US3866173A - Access control system for restricted area - Google Patents

Abstract

An access control system for controlling the entry and exit of personnel through a door or a gate of a restricted area. A person seeking to enter the restricted area inserts a personnel identification card with magnetically encoded data thereon into a card reader located outside the restricted area. Then, a secret number is entered on a keyboard. The system performs checks on the card and keyboard data to determine if the person seeking to enter the restricted area is authorized to enter this area. If all the checks are passed satisfactorily, the door is opened and the person can enter the restricted area. A written record of each attempt to enter the restricted area is made by a printer thereby providing a chronological record of all system events. The system also provides means for preventing persons in a defined group from entering a restricted area as well as circuitry to prevent entry by selected individuals. The system also includes a card erase mechanism which erases the magnetically recorded card data after a predetermined number of unsuccessful entry attempts. Since only the magnetically encoded data is erased, the card may be used by this person for other purposes as printed and photographic information is usually included on such cards. The access control system also includes egress monitoring in the form of a printed record of personnel egress from the restricted area, the egress monitoring becoming active when the individual leaves the restricted area and allows the door to close behind him.

Description

Moorman et al.

[ ACCESS CONTROL SYSTEM FOR RESTRICTED AREA Inventors: Charles J. Moorman; Frederick A.

Reuter, both of Cincinnati, Ohio; Daniel F. Yorke, Brookfield Center, Conn.; Martin R. Meyer, Cincinnati, Ohio The Mosler Safe Company, Hamilton, Ohio 22 Filed: Oct. 2, 1973 211 App]. No.: 402,703

[73] Assignee:

Primary ExaminerHarold I. Pitts Attorney, Agent, or Firm-Wood, Herron & Evans [57] ABSTRACT An access control system for controlling the entry and DOOR J2 e l 5. K5 PEHSONNH DOOR I SLNSOR LOCK sev ii ul [451 Feb. 11, 1975 cire'cks'oii the card aiid k e yboard data to determine if the person seeking to enter the restricted area is authorized to enteNhis area. If all the checks are passed satisfactorily, the door is opened and the person can enter the'restricted area. A written record of each attempt to enter the restricted area is made by a printer thereby providing a chronological record of all system events. The system also provides means for preventing persons in a defined group from entering a restricted area as well as circuitry to prevent entry by selected individuals. The system also includes a card erase mechanism which erases the magnetically recorded card data after a predetermined number of unsuccessful entry attempts. Since only the magnetically encoded data is erased, the card may be used by this person for other purposes as printed and photographic information is usually included on such cards. The access control system also includes egress monitoring in the form of a printed record of personnel egress from the restricted area, the egress monitoring becoming active when the individual leaves the restricted area and allows the door to close behind him.

17 Claims, 4 Drawing Figures s's J4 TIMERl s W AND AND a/ wk SEPARATE adm ration CIRCUIT CLOCKI FATEN FEB] 1 i975 SHEET 1 U? 3 DOOR ' 55m 4% /,8 43 PERSONNEL CARD SENSOR E%% QWQ I KEYBOARIIJ READER 3a A I a 2 33;flay 4 0;

A TIMER AND 5/ 5.?

ss 1. 'TIMER V 63 s R ACTIVATE S'GNALER A FF sEPARATE TALARM 7 w a I 7; 4,

(7% g A fil l" 0% AND ANDS COUNTER 5 AND AND W CD JS TER s i saP R A xE [/47- 65 DOOR I ZflLifF OR (DOOR OPEN) /id CONTROL 1 357 ,67 /6 (DOOR I) a V -I r W 885% 5%? @ERB START KEYB 5ERB EEZSY W 1 ATIDOOR AT ooR AT ooR DOIOR SWITCH J ,3

. DATA CENTRAL STORAGE CONTROL/3 SEQUENCE CONTROLLER 30 T gEk W V RECORDER ai #5 STATUS CHE-CK \Ef CLOCKI .34 //7 DAY /NIGHT P/ JENTEU FEB] $866,173

SHEET P. 0F 3 /l N ///j w /09 w; /02 //f .4 CLOCK AND COUNTER DECODERQ n+l /fl/ L I w START fig ss TIMER I El 5885 RESPONSE/ E OR EE'XE 1@E@"'A M 4W R 59,25

ENTRY l *AND READ CARD READY 2R4 I ATDOOR 2DOOR2 5 EGRESS 5565 5555 (MN O DECODE DECODE BLOCK ENTRY READ CARD E Hi m AT DOOR s IHIOOOOXXXX IIIIOOOIXXXX llll llll XXXX I 3,866,173 SHEET 3 BF 3 N$WN EE 50 i1 PATENTED F551 1 5 ACCESS CONTROL SYSTEM FOR RESTRICTED AREA BACKGROUND OF THE INVENTION This invention relates generally to the field of access control system for assuring that only authorized personnel are permitted to enter or leave restricted areas and particularly to systems including expensive egress control, group blocking, erasure but not destruction of cards after a predetermined number of unsuccessful entry attempts and also a system which includes area access authorization information which is coded in machine readable form on the individuals personnel identification card.

Access control systems have been proposed heretofore which utilize personnel identification cards to control movement of personnel through doorways. One typical system has utilized personnel identification cards in connection with a verification check to determine whether the person possessing the card is a person who has been authorized to use the card. The verification check typically requires the person possessing the personnel identification card to insert the card into a card reader which then reads the machine readable data encoded thereon and stores this data at a central control location. The person seeking entry is also required to enter a secret identification number on a keyboard located near the card reader. This secret identification number is then utilized by a verification circuit to determine whether the person possessing the card also knows the proper secret identification number which corresponds to that card. If the secret number is correct, the system assumes that the person possessing the card is authorized to enter.

In other prior art systems, checks other than verification checks have been proposed. One such check has been to determine whether a persons authorization to enter a restricted area has been withdrawn. Typically such proposals include a computerlike central processing unit which compares the personnel identification number read from the card against a list of identification numbers with respect to which authorization has been withdrawn. Should a comparison be found between the number read from the card and one of the numbers on the list of unauthorized personnel, the apparatus responds to prevent opening the door to the restricted area despite the fact that other checks performed by the access control system such as proper verification, were satisfactory.

A failing of such proposed prior art systems, however, has been the inordinate cost of blocking feature for preventing entry of unauthorized card holding personnel. This problem has been particularly acute where large groups of card holders are to be blocked. For example, if a strike of union workers is in process and management desires to prevent all union members from entering the plant during the strike, separate entries would have to be provided in the list of unauthorized personnel to correspond to each union employee whose entry is to be denied. As such, prior art systems have proved to be extremely unwieldy in providing blocking of personnel on a group basis, that is, denying access to restricted areas to groups of employees rather than individual employees.

Some of the proposed prior art access control systems have extended their surveillance to include egress monitoring as well as entry monitoring. Such prior art proposals typically include a card reader and, in some cases, a keyboard located at each entrance to, as well as at each exit from, restricted areas. In some such systems, in order to leave a restricted area, the individual must insert his personnel identification card into the card reader and also enter his secret identification number in the same identical manner as required to enter the restricted area. In other systems, the person seeking to leave the restricted area need only enter his personnel identification card into the card reader. In both such approaches, however, the system requires that a card reader be located on both sides of the doorway to the restricted area. As such, the cost of each door installation is greatly increased because at least two card readers are necessary at each doorway. Furthermore, for the systems having a keyboard on both sides of the restricted area doorway, the cost is even higher because two keyboards as well as two card readers are required at each doorway.

A further typical capability of proposed prior art access control systems has been to permit personnel access to different restricted areas according to individualized access authorization information maintained at the central location which is addressed with the individuals identification number read from the card. Consequently, when a person seeks entry to a restricted area, his personnel identification number must be read from his identification card and the acces authorization information for this individual retrieved from the central storage. After the access authorization information is retrieved, it must then be checked to determine whether the individual is seeking to enter a restricted area to which access has been authorized. Consequently, access authorization checks in such prior art systems require relatively complicated computer technology and large scale storage capability. In fact a computer itself is necessary to perform the access authorization checking functions. Consequently, such systems have proved to be complicated in design and very expensive to install.

In view of the foregoing difficulties with the prior art, it is the primary objective of this invention to provide an access control system with multiple checks which is less expensive than prior access control system.

It is a further objective of this invention to provide an access control system which controls entry to restricted areas, exit from restricted areas, and fully documents all events occurring at the doorways to such restricted areas with a minimum of card reader/keyboard hardware.

It is a still further objective of this invention to provide an access control system which permits rapid and inexpensive blocking of access to restricted areas for all individuals in selected groups of personnel.

