Access control system in seamless communication with personnel management systems and the like

Abstract

An access control system such as a telephone entry system (TES) capable of seamless communication with a general purpose computer. Entries made in the TES are seamlessly transferred to the general purpose computer and updated in corresponding databases stored therein. Likewise entries made in selected databases within the general purpose computer or in other types of selected files are reflected in the TES, seamlessly, and without requiring manual intervention. Thus, for example, employees may be added or removed from the factory personnel logs in the general purpose computer and, as each is entered or removed, the corresponding entry code in the TES is added or deleted.

Description

BACKGROUND OF THE INVENTION

[0002] 1. Field of the Invention

[0003] The present invention is related to access control systems and more particularly to a communication interface for an access control system.

[0004] 2. Background Description

[0005] Apartment buildings, office buildings, condominium complexes, gated residential communities, industrial parks and other secured locations often include an entrance access control system. One type of access control system, known as a telephone entry system (TES), provides building security as well as tenant access control to a particular building, apartment complex, etc. The access control system controls entry at one or more other building entry points, e.g., doors, garage doors, etc. A typical access control system includes a main control unit located at a primary entrance and, depending on the size of the structure or area being monitored, additional remote units may be provided to control remotely located doors. The access control system may also monitor the connected entry points for unauthorized access. For a TES type access control system visitors wishing to enter the building/complex contact tenants or other building personnel over the TES, that are capable of admitting the visitor by remotely unlocking the entrance, e.g., from the tenant's apartment.

[0006] The main control unit controls the main building entrance and may include a keypad and auto-dialer and be connected to a public telephone line. Remote units, typically communicate with the main unit to provide remote access to authorized personnel. The main unit can identify tenants seeking entry by a personal access code, authorize entry, monitor for unauthorized entry at the remote doors, etc. A tenant directory may be displayed on the control unit itself or on an adjacent sign. The directory includes tenant codes that are corresponding directory code numbers for each person, business or for other entities in the building (e.g., corporate departments, business employees, or other building tenants) authorized to unlock the entrances.

[0007] When a visitor enters a tenant code into the keypad, the main control unit automatically dials the corresponding tenant's telephone number. Then, the called tenant has an opportunity to establish the identity of the visitor. The tenant, using the same everyday telephone upon which the call was received, unlocks the entrance, e.g., by pressing a predetermined number on the telephone keypad.

[0008] Interfacing a security or bookkeeping system, that may simply be running on a general purpose computer, to a prior art access control system, such as a TES, is not a simple task. Typically, this requires a custom software interface written for the specific access control system. Further, prior art access control systems were not directly interfaced to other systems. So, for example, a typical prior art access control system may control access to corporate premises. Corporate personnel records and bookkeeping data may be maintained using a typical state of the art personnel management system. Personnel changes require entries into both systems. Adding personnel records for new hires to the bookkeeping data must, then, be followed with a corresponding entry for each new hire to the business's access control system. Likewise, when employees leave, entries must be removed from each system. Passing timekeeping information from the access control system to the personnel management system may require printing out the information from the access control system and, manually entering the printed information into the personnel management system. This multiple entry process is time consuming, error prone and very inefficient.

[0009] Further, only a very limited number of ways are available to enter data, such as directory entries, into prior art access control systems. Entry may be manually, e.g., individually adding a code for each apartment number and an associated telephone number for the tenant in apartment. A database may be prepared and maintained remotely, coding binary for the particular access control system, and then providing the binary which is stored in the system for subsequent access. Another approach is to use specially developed custom software for particular access control system, such as for example, the SPSWin software from Sentex Systems. SPSWin provides personal computer type graphical user interface (GUI) to make data entry and system data maintenance more user friendly, but still in complete isolation from other systems.

[0010] In addition, upgrading a prior art access control system to a next generation control system, for example, requires rewriting or re-engineering the interface. Thus, whenever one of for these prior art systems is upgraded, changed, replaced or otherwise altered, the system owner is faced with a daunting task. Either the directory file is reformatted, if possible, or regenerated and provided in binary form or, a new interface program is written for the new system and the data is re-entered. Re-entering entries by hand is an error prone task. Manipulating binary data offers numerous opportunities for errors, even when only single entries are changed in the entire file. Each of these approaches can produce less than favorable results such as storing wrong codes and/or tenant information. Coding a new interface program is a long, tedious and expensive process and is still not free from errors.

[0011] So, not only is entering data in prior art entry control systems time consuming and difficult but, as set forth above, passing information from these prior art systems to other non-related systems (e.g., a bookkeeping system) is even more awkward. Thus, there is a need for a standard access control system interface to pass information to and from access control systems and that simplifies data retrieval as well as system updates/migration without adding significantly to system cost.

SUMMARY OF THE INVENTION

[0012] The present invention is an access control system such as a telephone entry system (TES) capable of seamless communication with a general purpose computer. Entries made in the TES are seamlessly transferred to the general purpose computer and updated in corresponding databases stored therein. Likewise entries made in selected databases within the general purpose computer or in other types of selected files are reflected in the TES, seamlessly, and without requiring manual intervention. Thus, for example, employees may be added or removed from the factory personnel logs in the general purpose computer and, as each is entered or removed, the corresponding entry code in the TES is added or deleted.

[0013] Accordingly, using the architecture and protocol of the preferred embodiment of the present invention, general purpose program steps and appropriate routines may be written to interface the TES with the general purpose computer. Thus, for example, routines may be written and integrated in an accounting package such that when employees are entered into the accounting package, a corresponding entry is made into the TES for the employee. When employees are removed, a corresponding employee entry is removed from the TES codes. Also, as an entry is added to the accounting package for each new employee, access codes are added to the TES automatically. A Human Resources person sitting at a terminal using a personal management system, for example, may delete an employee from a list of employees in the general purpose computer. Upon such deletion, the general purpose computer contacts the TES using a modem, a direct serial interface, or another communications medium, and corresponding employee records stored in the main control unit are deleted. Furthermore, these TES entries may be added coincident with entries in the accounting database or, as part of periodic updates, e.g., along with backups and other housekeeping that may be done on the general purpose computer.

BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The foregoing and other objects, aspects and advantages will be better understood from the following detailed preferred embodiment description with reference to the drawings, in which:

[0015] FIG. 1 shows an example of a typical building such as a factory with access controlled by a simple telephone entry system (TES) according to the preferred embodiment of the present invention;

[0016] FIG. 2 shows an example of a main control unit;

[0017] FIG. 3 is an example of a peripheral control unit;

[0018] FIG. 4 shows an example of a minimum TES configuration;

[0019] FIG. 5 is an example of a building with a multiple access point TES;

[0020] FIG. 6 shows a main control unit upper electronics assembly in an internal view;

[0021] FIG. 7 is an expanded view of the detachable handheld keypad;

[0022] FIG. 8 shows a block diagram of a motherboard enclosed in the main control electronics assembly.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0023] Turning now to the drawings and, more particularly, FIG. 1 shows an example of a typical site, a factory building 90 in this example, with access controlled by a preferred embodiment telephone entry system (TES) in communication with one or more general purpose computer 92 according to the present invention. A computer terminal 94, such as a personal computer or the like, and a modem 96 are attached to the general purpose computer 92. Product assembly lines 98, shown for example only, are located at one end of the factory 90. A parking lot 100, e.g., for employee parking, is located at the front of the building 90. The building 90 includes a front entrance 102, a rear entrance 104 and an emergency exit 106 with attached sensors (not shown) indicating whether the door at emergency exit 106 is open or closed. In this example, the front building entrance 102 provides passage to/from the parking lot 100 and a gate 108 provides auto entry/exit to the parking lot 100. A code entry unit, remote entry keypad 110, is located at rear entrance 104 for entering access codes. The gate 108 includes entry and exit code entry units, external card reader 112 for requesting entry and internal card reader 114 for requesting exit. A main control unit 116 controls building entry directly at each of the front entrance 102 and rear entrance 104 and monitors sensors at the rear emergency exit 106. Further, to allow for the distance of the gate 108 from the main unit 116, a peripheral unit 118 controls the gate 108 and communicates with the main unit 116. The peripheral unit 118 passes entry/exit requests from the gate card readers 112, 114 to the main unit 116 and, upon receipt of an authorization response to such a request, opens/closes the gate 108.

[0024] Card readers 112, 114 may include well known Weigand protocol card readers, Barrium Ferrite and Proximity Readers or ClikCard Receivers, for example. Access control system and TES are used interchangeably herein. The present invention is described herein with reference to a TES type of access control system, for example only and not as a limitation. Further, although general purpose computer 92 is shown here as being located on site, this is for example only. It is understood that computer 92 may be located at a remote site (not shown) and in communication with the access control system over public or private telephone lines using a modem or any other appropriate communications media.

[0025] According to the preferred embodiment of the present invention, the TES and the general purpose computer 92 communicate with each other seamlessly. Entries made in the TES are seamlessly transferred to the general purpose computer 92 and updated in corresponding databases stored therein. Likewise entries made in selected databases within the general purpose computer or in other types of selected files are reflected in the TES, seamlessly, and without requiring manual intervention. Thus, for example, employees may be added or removed from factory personnel logs stored in the general purpose computer and, as each is entered or removed, the corresponding entry code in the TES is added or deleted. In a more particular example, a Human Resources person sitting at a terminal 94 may delete an employee from a list of employees in the general purpose computer 92. Upon such deletion, the general purpose computer 92 contacts the TES using modem 96, and corresponding employee records stored in the main unit 116 are deleted.

[0026] Furthermore, other types of entries, such as holidays, may be changed in the main computer 92 and those changes reflected in the TES. So, for example, in a first year Independence Day may fall on a Tuesday. That year the company may decide to also make Monday, the third of July, a holiday. A Human Resources person enters the selection of July 3rd and 4th as holidays in the personnel system and those holidays are automatically communicated to the main unit 116. In the following year, which is a leap year, Independence Day falls on a Thursday. So, this following year the fifth of July is also selected as a holiday. Thus, the Human Resources person deletes July 3rd as a holiday in the personnel system and adds July 5th as a holiday. The personnel system causes computer 92 to transmit the deletion of July 3rd and the addition of July 5th as holidays to the main control unit 1116. In response to each set of holiday dates, the TES restricts access to the main building during holidays to selected management personnel, e.g., to the factory manager and assistant manager. On normal work days, the TES opens the front gate 108 at 8:00 a.m. and closes it at 6:30 p.m. However, during the selected holidays, July 3rd and 4th of the first year and July 4th and 5th of the second, the front gate 108 remains closed with access provided only through the card reader 112 and exit only through card reader 114.

[0027] In addition, information may be passed the other way as well from the TES to the main computer 92. The TES, monitoring rear entrance 106 may receive an indication that the rear door is open, e.g., from the door ajar sensor. Immediately, the TES transmits that information to the general purpose computer 92. In response, the general purpose computer 92 displays a message on the computer terminal 94 to a security guard, alerting the guard that the rear door has been opened. In addition, in response to the rear door 106 being opened, the TES may sound a building alarm and dial an emergency number, to call the fire department for example. Coincidentally as the TES sounds the alarm and calls the fire department, it reports this information to the general purpose computer 92 which may display the information to appropriate personnel.

[0028] Contact codes such as for contacting departments within a business or tenants in an apartment complex, may be displayed on the main unit 116. The code sequence length for granting access is arbitrary and depends on the configuration of the particular unit. So for example, where the preferred TES controls access to an apartment complex, a visitor may locate a tenant's code and then, using the code, place a telephone call to the tenant without knowing the tenant's telephone number. The preferred embodiment TES manages the admission process, recalling and dialing tenant telephone numbers and then, responding to signals from their telephones to unlock a door, open a gate or open another connected device.

[0029] A visitor arriving at the building or complex, can find a tenant's contact code on the main control unit 116 directory, enter the directory code, and the preferred embodiment system will dial an associated telephone number. Upon answering the call, the tenant may initiate one of four actions by dialing a number on the telephone. These actions may include activating a first relay, for example, to open a front door or entry gate; activating a second relay to open another door or enable whatever device is controlled by the second relay, e.g., an elevator; continue to talk to the visitor by extending the talk time; and, terminate the call.

[0030] In addition, building tenants can access the building using the preferred embodiment TES, which controls entrances and selectively grants access. Typically, each tenant has an assigned access code and/or card to access the complex. As the tenant enters a corresponding access code on a keypad or, cards in using a card reader (connected to one of the main control units 116 or peripheral unit 118). The system checks to determine if the entered access code is valid. If the code is valid and access is not restricted for the particular entrance, the system grants access by unlatching the entrance, e.g., opening a front gate or garage door.

[0031] Access codes are enabled programmably to allow tenants to enter or exit through one or more gate(s) or door(s). Entrances are symbolically linked to the tenant's access code and links may be deleted when a tenant moves out. Entry cards, like access codes, authorize entry. Thus, swiping the card through an entry card reader or touching a smart card to a smart card reader, provides access at an authorized entrance. Authorizations for entry cards as well as access codes may be restricted to certain entrances and for selected time periods or generally authorized for all building entrances and at any time. A valid door structure (VDS) grants tenant access to a set number of doors, and may deny access to other doors. So, for example, a VDS may be created authorizing tenant access to the front and back door, but not to a manager's door or a garage door. A second VDS may be created for the manager to authorize access to all doors.

