The present invention relates to an apparatus for performing access control using a USB device.

In a building or the like, the access control system controls the opening and closing of a plurality of gates, and the RFID reader uses a method of opening and closing gates only when an authorized card is recognized, thereby performing access control.

However, when there are a plurality of doors, interlocking between doors is required and the function of the access cortol controller is required to control them. However, there is a problem that the cost of the Access Cortol Controller is expensive and is not easy to implement.

According to a preferred embodiment of the present invention, the access control system includes a plurality of door parts for recognizing an RFID card or a fingerprint of a passenger through an RFID reader or an IO port to open / close a space through which a passenger can enter and exit; A plurality of USB devices corresponding to each of the plurality of door portions; And determines whether or not the user is permitted to enter or exit based on the access permitor list information already stored in the database and the RFID signal or fingerprint recognition information recognized from the door units by the plurality of door units and the plurality of USB devices, And an access control unit for transferring the result to the door units via the USB device, wherein the access control unit includes the door units, the plurality of USB devices, and the plurality of door units on the database The RFID reader or the information of the IO ports is managed as a separate table or list.

Preferably, the access control unit is implemented in the form of a personal computer, displays the connection status of the plurality of door units and the plurality of USB devices connected to the display, and displays the connection status of the door units, And displays the connection status of the ports separately.

Preferably, the access control unit identifies each of the plurality of USB devices using a serial number of the USB device, and when at least one of the plurality of USB devices is disconnected or reconnected, And the identification of the USB device is performed.

In a preferred embodiment of the present invention, the connection between the door unit and the access control unit is connected through a USB device so that a large number (about 127 expandable) door units can be stably controlled through a plurality of USB devices in the access control unit The method comprising: For this purpose, an identifier is assigned to each of the door unit, the element (including the reader / IO) and the USB device, and management is performed in a separate table or list on the database. In addition, if the USB device connected to the specific port is disconnected and the port is connected to a different port than the previous one, the same port can be realized.

In a preferred embodiment of the present invention, the function of the Access Cortol Controller is implemented in a general PC or UMPC, and an access control system using a universal USB I / O device, a universal reader, and a universal USB- There is an advantage of lowering the unit price by implementing access control system without dedicated controller.

Further, in a preferred embodiment of the present invention, in the access control system having a plurality of door portions, a connection between the door portion and the access control portion is connected through a USB device so that the access control portion controls a large number The door control part is implemented by driving the SW application on the hardware of a general desktop PC level. The door control part is composed of a door part and an element (including a reader / IO) , It is possible to recognize the same port even when a USB device connected to a specific port is disconnected and another port is connected to another port by separately providing a USB device and managing it as a separate table or list on the database .

Figure 1 shows an embodiment of an access control system.
Figure 2 shows another embodiment of an access control system.
FIG. 3 shows an example of implementing the function of an Access Control Controller instead of a dedicated Access Control Board in a general Desktop PC or a low-cost UMPC according to a preferred embodiment of the present invention.
FIG. 4 shows an example of an access control system implemented in the manner of FIG.
5 is a block diagram illustrating an internal configuration of an access control system according to an embodiment of the present invention.
6 is a block diagram illustrating an internal configuration of an access control system according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings. It should be noted that the same components of the drawings are denoted by the same reference numerals and signs as possible even if they are shown on different drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

Figure 1 shows an embodiment of an access control system.

The access control system comprises an Access Control Server 130, an Access Control Gateway 120, and an Access Controller 110.

The access control server 130 manages information of the cardholder and the access controller 110, and includes a database for this purpose. The Access Control Server 130 provides a method for the End user to operate the Access Control Controller 110 as desired, and the End User can perform this method through the UI.

One access controller 110 constitutes a door using a plurality of RFID readers 111 and 112. The access controller 110 generates an access control message according to a Cardholder List permitted by the Access Control Server 130 and an Output Relay is adjusted to open and close the door.