In order to achieve these and other objectives of this invention, an access control system is provided which includes, at each lockable door to a restricted area, a door control unit having a door lock, as well as a single keyboard and a single card reader both of which are located outside of the restricted area. Each keyboard, card reader and door lock is connected via a communication link to a central control which is operative to control much of the operation of all elements of the door control unit. When an employee wishes to enter a restricted area, he inserts his personnel identification card into the card reader and also enters a secret identification number on a keyboard. The central control responds to the keyboard data and the card data to determine whether the door lock should be released. In so doing the central control performs a verification check to determine whether the person possessing the card is authorized to use the card. In addition, the central control determines whether the card in the reader corresponds to a card issued for the particular system or plant. Additionally, the central control checks the access data on the card to determine whether the individual has been authorized to enter the specific restricted area or gate through which entry is sought. Assuming that all of the different status checks are passed satisfactorily, the door lock is released and the individual permitted to enter the restricted area, whereupon a printer is actuated to record the identification number, time, door and the fact that an entry has occurred.

The system does not include a second card reader nor keyboard located inside the restricted area for controlling egress. The system does, however, include a floormat sensor inside the door which detects personnel approaching the door from inside of the restricted area. The sensor activates a buzzer or other humanly perceptible signal means located outside the restricted area to remind the person after leaving the restricted area to insert his personnel identification card into the card reader located outside the restricted area. When the restricted area door has closed and the card inserted into the reader, the buzzer stops and the central control reads the card data and actuates the printer to record the identification number, time door and the fact that the person so identified has left the restricted area.

The system includes two blocking features, that is,

the system can selectively block personnel from entering restricted areas. One blocking feature permits selective identification of individuals who possess a proper personnel identification card but who are no longer authorized to enter the restricted area. The second feature permits selective identification of groups of individuals possessing proper personnel identification cards who all are not currently authorized to enter the restricted area. The selective identification of blocked individuals is achieved by a decoding circuit and a matrix board arrangement. Diode pins are inserted in locations on the matrix board which correspond to blocked individuals. Ifa block signal passes through the decoder and also through the matrix board, the signal indicates the individual is not authorized to enter the restricted area. The group blocking is accomplished simply by decoding some but not all of the personnel identification number digits. Combinations of these digits can be selected by a switch arrangement so that a block signal will be generated for all individuals having the selected personnel identification number digits in common.

In all instances, the access control system of the present invention provides a printed record for each detected system event. This record is generated by a recorder which, in the preferred embodiment, is a printer provided to produce the record of the type of event which has occurred, the personnel identification number from the card read by the card reader at the time the event occurred, the door at which the event occurred, the date, and time.

The foregoing and other objects, advantages and features of this invention will become more clear from the following detailed description of one preferred embodiment of the invention taken in connection with the drawings which form a part of the original disclosure.

DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic system diagram showing the central control, the switch and the door control unit.

FIG. 2 is a schematic diagram of the Sequence Controller shown in FIG. 1.

FIG. 3 is a schematic diagram showing the Status Check circuitry in greater detail.

FIG. 4 is a schematic diagram showing a portion of the blocking circuitry.

DETAILED DESCRIPTION Referring now to FIG. 1, the access control system thereshown includes adoor control 1, aswitch 2, and acentral control 3. In its preferred form, the system includes more than one door control, however, FIG. 1 shows only one such door control in order to keep the drawing relatively simple. Eachdoor control 1 controls a single door to a restricted area controlled by the overall access control system. The'switch 2 interfaces with all of thedoor control units 1 of the system and provides a means for connecting only one door control unit at a time to thecentral control 3. Thecentral control 3 is operative in response to signals from adoor control 1 to activate the system according to a predetermined sequence which depends on the specific event occurring at the door.

Eachdoor control 1 includes acard reader 10 and akeyboard 12 which are physically located outside the restricted area but closely adjacent the controlled door. Thecard reader 10 comprises, in the preferred'embodiment, a magnetic card reader for reading magnetically encoded information on a magnetic stripe located on a typical personnel identification card. Such cards are commonly found in automatic cash dispensing machines, other access control systems as well as some credit card verification systems. Thekeyboard 12, for the preferred embodiment, comprises a typical data entry keyboard including eight numbered keys. These keys, when depressed by personnel seeking entry, produce a coded electrical signal which is preferably stored in a register located at the keyboard itself. While thepreferred keyboard 12 has seven different keys, it will be readily recognized by those of skill in the art that keyboards having more or less keys than those for thepreferred keyboard 12 may also be advantageously utilized in connection with an access control system of the type herein described.

Typically, adoor control 1 having acard reader 10 and akeyboard 12 is utilized in the following manner to control the entrance of personnel into a restricted area. Upon approaching a restricted area controlled by the access control system, an employee or other authorized person inserts a personnel identification card previously provided to the individual into thecard reader 10. In the preferred form, each card has a magnetic stripe encoded with a multi-digit machine readable number. The card may also have a photograph and other data in printed form to assist in personnel identification. After inserting the card into thecard reader 10, the individual enters into the keyboard 12 a secret identification number known only to the authorized card holder. Adigit counter 14 is responsive to thekeyboard 12 to count the number of digits entered on thekeyboard 12. In the preferred embodiment, when four digits have been entered and stored at thekeyboard 12, thedigit counter 14 provides an output signal which is transmitted over a communication link, or a connectingwire 16, to theswitch 2. The signal on this connectingwire 16 is an entry ready signal which indicates to theswitch 2 that all actions at thedoor control 1 required of a person seeking to enter the restricted area have been completed and no further action can be taken at thedoor control 1 until thecentral control 3 performs the status checks to be described in greater detail later.

Theswitch 2 is operative to scan the signals on the various connecting wires which link theswitch 2 to the systemdoor control units 1. Theswitch 2 determines the priority of thesedoor control units 1 and then connects only one suchdoor control unit 1 to thecentral control 3 at any given time. Assuming, that no otherdoor control unit 1 has an active signal on a connectingwire 16, the entry ready signal on the connectingwire 16 will be transmitted by theswitch 2 to thecentral control 3. Theswitch 2 is also operative to connect all the communications lines, to be described later, between thedoor control 1 of the door given priority by theswitch 2 to thecentral control 3.

At thecentral control 3 the entry ready signal which appears on the connectingwire 16 will be operative to activate aSequence Controller 18. TheSequence Controller 18, which will be described in greater detail below in connection with FIG. 3, is operative to produce a sequence of timing signals to control the operations at thecentral control 3. In response to the entry ready signal, theSequence Controller 18 at thecentral control 3 will cause the stored keyboard data and the data from the card to be transmitted to adata storage element 20 at the central control. Thedata storage element 20 preferrably comprises a data storage register for storing electrical representation of the keyboard data and the card data. The actual sequence of these two operations is not critical, however, theSequence Controller 18 will be operative to produce a Read Card atDoor 1 signal which is transmitted from thecentral control 3 through theswitch 2 and over the communications wire 22 to the card reader to cause the card reader to read the personnel identification information which is recorded in machine readable form on the personnel identification card inserted into the card reader. As indicated earlier, for the preferred embodiment of this invention, the personnel identification card comprises a card much like those used for automatic cash dispensing apparatus which includes a magnetic stripe on which personnel identification information is magnetically recorded. As such, thecard reader 10 is preferably a magnetic card reader. The data read in response to the read signal on the wire 22 is transmitted over thedata communication wires 24 to theswitch 2 and then to thedata storage 20. The card data thus read is stored in a register in the data storage so that the central control can use this data to perform status checks. The storage of the card data in thedata storage 20 is operative to produce a Response Signal which is used by theSequence Controller 18 in a manner to be described later to cause another control signal to be developed.

Such a further control signal developed by theSequence Controller 18 is operative to generate a keyboard read signal online 26 to read the keyboard data stored at thekeyboard 12. This keyboard read signal is transmitted from theSequence Controller 18 through theswitch 2, and over thecommunication wire 26 to thekeyboard 12. in response to the signal on thewire 26, thekeyboard 12 is operative to transmit the keyboard entered data over thedata communication wires 24 through theswitch 2 to thedata sotrage 20. Receipt of the keyboard data at thedata storage 20 is also operative to generate a Response Signal which is sent to theSequence Controller 18 to cause theSequence Controller 18 to actuate another control signal line in a manner to be described later.

Adoor lock 28, which is normally in its locked position, is located at each controlled door. The door lcok 28 is operative to prevent opening of the controlled door from outside the restricted area unless thedoor lock 28 receives a door unlock signal on the wire 29. The door can be manually opened from inside the restricted area. When this door unlock signal is present on the wire 29, then the controlled door can be opened from the outside and persons can pass freely therethrough for a predetermined period of time.