[0032] Also, access restrictions may be placed on codes to reduce the possibility of a card or code being used by more than one person. Period restricted or time zone access may limit the times of day that access is allowed through a particular entry location, e.g., access may be restricted only to the front entrance of a building during night hours. An anti-pass back restriction may be one of two types, either true or timed anti-pass back. True anti-pass back requires that each entry be matched by an exit before re-entry is allowed. Timed anti-pass back requires that a defined period of time pass before the same card or code may be used again for re-entry by the same reader or keypad. If the timed anti-pass back feature is set to time out in sixty seconds, for example, the system will not grant access to anyone trying to re-enter using the same code or card at the same reader until, for example, sixty seconds have elapsed from the most recent entry. An anti-pass back forgiveness feature may be used, such that after expiration of the forgiveness period, entry using the same code or card may be resumed. So, for example, after midnight entry may be made reusing a blocked code or card to the same building.

[0033] Likewise, a Strikes-And-Out feature may be included to prohibit unauthorized persons from guessing an entry code. The Strikes-And-Out feature allows a selected number of erroneous code entries before temporarily disabling a code reader at a particular door for a specified amount of time.

[0034] For convenience, use frequency limits or period limits may be placed on cards or access codes, to allow issuance of temporary cards or access codes that are authorized for limited numbers of uses or for a limited period of time. Use limited codes or cards grant entry for set number of uses. Thus, a code or card may be authorized for sixty uses over the course of a month, for example. Once the card use exceeds that sixty-use limit, the code or card is no longer valid and the card may be discarded. Period limits may include date limitation wherein cards or access codes are authorized for entry until a specified date, i.e., an expiration date. For example, a tenant may be scheduled to move out of the building on December 1st of the current year. The expiration date for that tenant's card or access code may be set for December 1st and thereafter, access to the building is not authorized for either the card or access code. First-Use time limited cards or access codes authorize entry for a set number of days/hours/minutes after first use. For example, a tenant may have access for an unspecified week which begins to run upon the first entry. After the first entry, the tenant can use the card/code to enter and exit the building for a week until the period expires and is no longer valid. Start-Now time limited cards/codes are similar to First-Use time limited cards/codes providing authorized access over a period of days/hours/minutes beginning immediately.

[0035] As noted above, directory codes prompt the system to call a particular tenant. Each directory code entered into the main control keypad points to the telephone number of a corresponding tenant. A visitor may enter a directory code into the main unit to call and communicate with an associated tenant. Directory codes can be linked to the tenant's card or entry code, and may be deleted once the tenant leaves the building, e.g., moves out, thereby removing the tenant's building access authorization. Thus, each tenant must be associated with at least one individual directory code.

[0036] FIG. 2 shows an example of a main control unit 116 and FIG. 3 shows an example of a peripheral unit 118. The main control unit 116 houses a main system motherboard (not shown) as well as TES software and building/tenant related data. A keypad 120 is included on the main unit 116 for numeric code entry, e.g., entering access codes or tenant phone numbers to contact tenants. A display 122 is provided for displaying telephone numbers stored in the system, as well as providing interactive information and for viewing any diagnostic information that might be displayed during entry or normal maintenance. Both the main control unit 116 and the peripheral unit 118 include keyed access points 124, 126. Unlocking each unit's housing provides access to system circuits contained within the particular unit 116, 118.

[0037] Besides pedestrian access control, relays can by employed for generating alarms, bypassing an alarm, providing elevator access control, controlling close circuit television (CCTV), controlling a gate operator and, for heating and air-conditioning system control. Each of the main control unit 116 and peripheral units 118 also include an interface for an exit request sensor and door position sensor. When attached, the exit request sensor senses when a request is placed for exit through the door, e.g., a button is pushed to request exit. A door position sensor senses when a door has been pried open or is otherwise open and/or remains open, e.g., for more than a minute after a relay deactivation.

[0038] Messages such as greetings, general information or warnings may be programmed into the main unit 118 for display on the display 122. A series of system menus are provided on the display 122 for manually programming the preferred embodiment TES. These menus are navigable using a menu prompt, scrolling through each menu level to identify and select an active value that corresponds to a desired menu action. The menus may be navigated by pressing numbers or characters on the keypad 120 that prompt a currently displayed option. Command prompts may be identified as appropriate, such as using a designated character, underscoring, highlighting or placing a cursor below the prompt. Further, depending on the number of displayable lines on the main control unit display 122, scrolling up and down the menu lines may be required as the number of current menu lines may exceed the number of lines that may be displayed. Further, the preferred embodiment TES may convert messages to a foreign language, e.g., by pressing a main control keypad 120 number to select displaying messages in Spanish.

[0039] FIG. 4 shows an example of a building 130 with a minimum TES configuration. Building 130 includes a front door 132 and a rear door 134, access through both of which is controlled directly by a main control unit 116. In this example, a card reader 136 is provided at the front door 132 for requesting access and a remote keypad 138 is at the rear entrance 136 for exit. Also, in this example of a simple TES, a card reader 140 is included at the rear entrance 136. Remote entry relays 142, 144 are provided, each controlled by the main control unit 116, to remotely open/lock the respective front entrance 132 and rear entrance 134.

[0040] Additionally, the access control system of this example includes a printer 146, a computer terminal 148 and a telephone 150 connected to the main unit 116. The printer 146 is included for printing out periodic reports, periodic system dumps or diagnostics information. The computer terminal 148 may be used with SPSWin for example, to program the control unit 116 and maintain data in databases. Telephone 150 provides another point of internal access to the system telephonically and, correspondingly, to building tenants connected to the system. Also, the main control unit 116 accesses an external telephone system, e.g. for modem communications functions.

[0041] The TES records all transactions including telephone calls and any other system activity and may send a report in any number of ways. For example, the printer may print the report locally, the display may display the report or, the modem may send the report to a remote computer terminal. Logged transactions may include activity such as visitor directory calls, tenant entry references (whether granted or denied), card or code activity and any other activities that the system manager may select. Further, reports may be scheduled for automatic transmission, at a previously selected time to a previously selected destination.

[0042] FIG. 5 shows an example of an expanded access control system controlling multiple access points in Building 150. In this example, a single main control unit 116 communicates with two peripheral units 118 to control remote entry. Main unit 116 controls both peripheral units 118 and directly controls access to central doors 152, 154. Each peripheral unit 118 controls access to a remote pair of doors 156, 158 and 160, 162. Further, each of a remote keypad 154k, 156k, 158k, 160k, 162k and a card reader 154c, 156c, 158c, 160c, 162c is located at each of the entrances 154, 156, 158, 160 and 162. In this example, a closed circuit television camera (CCTV) 164 connected to main unit 116 is located at entrance 152, for monitoring activity at that entrance. A button 166 may be located at door 152 to request exit from the building. A closed circuit TV monitor 168 is located internally to the building for monitoring activity at entry 152, e.g., by a guard and for granting access to entrance 152. The guard may authorize entry through telephone 170, through a dedicated input device (e.g., a button), through a computer or through any other appropriate device. Each of remote peripheral units 118 and main unit 116 controls a pair of relays labeled A and B, each of which remotely opens/closes or locks/unlocks a respective one of the doors.

