Equipment Access Control & Monitoring

[fvalica]

Hello everyone,

I am a gearhead looking to control access and automate the use of equipment for multiple users. The equipment is all stationary, and runs off either 120v or 240v.

I would like for a user to be able to swipe their mag stripe card (or RFID or some other type of access control card) and type in numerical password on a keypad. This information is then verified against the server-stored credentials, and logged. If it's correct, then it trips a relay, turning the equipment on (or unlocks a panel). Then when the user is finished, they are able to swipe the card again, and the equipment turns off. The server then keeps track of how much time someone spent, on what machine, and I am able to restrict / allow access to users as I want.

From reading some posts and manuals, it seems like I may be able to accomplish parts of this via ioBridge hardware/software, but I'm guessing I will need to hire a programmer to bring it all together. I know most of the hardware is there, but I I'm guessing that at least the following is custom:

1. Server Authentication
2. An interface for tracking individual cards & assigning additional data values for each record (name, access levels, minutes left on card, etc)
3. Programming the logic (go over your minutes?, shuts machine down, etc)

Is there someone that has done something like this before?

I don't think I'm the only one that has this need, but I can't seem to find solutions like this off the shelf. Perhaps I can buy ioBridge hardware and there is some software out there that is tailored to this application?

[iobridge]

You have some great ideas and it's all very possible. We did some RFID projects last year with customers as well as other custom products that will be release this year. Feel free to contact us directly and we can offer our integration services.

support@iobridge.com

[nick]

You could do this with off the shelf hardware and a small amount of custom programming: an IOBridge, a serial smart board, a card reader with an RS232 interface, an X10 smart board, an X10 module for each piece of equipment, and a small microprocessor -- I would use an Arduino.

You would need two pieces of programming: on the microprocessor and on your website.  First, you would program the microprocessor to read the input from the card reader, bundle it up and send it to the IOBridge using the web services API.  The IOBridge would send it to the web server you specify.  On your web server you would have to program a page to process these requests and respond.  If the credentials match your web page would send a request to the IOBridge to turn on the equipment using X10.

Conceptually this is very simple, a proof of concept would be about a one-page program on the microprocessor and a one-page program on the server.  How complicated it becomes depends on how many features you want it to have.  I'm working on a very similar project right now, except using a weather station instead of a card reader.  Send me a message if you want to discuss further.

Nick

[texasclodhopper]

It wouldn't take a hacker very long to figure out that all you would have to do is send the X10 commands without going through the "credentials match" process. Needs a rethink depending on the actual security requirements.

If the credentials match your web page would send a request to the IOBridge to turn on the equipment using X10.

[nick]

It wouldn't take a hacker very long to figure out that all you would have to do is send the X10 commands without going through the "credentials match" process. Needs a rethink depending on the actual security requirements.

Even easier, just plug the machine into an uncontrolled outlet using an extension cord.

The biggest design parameter is going to be how trustworthy the people using this system are expected to be.  If you need to prevent people from physically bypassing your access control it's going to be expensive -- you'll need to armour all your cables and equipment to begin with. 

[fvalica]

Thanks for the help everyone. Those are all good points.

I thought about X-10 control but dismissed it because of security. I was just looking for a access/control method that isn't specific to any machine. Another option would be to create a box around the on/off button or controls, and lock it using the same type of system.

Thanks for the offer to help Nick but I'm in way over my head as far as the programming goes. I may just  go back to the "proctor" method for now. At least this way the equipment will be monitored as well.