Thecentral control 3 is generally operative when a person is seeking to enter a restricted area in the following manner. After theSequence Controller 18 has read the keyboard data and the card data into thedata storage 20, this data is utilized by thecentral control 3 to determine whether thedoor lock 28 will be opened to permit the individual to enter the restricted area. In order to determine whether such entry will be permitted, thecentral control 3 must perform a number of checks on the data received from thekeyboard 12 and thecard reader 10. The keyboard data, as indicated above comprises four digits which correspond to a secret number. The card data stored in thedata storage 20, on the other hand, comprises a personnel identification number, a system number, access area information and any other data which may be utilized by the access control system, or, indeed, other related systems. The personnel identification number included in the card data is a multi-bit number which is assigned to the individual possessing the personnel identification card. For the preferred embodiment, the personnel identification number comprises twelve binary bits of data which correspond uniquely to the individual possessing the card. The system number included in the card data comprises several data bits of information which uniquely identify the access control system on which the card data for the personnel identification card in the card reader was generated. The access area data from the card comprises a number of data bits which, in the preferred embodiment, is twelve bits for identifying the areas which the individual is permitted to enter or leave. As will be indicated later, the twelve bits of access area data are divided in half so that two different sets of access area information bits are formed for use by the system with one set of bits being used during daylight hours and the second set of bits being used during the night.

Thecentral control 3 performs a verification check to determine whether the individual who has entered a secret number on thekeyboard 12 has actually entered the proper secret number which corresponds to the card data read by thecard reader 10. This verification is performed by theverification circuit 30. Thisverification circuit 30 is described in greater detail in the copending patent application entitled Access Control Apparatus, Ser. No. 293,595 which was filed on Sept.

29, 1972, and is herein incorporated by reference. While one specific preferred embodiment is described in that copending patent application, it will be recognized by those of skill in the art that numerous other verification systems might be utilized in place of thespecific verification circuit 30 described in the above identified copending application.

The function of theverification circuit 30 is to provide a signal on itsoutput wire 32 which indicates that the proper secret number was entered on thekeyboard 12 for the specific personnel identification card which was read by thecard reader 10. This favorable comparison indicated by theverification circuit 30 is but one of the status checks considered by thestatus check circuitry 34. Thestatus check circuitry 34 also determines in a manner described in greater detail later whether the system number from the card data read by the card reader corresponds to the system number of the access control system which read the card. A proper comparison of these two numbers is necessary to permit the individual who has attempted to enter a restricted area to actually enter this area. Furthermore, thestatus check circuitry 34 is operative in a manner described later in greater detail to determine whether the access area data on the personnel identification card read by thecard reader 10 indicates whether the individual possessing the card is authorized to enter the restricted area at the particular time entry is sought.

Thestatus check circuitry 34 also makes a determination in a manner described in greater detail below of whether the individual is blocked from entering the restricted area. Assuming that all of the above identified checks have been passed successfully, this information is transmitted from thestatus check 34 to theSequence Control 18 which then responds to activate theprinter 36 as well as to send a signal to unlock the door. The unlocked door signal is transmitted from theSequence Controller 18 through theswitch 2 and over the connectingwire 38 which turns on a single shot timer circuit 40 located at thedoor control 1. The single shot timer circuit 40 produces an output signal, which, in the preferred embodiment, lasts for approximately 20 seconds although the time can be adjusted to suit user requirements. This output signal is connected to the wire 29 which comprises, as indicated above, the door unlock signal operative to unlock thedoor lock 28 and permit the individual to open the door controlled by thelock 28 and pass through the doorway into the restricted area. While thedoor lock 28 is unlocked, theSequence Controller 18 is also operative to activate arecorder 36 which in the preferred embodiment is a printer. Other types of recorders might be provided to suituser requirements, however, it is desirable to provide a recorder which will produce a written record of each system event. In the preferred embodiment, therecorder 36 is operative to print an event code which corresponds to the type of event which has occured at thedoor control 1. Therecorder 36 also prints a number corresponding to the personnel identification number read from the card by thecard reader 10. An indication of the door at which the event occurred is also printed. Therecorder 36 also prints the date and the time at which the event occurred. As such, the printer provides a complete written record of the time, date and the door at which a given identified individual attempted to enter a restricted area as well as an indication as to whether that attempt was successful or not.

As will become more clear later, the event identification indicates whether the identified individual was entering or leaving the restricted area as well as to indicate, according to a predetermined priority, whether any status checks were not passed successfully which thereby prevented entry to the restricted area.

The above description relates to system operation for successful entry attempts. The system in FIG. 1, however, responds in a somewhat different manner if all of the status checks are not satisfied. Specifically, theSequence Controller 18 does not generate the door unlocked signal unless all the checks are successfully passed. Therefore, an individual is not permitted to pass through the doorway unless all checks are successfully passed. if an unsuccessful entry attempt occurs, the individual may then respond in one of two manners. He may proceed to a different entrance to the restricted area where a guard or some other person is stationed who can determine from written information on the card whether the individual should be allowed to enter the restricted area. On the other hand, the individual may again attempt to enter the restricted area by placing his personnel identification card in thecard reader 10 and again enter his secret number on thekeyboard 12. Each such entry of keyboard data is operative to actuate thecentral control 3 in the manner described above. Each keyboard read signal onwire 26 is operative in the manner described above and also operative to increment an entry attempt counter 41 which counts the number of attempted entries at the door which occur prior to the generation of a door unlock signal on the wire 29. If theentry attempt counter 41 should ever reach a predetermined selectable value, this indication is applied to thewire 42 which is connected to thecard reader 10. Upon receipt of a subsequent card read signal on wire 22 while the indication is present onwire 42, thecard reader 10 responds to this condition by erasing the magnetically encoded data on the personnel identification card. However, the card is returned to the person seeking entry to the restricted area. This permits the individual to use the card for other purposes such as obtaining entry through an attended entrance point but would prevent further access through unattended automatically controlled doors.

Theentry attempt counter 41, as indicated above, is incremented each time an attempted entry occurs. The entry attempt counter is incremented by the read keyboard signal transmitted over thewire 26 from theswitch 2 to thedoor control 1 indicating that keyboard entered data should be read to thecentral control 3. Since the keyboard data is only read on entry attempts, theentry attempt counter 41 is incremented only when an attempted entry occurs. Theentry attempt counter 41, on the other hand, is reset to a value of zero whenever thedoor lock 28 is unlocked thereby indicating that the proper status checks have occurred in order to permit an individual to enter the restricted area.

The access control system shown generally in FIG. 1 is also operative to provide a written record of all persons leaving the restricted area. The system is operative in the following manner to provide this record. At each doorway, a personnel sensor, such as a floormat 46, is provided. This personnel sensor is generally located just inside the door to the restricted area so that an individual approaching the door from the inside will be detected thereby, such as by stepping on the floormat 46. The personnel sensor provides an electrical signal on thewire 48 which sets a flip-flop 50. Thepersonnel sensor 46 also starts a 20 secondsingle shot timer 51 whose output is inverted by aninverter 53 to produce a logical zero signal at theinverter 53 output. When the door is opened by the individual leaving the restricted area, adoor switch 52 produces a door open signal on thewire 54 indicating that the door is open. This signal is applied to one of the inputs to an ANDgate 56. The other ANDgate 56 input is connected to the output of flip-flop 50. When thedoor switch 52 produces a door open signal onwire 54 and when flip-flop 50 is set, the input conditions to the ANDgate 56 are at the proper level to produce an output signal on thewire 58. When this signal occurs on thewire 58, a second flip-flop 60 becomes set. The setting of this flip-flop 60 will provide an egress signal on theoutput connecting wire 62 which extends between thedoor control 1 and theswitch 2 to indicate to the switch that an egress has occurred atdoor 1. This egress signal is used by theSequence Controller 18 in a manner to be described later.

The system provides a positive control of personnel when individuals leave restricted areas. All personnelare instructed to present their personnel identification card to the card reader when they leave the restricted area. Thecard reader 10 may be located some distance from the controlled door so that the door cannot be held open by the person leaving the restricted area in an attempt to defeat the system. In the preferred system, however, the system cannot be so easily defeated because thecard reader 10 is actuated to read a card only after the door has closed behind the person leaving the restricted area. This control is accomplished electronically in the following manner.

When a person opens the restricted area door, the flip-flop 60 produces an egress signal at its output. This egress signal is at the binary one state and is applied to one input of an ANDgate 61. A second input to the ANDgate 61 is at the binary one state when a personnel identification card is detected in thecard reader 10. Thereader 10 includes a card detector, not shown, for detecting cards inserted in thereader 10. The card detector may comprise a switch whose binary output is changed by the presence of a card in thecardreader 10. When a card is not present in thereader 10, the card detector output signal onwire 59 is a binary one. An inverter 63 is connected in series between thewire 59 and the second input to the ANDgate 61. Consequently, when the card detector detects a personnel identification card in thecard reader 10, the second input to the ANDgate 61 will be at the binary one state. The third input to the ANDgate 61 is at the binary one state when the door is closed as indicated by a binary zero signal onwire 54. An inverter circuit 65 is connected between thewire 54 and the third input to the ANDgate 61 to produce a binary one at the third input to ANDgate 61 when the door is closed. When all three inputs to the ANDgate 61 are at their binary one state, the output thereof has a binary one" state which is passed through the connected OR gate 67 which produces at its output a START signal. This START signal is connected to theswitch 2 and then to theSequence Controller 18 by theswitch 2. TheSequence Controller 18 responds to this START signal in a manner to be described in greater detail later. Briefly, however, theSequence Controller 18 responds to the START signal to start a predetermined sequence of events to control the system. When a normal egress occurs, that is when a person leaves the restricted area, allows the door to close and presents his personnel identification card to thecard reader 10, the system will read the card and then make a record of the event by actuating therecorder 36 to produce record of the event which includes the date, time, door number, personnel identification number and the event code identifying that an egress occurred. This system operation will be described in greater detail later.