[0043] Each of the main control unit 116 and any connected peripheral units 118 may be configured for one-door control or two-door control. For one-door configuration, the unit controls one door for entry or exit and includes three other relays that are available for other functions such as, shunting or bypassing an alarm, triggering an alarm or activating a closed circuit TV. For a two-door configuration two relays are available for shunting or rerouting an alarm.

[0044] When a tenant swipes a card or enters a code, the TES response may include one or more relay actions, e.g., a door will cycle, the CCTV will cycle on, etc. A relay activation structure (RAS) controls relay responses to entry cards or codes. Each RAS defines one or more relay responses and is associated with an entry card or code. Relay commands are provided for programmable individual relay control and select relay response to an entry request. A cycle command causes a selected relay to respond by opening and then closing after a period of time, e.g., buzzing in someone to a locked building. A latch-open command energizes the relay, for example, to unlock the door and leave the door unlocked until prompted to re-energize the relay, thereby re-locking the door. A latch release command returns the relay action to a default setting, e.g., if the door is open after responding to a latch open command, issuing the latch release command returns the corresponding relay to the cycle state. An initial default state may be selected such that relay control is set to that default state upon system power up.

[0045] The system may monitor door status to determine whether it is held open more than a predefined maximum time and, otherwise, determine whether a controlled door is stuck open, i.e., a building security breach has occurred. An open door condition may elicit an alarm call wherein using the modem, the system transmits an alarm message to a designated computer or to a fax machine. Alternately, the system response to an open door may be to close a relay that turns on an alarm light or that sounds a siren to inform a monitoring station of the perimeter breach.

[0046] When an alarm is triggered (e.g., because a door has been forced open), the preferred embodiment TES automatically sends an alarm message over the modem to a designated recipient e.g., a computer terminal. The alarm message typically includes an alarm unit ID to identify the open door so that the message recipient knows the alarm origination point. The alarm call unit ID is programmable in the TES as is the number of retry times for dialing the number. Also, alarms may be enabled or disabled, e.g., for maintenance purposes. In the event of an alarm, the preferred embodiment TES reports the alarm by calling a previously designated location, which may be a terminal connected through a modem, an alarm company or to a pager. If the location does not answer the call or the number is busy, the control unit repeatedly hangs up and redials the same number until the system connects or, until the redial retry number is met. If, alternately, a direct connection is provided to a computer, printer or other reporting device, the TES reports the alarm condition occurrence directly, posting or printing a message that indicates the occurrence, e.g., on the attached printer.

[0047] FIG. 6 shows upper electronics assembly 180 in an internal view of an open main control unit 116. The upper electronics assembly 180 includes a detachable handheld keypad 182 and a display 184 which may be a liquid crystal diode (LCD) display. A pluggable memory module 186 is shown inserted at the top of the upper electronics assembly 180. The pluggable memory module 186 is, preferably, flash electronically programmable read only memory (Flash EPROM). Local audio communications may be effected in an intercom-like or speaker phone fashion through the faceplate of the main control unit 116 using a microphone 188 (in FIG. 2) and speaker 189.

[0048] Two types of data that may be saved or reloaded into the main control unit using the pluggable memory module 186. These two types of data include, unit data and operating data necessary for normal operation and is inserted during initial installation. Unit data includes user-generated data for the particular control unit. Such user-generated data may include code entries for tenants. Operating data includes any data required by the main control unit to operate. A backup module may be inserted periodically to backup/restore unit or operating data from/to the control unit memory. The backup module also may be used for upgrading the control unit operating system.

[0049] FIG. 7 is an expanded view of the detachable handheld keypad 182 which is an alphanumeric keypad. The detachable handheld keypad 182 includes a numeric section 190 and an alphabetic section 192. The numeric section 190 includes several cursor keys 190c, a backspace key 190b, an escape key 190e and a clear key 190cl. The cursor keys 190c facilitate navigating between displayed menu entries, e.g., on the display 184 in FIG. 5. The backspace key 190b functions to eliminate a single previously entered number or character at a time. The escape key 190e may be used for canceling an erroneously entered command key sequence and/or terminating a command, i.e., aborting. A single stroke of the clear key 192cl clears displayed entries.

[0050] The alphabetic section 192 includes several hot keys 194, typical alphabetic keys and an enter key 196 as well. The hot keys 194 include a number of shortcut keys for bypassing menu navigation and directly selecting and initiating a previously stored procedure. Hot keys 194 may include, for example, an enter phone number key for adding a new phone number to the stored listing; a delete phone number key may be included for removing entries from the list; and, an enter code key and a delete code key may be included for adding/removing codes from the listing. Card authorization may likewise be managed with enter card and delete card keys. A time/date key may be included for recalling and updating system time. A transaction key may be included for recalling and viewing logged system activity such as for example, visitor to tenant directory calls, tenant entry (granted or denied) and card or code activity. While each of these corresponding commands may be otherwise effected through a series of alphanumeric key entries, hot keys 190 provide a much simpler faster shortcut.

[0051] FIG. 8 shows a block diagram of the motherboard 200 of the electronics assembly according to the preferred embodiment of the present invention. The motherboard 200, essentially, includes two subsystems, a control subsystem 202 and a signal processing subsystem 204. Further, each subsystem 202, 204 includes an address bus 202A, 204A and a data bus 202D, 204D.

[0052] The control subsystem 202 includes a microcontroller 206, which may be a general purpose microprocessor or, preferably, is a 16-bit, single chip controller such as the XA-S3 microcontroller from Philips Semiconductors. The control subsystem 202 includes memory, preferably, both dynamic random access memory (DRAM) 208 and Flash EPROM 210. If necessary, a memory controller 212 may be included for controlling access to and refreshing the DRAM 208 or, if the microcontroller 206 is capable, the memory control function may be provided directly by the microcontroller 206. When installed in the main control unit 116 with the motherboard 200, the pluggable flash memory module 186 in FIG. 7 is also included in the memory in the control subsystem 202. A real time clock (RTC) and peripheral interface 214 also is included in the control subsystem 202.

[0053] The microcontroller 206 in control subsystem 202 manages a programable transaction auto reporting function to automatically send a record of all transactions that are currently stored in the main control unit memory at the preselected time to a selected destination, e.g., to a terminal or a printer. Transactions may include records of system activity such as a directory call, an open door, entry card or code activity, etc. Auto reporting may be triggered by count number, a specified day or time or, a combination of transaction count and day/time. Count only scheduling triggers a report automatically when the count reaches a specified number of transactions, as selected by the complex manager, for example. When the transaction count reaches that number, the transactions report is transmitted to the destination. If day/time reporting is selected, all log transaction are transmitted on a selected day and time. Count and day/time reporting allows transaction report transmission if the count reaches a selected level prior to the scheduled day/time.

