Method of access control implemented in an Ethernet switch
An access control system, having at least one access control unit for securing a physical area and controlling entry into and egress out of the physical area, and an Ethernet routing device, is disclosed. The Ethernet routing device includes an access controller for determining access privileges to the physical area; an Ethernet switching unit for directing network communications between multiple network devices; at least one Ethernet connector for connecting the at least one access control unit to the Ethernet routing device; and an access control message interpreter for reading messages received, by way of the Ethernet connector, from the at least one access control unit and providing access control information contained in the messages to the access controller for access privilege determination.
1. A device for use in an access control system, said device comprising:
an access controller that determines access privileges to a physical area;
an Ethernet switching unit for directing network communications between multiple network devices;
at least two Ethernet connectors, a first Ethernet connector that connects at least one access control unit to said device, and a second Ethernet connector that connects at least one non-access control related network unit to said device; and
an access control message interpreter
that reads router headers of messages received by way of said Ethernet connectors,
that determines if said messages are from said at least one access control unit or if said messages are from said at least one non-access control related network unit,
that transfers said messages to a destination unit without reading message content when said messages are from said at least one non-access control related network unit, and
that extracts message content not in said router headers of said messages and provides said message content to said access controller for access privilege determination when said messages are from said at least one access control unit.
2. The device as in claim 1 , wherein said at least one access control unit is selected from a group consisting of: ID card reader, RF-ID reader and biometric scanner.
3. The device as in claim 1 , wherein said access controller implements at least one access control scheme selected from a group consisting of: antipassback, 2-man rule and n-man rule.
4. The device as in claim 1 , further comprising an access rules storage unit for storing information regarding authorized personnel used for determining identity and access privileges of said authorized personnel.
5. The device as in claim 1 , wherein said access controller, upon receiving said access control information, determines identity and access privileges, and based on said determination transmits a message to said access control unit originating said message granting or denying access.
6. An access control system, comprising:
at least one access control unit that secures a physical area and controls entry into and egress out of said physical area; and
an Ethernet routing device having:
an access controller that determines access privileges to said physical area;
an Ethernet switching unit that directs network communications between multiple network devices;
at least two Ethernet connectors, including a first Ethernet connector that connects said at least one access control unit to said Ethernet routing device, and a second Ethernet connector that connects at least one non-access control related network unit to said Ethernet routing device; and
an access control message interpreter that reads router headers of messages received by way of said Ethernet connectors,
said access control message interpreter determines if said messages are from said at least access control unit or if said messages are from said at least one non-access control related network unit,
said access control message interpreter transfers said messages to a destination unit without reading message content when said messages are from said at least one non-access control related network unit, and
said access control message interpreter extracts message content not in said router headers of said messages and providing said message content to said access controller for access privilege determination when said messages are from said at least one access control unit.
7. The access control system as in claim 6 , wherein said at least one access control unit is selected from a group consisting of: ID card reader, RF-ID reader and biometric scanner.
8. The access control system as in claim 6 , wherein said access controller implements at least one access control scheme selected from a group consisting of: anti-passback, 2-man rule and n-man rule.
9. The access control system as in claim 6 , further comprising an access rules storage unit for storing information regarding authorized personnel used for determining identity and access privileges of said authorized personnel.