Physical access control systems and methods

Abstract

A physical access control (PAC) system comprises an authentication device that includes physical layer circuitry and processing circuitry. The physical layer circuitry transmits and receives radio frequency electrical signals over a radio access network. The processing circuitry is operatively coupled to the physical layer circuitry and includes an authentication engine. The authentication engine is configured to receive access credential information via the radio access network using a cloud-based messaging service; authenticate the access credential information using the authentication device; and initiate access to a physical access portal according to the access credential information.

1 - 17 . (canceled) 
     
     
         18 . A physical access control (PAC) system comprising a Secure Internet of things Gateway (SIG) device, the SIG device comprising:
 physical layer circuitry configured to receive authentication data from a plurality of front end devices via one or more communication networks; and   processing circuitry operatively coupled to the physical layer circuitry and comprising an authentication engine configured to:
 process the authentication data to determine access to a plurality of physical access portals according to the authentication data; and 
 control access of the plurality of physical access portals according to the authentication data. 
   
     
     
         19 . The system of  claim 18 , comprising:
 a plurality of front end devices each configured to communicate information with the SIG device via at least one of the one or more communication networks;   wherein the SIG device comprises:
 memory to store credential information; and 
 a plurality of secure elements each configured to open a secure communication channel with a credential device via at least one of the plurality of front end devices and receive encrypted credential information from the credential device as the authentication data; and 
 wherein the authentication engine is configured to compare the received credential information and the stored credential information to grant or deny access to one or more of the plurality of physical access portals. 
   
     
     
         20 . The system of  claim 19 , wherein at least one secure element stores one or more cryptographic keys and the SIG device is configured to send the one or more cryptographic keys to the credential device via at least one of the plurality of front end devices to establish the secure communication channel with the credential device. 
     
     
         21 . The system of  claim 18 , comprising:
 a first front end device operatively coupled to at least one of the one or more communication networks and configured to send sensor data to the SIG device;   wherein the SIG device comprises memory to store biometric information and a sensors access service to receive the sensor data from one or more of the plurality of front end devices; and   wherein the authentication engine is configured to compare the received sensor data and the stored biometric information to grant or deny access to one or more of the plurality of physical access portals.   
     
     
         22 . The system of  claim 21 , wherein:
 the first front end device is configured to send video data to the SIG device and the sensors access service is configured to receive the video data from the first front end device; and   the authentication engine is configured to perform facial recognition using the received video data and stored biometric information to grant or deny access to one or more of the plurality of physical access portals.   
     
     
         23 . The system of  claim 18 , wherein the processing circuitry comprises an intent detection engine configured to determine access intent of a user of a credential device according to the sensor data. 
     
     
         24 . The system of  claim 18 , comprising:
 a beacon reader device configured to detect a beacon signal transmitted by a credential device and transmit a beacon detection message to the SIG in response to the detection of the beacon signal;   wherein the processing circuitry of the SIG is configured to:
 initiate transmission of an activation message to the credential device in response to the beacon detection message; and 
 receive access credential information from the credential device. 
   
     
     
         25 . The system of  claim 24 , wherein the beacon reader device is configured to detect a Bluetooth low energy (BLE) beacon signal transmitted by a smartphone credential device. 
     
     
         26 . The system of  claim 18 , comprising:
 a beacon transmitting device configured to transmit a beacon signal detectable by a credential device;   wherein the processing circuitry of the SIG is configured to receive a request to open a communication session from the credential device and receive access credential information during the communication session.   
     
     
         27 . The system of  claim 26 , wherein the beacon signal is a Bluetooth low energy (BLE) beacon signal.