[0054] As noted above, system transactions or records of system activity include records of events such as a directory call, an open door, entry card or code activity or anything else identified as system activity for logging or reporting. Reports are transmitted, for example, to a printer or a computer terminal. Since computer terminals do not have identical modem transmission capabilities, the preferred embodiment TES has a programmable baud rate, selectable for a particular computer terminal or printer. Optionally, the preferred embodiment TES may send transaction information in real time. Further, real time transmission may be programmed to begin at some future time and continue until the system receives a termination command to end real time transmission. Also, interactive report transmission may be selected to require a response to a manual prompt at the time of transmission. Thus, when the programmed transmission time occurs, the prompt is presented to an operator, e.g., the building manager, who may approve or deny transmission.

[0055] The heart of the signal processing subsystem 204 is a digital signal processor (DSP) 216, preferably, 24-bit DSP 56303 from Motorola Corporation. The digital signal processor 216 is connected to memory such as, for example, static RAM (SRAM) 218 and Flash EPROM 220. The digital signal processor 216 interfaces externally to the main control circuit 200 through a communications interface 222.

[0056] The main control unit communicates with the outside world through any number of connected optional interface devices that may be connected to the real time clock (RTC) and peripheral interface 214 or to the communications interface 222. The DSP data bus 204D is selectively connectable to the control data bus 202D and the DSP address bus 204A is selectively connectable to the control address bus 202A.

[0057] In particular, the RTC and peripheral interface 214 communicates with connected remote units, e.g., peripheral unit 118 above. Also, connected input/output (I/O) devices such as a display, e.g., an LCD display 184, an RS422 printer port, an RS232 serial port, keypads including handheld keypad 182, and card readers all communicate with and are controlled by the microcontroller through RTC and peripheral interface 214. Further, a real time clock in the RTC and peripheral interface 214 maintains current date and time information that may be used, for example, in logging or in timed operation. Programmable Time Zones are defined as time periods during which particular access codes and card codes are enabled. So, if a group of tenants is intended to have access to the complex only during certain hours and/or on certain days of the week, a time zone may be identified for those specific periods and that time zone assigned to that group of tenants. Each time zone may have four different schedules/segments. Further, holidays may be identified and included or excluded from particular time zones.

[0058] Also, a timed control system may be included for setting relay controls to automatically open/close or enable/disable certain connected functions or features at preselected periods. Thus, for example, the system may automatically unlock and open the front gate daily and later re-lock or close the gate, at times that are specified within the system. So, continuing this example, the front gate may automatically open at 7:00 am and close at 7:00 pm. Further, typical holidays may be identified such that the gate does not automatically open even if a holiday falls on a weekday. A free exit may be provided through any monitored door such that opening the door to exit does not cause a door forced opened condition during the exit. A post office and fire department entry feature referred to as a postal lock provides access using a special lock and key. The local fire department may have a common key that allows access to the complex. Access to the complex using either of these is through the access control system and treated as a normal entry.

[0059] Communication interface 222 provides both audio and telephonic communications interface functions. Audio communications may include sound from the main control unit microphone and speaker. Both the microphone and speaker volume may be controlled programmably. Telephonic communications may include providing a telephone handset interface for either or both of touch tone or rotary dial type telephones.

[0060] The modem provides for both incoming as well as outgoing communications. The modem may be set to answer an incoming call after a selected number of rings. A preselected length may be set for visitor to tenant calls to prevent unintentionally tying up the line by leaving a call connected indefinitely, blocking other calls to the tenant as well as to the control unit. Dialing may be selected for either touch tone or a pulse dialing depending upon local telephone company capabilities. If Caller ID is available, incoming telephone numbers may be logged for each call along with any corresponding system/tenant response or action.

[0061] If a voicemail system is attached to the TES, voicemail may be configured from the main control unit. Also, voicemail may be programmed to intercept calls and to screen visitors for tenants. To use this voicemail control feature of the preferred embodiment system, a visitor places a tenant call and the voice mail system answers the call. Then, the visitor can bypass voicemail and contact the tenant by dialing an extension (a number with up to six digits) on the front panel keypad. If Caller ID is available through the local telephone service, the system may retrieve the caller's number for the tenant to return the call later. A PBX enable/disable and dial-in feature provides call configuration capability to dial a number for outside access, e.g., 9. A dial-up unit ID feature allows assignment of a 6-digit identification number such that a person dialing into the unit can retrieve the unit ID to determine whether the caller has contacted the correct unit.

[0062] The preferred embodiment access control system includes the capability to provide audible signals, e.g., beeps, in response to various inputs. So for example, an access granted beep may be provided by the main control unit speaker when granting tenant/visitor access. Also, talk time beeps on the telephone may indicate when visitor to tenant communication approaches the end of the selected talk period. These audible alerts may be disabled or enabled as desired.

[0063] In addition, the access control system according to the preferred embodiment of the present invention facilitates information exchanges and other communications between itself and other systems such as a general purpose computer running a personnel or bookkeeping system. Such inter-system communications include two communications layers; a higher level, data layer and a lower level transport layer. Systems communicate by passing packets back and forth in the transport layer. A packet may be either a command packet or a response packet. The higher level data layer contains intersystem message requests and responses. Messages from the data layer are formed into packets for transmission in the transport layer, where incoming packets are validated and messages are extracted from valid packets. Extracted messages are passed up to the data layer. Also, each system can identify and negatively acknowledge a garbage reception in the transport layer and redirect packets destined for another unit. Otherwise, each system strips all other responses from packets as it receives them and sends the response to the data layer, where the response is handled.

[0064] Each command packet begins with a Start of Packet (SOP) byte (0x7E) which is followed by a length byte indicating the length of data layer message included in the packet. Fields and especially variable length fields within each packet are delimited by a field delimitor or separator character “|” byte (0x7C). The length byte is followed by a 1 byte long command field. The command field contains a literal selected from ASCII characters between 0x00 and 0x80 in Table 1, for example, wherein command literals correspond to ASCII codes, in particular uppercase characters. Program step literals (P,p) provide a flexible approach to designating special function commands and, although the maximum number of program steps or step number is limited only by packet length, typically, the actual number is less than 1,000,000, as designated by a following field delimiter | byte (0x7C). Also, a preferred listing of 103 program steps are provided in Appendix I. An optional unit number (i.e., a destination and/or source address offset by 0x80) field of 1 or 2 bytes (one byte for each of the destination and source address) may be included immediately after the command byte. A number of data bytes, determined by the value of the length byte, immediately follows the command byte or, if included, the unit number field. Each command packet ends with a checksum byte.

TABLE 1
Literal   Remarks
!         Request identifier message, usually firmware version
?         Request identifier message, usually firmware version
A         [Alert]
B
C
D         [Do]
E         [Event]
F         Fetch, extended read (window+bank, offset16, count8)
G         Get calendar
H
I
J
K
L
M
N
O
P         Program step 0-103 as provided in attached Appendix I
Q
R         Read memory (address, count)
S         Stuff, extended wire (window+bank, offset16, data8, . . . )
T         Transaction retrieve (index)
U
V         Verbose mode (debugging)
W         Write memory (address, data8, . . . )
X         eXtended transaction retrieve (longIndex)
Y
Z
0×01<0×1F Used only on gate operator master/slave bus

[0065] Response packets may have a structure that is substantially identical to command packets with two minor differences, i.e., a Start of Response (SOR) byte (0x7D) and a response literal. So, each response packet begins with a SOR byte followed in order by a data length byte, an optional destination unit number, an optional source unit number, a response literal byte, packet data and, finally, a checksum byte. Thus, for example, a response literal may be a lower case letter to a corresponding uppercase command literal, e.g., a program step command literal (P) would elicit a program response (p) literal.

