The conventional physical access control system consists of 4 major components, as explained below.

The cloud-based software is a platform for the system admin to configure and manage the access control software. However, the cloud server should not perform any verification operations, even though there are developers that designed the cloud server to perform such verification.

That said, this is normally how a verification occurs at a cloud server. A device installed at a door will scan and analyze the data of a user who waves the card at it. The device then sends the data to the cloud server via the Internet, and the cloud server verifies the data with its storage. If the card data is valid, the cloud server will continue to check the access permission for the door. When the cloud server confirms everything, it will return the data back to the device and the device will in turn grant access to the card holder.

This process although secure, but it generates excessive workload on the cloud server. To cope with the verification processes, the manufacturer will be required to pay more to the cloud server service provider and purchase more computing power. At the end of the day, the cost will return back to the residential community. Processing speed should be the second concern because the sending and returning process are completed via the Internet, which is very dependent on the locations and the service providers. The third concern is the availability of the Internet connection. For a new offices or building, the Internet connection performance is usually below par.

Therefore, to use access control software on a cloud server, the office or building owner should consider Edge computing as the secondary solution. We will discuss more details later.

But, please bear in mind that when you are using a web browser to run a software, it does not necessarily mean that you are using a cloud-based software as the software could be a web-based system instead. There are access control system manufacturers that rebuild the access control Windows-based software into a web-based software. A web-based software is better when compared to the Windows-based software; but yet, it is nowhere near the cloud-based software. The system still requires a computer with better hardware specifications to install on, and it requires a connection to the local area network in the residential community, mostly the management office. All in all, it provides the “cloud” feel to it but it cannot serve the purpose of cloud computing. The system admin on the other hand, will still need to worry about:

•	The computer specifications to install the software.
•	The protection and security of the software and database
•	The offline system

Edge Computing is designed to reduce the cloud server workload, resolve latency and improve system performance. Smartphone is the most suitable gadget to do this. We carry and use smartphone Mobile App almost all the time in our daily life and almost everybody has one (some might have two or more).

In TimeTec Access IoT Access Control System, a smartphone Mobile App serves 3 purposes:

Login Credentials
Since the TimeTec Access mobile app functions as a main controller for the entire system, whereby individuals can add or manage users and access permissions; the TimeTec Access mobile app thus requires users to login by inserting their username (valid email address) and password before using it. Additionally, the login credentials are stored and verified at the cloud server to further increase the security aspect.

Encryption On The Mobile App Command
In order to secure all traffics between TimeTec BLE-5 and the smartphone, we apply encryption to secure all commands sent by the smartphone to the TimeTec BLE-5. The encryption used is 256-bit AES to prevent any hacker from breaking into the system.

Secure Bluetooth Communication
Besides data encryption, we also adjusted the Bluetooth range or Bluetooth antenna of the TimeTec BLE-5 to prevent unauthorized individuals from Bluesnarfing on the TimeTec BLE-5. For example, if a smartphone is to be connected to TimeTec BLE-5, the users must be within 1-2 meters from the TimeTec BLE-5 in order to prevent intruders from eavesdropping on the Bluetooth connection. That said, it is thus important for every user to understand the technology and the risks involved during its usage for better user experience.

As discussed, the TimeTec Access mobile app will download all access rules and permission after the residents signed into it. The TimeTec Access mobile app can then determine where the user can access without checking with the cloud server. This is very important when the user is at a basement car park or a lift lobby as they still can use the TimeTec Access mobile app even if the mobile data network is weak. However, the Offline mode also brings some drawback to the system. In case the system admin blocks a user from accessing a space, and the user switched on airplane mode for his/her smartphone, the TimeTec Access cloud server thus can’t be able to update the “block permission” into the user’s account. However, there is a setting for “Allow Offline Duration” in the TimeTec Access cloud server, which configures the TimeTec Access mobile app to check and update its content depending on the time interval. For example, the system admin configures a 30 minutes offline duration and all users’ TimeTec Access mobile app will update its content automatically every 30 minutes interval.

