RU48656U1 - NETWORK SYSTEM OF CONTROL AND MANAGEMENT OF ACCESS TO PREMISES BASED ON BIOMETRIC IDENTIFICATION - Google Patents

Abstract

Usage: to create high-speed network access control and management systems (ACS) based on biometric identification. SUBSTANCE: network monitoring and control system for access to premises based on biometric identification consists of at least one terminal containing a reader, a controller, a light indication unit and an audible warning system, as well as a network adapter, an actuator connected to the controller, at least one management object and server connected to the network adapter. The reader of the network system is optoelectronic, the fingerprint processing unit connected to the reader and the controller is additionally introduced into the system, the network adapter is integrated into the fingerprint processing unit and connected to the server using a high-speed interface. The controller is connected to an actuator of a relay type, made in the form of a digital microcontroller, allocated a digital channel. In the memory of the fingerprint processing unit using software, a buffer of events (reports) is generated with almost unlimited volume. The server of the network system may be a personal computer.

Description

The proposed utility model relates to techniques for protecting various objects (offices and other closed guarded objects) from the penetration of unwanted unauthorized persons and can be used to create high-speed network access control and management systems (ACS) based on biometric identification.

Identification using biometric technologies is currently one of the most promising, rapidly developing areas, among which methods and tools using fingerprints occupy one of the leading places.

The network access control systems available on the market are organized according to the following scheme: a HID-card reader (or its analogues) or TouchMemory identifier — a controller of several readers (from two to eight) —network card (connection via Wiegand, RS-232, RS-485 protocol) to organize a multi-zone access system. The lock actuator (usually the lock is 12V, 1A) is usually integrated into the reader housing. There are also actuators integrated in turnstiles, lock doors, barriers. Such systems include, for example, the Integra-SKD network system (see. The SKUD. Anti-terrorism - 2005 catalog, p. 74). The Integra-SKD network system is designed to prevent unauthorized entry into the facility and its individual rooms and is a hardware-software complex of automated access control. Each employee and visitor receives an identifier -

Proximity card with an individual code. Network controllers used in Integra-SKD allow you to combine all the premises of the facility into a single system and carry out remote centralized monitoring and access control. The disadvantage of such systems is that the user must always carry a card or key with him to access the premises. Moreover, the card and key can easily be copied, they can be forgotten at the workplace or lost. In addition, the controller event memory buffer (4000) is very limited; the information transfer rate is also low (RS-232-RS-485 interfaces are used).

An entry device into the protected area is known (see application for invention No. 2001130979, IPC 7 G 07 C 9/00, published 2003.07.20), which consists of an electronic lock, discriminator, chip card reader, event memory, terminal user and assessment center. The user terminal allows the user to transmit information about the deterioration of the state of the protected zone to the assessment center, which, based on the information transmitted regarding the deterioration of the state of the protected zone, can prohibit the user who entered this zone the previous time from entering the protected zone. A control terminal and auxiliary equipment can be connected to the input device.

Known network paid access system for entertainment centers, parks, attractions and paid services (see utility model No. 24011, IPC 7 G 06 F 15/00, publ. 2002.07.20), which contains a computer server, a computer for issuing cards - tickets connected to the server computer and the cash register, at least one turnstile controller connected to the turnstile and turnstile reader, an attraction switching system connected to an attraction switching controller and an attraction reader, a paid services system connected to Oller paid services and

reader of paid services. The system may also further comprise a laptop computer for collecting information and a controller for collecting information from remote objects.

A common drawback of the above analogues, despite the variety of their designs, is the presence of cards that can be lost, copied, transferred, as well as the low speed of information exchange with a central server.