[0066] Upon receipt of any sequence of bytes that cannot be formed into a packet, i.e., a garbage response, the system responds by transmitting a single byte non-acknowledgment (NAK) packet (0x7F). Otherwise, if the third byte of a packet is >0x80, it is treated as a unit number. If the packet unit number does not match a receiving unit number, the packet is transmitted toward the packet destination unit. Otherwise, packet data is depacketized into a message and passed to the data layer.

[0067] The selected start code values for NAK (0x7F), SOP (0x7E), and SOR (0x7D) are least likely to occur as data values. However, any other suitable values may be selected and substituted for these three values. Further, packet fields are described as byte wide fields for convenience only. Fields may be narrower, e.g., 4 bit (nibble wide) or wider, e.g. word wide (16 bit) or double wide (32 bit) without departing from the spirit or scope of the invention.

[0068] The length byte includes the number of bytes to follow in the current packet (i.e., after the length byte) including any optional unit number bytes, the command (or response) character, all packet data bytes, and the checksum byte. Thus, the total byte count in each packet (i.e., the packet size), is 2 more than the data length value and at least 4 bytes, i.e., SOP/SOR |length | command/response | checksum. Normally, the maximum size of any packet is limited by destination unit buffer length. Preferably, the maximum value of the data length byte is 255 and the maximum length of any packet is 257 bytes.

[0069] The value of the checksum byte is the twos complement of the least significant 8 bits of the sum of all packet byte values, excluding the SOP (or SOR) and the checksum.

[0070] To further facilitate understanding of the preferred embodiment protocol, typical packet structures for command and response packets are provided hereinbelow. Examples of minimum sized packets and typical packets follow the typical packet description. Further, typical data layer messages are provided, illustrative of both data layer command and responses.

[0071] Typical Packet Structure

[0072] A typical command packet with implied unit numbers may have the following form:

[0073] SOP (0x7E)

[0074] a length byte

[0075] a command character (0x00 to 0x7F)

[0076] data bytes

[0077] and a checksum byte.

[0078] A typical command packet, including an optional specified destination unit number may have the following form:

[0079] SOP (0x7E)

[0080] a length byte

[0081] destination unit number (0x00 to 0x7F offset by 0x80)

[0082] a command character, (0x00 to 0x7F)

[0083] data bytes

[0084] and a checksum byte.

[0085] A typical command packet, including both optional destination and source unit numbers, may have the following form:

[0086] SOP (0x7E)

[0087] a length byte

[0088] destination unit number (0x00-0x7F offset by 0x80)

[0089] source unit number (0x00-0x7F offset by 0x80)

[0090] a command character (0x00 to 0x7F)

[0091] data bytes

[0092] and a checksum byte.

[0093] A typical response packet with implied unit numbers may have the following form:

[0094] SOR (0x7D)

[0095] a length byte

[0096] a response character

[0097] data bytes

[0098] and a checksum byte.

[0099] A typical response packet, including an optional specified destination unit number, may have the following form:

[0100] SOR (0x7D)

[0101] a length byte

[0102] destination unit number (0x00-0x7F offset by 0x80)

[0103] a response character

[0104] data bytes

[0105] and a checksum byte.

[0106] A typical response packet, including both optional destination and source unit numbers, may have the following form:

[0107] SOR (0x7D)

[0108] a length byte

[0109] destination unit number (0x00-0x7F offset by 0x80)

[0110] source unit number (0x00-0x7F offset by 0x80)

[0111] a response character

[0112] Data bytes

[0113] And a checksum byte.

[0114] Packet Examples

[0115] So, for example, a command packet that queries for firmware version includes 2 bytes for the command. Since the command includes no data, the packet has a length byte with a value of 3 (each corresponding byte designated “L”) and may have the form:

[0116] SOP, len=3, cmd ‘P’, cmd=‘!’, checksum 0x8C

[0117] which corresponds to

		L	L	L
7E	03	50	21	8C
	+	+	+

[0118] In accordance with the above description, the checksum for this example is the twos complement of the sum of the two messages bytes (designated “+”), i.e., (0x03+0x50+0x21=0x74, 0x100−0x74=0x8C).

[0119] In yet another example with fields as defined in Table 2 below, a response packet to the above command may have the form:

[0120] p!TEv[v] | d[d] |f[f] |n[n]

TABLE 2
Field Name Remarks
TE         2 alpha characters identifying the type of TES system
V          up to 6 characters identifying the firmware version
“|”        hexadecimal 7C field separator
d          up to 15 characters identifying the firmware creation date
f          6 digits for the unit serial number
n          reserved field

[0121] Indicating each character included in the length count by L and each character included in the checksum calculation by +, for this particular example, a typical response may be:

[0122] SOR, len=32,cmd ‘p’, cmd ‘!’, TE, 1.00|960229|123456|123456789

[0123] and

		L	L	L	L	L	L	L	L	L	L	L	L	L	L	L	L
		p	!	T	E	1	.	0	0	|	9	6	0	2	2	9	|
7D	32	70	21	54	45	31	2E	30	30	7C	39	36	30	32	32	39	7C
	+	+	+	+	+	+	+	+	+	+	+	+	+	+	+	+	+
L	L	L	L	L	L	L	L	L	L	L	L	L	L	L	L	L
1	2	3	4	5	6	|	1	2	3	4	5	6	7	8	9
31	32	33	34	35	36	7C	31	32	33	34	35	36	37	38	39	23
+	+	+	+	+	+	+	+	+	+	+	+	+	+	+	+

[0124] Example Messages:

[0125] Most message command/response literals control data transfer, e.g., storing/retrieving information to/from memory and are initiated by program steps. Program step commands are used, typically, for purposes other than retrieving and/or displaying data, and may be issued to set date and time. Program step command messages may have the form “Ps[s]|nn . . . . ”, where P is the command literal (0x50) indicating that a sequence or programming bytes follows and s[s] is an ASCII numeric sequence representing the program step. Normally nn . . . is a collection of ASCII data characters. A typical response message to a program step may have the form “ps|e” where “p” is the program response literal (0x70) and s is the same ASCII numeric sequence representing the programming step. The final field indicated by e is a result (error) code. Accordingly, program step examples are provided for typical such data transfer transactions, e.g., a “Verify Clock” message and response, a transaction retrieval message and response, memory access or Read/Write messages and responses and, finally, an add directory record message and response.

