Self-directed access card issuance system

Patent metadata

Field	Value
Publication number	US-11373473-B2
Application number	US-202117316061-A
Country	US
Kind code	B2
Filing date	May 10, 2021
Priority date	Apr 11, 2018
Publication date	Jun 28, 2022
Grant date	Jun 28, 2022

Abstract

An access card issuance system comprising an access card issuance device located at a facility of an organization and a web server is disclosed. The access card issuance system provides a web interface in response to a request from a mobile device, and receives user information identifying a user of the mobile device. The system is also configured to validate the identity of an authorized individual associated with the facility identified by a user of the mobile device, and issue an access card to the user of the mobile device. The access card has indicia printed thereon identifying at least a portion of the user information, and programmable information encoded onto the access card providing access rights to the facility. The system further transmits, to the authorized individual, a message associated with issuance of the access card.

First claim

The invention claimed is:

1. An access card printer comprising:
a card printing subsystem;
a processing unit;
a memory communicatively connected to the processing unit, the memory storing instructions executable by the processing unit wherein the instructions, when executed, cause the access card printer to:
provide a web application to a mobile device;
receive, via the web application, login credentials from a user of the mobile device;
verify the login credentials as corresponding to an authorized user;
transmit a first code to a verified device associated with the authorized user;
receive a second code, via the web application, from the mobile device;
verify the second code by comparing the second code to the first code; and
based on verifying the second code, instruct the card printing subsystem to print an access card, wherein the access card includes access card information providing access rights to a facility, the access rights being associated with the authorized user, and the access card information is printed on the access card.

2. The access card printer of claim 1 , wherein verifying the login credentials comprises:
transmitting the login credentials to an identity catalog; and
receiving authorized user information from the identity catalog.

3. The access card printer of claim 2 , wherein:
the identity catalog comprises a database of one or more users authorized to access the facility, and
the authorized user information comprises one or more of an authorized user phone number, an authorized user e-mail address, an authorized user name, an authorized user picture, an authorized user badge number, and an authorized user access level.

4. The access card printer of claim 3 , wherein
the identity catalog, in response to receiving the login credentials, matches the login credentials with an entry in the database of one or more users authorized to access the facility;
the authorized user information corresponds to the entry in the database of one or more users authorized to access the facility; and
the verified device corresponds with the authorized user information.

5. The access card printer of claim 1 , wherein transmitting a first code to a verified device is performed by transmitting the first code via a mail server.

6. The access card printer of claim 1 , wherein the verified device is the mobile device.

7. The access card printer of claim 1 , wherein the web application comprises a plurality of web interface screens, the plurality of web interface screens including a welcome screen, a user information entry screen, a validation screen, and a badge issuance screen.

8. The access card printer of claim 7 , wherein:
the memory further stores a badge template;
the validation screen displays the access card information in accordance with the badge template; and
the badge issuance screen displays the access card information in accordance with the badge template.

9. The access card printer of claim 1 , wherein the memory further stores a log, and wherein the instructions further cause the access card printer to record, in the log, one or more of a time stamp or the login credentials in response to the access card printer receiving, via the web application, the login credentials.

10. The access card printer of claim 1 , wherein providing the web application to the user of the mobile device is performed in response to a request from the mobile device.

11. The access card printer of claim 10 , wherein the request from the mobile device includes one or more of: the mobile device registering on a wireless network at the facility; the mobile device sending an HTTP GET request using a URL associated with the access card printer; or a request, via a mobile application on the mobile device, wherein the mobile application is associated with the access card printer.

12. The access card printer of claim 1 , wherein the second code is a same code as the first code, and comparing the second code to the first code includes determining that the second code matches the first code.

13. The access card printer of claim 1 ,
wherein the memory further stores a badge template; and
wherein instructing the card printing subsystem to print the access card comprises instructing the card printing subsystem to format, in accordance with the badge template, the access card information on the access card.

14. The access card printer of claim 13 , wherein the badge template includes one or more of a name space, a date space, a duration space, an access level space, an access code space, a badge number space, and a picture space.

15. The access card printer of claim 1 , wherein the instructions are further encoded to cause the access card printer to invalidate a previous access card, the previous access card providing access rights to the facility to the user of the mobile phone.

16. The access card printer of claim 1 , wherein the user of the mobile device is an employee of the facility.

17. A method of issuing an access card at a facility, the method comprising:
providing a web application to a mobile device;
receiving, via the web application, login credentials of a user, wherein the login credentials comprise a username and a password;
verifying the login credentials as corresponding to an authorized user, wherein verifying the login credentials comprises transmitting the login credentials to an identity catalog, and receiving authorized user information from the identity catalog;
transmitting a first code to a verified device associated with the authorized user;
receiving a second code, via the web application, from the mobile device;
verifying the second code by comparing the second code to the first code;
based on verifying the second code, issuing an access card to the user of the mobile device, wherein the access card includes access card information, the access card information is printed on the access card, and the access card provides access to a facility to the user of the mobile device.

18. The method of claim 17 , wherein transmitting the first code to the verified device is performed by transmitting the first code to the verified device via a mail server.

19. The method of claim 17 , further comprising recording one or more of a time stamp or the login credentials in response to receiving, via the web application, the login credentials.

20. The method of claim 17 , wherein issuing an access card to the user of the mobile device is performed via a printer, wherein the printer is located on the premises of the facility.

21. An access card issuance system comprising:
a web server;
an access card issuance device;
an identity catalog; and
a mail server;
wherein the access card issuance system is configured to:
provide, via the web server, a web application to a mobile device associated with a user;
receive, via the web application, login credentials of the user;
verify the login credentials as corresponding to an authorized user, wherein verifying the login credentials is performed by matching, via the identity catalog, the login credentials with login credentials of the authorized user;
transmit, via the mail server, a code to a verified device, wherein contact information of the verified device is determined based on information of the authorized user;
receive, via the web application, the code from the mobile device;
based on verifying the code received from the mobile device corresponds to the code transmitted to the verified device, instruct the acces

Assignees

• Entrust Datacard Corp

Inventors

• Biehlmann Christophe

Classifications

• G07C2209/02

  Access control comprising means for the enrolment of users · CPC title

• G07C2209/08

  With time considerations, e.g. temporary activation, valid time window or time limitations · CPC title

• G06F21/34

  involving the use of external additional devices, e.g. dongles or smart cards · CPC title

• B42D25/485 Primary

  by electronic processing means · CPC title

• G07C9/22

  in combination with an identity check of the pass holder · CPC title