In the access control system of FIG. 1, a plurality of access controllers can be controlled by using the access control gateway 120. Also, the Access Control Gateway 120 may collect events from a plurality of controllers and send them to the Access Control Server 130. Also, the Access Control Gateway 120 may transmit commands to the Access Controller 110 in addition to the Event Collection.

The access control system shown in Fig. 1 controls the opening and closing of a plurality of gates, and the RFID reader can perform access control by opening and closing the gates only when an authorized card is recognized. However, there is an inconvenience that interlocking of a plurality of doors and the like is not implemented.

An Anti-Passback function, an Interlocking function, and a Global IO function are required for interlocking between a plurality of doors.

● Anti-Passback function

Anti-Passback is a function that prevents continuous passage of the door by the RFID Reader at the entrance or exit of one door to prevent the person passing the door from passing the card directly to the person who has not passed the card.

Basic Anti-Passback is a concept implemented by one door. However, if there are several doors for entry and exit like company lobby, there is a lot of Zone Anti-Passback that allows multiple doors to work together to implement anti-passback .

● Interlocking function

Interlocking has two meanings. The first is that sequential door control, which means that one door must be completely closed, but another door must be opened, and that this concept can be expanded to open another specific door after a particular door is closed.

● Global IO function

The Access Control system provides various kinds of sensors to open / close the doors and alarms, and the sensor is detected by the input port of the Access Control Controller.

Global IO refers to the function that the output of another Access Control Controller is changed by the input of one Access Control Controller.

In order to implement such a function, communication between the access control controllers must be performed so as to share the event, or the function of managing the interworking of the access control server 130 and the access control gateway 120 with the access control controller.

In the case of sharing the event through communication between the access control controllers, there may arise a problem that the door opening / closing is not performed in case of communication disconnection. To solve this problem, an access control system as shown in FIG. 2 has been proposed.

Figure 2 shows another embodiment of an access control system.

FIG. 2 is a view for improving the access control system of FIG. 1, in which the access control controller (FIG. 1, 110) of FIG. 1 is divided into a master controller (FIG. 2, 120) and a slave controller . The slave controllers 110 and 111 only perform IO open / close commands from the master controller 120 and deliver input events. All other controls are handled by the Master Controller (120).

In the access control system shown in FIG. 2, there is an advantage that the interlocking function between the doors is easy between the slave controllers 110 and 111 connected to one master controller 120, and the reliability of communication problems between the doors is assured.

To implement the access control system of FIG. 2, the slave controllers 110 and 111 connected to the master controller 120 are implemented as separate hardware. Door output, door contact, and RFID reader are basically required for the door configuration, and additional input ports and additional output ports for alarming are required to use a separate sensor. As a result, 4 input ports, 4 output ports and 1 rfid reader port are required for single gate configuration, and since there is no board for this purpose, a separate dedicated access control board is produced. However, such a dedicated access control board is disadvantageous in that it is not easy to implement because it is expensive.

FIG. 3 shows an example of implementing the function of an Access Control Controller instead of a dedicated Access Control Board in a general Desktop PC or a low-cost UMPC according to a preferred embodiment of the present invention.

The problem in implementing Access Control Controller function on general desktop PC or low cost UMPC is that the number of IOs is limited in the entry level PC or UMPC and the RFID reading function is not implemented.

In a preferred embodiment of the present invention, as shown in FIG. 3, a board 310 for performing IO and RFID reading functions using USB may be added. The board 310 shown in FIG. 3 can be implemented through a USB hub and a serial to USB device.

3, the PC or the UMPC 320 is implemented to perform functions of an access control virtual device through the installation of software or the like. The Access Control Virtual Device is implemented to determine the opening and closing of the door according to the Cardholder List transmitted by the Access Control Server after viewing the input and card events.

FIG. 4 shows an example of an access control system implemented in the manner of FIG. FIG. 4 shows how one door is structured when a PC or UMPC is implemented as a function of an access control virtual device. The PC 410 implemented as a function of the access control virtual device can be connected to a plurality of USB devices or another USB hub through a USB hub 420 or the like.