[0126] Verify Clock

[0127] So, for example, a Verify Clock command may be issued to initiate retrieval of the date, including current year, month, date, day as well as time including hours, minutes, and seconds from a TES system. Specifically, this command may be used to retrieve system clock information (e.g., from the real time clock) included in the unit. The Verify Clock command is initiated by the programming command packet:

[0128] SOP, len=3, cmd ‘P’, step ‘1’, checksum 0x7C

		L	L	L
7E	03	50	31	7C
	+	+	+

[0129] A typical system response message with fields defined as in Table 3 below may have the form:

[0130] SOR, len=?, p01 |ee|YYYYMMDDhhmmw|

TABLE 3
Field Name Remarks
Ee         an error response code
YYYY       year
MM         month
DD         day of month
Hh         hour
Mm         minute
W          day of week, 1=Sunday, 2=Monday, etc.

[0131] So, a response indicating the following:

Error Code   0, no error
Year         1996
Month        02, February
Day of Month 29
Hour         14, 2:00 P.M.
Minute       51
Day of Week  2, Sunday=1, Monday=2

[0132] may have the form:

SOR	len	p	0	1	|	0	|
7D	15	70	30	31	7C	0	7C
1	9	9	6	0	2	2	9	1	4	5	1	2	|	checksum
31	39	39	36	30	32	32	39	31	34	35	31	32	7C	03

[0133] Retrieve Transaction

[0134] In yet another example with fields defined in Table 4 below, a command message to retrieve a transaction may have the form: P68|d|t|n[n]|I[I]

TABLE 4
Symbol	Field Name	Field Contents
d	direction	0=forwards (oldest to newest)
		1=backwards (newest to oldest)
t	type	0=based upon date/time
		1=based upon index number
n	number	number of transaction to fetch
I[I]		if type=0, based upon date/time
		YYYYMMDDHHmm
		YYYY—year
		MM—month
		DD—day
		HH—hour (optional)
		Mm—minute (optional)
		If type = 1, based upon index number
		Range 0-1,000,000

[0135] So, a command may indicate forward direction, oldest to newest (d=0), type based upon date/time (t=0), fetch 5 transactions (n=5), and that the start date is Jan. 1, 1996 at 12:01 A.M. (I[I]: Year=1996; Month=01, January; Day=01; Hour (optional)=not specified, use default 12:01 A.M.; Minute (optional)=not specified, use default 12:01 A.M.)

[0136] In this example, the command is wrapped around the transport layer for following sequence:

		P	6	8	|	0	|	0	|	5	|	1	9	9	6	0	1	0	5
7E	13	50	36	38	7C	30	7C	30	7C	35	7C	31	39	39	36	30	31	30	35	0B

[0137] A possible response to this command may include the following information:

response           p68
transaction year   1996
transaction month  02, February
transaction date   10
transaction hour   14, 2:00 P.M.
transaction minute 12, 2:12 P.M.
transaction day    2, Sunday=1, Monday=2
Source Code        04, Keypad entry
Result Code        00, Access Granted
Door used          02, Door 2
Entry Code         12345
User Name          Jones

[0138] and have the following form:

		p	6	8	|	1	9	9	6	0	2	1	0	1	4	1	2	2	|
7D	28	70	36	38	7C	31	39	39	36	30	32	31	30	31	34	31	32	32	7C
0	4	|	0	0	|	0	2	|	1	2	3	4	5	|
30	34	7C	30	30	7C	30	32	7C	31	32	33	34	35	7C
J	o	n	e	s	|	checksum
4A	6F	6E	65	73	7C	DC

[0139] Memory Access

[0140] Typical memory access commands may include a Read (peek) and a Write Step P103 (poke) and may be invoked using the Read literal (R), the Write literal (W) or program step P103. Thus, using the program step P103, the Read command message or request may have the form:

[0141] P103 |2 |n |a[a]

[0142] Where, the number of bytes to read is designated n and the Read (peek) starting address is designated a[a]. So, for example, a command to read 8 bytes starting at hexadecimal address A1234 may have the following command sequence:

		P	1	0	3	|	2	|	4	|	A	1	2	3	4	|	checksum
7E	10	50	31	30	33	7C	32	7C	34	7C	41	31	32	33	34	7C	AB

[0143] A typical response packet may have the form “p103|a[a]|data”, where the Read (peek) start address is designated a[a] and information fetched is designated data. A response to the above read command example might have the following form:

		p	1	0	3	|	A	1	2	3	4	|	data				checksum
7D	10	70	31	30	33	7C	41	31	32	33	34	7C	A0	C3	B1	09	CC

[0144] Similarly, the Write (poke) command message may have the form “P103 | 3 | a[a] | data”, where the Write (poke) starting address is designated a[a] and the information to be written is designated data. An example of a command packet to write 5 bytes of data, the character sequence HELLO, into locations starting at B0010 embedded within the transport layer may have the following form:

		P	1	0	3	|	3	B	0	0	1	0	|	H	E	L	L	O	checksum
7E	13	50	31	30	33	7C	33	7C	42	30	30	31	30	7C	48	45	4C	4C	4F	EB

[0145] A typical write response to the Write command may have the form “p103|a[a]|n[n]” where the write starting address is designated a[a] and the number of bytes written is designated n[n]. So, a response to the above Write command may be:

		p	1	0	3	|	B	0	0	1	0	|	5	checksum
7D	0F	70	31	30	33	7C	42	30	30	31	30	7C	05	3E

[0146] Add Directory Entry

[0147] A program step command to add a directory record (step number 20 in this example) may have fields as defined in Table 5 and may have the form “P20|t|c[c]|s|t[t]|n[n]|d|L[L]”.

TABLE 5
Name	Variable	Remarks
Entry type	t	=3 for directory code
Code	c	0-65534
Do not disturb	s	0=unrestricted
Telephone#	t	0-9, comma, dash, asterisk, pound and space
Name	n	up to 20 characters
Display name	d	0=no, 1=yes
Link	L	0=no, 1=yes

[0148] So, for a tenant code of 12345, corresponding to telephone number 1-818-700-5009 for a tenant named Jones, the program step may have corresponding selected field entries as in Table 6.

