Frictionless access control system for a building

1. An access control system (ACS) for a building, the ACS comprising:

an access reader configured to read an access credential provided by a first person at an access point of the building and generate ACS data comprising the access credential;

a camera, installed in the building, configured to capture facial recognition system (FRS) data comprising an image of the first person at the access point;

an access controller configured to:

determine whether the access credential is valid based on the ACS data;

determine whether the first person is recognized based on the FRS data;

grant or deny access to the first person through the access point based on whether the access credential is valid and whether the first person is recognized;

generate and store one or more of a plurality of access events, each of the access events corresponding to a different combination of whether the access credential is valid and whether the first person is recognized; and

wherein, responsive to the access credential being determined invalid and/or the first person not being recognized, the access controller is configured to (i) send an automated message to a security officer, a second person, or an individual familiar with the first person or to (ii) establish a communications link with the security officer based on a combination of whether the access credential is invalid and whether the first person is not recognized.

2. The ACS of claim 1 , wherein the access controller is configured to:

identify a first user identity associated with the access credential in response to a determination that the access credential is valid;

identify a second user identity associated with the FRS data in response to a determination that the first person is recognized; and

compare the first user identity with the second user identity to determine whether the first user identity matches the second user identity.

3. The ACS of claim 2 , wherein the access controller is configured to grant access to the first person through the access point and generate an “Access Granted” access event in response to a determination that the first user identity matches the second user identity.

4. The ACS of claim 2 , wherein the access controller is configured to deny access to the first person through the access point and generate an “Access Denied” access event in response to a determination that the first user identity does not match the second user identity.

5. The ACS of claim 1 , wherein the access controller is configured to:

determine whether the first person is identified as a person of interest by comparing at least one of the ACS data or the FRS data to one or more identifiers identifying people of interest stored in a database; and

generate a “Person of Interest” access event in response to a determination that the first person is identified as a person of interest.

6. The ACS of claim 5 , wherein the access controller is configured to generate and send a message comprising an instruction to dispatch a security officer to a location at which the person of interest is detected in response to the determination that the first person is identified as a person of interest.

7. The ACS of claim 6 , wherein the access controller is configured to attach the image of the first person at the access point to the message to facilitate visual identification of the person of interest by the security officer.

8. The ACS of claim 1 , wherein the access controller is configured to trigger a second level of authentication in response to a determination that the access credential is valid based on the ACS data but the first person is not recognized based on the FRS data.

9. The ACS of claim 8 , wherein the second level of authentication comprises:

sending the image of the first person captured by the camera at the access point to a digital officer;

prompting the digital officer to provide a response approving or denying access to the first person; and

granting or denying access to the first person through the access point based on the response provided by the digital officer.

10. The ACS of claim 9 , wherein the digital officer comprises at least one of a security officer or another individual familiar with the first person.

11. The ACS of claim 10 , wherein the access controller is configured to:

identify a user identity associated with the access credential; and

select the individual familiar with the first person based on the user identity associated with the access credential.

12. The ACS of claim 1 , wherein the access controller is configured to deny access to the first person through the access point and generate an “Unknown Person” access event in response to a determination that the first person is not recognized based on the FRS data and no access credential is provided by the first person at the access point.

13. The ACS of claim 1 , wherein the access controller is configured to:

classify the first person as an unknown person in response to a determination that the first person is not recognized based on the FRS data and no access credential is provided by the first person at the access point; and

generate and send a message comprising an instruction to dispatch a security officer to a location at which the unknown person is detected.

14. The ACS of claim 13 , wherein the access controller is configured to attach the image of the first person at the access point to the message to facilitate visual identification of the unknown person by the security officer.

15. An access controller for a building, the access controller comprising:

a communications interface configured to receive access control system (ACS) data comprising an access credential provided by a first person at an access point of the building and facial recognition system (FRS) data, from a camera installed in the building, comprising an image of the first person at the access point;

one or more processors; and

non-transitory computer readable media containing program instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:

determining whether the access credential is valid based on the ACS data;

determining whether the first person is recognized based on the FRS data;

granting or denying access to the first person through the access point based on whether the access credential is valid and whether the first person is recognized;

generating and storing one or more of a plurality of access events, each of the access events corresponding to a different combination of whether the access credential is valid and whether the first person is recognized; and

wherein, responsive to the access credential being determined invalid and/or the first person not being recognized, the program instructions further cause the one or more processors to (i) send an automated message to a security office, a second person, or an individual familiar with the first person or to (ii) establish a communications link with the security officer based on a combination of whether the access credential is invalid and whether the first person is not recognized.

