Two-phase biometric access control system (TBACS)

A system for permitting an authorized person to securely and rapidly pass through a location's access control point by first detecting part of a person's unique observable signature, authenticating and checking entry criteria, and, if authorized, providing an access confirmation;

• and second, by verifying the person's confirmation upon arrival, using a different part of the person's unique observable signature, comprising:
• a unique observable signature item that said person has at a vicinity of the access control point and said unique observable signature item being defined visually, including a person's appearance or vehicle, or an electronic signal from detection of a personal device including one of a mobile phone or RFID and including at least one factor sufficient for authentication and another factor sufficient for recognition;
• a network-connected authentication computer nearby said location's access control point, connected to a signature recognition device;
• a network-connected server with a preexisting database containing said person's unique observable signature item along with the entry criteria, previously set by said location, for determining whether or not said person has the authority to enter said location;
• and
• a network-connected location computer at said location's access control point, connected to a signature recognition device and access control equipment which can physically permit said person an ability to enter said location,
• whereby, if said person's unique observable signature is recognized by the network-connected authentication computer, the network-connected authentication computer automatically sends an access request for said location for said person with an authentication part of the unique observable signature, said network-connected server verifies said person's identity and the entry criteria, and responds with a secure access confirmation message which is also forwarded to said network-connected location computer, and later, when said person arrives at the location's access control point, said network-connected location computer recognizes said person by reading said unique observable signature item associated with said person, checks said person's secure access confirmation message, and permits entry using said access control equipment.

A method for permitting an authorized person to securely and rapidly enter a location through the location's access control point in two phases, the method comprising:

• a first phase comprising:
• providing said person with a personal device that includes an interactive display and text input, secure communications capability, and a biometric sensor;
• providing said person with a unique observable signature;
• providing a server with a preexisting database of authentication information necessary to verify an identity of said person as well as said person's unique observable signature and acess criteria, previously set by said location, for determining whether or not said person has the authority to enter the location;
• providing a computer at said location's access control point, connected to a signature recognition device and access control equipment configured to physically permit said person an ability to enter said location;
• requesting access by said person to said location using said personal device and containing the location, the person's identity number, and multiple authentication factors including a biometric;
• authenticating said person's identity by said server using said multiple authentication factors and a biometric matching algorithm;
• checking, by said server, said person's authority to enter said location based on said access criteria;
• responding, by said server, to said person's request with an access message wherein, if said person is authenticated and found to meet said entry criteria, said access message will be an access confirmation message authorizing future access, else the access message will deny the person's request;
• forwarding, if authorized access, said person's access confirmation message and unique observable signature to the computer at said location's access control point;
• saving, by said computer, said person's access confirmation message and unique
• observable signature;
• and
• a second phase comprising:
• arriving by said person at said location's access control point;
• observing said unique observable signature by said computer's signature recognition device;
• retrieving said person's previously saved access confirmation message;
• and
• if found, permitting entry of said person through said access control point via control signals provided by said computer to the access control equipment.