Multi-factor authentication door access control system
A multi-factor authentication access control system is described for permitting access to secured locations. Types of authentication factors include property or physical-based items and biometric-based information. Optionally, the biometric information presented by the person is evaluated for being a presentation attack. Exemplary embodiments are directed to controlling door access.
1. A multi-factor authenticating door access control system for evaluating whether a person approaching a door is an authorized person to unlock the door, the system comprising:
a biometric authenticating reader comprising:
a housing;
at least one camera; and
at least one processor operable to:
receive a sequence of images from the at least one camera of a scene in a vicinity of the reader;
detect a person approaching the reader;
receive a credential from a physical item on the person approaching the reader;
receive an approved biometric template of the authorized person from the physical item on the person approaching the reader;
determine a computed biometric template of the person approaching the reader based on the sequence of images;
determine a level of confidence the person approaching the reader is the authorized person based on comparing the approved biometric template and the computed biometric template;
compute a level of PAD based on emitting multiple wavelengths of light towards a face of the person approaching the reader and detecting reflectance/absorption of all of the multiple wavelengths; and
prohibit activating a door lock for the door based on the level of PAD.
2. The system of claim 1 , wherein the physical item is a key fob, smart phone, or access card.
3. The system of claim 2 , further comprising a control panel, wherein the reader sends the credential to the control panel if the level of confidence is greater than a threshold value.
4. The system of claim 3 , wherein the control panel evaluates whether the credential is allowed and delivers a signal to the door lock to unlock the door lock if the credential is an allowed credential.
5. The system of claim 1 , wherein the processor is further operable to determine a level of intent the person approaching the reader desires to open the door.
6. The system of claim 5 , wherein the processor is operable to compute a body motion of a subject within the scene based on the sequence of images and determine the level of intent based on the body motion of the subject.
7. The system of claim 5 , wherein determining the level of intent is based on detecting a candidate subject's proximity to the door by an RF-based location tracking technology.
8. The system of claim 7 , wherein the RF-based location tracking technology is at least one of Bluetooth, Wi-Fi, or UWB.
9. The system of claim 1 , further comprising a thermal sensor, wherein the at least one processor is operable to compute the level of PAD based on images from the thermal sensor.
10. The system of claim 9 , wherein detection of the person approaching the reader is based on a signal from the thermal sensor.
11. The system of claim 1 , further comprising:
a remote server; and
a communication interface adapted to communicate information with the server.
12. The system of claim 1 , wherein the at least one processor is operable to delete any personal information (PI) uploaded to the reader after the PI is used for authentication.
13. A multi-factor authenticating door access control method for evaluating whether a person approaching a door is an authorized person to unlock the door, the method comprising:
detecting a person approaching the door;
transmitting an approved credential from a phone in possession of the person approaching the door to a reader adjacent the door;
prompting the person approaching the door to take a self-portrait using the phone;
determining a computed biometric template of the person approaching the door based on the self-portrait;
determining an approved biometric template of the authorized person based on an approved photo of the authorized person previously stored on the phone;
determining a level of confidence the person approaching the door is the authorized person based on comparing the approved biometric template and the computed biometric template; and
sending a signal to the reader that the person approaching the door matches the authorized person based on the level of confidence.
14. The method of claim 13 , further comprising sending the approved credential from the reader to a control panel if the level of confidence is greater than a threshold value.
15. The method of claim 14 , wherein the control panel evaluates whether the credential is an allowed credential and delivers a signal to the door lock to open the door lock if the credential is an allowed credential.
16. The method of claim 13 , further comprising determining a level of intent the person approaching the door desires to open the door.
17. The method of claim 16 , wherein determining the level of intent is based on detecting a candidate subject's proximity to the door by an RF-based location tracking technology, wherein the RF-based location tracking technology is at least one of Bluetooth, Wi-Fi, or UWB.
18. The method of claim 13 , further comprising computing a level of PAD of the person approaching the door.