	TABLE 6
	Name	Variable	Contents
	Entry type	t	=3 for directory code
	Code	c	12345
	Do not disturb	s	0=unrestricted
	Telephone#	t	1-818-700-5009
	Name	n	Jones
	Display name	d	1=yes
	Link	L	0=no

[0149] and in this example, the resulting program step, prior to being embedded in a packet may have the form:

P	2	0	|	3	|	1	2	3	4	5	|	0	|
50	32	30	7C	33	7C	31	32	33	34	35	7C	30	7C
1	-	8	1	8	-	7	0	0	-	5	0	0	9	|
31	2D	38	31	38	2D	37	30	30	2D	35	30	30	39	7C
J	o	n	e	s	|	1	|	0
4A	6F	6E	65	73	7C	31	7C	30

[0150] A typical response would have the form p20|ee|t|c[c]|s|t[t]|n(n)|d|[L]|, where ee is an error code and other fields have the meanings set forth in Table 5 and in this example, the resulting program step may have the form:

p	2	0	|	0	|	3	|	1	2	3	4	5	|	0	|
70	32	30	7C	0	7C	33	31	32	33	34	35	7C	30	7C
1	-	8	1	8	-	7	0	0	-	5	0	0	9	|
31	2D	38	31	38	2D	37	30	30	2D	35	30	30	39	7C
J	o	n	e	s	|	1	|	0
4A	6F	6E	65	73	7C	31	7C	30

[0151] Accordingly, using the above described architecture and protocol and general purpose program steps, appropriate routines may be written to interface the TES with the general purpose computer. Thus, for example, routines may be written and integrated in an accounting package such that when employees are entered into the accounting package, a corresponding entry is made into the TES for the employee. When employees are removed, a corresponding employee entry is removed from the TES codes. Also, as an entry is added to the accounting package for each new employee, access codes are automatically added to the TES. Furthermore, these TES entries may be added coincident with entries in the accounting database or, as part of periodic updates, e.g., along with backups and other housekeeping that may be done on the general purpose computer.

[0152] Having thus described preferred embodiments of the present invention, various modifications and changes will occur to a person skilled in the art without departing from the spirit and scope of the invention. It is intended that all such variations and modifications fall within the scope of the appended claims. Examples and drawings are, accordingly, to be regarded as illustrative rather than restrictive.

Claims

1. An access control system in seamless communication with a general purpose computer, said access control system comprising: a main control unit telephonically in communication with entities within a building, said main control unit being mountable at an entrance to said building; at least one code entry unit receiving access codes, each said code entry unit providing received said access codes to said main control unit; and at least one controlled door, access through each said controlled door being provided by said main control unit in response to a correct access code entered at one said code entry unit; whereby adding or removing access codes from said main control unit seamlessly causes said main control unit to communicate code changes to a general purpose computer and said general purpose computer makes a corresponding entry or deletion, and correspondingly, entries or deletions made in said general purpose computer are seamlessly communicated to said main control system and said main control unit makes corresponding additions or removals of access codes in said access control system.

2. An access control system in seamless communication with a general purpose computer as in claim 1, wherein one of said at least one code entry units is a keypad located on said main control unit.

3. An access control system in seamless communication with a general purpose computer as in claim 2 wherein said at least one controlled door is two or more controlled doors, said main control unit controlling access through said controlled doors at entrances to said building, at least one of said entrances including a remote said code entry unit.

4. An access control system in seamless communication with a general purpose computer as in claim 3 wherein said remote code entry unit is a keypad.

5. An access control system in seamless communication with a general purpose computer as in claim 3 wherein said remote code entry unit is a card reader.

6. An access control unit in seamless communication with a general purpose computer as in claim 3 further comprising a peripheral control unit in communication with said main control unit, said peripheral control unit controlling at least one remotely controlled door at an entrance remotely located from said main control unit.

7. An access control unit in seamless communication with a general purpose computer as in claim 6 further comprising a remote said code entry unit at said remotely controlled door, said remote code entry unit communicating with said main control unit through said peripheral unit.

8. An access control system in seamless communication with a general purpose computer as in claim 7 wherein said remote code entry unit is located external to said building, entry requests being placed by entering an access code at said remote code entry unit.

9. An access control unit in seamless communication with a general purpose computer as in claim 8 wherein said remote code entry unit is a card reader.

10. An access control system in seamless communication with a general purpose computer as in claim 8 wherein said remote code entry unit is a keypad.

11. An access control unit in seamless communication with a general purpose computer as in claim 8 further comprising a second remote code entry unit located internal to said building, access code entries to said second remote code entry unit requesting exit from said building, said main control unit authenticating access codes, said peripheral unit opening said remote controlled door responsive to authenticated access codes being entered in either said remote code entry unit.

12. An access control system in seamless communication with a general purpose computer as in claim 2 further comprising a monitor connected to said main control unit, said main control unit displaying system information on said monitor.

13. An access control unit in seamless communication with a general purpose computer as in claim 2 further comprising a closed circuit TV camera, said closed circuit TV camera being remotely controlled by said access control system.

14. An access control system in seamless communication with a general purpose computer as in claim 2 wherein said main control further comprises a display, said display selectively displaying a menu of available options.

15. An access control system in seamless communication with a general purpose computer as in claim 14, the main control unit further comprising: a microphone receiving a voice communications from persons requesting building access; and a speaker providing audio responses to said persons requesting building access.

16. An access control system in seamless communication with a general purpose computer as in claim 14, the main control unit further comprising: a memory module; an electronics assembly adapted to receive said memory module, said memory module being pluggable into said electronics assembly, said display being attached to said electronics assembly; and an alphanumeric keypad, said access control system being programmed directly from said alphanumeric keypad, access control codes being programmed into said main control unit using said alphanumeric keypad, program entries being selectively communicated, seamlessly, to said general purpose computer.

17. An access control system in seamless communication with a general purpose computer as in claim 16 wherein said electronics assembly unit comprises: a control subsystem controlling connected peripheral units and controlled doors, receiving and authenticating access codes and monitoring unauthorized accesses; and a communication subsystem passing voice communications telephonically between said entities within said building and individuals seeking building access.

18. An access control system in seamless communication with a general purpose computer as in claim 17 wherein said control subsystem comprises: a microcontroller controlling building access, communicating access authorization changes to the general purpose computer and changing access code data in response to communications from said general purpose computer; memory storing current access codes, system related program code, data and system logs; a handheld interface and real time clock communicating with said general purpose computer; and said memory module, program initialization data and operating codes contained in said memory module.

19. An access control system in seamless communication with a general purpose computer as in claim 18 wherein said memory includes Flash EPROM and dynamic random access memory.

20. An access control system in seamless communication with a general purpose computer as in claim 17 wherein said communication subsystem comprises: a digital signal processor; memory storing code for said digital signal processor; and a communications interface providing a voice interface with said microphone and audio interface with said speaker at said main control unit and providing a telephonic interface to a connected telephone system responsive to said digital signal processor.

21. An access control system in seamless communication with a general purpose computer as in claim 20 wherein said memory in said communication subsystem comprises Flash EPROM and random access memory.

22. An access control system in seamless communication with a general purpose computer, said access control system comprising: a main control unit telephonically in communication with entities within a building, said main control unit being mountable at an entrance to said buildings; at least one code entry unit receiving access codes, each said code entry unit providing received said access codes to said main control unit; and at least one controlled door, access through each said controlled door being provided by said main control unit in response to access codes entered at one said code entry unit; whereby controlled door related data is seamlessly transmitted by said main control unit to a general purpose computer and said general purpose computer records the controlled door related data and correspondingly, controlled door related data in said general purpose computer is seamlessly communicated to said main control unit and said main control unit makes corresponding additions or removals of controlled door related data in said access control system.