When a person leaves the restricted area as described above, thepersonnel sensor 46 detects the person approaching the door from inside the restricted area. When thedoor switch 52 detects that the door is open, flip-flop will become set. The output of flip-flop 60 is connected to one input of an ANDgate 68. The second input to the ANDgate 68 is connected to the output of aninverter circuit 53. The ANDgate 68 will produce a binary one signal when the input conditions are both at the binary one state. When the flip-flop 60 is set, indicating an egress has occurred at the door and when the output of theinverter 53 is a one, which occurs after thesingle shot timer 51 times out (i.e. after a 20 second period), a binary one signal appears at the output of the ANDgate 68 which passes through the OR gate 67 and produces a START signal. TheSequence Controller 18 will be started when theswitch 2 connects thedoor control 1 to theCentral Control 3 and the system will record that an egress occurred, however, no personnel identification number will be printed because no card was presented to thecard reader 10 by the person leaving the restricted area before thesingle shot timer 51 timed out.

In order to remind personnel leaving a restricted area that they should insert their personnel identification card into thecard reader 10 after leaving the restricted area, a humanly perceptible reminder signal is generated at a location near thecard reader 10 when an egress is detected. The humanly perceptible signal is generated in response to two different conditions at thedoor control 1. The first condition occurs when the flip-flop 60 becomes set which indicates thepersonnel sensor 46 has detected an individual approaching the door from the inside of the restricted area and the door has been opened. The binary one at the output of the flip-flop 60 is electrically connected to one input of an ANDgate 64. The second input to the ANDgate 64 is electrically connected to thewire 59 which, as indicated earlier, has a binary one signal thereon whenever no personnel identification card has been inserted into thecard reader 10. When both of the inputs to the ANDgate 64 are at their binary one state, the output thereof is operative to actuate a humanly perceptible signal means 66 which is operative to produce either a visual or audible signal to remind the individual leaving the restricted area to insert his personnel identification card into thecard reader 10. The humanly perceptible signal means 66 is preferably in the form of a buzzer which produces an audible sound although va flashing light or other visual reminder could be employed.

The humanly perceptible signal generated by the signal means 66 will remain active until one of two events occur. One such event is the insertion of a personnel identification card into thecard reader 10 which causes the signal on thewire 59 to change to its binary zero" state indicating that a card has been inserted into thecard reader 10. When this condition occurs the ANDgate 64 is no longer operative to actuate the signal means 66. The second condition which turns off the signal means 66 occurs when the flip-flop 60 is reset as this condition will cause a binary zero" signal onwire 62 which is also operative to turn off the signal means 66. This latter condition is produced, as will be indicated in greater detail later, by the receipt at thedoor control 1 of a read card signal on the wire 22 which is operative to reset the flip-flop 60. Consequently, a humanly perceptible signal at the card reader is generated by the signal means 66 after an egress is detected at thedoor control 1 and this signal will remain activated until either the individual inserts his personnel identification card into thecard reader 10 or a signal is received at thedoor control 1 to actuate thecard reader 10.

Whenever an egress has occurred at the door to the restricted area as indicated above, theSequence Controller 18 will cause thecard reader 10 at the door control l to read a personnel identification card whether one has been inserted into thecard reader 10 or not. The read card signal is generated by theSequence Controller 18 in a manner described later and transmitted from theCentral Control 3 via theswitch 2 to the wire 22 at thedoor control 1. The read card signal on wire 22 has a number of functions. In the first place, it is operative to reset flip-flop 60 and also flip-flop 50. Additionally, the read card signal is operative to activate thecard reader 10 and cause it to read any card inserted therein.

On a normal egress, thecard reader 10 will read a personnel identification card and the data read therefrom will be transmitted over thewire 24 through theswitch 2 to theCentral Control 3 and stored in thedata storage 20. Once this occurs, theSequence Controller 18 will actuate therecorder 36 to permanently record that an egress occurred, the personnel identification number of the person who left the restricted area, the door number, the time and the date. If, on the other hand, no card was read by thecard reader 10, even though an egress was detected at thedoor control 1, theSequence Controller 18 will also actuate therecorder 36. In this situation, however, an egress will be indicated, but no personnel identification number will be printed because there is no way of knowing, without reading a card, the identity of the individual who left the restricted area.

The access control system of the present invention may, in addition to the above type of checks, include a separate alarm system for monitoring various alarm conditions throughout the system. For example, a separate alarm may be provided to indicate that a door is open at a time when the door should be closed and locked. This separate alarm condition is provided at theoutput wire 72 of an ANDgate 70. The signal onwire 72 may be operative to actuate a bell, buzzer, light or any other alarm either at the door itself or at some remote location. This alarm condition is generated when three separate conditions occur simultaneously at the input to the ANDgate 70. Firstly, thedoor switch 52 must provide a door open signal on thewire 54 indicating that the door is open. A second signal is provided from the output of anOR circuit 75 whose inputs are inactive only when the output of thesingle shot timer 40 or 51 is active, i.e. during times when the door is permitted to be open. As such, the output of theOR circuit 75 will provide a blocking signal to the input of the ANDgate 70 whenever the door is permitted to be open. The third input to the AND gate is on the activate separate alarm wire 78 which has a signal having a binary.one level when the separate alarm system is actuated. Consequently, when thedoor switch 52 indicates that the door is open, thesingle shot timer 40 and 51 not running and the separate alarm circuit is activated as indicated by a signal on wire 78, each input to the ANDgate 70 will be at its binary one level and the ANDgate 70 will produce a separate alarm signal onwire 72 that indicates the door is open at a time when it should not be open. This separate alarm signal 'will actuate a remotely located alarm in response to which security personnel can take appropriate action.

In some instances, and especially when a large number of people are either entering or leaving the facility, it may be advantageous to turn off the separate alarm system. This can be accomplished by placing a binary zero signal on the wire 78 to prevent the ANDgate 70 from producing an alarm signal on thewire 72. It will be recognized by those of skill in the art that the override for the separate alarm may also be utilized in a similar manner to deactivate the normal entry and egress controls at each door protected by the access control system. Consequently, the whole system can be disabled, if such disabling should be desired, to permit personnel to pass through protected doorways without requiring each person to have his personnel identification card read by the card reader or requiring, on entry to restricted areas, that the individual enter his secret identification on the keyboard.

The foregoing description has described the operation and details of thedoor control 1. The details of thecentral control 3 of FIG. 1 are generally well known in the prior art. For exampale, thedata storage 20 comprises two registers, one register for storing the keyboard data and the second register for storing card data. Electrical storage registers of the type used in electronic computers and the like are most advantageously utilized for thedata storage 20. Since such registers are so well known in the prior art, a more detailed description is not herein provided.

Theverification circuit 30 for the preferred embodiment of this invention is described in the above mentioned copending patent application and will not be described herein in any greater detail.

TheSequence Controller 18 in FIG. 1 comprises, in the preferred embodiment of this invention, a circuit like that shown in FIG. 2. The circuitry of FIG. 2 includes a free running clock which produces pulses at the binary one state on the clock output wire '101 at a periodic rate determined by the clock frequency which, for the preferred embodiment, has a frequency of approximately 600 kHz. Theclock output 101 is connected to one of the inputs of an ANDgate 102. So long as a nonactive signal is present on the input wire 103 to the ANDgate 102, the output of the ANDgate 102 onwire 104 will be unchanged and will not be operative to increment acounter 105 or to trigger asingle shot timer 106.

The input wire 103 is connected to the output of theOR gate 107. Consequently, so long as all of the inputs to theOR gate 107 are not active, i.e. at their binary zero" state, the output thereof connected to wire 103 will remain non-active or at its binary zero state.

When theSequence Controller 18 is started by the receipt of a start signal generated in a manner described earlier on the input line 108 to theOR gate 107, the input line 103 to ANDgate 102 will become active i.e. at the binary one state. The input on theline 113 will also become active or at the binary one" state as described later in greater detail. Consequently, the first clock pulse with a binary one state received from the clock 100 overwire 101 will be transmitted through the ANDgate 102 to acounter 105 to thereby increment thecounter 105.

Thecounter 105 in the preferred embodiment of this invention comprises a counter having a single input for receiving and counting pulses and four output wires for providing a set of binary signals to thereby permit thecounter 105 to provide binary outputs ranging from a value of to 15. The four binary output wires from thecounter 105 are connected to adecoder 109 which has sixteen individual output wires, each output wire having a binary one signal thereon when a unique combination of input signals are applied thereto by thecounter 105. As such, the Sequence Controller shown in FIG. 2 is operative to produce at the output of thedecoder 109 sixteen different control signals for controlling the sequence of the system operation.