In a preferred embodiment of the present invention, when a reader (RFID, fingerprint, etc.) and an IO are connected to a single PC 410 via USB, a method of configuring a door by combining respective readers or IOs, Discloses an access control system that implements an interlocking function.

As a preferred embodiment of the present invention, the structure shown in FIG.

5 is a block diagram illustrating an internal configuration of an access control system according to an embodiment of the present invention.

The access control system 500 includes a plurality of door units 510, a plurality of USB devices 520, and an access control unit 530.

The plurality of door parts 510 are realized to recognize the RFID card or the fingerprint of a passenger and to open and close a space through which the passenger can enter and exit. As a preferred embodiment of the present invention, each of the door portions 510 is implemented to read the RFID card from the RFID reader or open / close the door based on the fingerprint recognition result recognized by the fingerprint reader. The door basically requires one RFID reader and one output. When a specific card is recognized by the RFID reader, the output is changed at the output to control door opening and closing.

The plurality of USB devices 520 are implemented to correspond to each of the plurality of door units 510, and a concrete example may be referred to an example of FIG.

The access control unit 530 is connected to the plurality of door units 510 via the plurality of USB devices 520 and stores the access permitter list information previously stored in the database and the RFID or fingerprint recognized from the door units 510 And transmits the determination result to the door units 510 through the USB device 520. The door units 510 and 520 are connected to the door units 510 and 520, respectively.

The access control unit 530 manages an identification number for identifying each of the USB devices 520. Accordingly, even when at least one of the USB devices 520 is disconnected from the access control unit 530 and then reconnected, the access door can be opened and closed by checking the identification number of the USB device. The serial number of the USB device can be used as the identification number of the USB. When the USB devices 520 are once disconnected and then reconnected through the above method, they can be recognized by the same USB when they are connected to the other door unit 510.

The access control unit 530 may be configured to manage the information of the readers or IO ports included in the door units 510, the USB devices 520 and the door units 510 as separate tables or lists on the database.

The access control unit 530 can be implemented in the form of a PC or the like and the access control unit 530 can be implemented to display the status of the plurality of the door units 510 and the USB devices 520 connected to the access control unit 530 . Also, the access control unit 530 can display the connection status of the RFID reader and the IO ports when the connection status of the door units 510 is displayed on the display.

6 is a block diagram illustrating an internal configuration of an access control system according to an embodiment of the present invention. A method of opening and closing the door by combining the RFID signal or the fingerprint identification information received from the RFID reader or IO of the door unit when the access control unit of Fig. 5 is connected to the door unit via the USB, Discloses a method for implementing the interworking function.

As a preferred embodiment of the present invention, the access control unit 630 includes a separate database unit 640, 612, and 613 to implement separate management of the readers 611, 612, and 613 and the input / output port 614 for opening / To manage the information of the readers 611, 612, and 613 and the input / output ports.

The access control unit 630 shown in FIG. 6 includes an element data manager 650, a door manager 660, and an interlocking function unit 670.

Element Data Manager 650 receives information and events from readers 611, 612, and 613 and input / output port 614 from Protocol Handle Layer 651. The Protocol Handle Layer 651 receives events from an OS (Operating System) of the PC and checks which USB is connected. To this end, the protocol handler layer 651 determines which USB drivers are used for access control through the user-set business logic.

In the protocol handler layer (651), if you use a usb common api such as usblib instead of using the SDK provided by the USB device manufacturer, the type of the USB device can be specified separately for the reader and IO . Reader will be recognized as a USB-to-Serial device, and IO will be a USB Device Descriptor as another device. In this way, the access control unit 630 can distinguish whether the connected device is a reader or an IO when the USB device is connected.

The Element Data Manager 650 is implemented to store the identification number of the USB device in order to allow the operation to be performed even when the USB device is detached and reconnected. If the USB device is connected based on the identification number of the previously stored USB device, it is checked whether or not the USB device matches the pre-stored identification number. If they match, the USB device 652 transmits an event for USB connection (or separation) to the API layer 652.

