Patent ID: 8730005

Claim:
A control system for managing access of users to a plurality of restricted areas via the use of rights to access, including: at least one manager module, comprising a central processing unit, configured for issuing and checking a right to access associated to a transaction; and one or more provider modules, comprising each a local processing unit, in which each provider module is set at entrance to a restricted area and is configured for carrying out a check on the right to access, wherein: said manager module is configured for executing a step of enabling of the right to access associated to the transaction by transmitting information on said transaction to the local processing units; a provider module is configured for verifying the validity of the right to access presented by the user and authorizing, on the basis of the result of said verification, access to the corresponding restricted area, sending a specific notification of the provider module to the manager module at an instant in time that can be selected for notifying that access has been granted; and said manager module is moreover configured for executing, after reception of said specific notification of the provider module, a step of control of data of the transaction and a subsequent step of closing of the transaction to obtain a unique recognition of the individual access to the individual restricted area, and wherein: said central processing unit of the manager module being also configured for: generating a matrix of the symbols used for creation of the right to access; generating a pair of access keys, starting from the right to access dividing the information contained in the right to access; assigning a first key to the user; and transmitting, during the aforesaid enabling step, the matrix of the symbols and a second key to the provider modules, and said local processing unit of the provider module being also configured for: reconstructing the right to access via the first key supplied by the user and the second key at its disposal; comparing the information of the reconstructed right to access with the matrix of the symbols; verifying in an autonomous way, meaning even in the absence of on-line connection with the manager, the authenticity of the reconstructed right to access; if the comparison has yielded a positive result, authorizing access of the user; and notifying the central processing unit of the access of the user to the corresponding restricted area.