16. The access controller of claim 15 , the operations further comprising:

identifying a first user identity associated with the access credential in response to a determination that the access credential is valid;

identifying a second user identity associated with the FRS data in response to a determination that the first person is recognized; and

comparing the first user identity with the second user identity to determine whether the first user identity matches the second user identity.

17. The access controller of claim 15 , the operations further comprising:

determining whether the first person is identified as a person of interest by comparing at least one of the ACS data or the FRS data to one or more identifiers identifying people of interest stored in a database; and

generating a “Person of Interest” access event in response to a determination that the first person is identified as a person of interest.

18. The access controller of claim 15 , the operations further comprising triggering a second level of authentication in response to a determination that the access credential is valid based on the ACS data but the first person is not recognized based on the FRS data.

19. One or more non-transitory computer readable media containing program instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

receiving access control system (ACS) data comprising an access credential provided by a first person at an access point of a building and facial recognition system (FRS) data, from a camera installed in the building, comprising an image of the first person at the access point;

determining whether the access credential is valid based on the ACS data;

determining whether the first person is recognized based on the FRS data;

granting or denying access to the first person through the access point based on whether the access credential is valid and whether the first person is recognized;

generating and storing one or more of a plurality of access events, each of the access events corresponding to a different combination of whether the access credential is valid and whether the first person is recognized; and

wherein, responsive to the access credential being determined invalid and/or the first person not being recognized, the program instructions further cause the one or more processors to (i) send an automated message to a security officer, a second person, or an individual familiar with the first person or to (ii) establish a communications link with the security officer based on a combination of whether the access credential is invalid and whether the first person is not recognized.

20. The one or more non-transitory computer readable media of claim 19 , the operations further comprising:

identifying a first user identity associated with the access credential in response to a determination that the access credential is valid;

identifying a second user identity associated with the FRS data in response to a determination that the first person is recognized; and

comparing the first user identity with the second user identity to determine whether the first user identity matches the second user identity.

21. The one or more non-transitory computer readable media of claim 19 , the operations further comprising:

determining whether the first person is identified as a person of interest by comparing at least one of the ACS data or the FRS data to one or more identifiers identifying people of interest stored in a database; and

generating a “Person of Interest” access event in response to a determination that the first person is identified as a person of interest.

22. The one or more non-transitory computer readable media of claim 19 , the operations further comprising triggering a second level of authentication in response to a determination that the access credential is valid based on the ACS data but the first person is not recognized based on the FRS data.

23. A method for operating an access control system for a building, the method comprising:

receiving access control system (ACS) data comprising an access credential provided by a first person at an access point of the building and facial recognition system (FRS) data, from a camera installed in the building, comprising an image of the first person at the access point;

determining whether the access credential is valid based on the ACS data;

determining whether the first person is recognized based on the FRS data;

granting or denying access to the first person through the access point based on whether the access credential is valid and whether the first person is recognized;

generating and storing one or more of a plurality of access events, each of the access events corresponding to a different combination of whether the access credential is valid and whether the first person is recognized; and

wherein, responsive to the access credential being determined invalid and/or the first person not being recognized, the method further comprises (i) sending an automated message to a security officer, a second person, or an individual familiar with the first person or (ii) establishing a communications link with the security officer based on a combination of whether the access credential is invalid and whether the first person is not recognized.

24. The method of claim 23 , the method further comprising:

identifying a first user identity associated with the access credential in response to a determination that the access credential is valid;

identifying a second user identity associated with the FRS data in response to a determination that the first person is recognized; and

comparing the first user identity with the second user identity to determine whether the first user identity matches the second user identity.

25. The method of claim 23 , the method further comprising:

determining whether the first person is identified as a person of interest by comparing at least one of the ACS data or the FRS data to one or more identifiers identifying people of interest stored in a database; and

generating a “Person of Interest” access event in response to a determination that the first person is identified as a person of interest.