Generally, USB has a Device Descriptor, Configuration Descriptor, Interface Descriptor, and Endpoint Descriptor, and the Device Descriptor has a unique serial number (iSerialNumber). In the present invention, the serial number unique to the product can be used as the identification number of the USB. However, for USB that does not provide the serial number, conversion and replacement can be performed by a method of writing a unique number in the flash memory.

The element data manage layer 650 monitors the connection or disconnection event of the USB device from the OS and manages a list of the devices included in the device type list designated by the user among the USB devices. This list has a separate column that indicates whether or not it is registered for use and can be implemented to register some of these lists in the Element data manage layer 650 to use for actual access control. By doing so, the protocol handle layer 651 can recognize the same port even if the registered USB device is connected to another port again or the PC is rebooted.

The Element Data Manage Layer 650 manages information of the available elements 611, 612, 613, and 614, and outputs an output according to the information. Therefore, it is divided into a part for element management and a part for controlling output, and a part for controlling output can be implemented in a thread.

For element management, we have Element Data Table. Columns of the table are added or deleted every time a Device connection or separation event sent from Protocol Handle Layer (651) comes.

The row of the Element Data Table is composed of the device index, device type (reader / input / output), alarm type (normal / alarm), reader type (rfid, fingerprint, releated output time list is required, and information such as time schedule, reader mode (dual registration, etc.) can be added according to the Access Control specification.

All relationships between elements are managed in the Element Data Table, in order to easily manage Global IO, a function that operates separately from the door. Element and door part implementations must be separated, and door part related implementations are done in Business Logic. The thread for controlling the output output sees the related output id and related output port defined in the Element Data Table and controls the output according to the reader and input event received from the Protocol Handle Layer. The Reader Event checks the database to see if a matching Cardholder is registered in the door and controls the output.

The global IO function is implemented by defining only the relationship between IOs regardless of the door part, and can be implemented by simply assigning output to a specific input in the Element Data Manage Layer.

Dual registration mode, Global APB, Interlocking, Arm / Disarm, etc., should be implemented as follows. Global APB, Interlocking, and Arm / Disarm implementations must be able to lock specific outputs. If you lock a specific output, the output will ignore the Input / Reader event until you unlock it. For the dual registration mode, the output must also have an activation condition. If the output has an activation condition, it ignores the operation by the input / reader and operates the output activation condition first. Which output is to be locked is determined based on the information of the database updated by Door Manager, and the door table of the database needs a column for the lock.

The API layer (652) implements the following method.

Bool SetUSBDeviceName (Bool flag, USBDeviceType usbDevType) // Register the USB device to use for Access Control (usually use idVendor and idProduct field of Device Descriptor)

List <ACElement> GetCurrentInput () // Return the currently available Input List

List <ACElement> GetCurrentOutput () // Return the currently available Output List

List <ACElement> GetCurrentReader () // Return the currently available Reader List

Bool SetInput (ACElement input, bool usage) // Register the Input to use among the Input List.

Bool SetOutput (ACElement output, bool usage) // Register output to use among Output List.

Bool SetReader (ACElement reader, ReaderType readerType, bool usage) // Register Reader and reader type (RF / Fingerprint, etc.) to use among Reader List.

Event ACElementDetached (ACElement acElement) // Occurs when there is a disconnected AC element.

List <ACElement input> GetRegisteredInput () // Registered Input List return

List <ACElement input> GetRegisteredOutput () // Registered Output List return

List <ACElement input> GetRegisteredReader () // Registered Reader List return

Bool SetInputProperty (ACElement input, InputProperty property) // Register the property of Input.

Bool SetOutputProperty (ACElement output, OutputProperty property) // Register the property of output.

Bool SetReaderProperty (ACElement reader, ReaderProperty property) // Register the property of the reader.

Event InputStatusChanged (ACElement input, InputStatus status) // Occurs when the input state changes

Event OutputStatusChanged (ACElement output, OutputStatus status) // Occurs when Output state changes

Event ReaderEventOccured (ACElement reader, object information) // Occurs when information comes in from Reader.