Even though there are similar products in the market, there are differences that we need to highlight. The look might be similar but if the lock requires a power device/door controller to secure the doors, it means that the matching algorithms and access rules are still stored inside the device/door controller. Hence, when users sign into a Mobile App, it turns the smartphone into an access card, thereby allowing the users to send the card ID to the device/door controller for verification through their smartphone. For this kind of design, the manufacturer is simply providing you with a new credential instead of providing you with a new solution.

There are manufacturers that develop the Mobile App to send the user and smartphone information (for example username and IMEI ID) to a cloud server, and the cloud server authenticates the information with its database. If the resident is permitted to access, the cloud server will then send an unlock command to the access control reader/controller. This working mechanism is secure but the residents will need to wait before an access is granted. And the speed relies on the smartphone mobile data and the Internet connection. Thus, installers must justify that the smartphone mobile data network is strong before they can install the system at a location, or else, the users will never be able to unlock the door. There are systems that are using WiFi connection at the communication channel between smartphone and access controller. WiFi is a common connection in smartphone but it cannot perform better than Bluetooth. As such, users must configure the smartphone to connect to the access control WiFi everytime they want to gain access. Likewise, most WiFi coverage is far-reaching and this provides opportunities for hackers to intercept the command.

TimeTec BLE-5 is developed to control the lock-unlock mechanism in barriers, doors and turnstiles. The TimeTec BLE-5 is a less powerful hardware because neither does it store any user information, nor that it keep any access rules. Instead, it only powers up the electronic door lock, barriers or turnstiles to keep the access point shut all the time. Additionally, it also connects to the magnetic sensor or door sensor, to monitor the door status. In case the door is not close or force opened, the TimeTec BLE-5 will capture and record the data into its memory.

TimeTec BLE-5 has WiFi module in order for them to be constantly connected to the AWS IoT server. After the system admin completes the configuration at the TimeTec Access cloud server, it will then send the access rules to the TimeTec BLE-5. From the other side, the TimeTec BLE-5 will update the status to the cloud server via the Internet.

Moreover, the TimeTec BLE-5 component reduces hardware cost significantly and makes installation simple. It consists of a real-time clock module and a new matching algorithm, which works to validate the unlock command before it unlocks the electromagnetic lock, drop bolt, turnstile and barrier gate. This time checking mechanism in the TimeTec BLE-5 is also designed to check the user’s smartphone date and time. Furthermore, this feature can prevent users from changing the smartphone’s data and time because as the smartphone sends the unlock door command/floor command, it will also send the smartphone’s date and time as well. The TimeTec BLE-5 can thus reject the request if the actual clock’s date and time are different from the smartphone’s date and time.

TimeTec BLE-5 only work with smartphones that contain the TimeTec Access mobile app. In essence, they communicate via Bluetooth, technically MESH communication which is similar to Bluetooth Beacon working mechanism and broadcasts themselves all the time. As such, when a user uses TimeTec Access mobile app, it will then “listen to the TimeTec BLE-5 broadcast” and determine its ID (barrier, door or turnstile). When the user presses a button in the TimeTec Access mobile app, the smartphone in turn broadcasts an encrypted command via Bluetooth in which only the relevant TimeTec BLE-5 that understand the command will perform the action, for example unlocking the barrier, or door.

The TimeTec BLE-5 connects to the TimeTec cloud server all the time, and WiFi is used as its communication channel because WiFi is the most stable and common communication channel.

The Implementation Scenario
The first example to install TimeTec BLE-5 is at the barrier gate. By doing so, the system admin has to assign access permission to allow users to drive into the compound. That said, the permission has to be limited due to the car park space; hence, under this scenario, only 200 users can use the TimeTec Access mobile app to open the barrier. For the rest of the users, they are thus unable to unlock the barrier via their TimeTec Access mobile app.