Each pulse on theoutput wire 104 which increments thecounter 105, is operative to actuate asingle shot timer 106. Thesingle shot timer 106, in the preferred embodiment of this invention, comprises a timer which produces an active or binary one output signal after a period of twenty seconds has elapsed from the time that an input pulse was applied thereto. If such an active signal should be produced by thesingle shot timer 106, the active signal is connected to one input to theOR gate 107 to thereby produce an active signal on the input wire 103. Since the signal on thewire 113 is at its binary one state, as will become clear later, after a twenty second period of waiting with thecounter 105 at a single value, thesingle shot timer 106 produces at its output a signal having a binary one value which is operative to permit the next clock pulse from the clock 100 to increment thecounter 105. This subsequent clock pulse also restarts thesingle shot timer 106. In this manner, theSequence Controller 18 can never remain in a condition with thecounter 105 permanently set the one value other than to the value of one.

When thecounter 105 reaches a value of zero, the

decoder 109 will produce an output signal having a binary one" state on the zero output line 110 which is connected to one input of the AND gate 111. The second input to this AND gate 111 is the inverse of the start signal. That is, a binary one signal is produced at the second input to the AND gate 111 when the start signal is not present on the start wire 108. Theinverter 112 is operative to produce the inverse of the start signal at the input at the AND gate 111 which, in combination with the signal on the decoder output line 110 is operative to produce an output signal online 113 to block the passage of clock pulses through the ANDgate 102. Consequently, thecounter 105 will remain at a value of zero until a subsequent start signal is received on the input line 108.

Thecounter 105 is incremented by the clock when certain synchronous operations are completed in the proper sequence. For example, when thedecoder 109 produces an output on the line labeled n, an operation such as reading a card might be initiated. After the data from the card is read into the data storage within thecentral control 3, this card reading operation is completed. A signal from thedata storage 20 to theSequence Controller 18 over the line 114 (shown in FIG. 2) would indicate to theSequence Control 18 that the card reading operation was complete. This active or binary one signal on theline 114 is applied to one input of a two input ANDgate 115. The second input to this ANDgate 115 is connected to the decoder output line n so that when the operation complete signal is placed on theinput line 114, the ANDgate 115 will provide an active or binary one signal to theOR circuit 107. The ORcircuit 107 output will then be at a binary one state and this signal is wired to the input line 103 to the ANDgate 102 to allow the next clock pulse from clock to increment the counter to the next sequence step. As such, the counter can be incremented by the proper conclusion of an operation by the system or by thesingle shot timer 106, the latter occurring only when the initiated operation is not completed within the time period of thesingle shot timer 106, which is 20 seconds for the preferred system.

Referring again to FIG. 1, therecorder 36 may comprise any suitable printing mechanism for recording data in readable form from various parts of the system. Specifically, therecorder 36 will provide a record of each event and this record preferably includes an event code which will identify the particular type of event which has occurred. In addition, the record includes the personnel identification number, if one is read from a personnel identification card, to thereby indicate the individual responsible for the recorded event. The record also includes an indication of the door at which the event occurred, the data on which the event occurred and the time at which the event occurred. All of this data is available from different elements of thecentral control 3..Therecorder 36 may respond directly to the data, generated in different parts of the system, however, a print data register (not shown) is preferably provided for storing this information until used by therecorder 36.

Thecentral control 3 additionally includes a day/- night switch orindicator 116 which provides a signal to thestatus check 34 which is utilized thereby to determine whether the individual is authorized to enter the restricted area at the time of day at which entry is attempted. The day/night switch 116 may be manually or automatically set to indicate whether the day or night access information contained on an individuals personnel identification card should be utilized in determining whether entry will be permitted. This operation will be described in greater detail below.

Thecentral control 3 of FIG. 1 also includes aclock 117 as well as adate indicator 118 which are connected to therecorder 36. Theclock 1 17 provides time signals to therecorder 36 so that the time of each system event can be recorded. Thedate indicator 118 also provides electrical data to therecorder 36 so that the data of each event is also recorded. Thedate indicator 118 may comprise a settable switch arrangement or may actually be a portion of theclock 117 which is utilized to produce this data indication.

Referring now to FIG. 3, thestatus check circuitry 34 is shown in greater detail along with other portions of the central control which interconnects therewith. As indicated generally above, the card data and the keyboard data are stored within a storage unit and, in FIG. 3, the keyboard data is stored in a register 20a and the card data is stored in a register b. The keyboard data is utilized only by the verification check circuit while the card data register 20b is utilized for the verification check as well as for other checks. The verification check itself is described in greater detail in the above identified copending patent application and will not be described in any greater detail here.

As indicated above, a printed record is prepared b therecorder 36 and the record includes many different pieces of information. One such piece of information included in the printed record is a door number to identify the door at which an event occurred. The print data register 200 provides a storage location for receiving all the data which is printed by therecorder 36 after the completion of each recording operation responsive to system events at one of the door control units.Digit positions 6 and 7 of the print data register 200 is reserved for receiving data which indicates the number of the door control unit at which the event occurred. This number data is placed into the print data register 200 by adecoder 202 which is activated whenever theSequence Controller 18 produces a signal to cause a card reader at a particular door control unit to read the personnel identification card inserted therein. For instance, if the card reader at thedoor control 1 were to be actuated, the input wire labeled read card atdoor 1 would be actuated. This signal is applied to thedecoder 202 to produce an output of 01 which is placed into thedigit positions 6 and 7 of the data register 200. The read card atdoor 1 signal is also transmitted to thedoor control 1 and this signal is always activated for every controlled operation of the access control system of this invention, therefore, the proper door number is automatically placed into the print data register 200 by thedecoder 202 for each recorded event. For convenience, thedecoder 202 is drawn with six inputs, however, the preferred system is operable to control 16 doors. The additional circuitry necessary, though not shown, is essentially identical to the circuits already described.

As indicated generally above, a portion of the card data stored inregister 200 and shown schematically as 204 comprises data corresponding to the system number for the particular access control system on which the original card data was encoded. Each attempt to enter a restricted area controlled by the access control system of this invention requires that the system number of the card data correspond identically to the system number of the access control system itself. If the system number for card data and the machine system number do not correspond, the access control system is operative to prevent the door from being unlocked and thereby prevents the individual from entering the restricted area. This blocking is accomplished through a circuit which includes a set ofswitches 206 which are manually settable to the system number assigned to the access control system. Thesystem number data 204 from the card data register 20b and theswitches 206 are connected to a compare circuit which produces a signal at its output on wire 208 which is active (binary one state) whenever the card data system number does not correspond to the system number as defined by the setting of theswitches 206.

The active signal on wire 208 indicating that the system numbers do not compare is inverted by aninverter circuit 210 to produce an input to the ANDgate 212 which will prevent the output of the ANDgate 212 from becoming active. As will become more clear later, the output of the ANDgate 212 is active whenever a normal entry occurs and all checks are successful. Consequently, the binary zero signal from theinverter 210 when the card data system number is not the same as the system number of theswitches 206, is operative to prevent the indication of a normal entry.

The indication that the system number on the card and the system number according to theswitches 206 are not the same as a binary one signal on wire 208 which is connected to one input of another ANDgate 214. Assuming that the other input to this ANDgate 214 is also active, the output of the ANDgate 214 will provide an active input signal to the fourth input of anevent decode circuit 216. Theevent decode circuit 216 is preferably a decoder which responds to a signal at one of eight inputs to produce a decimal code at its output which is stored in theprint register 200digit position 1. The code stored in the first digit position of theregister 200 corresponds to the event code which identifies the type of system event which has occurred. While being indicated as a decoder for converting only eight individual event inputs into an output code, thedecoder 216 may indeed be much larger in size to thereby identify even more events, should such identification be desirable. For the circuit shown, however, the event codes are identified below. some of these events will be described in even more detail later.

Code Meaning Normal entry Improper verification Attempt to enter area not authorized to enter Entry blocked Wrong system number Normal egress Other event Other event Another check briefly mentioned above which is performed by thestatus check circuitry 34 is the check to determine whether the individual is permitted to enter the particular restricted area that he seeks to enter. The entry control information, as indicated above, is stored on the personnel identification card itself and, for the preferred embodiment, comprises twelve data bits of information which, after the card is read, is stored in the card data register 20b as at 220 indicated generally. This information is divided into two six data bit fields, one field for daytime access data and the other field for nighttime access data. The day/night switch 116 is operative to control which six data bits are utilized at any given time to determine if the individual is permitted, according to the access control data on the individuals personnel identification card to enter the restricted area to which the individual seeks to enter. The day/night switch 116 is connected via a wire 222 to several AND gates shown generally as 224. When the signal on the wire 222 is active, one of the inputs to each of these ANDgates 224 is active thereby permitting the possibility that one of these AND circuits may produce at its output an active signal indicating that the individual is authorized to pass through the particular door at which he has sought entry.

