Who may go where and when?
Access control.
Lost keys, forgotten permissions, doors left open: electronic access control solves this if it is well planned.
In 60 seconds
- Electronic permissions instead of a bunch of keys: block instead of replacing the lock.
- Avoid old card technology, use modern methods with AES encryption.
- Escape routes and fire protection always take priority.
Permissions instead of keys.#
Mechanical
Simple and robust. If a key is lost, the cylinder often has to be replaced.
Electronic
Credentials can be blocked, time-limited and logged without replacing a lock.
Permissions by role
Door groups and time profiles instead of a bunch of keys: who may go where and when is managed centrally.
Offline, online or wireless?#
3 system types compared.
| Offline | Online (wired) | Wireless (hybrid) | |
|---|---|---|---|
| Structure | Battery-powered fittings or cylinders, permissions on site or via the credential | Readers and controllers wired, central management | Components connected wirelessly to a gateway, permissions central |
| Changing permissions | On site or via the credential, with a delay | Immediately, centrally | Centrally, usually promptly |
| Real-time alarm | Limited | Yes | Yes, depending on the system |
| Effort | Low, no cabling | High, cable and power per door | Medium, little cabling |
| Suitable for | Small buildings, retrofitting, many doors with little traffic | New builds, critical areas, high requirements | Existing buildings, medium-sized properties |
Which medium fits?#
From transponder to smartphone.
| Medium | Strengths | Weaknesses | Note |
|---|---|---|---|
| Transponder / card | Fast, widespread, easy to block | Can be lost or passed on | Choose modern methods with AES encryption |
| PIN code | No credential needed | Is passed on, observed or guessed | Useful as a second factor |
| Biometrics | Not transferable, convenient | Special data protection requirements (Art. 9 GDPR), error rates | Only with a clear legal basis and an alternative |
| Smartphone | No extra credential, permissions via app | Battery, operating system and device security | Good for visitors and flexible teams |
| Combination | Card plus PIN significantly increases security | More effort at the door | For sensitive areas |
Avoid old card technology
Simple 125 kHz proximity cards and MIFARE Classic are no longer considered secure, because some can be copied with little effort. Modern methods such as MIFARE DESFire or LEGIC advant use AES encryption. The reader connection should also be protected: OSDP with Secure Channel instead of the unencrypted Wiegand protocol.
How a system is built.#
From the credential to the lock.
Planning in 6 steps.#
Record doors
Which doors and areas should be protected, and how strongly?
People and times
Define groups, roles and time profiles, also for external staff.
Choose a credential
Card, PIN, phone or biometrics: matching risk and convenience.
Define the system type
Offline, online or wireless: depending on the door and existing building.
Emergencies and escape routes
Fire protection first. Escape routes must be usable at all times.
Regulate operation
Define processes for lost credentials, permission reviews, logs and deletion periods.
3 things that are often forgotten.#
Escape routes and fire protection
Escape doors need suitable locking devices, for example according to EN 179 for emergency exits or EN 1125 for panic doors. Coordinate planning with a specialist planner and fire protection.
Data protection
Access logs are personal data. Restrict access and define deletion periods.
Integration
Access can be linked with video, intrusion alarm systems and visitor management. Every link needs a permissions concept.
Check: access concept.#
6 questions about your system.
Rough guidance, no audit and no legal advice. Your selection stays in your browser.
Frequently asked questions.#
What happens if a credential is lost?
The credential is blocked in the system without replacing a lock. With offline systems the block may take effect with a delay, so a clear process is important.
Offline or online?
Offline is affordable and quick to retrofit. Online offers real time and central control. Wireless networked systems are in between. A mix often makes sense.
Is a smartphone secure as a key?
Yes, with modern encryption, but it depends on the security of the device. For sensitive areas a second factor remains sensible.
Can I retrofit a mechanical locking system?
Yes. Electronic cylinders and fittings can often be retrofitted without new cabling. Check the door's dimensions and fire safety requirements.
Questions? Get in touch.
Write to me if a topic is missing or you want to know more.