The closest in technical essence to the proposed utility model is the PW-302 device manufactured by the Elike group, Russia, selected as a prototype (see. SKUD. Anti-terrorism - 2005 catalog, p. 63). The device is designed to build network access control systems and is a network controller-reader compatible with standard Proximity cards Em-Marin or HID. PW-302 consists of a reader connected electrically to each other, installed near the controlled entrance, on a turnstile, gateway, etc. and a remote controller located inside the guarded room. Network ACS integrates up to 32 access points via the RS-485 bus. Programming of the PW-302 device (up to 998 codes, a buffer for 2048 events) is carried out both from the built-in keyboard and using a computer. Light and sound indication is controlled from an ACS or an integrated processor. Thus, the functional diagram of the closest analogue, selected as a prototype, is organized according to the scheme: Server (control computer) -Network adapter - Access terminal - Executive device. The access terminal consists of a reader, a controller and a light and sound indication system. The server communicates with the terminals using the standard Wiegand RS-232 and RS-485 interfaces. The described access control system has wide operational capabilities, for example, in case of danger, each user can enter the code “forced passage” instead of an individual code, activating

alarm output, and if necessary (loss of a card, etc.), it is envisaged to delete a single card from the controller's memory When you enter an unregistered code more than 3 times, the keyboard is locked for a programmed time interval. The Em-Marin or HID identifier standard is selected during programming. The new PW-106 readers, developed in 2004, with an increased reading range of up to 70 cm (for standard Proximity cards) allow it to be used in objects with high passage intensities. However, despite these advantages, the disadvantage of the well-known ACS, selected as a prototype, is the presence of an identifier-card, which can be copied, lost or damaged mechanically. In case of loss of the card, it must be re-manufactured (that is, to incur material costs). Significant disadvantages of the prototype include:

- the impossibility of organizing a high-speed access control system, which is due to the low speed of information transfer via standard RS-485 interfaces;

- a limited number of access points;

- limited event buffer size.

The objective of the utility model is to increase the reliability of protection of protected objects while expanding the circle of persons with authorized access by using individual biometric parameters determined by scanning a fingerprint. Another important task posed in the development of the claimed utility model is the provision of high-speed exchange of information between system units.

To solve these problems, we propose a network system for monitoring and controlling access to premises based on biometric identification, which, like the system closest to it, selected as a prototype, consists of at least one terminal,

comprising a reader, a controller, a light indication unit and an audible warning system, as well as a network adapter, an actuator connected to the controller of at least one control object and a server connected to the network adapter. A feature of the proposed utility model that distinguishes it from the known one adopted as a prototype of a network access control and management system is that the reader is optoelectronic, the fingerprint processing unit is connected to the reader and controller, the network adapter is integrated into the fingerprint processing unit information and is connected to the server using a high-speed interface, and the controller is connected to an actuator of relay type, made in the form of digital microcontroller, dedicated digital channel. In the memory of the fingerprint processing unit using software, a buffer of events (reports) is generated with almost unlimited volume. The server of the network system may be a personal computer.

The tasks set during the creation of a utility model, was made possible thanks to the following.

In the proposed utility model, in contrast to the prototype, in which cards of various standards that can be easily copied, lost or damaged are used as an identifier, it is proposed to use the biometric identification principle, in which there are no disadvantages inherent in the prototype. In the inventive network system, an optoelectronic sensor is used as a reader, with the help of which individual biometric parameters are determined, obtained by scanning a user's fingerprint, which identifies him. According to these data, using the newly introduced block in the network system

fingerprint information processing, fingerprint information is converted into a unique code that allows you to identify the user. Thus, the use of fingerprint information obtained by scanning a fingerprint as a key increases the reliability of protection of protected objects from unauthorized persons, while expanding the range of authorized access persons. It should also be noted that, in contrast to the prototype, which has a memory buffer for 2048 events, in the claimed utility model the volume of the event buffer contained in the fingerprint processing unit is practically unlimited. This is provided by software stored in the memory of the fingerprint processing unit.

An essential feature included in the utility model is the introduction of high-speed communication between the fingerprint processing unit and the server. This allows the exchange of information at a speed of 100 Mbps.

The rest of the newly introduced essential features related to the new relationships between the blocks of the network system, ensure the functioning of the claimed system.