When the signal on wire 222 is active, the second six data bits of theaccess area data 220 are ignored because theinverter 226 inverts the signal on wire 222 to produce at its output a nonactive signal which is applied to a group of AND gates shown generally at 228 which prevent each such AND gate from producing an active output signal. These ANDgates 228 are connected, as indicated, to the last six data bits of theaccess area data 220. As such, the day/night switch 116 is operative to consider either the first or second half of theaccess area data 220 at any one time.

Each of the ANDgates 224 or 228 comprises a three input AND gate which produces an active signal at its output only when all three inputs are active. One input to each AND gate, as indicated above, comprises a signal representing whether it is day or night as controlled by the day/night switch 116. A second input is connected directly to one unique location in theaccess area data 220 stored in register 20b. The third input to each of these ANDgate 224 of 228 corresponds to a signal from one particular door control unit so that only one such ANDgate 224 or 228 can possibly produce an active output signal at any one time. Consequently, if an individual is seeking to enter atdoor number 1, an active signal will be produced on the wire 230 indicating this fact. Assuming the signal on wire 222 is active, if thewire 232, which connects between the input of the ANDgate 234 and one data bit position of theaccess area data 220 is also active, all of the conditions at the input to the ANDgate 234 have been met and, therefore, the output onwire 236 will also be active. This active signal is transmitted through theOR gate 238 .to provide an active signal which is applied to one input of the ANDgate 212. As such, whenever the output of theOR gate 238 is active, this condition indicates that the individual seeking to enter the restricted area is authorized to enter the restricted area according to the data included on his personnel identification card.

Referring again to FIG. 3, blocking circuitry is provided to determine if an individual should or should not be permitted access to the restricted area controlled by the system. The blocking circuitry utilizes thepersonnel identification number 240 which comprises part of the card data which is stored in the card data register 20b. In the preferred embodiment of this invention, theidentification number data 240 comprises twelve data bits of information which correspond to the personnel identification number assigned to the individual given a particular card. The high order data bits of the identification number are transmitted overwires 241 and the low order data bits of the identification number are transmitted over thewires 242 to form the address to amatrix 243. If the address to thematrix 243 on thewires 241 and 242 correspond identically to an identification number that has been blocked, that is, that the individual holding the card has been prohibited from entering any door controlled by the system, an active signal is produced at the output of thematrix 243 on thewire 244. This active signal on thewire 244 is transmitted through theinverter 245 to one of the four inputs to the ANDgate 212. This active signal on thewire 244 is operative to prevent the ANDgate 212 from producing an active signal at its output thus preventing unlocking of the restricted area door. The active signal on thewire 244 is also operative to produce an active output signal to the ANDgate 246 provided the output of theOR gate 247 is also active. This latter condition will be true if the signal on wire 208 indicates that the system number of the card data is identical to the switch setting forswitches 206 and that the signals on the wires labeled other event are not active. When the output of ANDgate 246 is active, it will cause theevent decoder 216 to produce an output signal having a decimal value of 3 for the event code which is stored indigit position 1 of the print data register 200. Whenever theevent decoder 216 produces an event code of 3, it means that the individual who sought entry to a restricted area has been blocked from entermg.

in operation of the system, an individual may be blocked from entering for any number of reasons. One such reason is that the individual is no longer employed by the corporation having its doors protected by the access control system. Under these circumstances, should the personnel identification card remain in the possession of the individual, it is desirable to prevent such a former employee from entering the building. Also, as noted above, it may be useful to block groups of individuals ,from entering restricted areas. Such group blocking might be utilized under circumstances where union employees are on strike and the employer desires to prevent such union employees from entering the restricted areas while they are on strike.

To achieve this group blocking feature, the high order bits of theidentification number 240 which are transmitted over thewires 241 are also sent to a decoder 250. This decoder 250 is settable and if the setting of the decoder 250 corresponds to the high order data bits of theidentification number 240, an active signal is produced at the output 251 which will have the same effect as the active output from thematrix 243. As such, whenever the high order data bits of thepersonnel identification number 240 correspond to the setting of the decoder 250, the individual seeking entry into the restricted area belongs to a group of individuals who have been blocked from entering this restricted area and entry is prevented.

The circuitry for providing these blocking features is shown in greater detail in FIG. 4. The high order data bits of the identification number are indicated by the four lines labeled lD0, lDl, lD2, and ID3. These four high order data bit lines are connected to the input of a decoder circuit 252 which will produce an active signal at one of sixteen output lines.

Each output line from the decoder 252 is connected to another decoder and is operative to activate the connected second decoder. By way of example, the output from decoder 252 labeled 15 which becomes active whenever the binary value for the four high order data bits of the personnel identification number are all one, is connected to one input ofdecoder 253 and 260 to thereby activate thendecoders 253 and to decode the remaining data bits of the personnel identification number. Thedecoder 253 operates in the same manner as decoder 252 and produces at its output one active line out of sixteen which corresponds to the binary value for the four data bits ID4-ID7.

Each output of the decoder 252 is also connected to a unique block group switch which is selectively utilized to pass the active signal from the decoder 252 to the output of the decode circuitry to thereby produce a block entry signal for any individual whose identification number contains a specific high order bit combination. By way of example, the 15 output of decoder 252 is connected to ablock group switch 254. Whenever theoutput 15 of the decoder 252 is active and whenever theblock group switch 254 is closed, an active signal from the decoder 252 on the output will be transmitted to the input of anOR gate 255 to thereby produce an active signal at the output thereof which is labeled block entry. This block entry signal corresponds to the active signal described in connection withwire 244 shown in FIG. 3 and is operative, for the example selected, to prevent any person with a per sonnel identification number with ones in the first four bit positions thereof from entering the restricted area.

Other block group switches are provided and these are connected to other outputs of the decoder 252 to thereby permit decoding of any one of the sixteen outputs of the decoder 252 to block entry to a restricted area of individuals having selected high order bit combinations in their personnel identification number. It will be recognized by those skilled in the art that the group blocking switches, such asswitch 254, may be operative in response to decoding of any other group of data bits in a personnel identification number and need not be restricted to decoding sequential or only the high order bit positions.

In addition to the group blocking circuitry shown in FIG. 4, selective blocking circuitry is also shown to selectively block individuals from entering restricted areas. This circuitry allows selected individuals to be excluded from entering the restricted area. To achieve this objective, the output of the decoder 252 as indicated above, produces an active signal on one of sixteen different wires which are each connected to a second decoder likedecoder 253 which each have four input wires connected to bits ID4-ID7 of the personnel identification number. Eachsuch decoder 253 has sixteen output terminals each of which is connected to one horizontal wire on amatrix board 256. As such, when a signal appears on one of the horizontal wires of thematrix 256, the first eight data bits of the personnel identification number have been decoded.

As shown in FIG. 4, thematrix board 256 has sixteen horizontal wires as well as 16 vertical wires. There is no actual intersection between these wires, however, a connecting pin such as a diode pin can be inserted at the intersection point between any of the horizontal wires with any of the vertical wires. As a consequence,

an active signal may be transmitted from any horizontal wire to any vertical wire if a diode pin is inserted at the intersection. When an individual is blocked from entering the restricted area, the system owner merely has to locate on one of sixteen matrix boards like that formatrix 256 and inset a pin in the hole which corresponds to the identification number of the individual who is blocked. For example, a diode pin might be inserted at a point shown generally at 257. This would correspond to an individual who has an identification number represented in binary as follows: Il 1 1000010. As such, if thediode pin 257 were inserted in thematrix board 256 and if thedecoder 253 produced an output on the zero output wire, an active signal would be transmitted from the zero output wire through thediode 257 to the vertical wire labeled 2 for thematrix board 256. It should also be noted that more than one of the sixteen intersection points on each horizontal wire may have a diode pin inserted therein. For example, adiode pin 258 might be inserted as shown and this would correspond to an individual having a personnel identification number: 11110001111.

Each of the vertical wires in thematrix board 256 is connected to a unique AND gate shown generally at 259. Each of these AND gates have a second input which is connected to a unique output of a decoder circuit 260 which decodes the low order personnel identification number data bits ID8, [D9, ID10, and lDll. If any one of the ANDgates 259 have two active input wires, an active signal is produced at its output to thereby cause an active signal to be produced at the output of theOR gate 255 to thereby block entry to the restricted area for the individual seeking to enter this area. Consequently, should one of the vertical wires from amatrix board 256 be active and the corresponding output of the decoder 260 connected to the same ANDgate 259 also be active, the individual will be blocked from entering the restricted area because an active signal will appear at the output of theOR gate 255 which is operative in a manner described above to block entry to the restricted area.

