Access Control Panel Product

Overview

An access control panel is the central nervous system of a physical security system. It reads identity credentials from card readers and keypads, consults its internal credential database to make an access decision, and commands door locks to open or remain closed. The panel operates as a standalone controller (typically serving 1–4 doors) or as a network-connected node in a larger distributed system managed from a central server.

Panels are found on office building entrances, data centers, hospitals, manufacturing facilities, and secured government buildings. They provide real-time access logging, tamper alerts, and integration with video surveillance and alarm systems. Most panels are installed in wall-mount or rack-mount enclosures near the doors they control, with hardwired or networked readers and locks.

How it works

The [[access-control-panel-main-board|main controller board]] runs embedded access control firmware that implements the core decision logic. The flow is:

1. Read credential: A card swipe or keypad entry transmits card number and PIN via Wiegand or RS485 protocol to the [[access-control-panel-reader-interface|reader interface module]].

2. Consult database: The [[access-control-panel-main-board|MCU firmware]] searches its credential table (stored in Flash) to match the scanned card against known good card numbers. If a PIN is required, it validates the entered PIN against the stored credential.

3. Check time and rules: The panel evaluates access rules: Is this credential valid today? Is this time window allowed for this cardholder? Are there any active exceptions or lockouts?

4. Make decision: If all checks pass, the MCU energizes a [[access-control-panel-relay-module|relay]] connected to the door lock (e.g., [[electric-strike|electric strike]] or [[magnetic-lock|magnetic lock]]).

5. Log event: The panel records the timestamp, card number, result (granted or denied), and reader ID in non-volatile memory.

Credential and time management

The panel stores credential records as structured data: card number, PIN, access groups, and validity dates. Each cardholder is assigned to one or more access groups, and each group has associated time schedules. For example, the "Engineering" group might have access to the server room 24/7, while the "Visitor" group can only access the lobby 9 AM–5 PM, Monday–Friday.

The [[access-control-panel-main-board|MCU]] includes a real-time clock (RTC) with NTP synchronization capability. This ensures that time-based rules are evaluated accurately even if the mains power or network is temporarily lost. A tamper-evident battery backs the RTC so that the correct time persists even if the panel is unplugged.

For distributed systems, the central management server pushes credential updates to the panel via the [[access-control-panel-network-module|network gateway]]. Credential changes (new cards, revoked access, group membership updates) propagate to the panel every 15–60 minutes, depending on system configuration. This latency is typically acceptable for security; in high-risk scenarios, a denied cardholder is physically unable to enter until the local credential database is refreshed.

Reader interfaces and multimodal support

The [[access-control-panel-reader-interface|reader interface module]] decodes Wiegand, RS485, or other standard access control protocols. The most common protocol is Wiegand, a simple binary encoding used by legacy card readers, fingerprint scanners, and iris readers. The reader pulls data and clock lines low in a timed pattern; the interface module reconstructs 26-bit or 34-bit card numbers from this signaling.

Modern panels support multiple reader types on the same circuit:

• Proximity cards (125 kHz or 13.56 MHz) read by passive RFID readers
• PIN keypads (12-button or 16-button) for multi-factor access (card + PIN)
• Biometric readers (fingerprint or facial) that output Wiegand or RS485
• Mobile credential via Bluetooth or NFC to smartphones (requires networked MCU)

Multimodal readers improve security: a cardholder must present both a valid credential AND a correct PIN before the panel grants access. The time-based rate limiting (no more than 2 access events per second) prevents rapid-fire card swiping attacks.

Relay outputs and lock control

The [[access-control-panel-relay-module|relay module]] is a bank of high-current relays controlled by the MCU via low-current drive transistors. Each relay output is typically wired to:

• A [[electric-strike|strike lock]] (energized for 0.5–2 seconds to release the latch)
• A [[magnetic-lock|magnetic lock]] (energized continuously to hold the door)
• An alarm siren or notification light
• A video camera recording trigger

The [[access-control-panel-power-board|power board]] provides 24 VDC to the relays; the MCU firmware sequences relay energization and timing. For example, when a valid credential is presented:

1. MCU energizes the door-unlock relay for 1 second (commands the electric strike to release).
2. MCU optionally energizes a green LED relay in the reader to indicate "Access Granted."
3. MCU logs the event with timestamp and card number.