Thus, the combination of the above features allows us to solve the tasks.

The proposed utility model is illustrated by drawings.

Figure 1 presents the structural block diagram of the proposed network access control system;

figure 2 is a functional diagram of a specific example of a network ACS using biometric identification.

Figure 1 introduced the following notation:

1 - server (personal computer);

2, 3, 4, 5, 6 ... N - access objects.

The functional diagram indicates:

1 - server (personal computer);

7 - optoelectronic reader;

8 - controller;

9 - light indication unit;

10 - sound notification system.

Blocks 7-10 form a biometric access terminal of a network system.

11 - network adapter;

12 - fingerprint information processing unit;

13 - high speed interface (Ethernet);

14 - actuator relay type;

15 - dedicated digital communication channel;

16 - control object (lock).

The optoelectronic reader 7 is designed to read a fingerprint image and convert the light flux containing biometric information (fingerprint) into digital data (DATA), which are transmitted via the XI connector via USB to the fingerprint processing unit 12.

Connector XI: USB bus connection; Power - 5V power supply (USB); D + and D- - bidirectional differential signal pair (USB); GND ground (USB).

The controller 8 is designed to process and analyze the result of comparing biometric information received from the fingerprint information processing unit 12. In addition, the controller 8 performs the function of controlling the relay type actuator 14 via a dedicated digital channel 15 and controls the system status indication devices: block 9 of light indicators and sound alert system 10. Block 9 light indicators and the sound notification system 10 serve to visually and soundly display the status of the system, its operation mode.

Connector X2: RED - turn on the red backlight; GREEN - turn on the green backlight; GND is the earth;

Connector X3: SOUND - turn on the sound; GND is the earth;

Connector X6: USB bus connection; Power - 5V power supply (USB); D + and D- - bidirectional differential signal pair (USB); GND ground (USB);

Connector X7: connection of the light indication unit 9;

RED - turn on the red backlight; GREEN - turn on the green backlight; GND is the earth;

Connector X8: connecting a sound notification system 10;

SOUND - sound on; GND is the earth;

Connector X10: connection to the power and control bus actuator relay type 14;

RELE_CTRL - control signal actuator relay type 14;

+ 12V - main power line; GND is the earth.

The fingerprint information processing unit 12 is a high-performance computer designed to process a fingerprint image received from an optoelectronic reader 7, as well as to convert fingerprint information to a unique code corresponding to a fingerprint. During the operation of the system, this code performs user identification operations. The fingerprint information processing unit 12 transmits the result of the analysis of the fingerprint image to the controller 8, transfers commands and data via Ethernet 13 to the server 1.

Connector X4: (USB) -connection with an optoelectronic reader 7; Power - 5V power supply (USB); D + and D- - bidirectional differential signal pair (USB); GND - ground (USB);

Connector X5: (USB) - connection to controller 8;

Power - 5V power supply (USB); D + and D- - bidirectional differential signal pair (USB); GND - ground (USB);

Connector X9: connection to the main power bus + 12V .;

Power - main power line + 12V; GND is the earth. The network adapter 11 is integrated in the fingerprint processing unit 12 and connected to the server 1 using a high-speed Ethernet interface 13. Network adapter 11 provides hardware and software protection for the system and exchanges data between server 1 and system access terminals.

Server 1 is a personal computer and is designed to add, delete, edit the user database, distribute access rights to access objects, generate reports on visits to access objects. Through a network adapter 11 and a fingerprint processing unit 12 via a high-speed Ethernet interface 13, server 1 simultaneously monitors multiple access objects. Thus, there is a continuous exchange of information in real time.

Actuator 14 of the relay type is designed for direct control of access devices - control objects (locks) 16. Using connector X12, actuator 14 either closes or opens the power circuit of the control object (lock) 16 (LOCK_PWR_IN, LOCK_PWR_OUT, LOCK_GND), depending from the encoded command of the controller 8 RELE_CTRL, coming together with the electric power + 12V to the connector XII of the actuator 14 of the relay type.

