Patent AU-2019275589-B2 (AU)
Title: Self-provisioning access control
Inventor: NEELY E TERRY
IPC: G06F7/04
Filed: 2019-12-04
Granted: 2021-04-01
Abstract: C:\Interwo n\NRPortbl\DCC\DXL\19612252_l.docx-3/l2/2019 
ABSTRACT 
A system for controlling access by individuals to an enclosed area, comprising: 
a processor corresponding to each access controller among a plurality of 
access controllers, each access controller controlling operation of a first door and a 
second door of a corresponding enclosed area, each access controller embodied on 
a computer-readable storage medium, each access controller comprising machine 
instructions that when executed by the corresponding processor, causes the 
corresponding processor at least to: 
configure one access controller among the plurality of access controllers to 
receive: 
credential and policy directory information, directly from a remote credential 
and policy directory, to allow self-provisioning of the one access controller through 
periodic, automated query of the credential and policy directory by the one access 
controller; and 
credential and policy information from the credential and policy directory for 
one or more individuals who may require access to the enclosed area, 
cause through a user interface the one access controller to peer-to-peer 
communicate the credential and policy direction information and policy directory and 
the credential and policy information from the one access controller to an 
unconfigured access controller among the plurality of access controllers and to 
thereafter cause each unconfigured access controller among the plurality of access 
controllers to be automatically configured through peer-to-peer replication of the 
credential and policy direction information and the credential and policy information 
from a configured access controller to an unconfigured access controller; 
store in a local cache corresponding to each access controller accessible by 
the corresponding processor, the received credential and policy information and the 
credential and policy information, 
periodically request a credential and policy information update from the 
credential and policy information directory,
C:\Interwo n\NRPortbl\DCC\DXL\19612252_l.docx-3/l2/2019 
receive, at the corresponding processor, the credential and policy information 
update in response to the periodic request; 
update the corresponding local cache based on the credential and policy 
information update; 
receive an access request from a sensing device to allow an individual access 
among the one or more individuals access to the corresponding enclosed area 
through the corresponding first door or the corresponding second door; 
compare the access request to the credential and policy information in the 
corresponding local cache; 
when the comparison indicates a match, grant the individual access to the 
corresponding enclosed area; 
configure each access controller to monitorfor and collect events related to the 
corresponding first door and the corresponding second door and to monitor for entry 
signals and exit signals corresponding to the one or more individuals; 
on a log in attempt to a computer within the corresponding enclosed area by 
the individual: 
determine if an entry signal corresponding to the individual originated from the 
access controller associated with the access request; and 
denying the individual access to any computer within the corresponding 
enclosed area in absence of the entry signal.
1/9 
C Z 0 
2,2 
0 
0 
rv4 
Arq 
t-I 
o. V5 .  
.00 
rL 
ICL 
0