If an invalid credential is presented or a cardholder has no access during the current time window:

1. MCU de-energizes any active relays.
2. MCU optionally energizes a red LED or buzzer relay to indicate "Access Denied."
3. If multiple consecutive denials occur (3–5 in 1 minute), the MCU triggers an alarm relay or sends a notification to the central server.

Battery backup and fail-safe operation

The [[access-control-panel-battery-backup|battery backup module]] contains a sealed lead-acid battery that keeps the panel (and connected locks) functional during a mains power outage. The [[access-control-panel-power-board|power board]] includes a charger circuit that maintains the battery at full capacity whenever mains power is available.

If mains power is lost, the battery supplies 24 VDC to the MCU and relays. Most facilities configure fail-safe behavior: the panel remains powered long enough to allow occupants to press an emergency exit button, which commands a relay to energize the door unlock indefinitely. This ensures life-safety egress even during an extended power outage.

Battery runtime depends on load: a typical 12 Ah battery at 2 A draw provides 6 hours of panel operation and 2–3 hours of continuous door unlock. For critical facilities (hospitals, data centers), larger batteries or multiple panels with separate backup supplies are deployed.

Network integration and remote management

Networked panels include the [[access-control-panel-network-module|network gateway module]], which provides Ethernet (RJ45) or cellular connectivity (LTE CAT-M, NB-IoT) to a central management server. The server is typically a rack-mounted appliance running access control software (e.g., Genetec SYNERGIS, SALTO XS, Honeywell Pro Watch).

The network link enables:

• Remote credential provisioning: New cards are added to the central database and pushed to panels within minutes.
• Live monitoring: Security staff see real-time access events and can grant or revoke access remotely.
• Automated alerts: Tamper events, battery low, communication loss, or suspicious access patterns trigger notifications.
• Video integration: The panel can command a camera to start recording when an access event occurs.
• Audit compliance: All access events are logged to the server with full event details (card, reader, time, result).

For offline operation (network failure), the panel falls back to its local credential database and continues to authorize access based on the last-known good credential set. When the network recovers, the panel synchronizes with the server to pick up any credential changes that occurred while offline.

Security and tamper protection

The [[access-control-panel-enclosure|cabinet enclosure]] is a physical tamper barrier: the front door is secured with a lock, and the panels are typically installed in secure locations (server room, management office). The MCU monitors several tamper sensors:

• Enclosure tamper switch: Signals if someone opens the cabinet without authorization.
• Battery tamper switch: Alerts if someone removes or disconnects the backup battery.
• Reader wiring integrity: Checks for cut or shorted reader input lines.

A tamper event triggers an alarm relay and may lock down the panel, denying all further access until manually cleared by security personnel.

The credential database is stored in encrypted Flash memory; card numbers and PIN codes are hashed and salted, preventing easy extraction if the panel is stolen. Modern panels include secure boot and firmware signing, preventing installation of malicious firmware.

Diagnostics and maintenance

The panel displays status on an LED indicator or small LCD panel. Green typically indicates normal operation; amber indicates warnings (low battery, communication loss); red indicates critical faults (power failure, relay stuck, credential database corruption).

Periodic maintenance includes:

• Battery test: The panel self-tests the battery quarterly or monthly to verify capacity.
• Reader and lock functional test: Security staff periodically swipe a test card to verify the reader and lock respond.
• Log review: The panel stores access event logs locally; these are periodically downloaded to the central server for audit and investigation.

Common failure modes include relay contactors sticking closed (preventing lock reset), Wiegand reader data corruption (misreading card numbers), and network module timeout (requiring manual credential updates). Modern panels include built-in diagnostics to detect and report these issues.