The control object (lock) 16 is designed to directly unlock or lock the door to the secure room. Depending on the type of lock, supply or shutdown of electrical power

LOCK_PWR_OUT of a certain power brings the control object (lock) 16 to the required state.

In the claimed utility model as an optoelectronic reader 7 is used, for example, an optoelectronic sensor manufactured by NITGEN, South Korea, Seoul. Controller 8 is based on Atmega8L-8MI (MLF32) microcircuits manufactured by ATMEL (USA), as well as other industrial microcircuits, for example, ADM101EARM (mSOIC), 74HC125D (SO-14). The actuator 14 of the relay type, which is a digital microcontroller, is assembled on the basis of the industrially manufactured Atmega 8-16MI (MLF32) microcircuit manufactured by ATMEL (USA) and other industrially produced electronic components. For example, relays LS (Russia) can be used as relays, and electromagnetic locks ML-395A (Taiwan), ML-194 (Russia), electromechanical lock 3VD2 or their analogs can be used as locks. The fingerprint information processing unit 12 is based on microprocessors of the VIA series: VT 1211 0405CD 2NA 4013741, VT 6307S 2HA 1008457 (Taiwan).

A network control system for access to premises based on biometric identification works as follows.

The person with the right of access applies a finger to the window of the optoelectronic biometric reader 7. The fingerprint is read. The fingerprint information received by the reader 7 is transmitted to the fingerprint information processing unit 12 in which it is converted into a unique code corresponding to the fingerprint, compared with the information stored in the memory of the fingerprint information processing unit 12, and if the fingerprint information processing unit 12 matches through the controller 8 , connector X10, on a dedicated digital channel 15 gives the command

the actuator 14 of the relay type. At the same time, a green indicator lights up in the light indication unit 9, at the same time a short beep is heard. At the same time, the actuator 14 supplies the opening signal to the control object (lock) 16, which directly unlocks or locks the doors to the secure room. In case of unsuccessful identification, the signal to unlock the control object (lock) 16 is not generated, while the red indicator lights up and a longer sound signal sounds. After passing the identification (successful / unsuccessful), the fingerprint processing unit 12 through the network adapter 11 via the high-speed interface 13 (Ethernet) transmits to the server 1 a message about the identification result, which reflects:

- the time taken to pass the user identification at the access object;

- result of identification (identified / not recognized);

- user data (user ID number in the database in case of successful identification.

In the process of the system, server 1 adds, removes, edits the user database, as well as distributes access rights. Through a network adapter 11 and a fingerprint processing unit 12 via a high-speed interface 13 (Ethernet), server 1 carries out continuous real-time monitoring of multiple access objects. From server 1, a command may be issued to open the lock of a specific access point. With the help of server 1, the proposed network system can be integrated into other security systems, for example, in fire protection.

Thus, in the claimed utility model through the use of individual biometric parameters determined by scanning a fingerprint, the introduction of a new

The high-performance fingerprint processing unit, as well as the integration of systems into a network using a high-speed interface, it became possible to significantly expand the range of authorized access persons, increase the reliability of object protection and ensure high-speed information exchange between system units.

Claims (2)

1. A network control system for access to premises based on biometric identification, consisting of at least one terminal containing a reader, a controller, a light indication unit and an audible warning system, as well as a network adapter, an actuator connected to the controller, at least one control object and a server connected to a network adapter, characterized in that the reader is optoelectronic, an additional fingerprint processing unit is introduced into the system formations connected to the reader and controller, the network adapter is integrated into the fingerprint processing unit and connected to the server using a high-speed interface, and the controller is connected to a relay-type actuator made in the form of a digital microcontroller, allocated a digital channel, while in the memory of the processing unit fingerprint information using software tools formed a buffer of events (reports) with almost unlimited volume. 2. The network system according to claim 1, characterized in that the server is a personal computer.