Returning again to FIG. 3, circuitry is provided within the dottedline 270 to provide for theevent decoder 216 in the event that more than one condition is present which should block entry of the individual to the restricted area. For example, the individual might be seeking to enter the restricted area with a card for another system and the individual also might fail to insert the proper secret number corresponding to his personnel identification number. As such, a wrong system number indication would appear on the wire 208 and also a no verification indication would be placed on thewire 32. Assuming that the output of the OR gate 271 is active, the ANDgate 214 will produce an active signal at its output. At the same time, however, an active signal is applied to thewire 272 which is one of the inputs to the ANDgate 273. In order to prevent a second input from being applied to the input of theevent decoder 216, the signal on theinput wire 274 of the ANDgate 273 must not be made active. This, in fact, occurs because the active signal on the wire 208 is inverted by aninverter circuit 275 to produce a nonactive signal at its output. This nonactive signal is applied to the input of the OR gate 276. This will produce a nonactive signal at the output of the OR gate 276 on awire 274 connected to one input to an ANDgate 273 thereby preventing an active signal from appearing at the output of the ANDgate 273.

Other similar circuitry is provided within the dottedline 270 to provide a priority for the specific event which may be decoded by theevent decoder 216 should more than one event occur. According to the priority scheme established by this circuitry, theevent decoder 216 is operative to produce signals representing events having a coding in the order ranging from 7 to 0 with the higher decimal values of the event code having priority over lower decimal values for the event code.

In the event that all of the tests performed by the status check circuitry are passed successfully, the ANDgate 212 will produce an active signal at itsoutput 280 which forms the zero input to theevent decoder 216. Since no other event can occur simultaneously with an active signal on theWire 280, this wire is connected directly to the zero input of theevent decoder 216 to thereby produce a zero event code to indicate that a normal entry has occured at a door. This signal is also utilized as an input to one of the AND gates shown generally at 281. This signal in combination with one of the Entry Ready signals is operative to produce an active signal at the output of one of these ANDgates 281. These output signals are connected directly to the door control unit at the door corresponding to the location where entry is being sought. This signal comprises an unlock door signal which is operative to unlock the door at the door control to thereby permit the individual to enter the restricted area.

In the situation where a normal egress has occured, the normal egress wire in FIG. 3 will be actuated by the receipt at thestatus check 34 of an indication that an egress at any door has occured. Such a signal is generated fordoor 1, for example, at thewire 62 shown in FIG. 1. This egress signal comprises one input to an AND gate 277. The second input to this AND gate 277 is active whenever the system generates a read card signal to read the personnel identification card at the door control. When both of the inputs to the AND gate 277 are active, the output thereof will be active. This active output signal from the AND gate 277 is connected by a wire 278 to the five input of theevent decoder circuit 216 which produces a 5 at its output for insertion intodigit position 1 of the data register 200.

While the foregoing description of the invention has been made with particular emphasis on a preferred embodiment therefor, numerous modifications may be made to this system without departing from the spirit and scope of the invention. For example, in order to simplify the system description, the system has been described as having six different doors. The preferred system has, however, sixteen doors. It will be recognized by those of skill in the art that many more doors may be utilized by this system, however, additional circuitry must be provided and this additional circuitry would be connected in parallel with existing circuits to thereby produce identical operations at additional doors.

In addition to adding more doors to the system, it is possible to add additional status checks to the system should such additional checks be desirable. Indeed, circuitry is provided for handling two additional other events in thepriority circuitry 270 although the nature of these other events has not been specifically defined. Further, while the described attempt counter is operative after seven attempts at entry to erase the personnel identification card, clearly other settings for the attempt counter might be selected.

The preferred system described above includes a day/night switch used in connection with testing the access area data from the personnel identification card. In an alternative system, the day/night switch can be replaced by a three position switch so that the access controller of this invention can be used at facilities having three work shifts a day. With such an option, additional access area information may be desirable so the card data field must be expanded accordingly. A further alternative is to use the day/night switch as a weekday/weekend switch for controlling access in one manner on weekdays and in another manner on weekends. Furthermore, each of the above described alternative approaches may be combined with another such approach to thereby produce a system with expanded capability.

These and other modifications in form only may be made readily by those of skill in the art without departing from the spirit and scope of this invention as defined by the following claims.

What is claimed is:

1. An accesscontrol system for controlling movement into and out of a restricted area through a door by personnel having an identification card; the system comprising, in combination;

a remotely controllable e s .7 hanism for selectively permitting the door to the restricted area to be opened in response to door unlock signals, said door lock mechanism being normally locked,

a personnel detector within the restricted area to detect a person within said restricted area adjacent said door and in response thereto to generate a personnel signal,

a door sensor for producing a door open signal when the door to the restricted area is open;

an egress detector responsive to the occurrence of said door open signal and personnel signal to produce an egress signal;

a personnel identification card reader located outside the restricted area for reading card data from a personnel identification number;

a central control responsive to said egress signal to provide a read signal to said card reader;

a recorder;

said central control including means operative to receive the personnel identification number from said card reader and to actuate said recorder to record that an egress has occurred and the personnel identification number from the card read by said card reader; and

said central control including further means operative to produce a door unlock signal to unlock said door in response to specified conditions including reading of a card inserted in said reader by a person outside said restricted area seeking entry who inserts a personnel identification card in said reader when the door is locked.

2. The access control system ofclaim 1 additionally including:

means associated with said card reader for producing a card absence signal when no card is in said reader, means for producing a humanly perceptible signal in response to coincidence of a said card absence signal and said egress signal, said humanly perceptible signal reminding personnel leaving the restricted area to insert their personnel identification card into said card reader.

3. The access control system ofclaim 2 wherein:

said central control is operative after a predetermined period of time to turn off said egress signal causing said humanly perceptible signal to be generated only for a predetermined time period in the absence of card insertion.

4. The access control system ofclaim 3 wherein:

said central control includes means to actuate said recorder to indicate that an egress has occurred and that no personnel identification card had been read upon expiration of said predetermined time period without card insertion.

5. The access control system ofclaim 1 additionally including:

a keyboard located near said card reader outside the restricted area, said keyboard being provided for entering, by personnel seeking to enter the restricted area, a secret number which corresponds to the personnel identification number on their personnel identification card;

6. The access control system of claim wherein:

, said central control is operative to activate said recorder when the secret number and personnel identification number correspond to indicate that a normal entry has occurred and also to record the personnel identification number from the card read by said card reader, thereby providing an access control system with a means for providing a record of all movement of personnel through a doorway of a restricted area.

7. The access control system ofclaim 5 wherein:

said central control includes a blocking circuit responsive to said read personnel identification number for determining if said read personnel identification number corresponds to a person who has been blocked from entering the restricted area, said blocking circuit including recorded manifestations of blocked personnel for producing a block signal if said read personnel identification number corresponds to a person blocked, said blocking signal being operative to inhibit generation of said door unlock signal to prevent unlocking said door lock mechanism.

8. The access control system ofclaim 7 wherein;

said blocking circuit includes a plurality of interrupted connections, each associated with one personnel identification number, each interrupted connection being selectively rendered continuous by a connector means, said blocking signal being generated when the personnel identification number of the card read by said card reader corresponds, identically to an interrupted connection rendered continuous by a connector means.

9. The access control system ofclaim 7 wherein:

said blocking circuit includes a group block circuit for blocking groups of personnel from entering the restricted area, said group blocking circuit responding to selected portions of said read personnel identification number to produce said block signal when the selected portions of said personnel identification number corresponds to a group who have been blocked.

10. The access control system ofclaim 9 wherein:

said blocking circuit includes a plurality of interrupted connections, each associated with one personnel identification number, each interrupted connection being selectively rendered continuous by a connector means, said blocking signal being generated when the personnel identification number of the card read by said card reader corresponds identically to an interrupted connection rendered continuous by a connector means.

11. The access control system ofclaim 5 wherein:

said blocking circuit includes a group block circuit for blocking groups of personnel from entering the restricted area, said group blocking circuit responding to selected portions of said read personnel identification number to produce said block signal when the selected portions of said personnel identification number corresponds to a group who have been blocked.

12. The access control system ofclaim 11 wherein:

said blocking circuit includes a plurality of interrupted connections, each associated with one personnel identification number, each interrupted connection being selectively rendered continuous by a connector means, said blocking signal being generated when the personnel identification number of the card read by said card reader corresponds identically to an interrupted connection rendered continuous by a connector means.

13. The access control system ofclaim 5 wherein:

said card includes access area data recorded thereon, said access area data being correlated to restricted areas to which personnel can be selectively admitted;

an indicator means having at least two output signals correlated to at least two different time periods;

said central control includes an access area control circuit responsive to said access area data and said indicator means, said access area control circuit being operative to inhibit generation of said unlock signal to prevent unlocking of said door lock mechanism if the access area data read the personnel identification card does not include data indicating that the individual is permitted to enter the restricted area to which entry is sought at the time of day indicated by said indicator means.

14. The access control system ofclaim 5 additionally including:

an entry attempt counter responsive to reading of said keyboard entered data, said entry attempt counter being incremented each time said keyboard receives a complete secret number entered therein, said entry attempt counter producing an erase card signal when said counter reaches a predetermined value, said erase signal being input to said card reader, said card reader including circuitry responsive to said erase signal to erase the card data on the card inserted therein, thereby preventing further use of the personnel identification card to enter the restricted area, said counter being reset without production of said erase signal in response to said unlock signal.