Event DeviceAttached (List <ACElement> elements) // Notification that the registered device is connected

Event DeviceDettached (List <ACElement> elements) // Notice that the registered device is detached

In addition, the door manager 660 of the access control unit 630 manages the DataTable so that the Elements 611, 612, 613, and 614 constituting the Door are filled with elements selected by the user, . In addition, the access control unit 630 receives information on the cardholder's data and which door the corresponding cardholder is allowed to access, and updates the database. Based on the updated database information, the Element Data Manager Layer 650 determines the opening and closing of the door.

The database 640 includes a USB Device Table for the Protocol Handle Layer 651, an Element Table for the Element Data Manage- ment Layer 650, a Door Manager 660, and an Element Data Manage- ment Layer A cardholder table for the door manager 650, and a door table for the door manager 660.

As a preferred embodiment of the present invention, the access control unit 630 does not have a policy as to when a person can pass through which door. However, it only has information on which door to pass to at what door.

At this time, it is possible to create one association table between door-cardholders in the database 640 by defining which door to pass through to which door, and generate one row each time a relation is made .

In this case, the number of columns in the table used to construct the association between the door-cardholder when the maximum number of 120 door openings can be configured in one PC and the storage limit of the cardholder of the virtual device is 20,000 Becomes 20,000 x 120 = 2,400,000, and the Element Data Manage Layer 650 must retrieve data of the event from this reader in this table to judge whether or not to open the door.

However, the search only compares whether the data in one column matches or not, so the actual operation is 2,400,000 times. Taking 1us for a row search takes 2.4 seconds. It takes too much time to process the events that occur in 120 doors.

Another method is to record the ID of a door that can be accessed in the Cardholder Table. In this case, column creation is difficult because the number of doors is dynamic. Otherwise, you have to create a column corresponding to 120 doors, the maximum number of doors.

Another method is to compress and store 120 door information in the Cardholder Table. Assuming that the number of each door is stored as bit digits, a total of 120 bits is required. Since it is possible to express 30 bits in bigint, it is possible to express the registration of all doors in four columns. Access to a specific door is also known quickly by masking operations.

The present invention can also be embodied as computer-readable codes on a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored.

Examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like. The computer readable recording medium may also be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner.

The present invention has been described above with reference to preferred embodiments. It will be understood by those skilled in the art that the present invention may be embodied in various other forms without departing from the spirit or essential characteristics thereof. Therefore, the above-described embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is defined by the appended claims rather than by the foregoing description, and the inventions claimed by the claims and the inventions equivalent to the claimed invention are to be construed as being included in the present invention.

Claims (3)

A plurality of door portions for recognizing the RFID card or the fingerprint of a passenger through an RFID reader or an IO port to open and close a space through which a passenger can enter and exit;
A plurality of USB devices corresponding to each of the plurality of door portions;
And determines whether or not the user is permitted to enter or exit based on the access permitor list information previously stored in the database and the RFID signal or fingerprint recognition information recognized from the door units by the plurality of door units and the plurality of USB devices, And an access control unit for transmitting a result to the door units via the USB device,
Wherein the access control controller manages information on the RFID reader or the IO ports included in the plurality of doors, the plurality of USB devices, and the plurality of doors on a separate table or list on the database,
The access control control unit identifies each of the plurality of USB devices using a serial number of the USB device, and when at least one of the plurality of USB devices is disconnected or reconnected, the access control unit uses the serial number of the USB device And performs the identification of the USB device. [Claim 2 is abandoned upon payment of the registration fee.] The access control system according to claim 1,
And displays the connection status of the plurality of door units and the plurality of USB devices on the display and distinguishes the connection status of the RFID reader and the IO ports when displaying the connection status of the door units The access control system comprising: [Claim 3 is abandoned upon payment of the registration fee.] The access control system according to claim 1,
Wherein the door opening / closing operation is performed by combining the RFID signal or the fingerprint identification information received from the RFID reader or IO of the door unit.

Images