15. The access control system ofclaim 1 wherein:

said card data of each said personnel identification card includes a multidigit number in machine readable form coded thereon, said number including a multi-digit personnel identification number; and

said central control further responsive to said card reader for receiving the personnel identification number read by said card reader, said central control including a settable decoder responsive to selected digits of the read personnel identification number, said decoder producing a block signal when the selected digits of the read personnel identification number corresponds identically to the preset setting for said decoder, said block signal being operative to prevent the generation of unlock signals, thereby preventing an individual who belongs to a group of individuals blocked from entering the restricted area from entering the restricted area. z

16. The access control system ofclaim 1 wherein:

said card data of each said personnel identification card includes a multi-digit number in machine readabie-fomcodeithersgm said number including a multi-digit personnel identification number; and

said central control further responsive to said card reader for receiving the personnel identification number read by said card reader, said central control including a settable decoder responsive to selected digits of the read personnel identification number, said decoder producing a block signal when the selected digits of the read personnel idensaid blocking circuit includes a group block circuit for blocking groups of personnel from entering the restricted area, said group blocking circuit responding to selected portions of said read personnel identification number to produce said block signal when the selected portions of said personnel identification number corresponds to a group who have been blocked.

PATENT NO.

DATED INVENTORtS) i It is certified that error appears in the above identified patent and that said Letters Patent are hereby corrected as shown below;

.Column [SEAL] UNITED STATES PATENT OFFICE CERTIFICATE OF CORRECTION 3,866,173 February 11, 1975 Charles J. Moorman et a1 line 43, change the" to -to-.

line 4, change "control" to --controller.

line 58, change "data" (second instance) to 5tate---line 62, change "data" to -date.

line 17, change of"' second occurrence to 01"line 54, change "160" to 260-.

line 51, change "inset" to --insert--.

Signed and Sealed this twenty-sixth Day Of August 1975 Arrest:

RUTH C. MASON Arresting Officer C. MARSHALL DANN ('mnrrlissiumr ofParenrs and Trademarkx

Claims (17)

1. An access control system for controlling movement into and out of a restricted area through a door by personnel having an identification card; the system comprising, in combination; a remotely controllable door lock mechanism for selectively permitting the door to the restricted area to be opened in response to door unlock signals, said door lock mechanism being normally locked, a personnel detector within the restricted area to detect a person within said restricted area adjacent said door and in response thereto to generate a personnel signal, a door sensor for producing a door open signal when the door to the restricted area is open; an egress detector responsive to the occurrence of said door open signal and personnel signal to produce an egress signal; a personnel identification card reader located outside the restricted area for reading card data from a personnel identification number; a central control responsive to said egress signal to provide a read signal to said card reader; a recorder; said central control including means operative to receive the personnel identification number from said card reader and to actuate said recorder to record that an egress has occurred and the personnel identification number from the card read by said card reader; and said central control including further means operative to produce a door unlock signal to unlock said door in response to specified conditions including reading of a card inserted in said reader by a person outside said restricted area seeking entry who inserts a personnel identification card in said reader when the door is locked.

2. The access control system of claim 1 additionally including: means associated with said card reader for producing a card absence signal when no card is in said reader, means for producing a humanly perceptible signal in response to coincidence of a said card absence signal and said egress signal, said humanly perceptible signal reminding personnel leaving the restricted area to insert their personnel identification card into said card reader.

3. The access control system of claim 2 wherein: said central control is operative after a predetermined period of time to turn off said egress signal causing said humanly perceptible signal to be generated only for a predetermined time period in the absence of card insertion.

4. The access control system of claim 3 wherein: said central control includes means to actuate said recorder to indicate that an egress has occurred and that no personnel identification card had been read upon expiration of said predetermined time period without card insertion.

5. The access control system of claim 1 additionally including: a keyboard located near said card reader outside the restricted area, said keyboard being provided for entering, by personnel seeking to enter the restricted area, a secret number which corresponds to the personnel identification number on their personnel identification card; said central control being responsive to entry of said secret number on said keyboard to transfer said keyboard entered number to said central contrOl and also to read the personnel identification card in said card reader; said central control including a verification circuit to verify that the secret number corresponds to the personnel identification number read from the personnel identification card, said central control producing a door unlock signal if said verification circuit determines that the secret number and the personnel identification number properly correspond to each other.

6. The access control system of claim 5 wherein: said central control is operative to activate said recorder when the secret number and personnel identification number correspond to indicate that a normal entry has occurred and also to record the personnel identification number from the card read by said card reader, thereby providing an access control system with a means for providing a record of all movement of personnel through a doorway of a restricted area.

7. The access control system of claim 5 wherein: said central control includes a blocking circuit responsive to said read personnel identification number for determining if said read personnel identification number corresponds to a person who has been blocked from entering the restricted area, said blocking circuit including recorded manifestations of blocked personnel for producing a block signal if said read personnel identification number corresponds to a person blocked, said blocking signal being operative to inhibit generation of said door unlock signal to prevent unlocking said door lock mechanism.

8. The access control system of claim 7 wherein: said blocking circuit includes a plurality of interrupted connections, each associated with one personnel identification number, each interrupted connection being selectively rendered continuous by a connector means, said blocking signal being generated when the personnel identification number of the card read by said card reader corresponds identically to an interrupted connection rendered continuous by a connector means.

9. The access control system of claim 7 wherein: said blocking circuit includes a group block circuit for blocking groups of personnel from entering the restricted area, said group blocking circuit responding to selected portions of said read personnel identification number to produce said block signal when the selected portions of said personnel identification number corresponds to a group who have been blocked.

10. The access control system of claim 9 wherein: said blocking circuit includes a plurality of interrupted connections, each associated with one personnel identification number, each interrupted connection being selectively rendered continuous by a connector means, said blocking signal being generated when the personnel identification number of the card read by said card reader corresponds identically to an interrupted connection rendered continuous by a connector means.

11. The access control system of claim 5 wherein: said blocking circuit includes a group block circuit for blocking groups of personnel from entering the restricted area, said group blocking circuit responding to selected portions of said read personnel identification number to produce said block signal when the selected portions of said personnel identification number corresponds to a group who have been blocked.

12. The access control system of claim 11 wherein: said blocking circuit includes a plurality of interrupted connections, each associated with one personnel identification number, each interrupted connection being selectively rendered continuous by a connector means, said blocking signal being generated when the personnel identification number of the card read by said card reader corresponds identically to an interrupted connection rendered continuous by a connector means.

13. The access control system of claim 5 wherein: said card includes access area data recorded thereon, said access area data being correlated to restricted areas to which personnel can bE selectively admitted; an indicator means having at least two output signals correlated to at least two different time periods; said central control includes an access area control circuit responsive to said access area data and said indicator means, said access area control circuit being operative to inhibit generation of said unlock signal to prevent unlocking of said door lock mechanism if the access area data read the personnel identification card does not include data indicating that the individual is permitted to enter the restricted area to which entry is sought at the time of day indicated by said indicator means.

14. The access control system of claim 5 additionally including: an entry attempt counter responsive to reading of said keyboard entered data, said entry attempt counter being incremented each time said keyboard receives a complete secret number entered therein, said entry attempt counter producing an erase card signal when said counter reaches a predetermined value, said erase signal being input to said card reader, said card reader including circuitry responsive to said erase signal to erase the card data on the card inserted therein, thereby preventing further use of the personnel identification card to enter the restricted area, said counter being reset without production of said erase signal in response to said unlock signal.

15. The access control system of claim 1 wherein: said card data of each said personnel identification card includes a multi-digit number in machine readable form coded thereon, said number including a multi-digit personnel identification number; and said central control further responsive to said card reader for receiving the personnel identification number read by said card reader, said central control including a settable decoder responsive to selected digits of the read personnel identification number, said decoder producing a block signal when the selected digits of the read personnel identification number corresponds identically to the preset setting for said decoder, said block signal being operative to prevent the generation of unlock signals, thereby preventing an individual who belongs to a group of individuals blocked from entering the restricted area from entering the restricted area.

16. The access control system of claim 1 wherein: said card data of each said personnel identification card includes a multi-digit number in machine readable form coded thereon, said number including a multi-digit personnel identification number; and said central control further responsive to said card reader for receiving the personnel identification number read by said card reader, said central control including a settable decoder responsive to selected digits of the read personnel identification number, said decoder producing a block signal when the selected digits of the read personnel identification number corresponds identically to the preset setting for said decoder, said block signal being operative to prevent the generation of unlock signals, thereby preventing an individual who belongs to a group of individuals blocked from entering the restricted area from entering the restricted area.

17. The access control system of claim 16 wherein: said blocking circuit includes a group block circuit for blocking groups of personnel from entering the restricted area, said group blocking circuit responding to selected portions of said read personnel identification number to produce said block signal when the selected portions of said personnel identification number corresponds to a group who have been blocked.

Images