# US 2019/0318558 A1 · Self-directed access card issuance system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0318558 A1
- Document ID: US20190318558A1
- Status: Published application
- Kind: A1
- Application number: 16/381,616
- Filed: 2019-04-11
- Published: 2019-10-17
- Earliest claimed: 2018-04-11
- Assignees: Entrust Datacard Corporation
- Applicants: Entrust Datacard Corporation
- Inventors: CHRISTOPHE BIEHLMANN
- Web page: https://patentgrep.com/patent/US20190318558A1

## CPC

- G07C 9/27: with central registration
- B42D 25/485: by electronic processing means
- G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards
- G06F 21/45: Structures or tools for the administration of authentication
- G07C 9/22: in combination with an identity check of the pass holder
- G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules
- G06F 2221/2113: Multi-level security, e.g. mandatory access control
- G07C 2209/02: Access control comprising means for the enrolment of users
- G07C 2209/08: With time considerations, e.g. temporary activation, valid time window or time limitations
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- B42D: BOOKS; BOOK COVERS; LOOSE LEAVES; PRINTED MATTER CHARACTERISED BY IDENTIFICATION OR SECURITY FEATURES; PRINTED MATTER OF SPECIAL FORMAT OR STYLE NOT OTHERWISE PROVIDED FOR; DEVICES FOR USE THEREWITH AND NOT OTHERWISE PROVIDED FOR; MOVABLE-STRIP WRITING OR READING APPARATUS
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

An access card issuance system comprising an access card issuance device located at a facility of an organization and a web server is disclosed. The access card issuance system provides a web interface in response to a request from a mobile device, and receives user information identifying a user of the mobile device. The system is also configured to validate the identity of an authorized individual associated with the facility identified by a user of the mobile device, and issue an access card to the user of the mobile device. The access card has indicia printed thereon identifying at least a portion of the user information, and programmable information encoded onto the access card providing access rights to the facility. The system further transmits, to the authorized individual, a message associated with issuance of the access card.

## Claims

### Claim 1

An access card printer comprising:
a card printing subsystem;
a processing unit;
a memory communicatively connected to the processing unit, the memory storing instructions executable by the processing unit including a card printing application wherein the instructions, when executed, cause the access card printer to perform, in response to a request from a mobile device:
provide a web interface to the mobile device;
receive, via the web interface, user information identifying a user of the mobile device and an identity of an authorized individual associated with a facility;
issue an access card to the user of the mobile device, the access card having indicia printed thereon by the card printing subsystem identifying the user; and
transmit, to the authorized individual, a message associated with issuance of the access card.

### Claim 2 (depends on 1)

The access card printer of claim 1, wherein the access card includes information encoded thereon providing access rights to the facility.

### Claim 3 (depends on 1)

The access card printer of claim 1, wherein the indicia printed on the access card includes at least one of a user name, a picture, a signature, a duration of validity of the badge; or an access level associated with the badge.

### Claim 4 (depends on 1)

The access card printer of claim 1, wherein the instructions further cause the access card printer to validate the identity of the authorized individual associated with the facility.

### Claim 5 (depends on 1)

The access card printer of claim 1, wherein the memory stores instructions including a web server application configured to provide the web interface to the mobile device.

### Claim 6 (depends on 1)

The access card printer of claim 1, wherein the memory further stores at least one access card template, the access card template defining a layout of the indicia printed on the access card.

### Claim 7 (depends on 1)

The access card printer of claim 1, wherein the web interface comprises a plurality of user entry screens, the plurality of user entry screens including a signature screen, an image capture screen, and a host identification screen.

### Claim 8 (depends on 1)

The access card printer of claim 1, wherein the memory further stores a visitor log including user information for a plurality of visitors, and wherein the access card issuance device is further programmed to, based on issuance of the access card to the user, store the user information associated with the user in the visitor log.

### Claim 9 (depends on 1)

The access card printer of claim 1, wherein the access card issuance device is configured to provide the web interface to the mobile device in response to the mobile device registering on a wireless network at the facility.

### Claim 10 (depends on 1)

The access card printer of claim 1, wherein the access card issuance device is configured to provide the web interface to the mobile device in response to a request from the mobile device received at the access card issuance device.

### Claim 11 (depends on 1)

The access card printer of claim 1, wherein the user is a visitor of the authorized individual, and the message to the authorized individual notifies the authorized individual of the presence of the user at the facility.

### Claim 12 (depends on 1)

The access card printer of claim 1, wherein the access card printer is located at the facility, the facility being managed by an organization of the authorized individual.

### Claim 13 (depends on 1)

The access card printer of claim 1, wherein the user information includes at least one of a signature of the user or an image of the user.

### Claim 14

A method of issuing an access card at a facility, comprising:
providing a web interface to a mobile device;
receiving, via the web interface, user information identifying a user of the mobile device and including an identity of an authorized individual associated with the facility;
issuing, at an access card issuance device, an access card to the user of the mobile device, including printing indicia on the access card including at least a portion of the user information; and
transmitting, from the access card issuance device to the authorized individual, a message associated with issuance of the access card.

### Claim 15 (depends on 14)

The method of claim 14, wherein the user comprises one of the authorized individual associated with the facility or a visitor associated with the authorized individual associated with the facility.

### Claim 16 (depends on 14)

The method of claim 14, wherein the user comprises the authorized individual and wherein the message comprises a validation code transmitted prior to issuing the access card, and wherein issuing the access card occurs in response to receipt, at the access card issuance device, confirmation of the access code from the mobile device.

### Claim 17 (depends on 14)

The method of claim 14, wherein the user comprises a visitor, the method further comprising:
receiving from the mobile device an identification of a host individual; and
performing a lookup at a host identity catalog to verify the identification of the host individual;
wherein providing an information gathering user interface to the mobile device is based on verification of the identity of the host individual.

### Claim 18 (depends on 17)

The method of claim 17, wherein the message associated with issuance of the access card comprises a message to the host individual indicating the presence of the visitor at the facility.

### Claim 19 (depends on 18)

The method of claim 18, wherein transmitting the message is performed using contact information of the host individual that is included in the host identity catalog.

### Claim 20 (depends on 19)

The method of claim 19, wherein the message comprises one of a text message, an email, or an automated voice message.

### Claim 21 (depends on 14)

The method of claim 14, wherein providing the web interface is performed in response to the mobile device registering on a wireless network at the facility.

### Claim 22 (depends on 14)

The method of claim 14, wherein the user information includes a signature of the user and an image of the user.

### Claim 23

An access card issuance system comprising an access card issuance device located at a facility of an organization and a web server, wherein the access card issuance system is configured to:
provide a web interface from the web server to a mobile device in response to a request from the mobile device;
receive, via the web interface, user information identifying a user of the mobile device, the user information including an identity of an authorized individual associated with a facility;
issue an access card to the user of the mobile device from the access card issuance device, the access card having indicia printed thereon identifying at least a portion of the user information; and
transmit, to the authorized individual, a message associated with issuance of the access card.

### Claim 24 (depends on 23)

The access card issuance system of claim 23, wherein the web server is communicatively connected to and separate from the access card issuance device.

### Claim 25 (depends on 23)

The access card issuance system of claim 23, wherein the host identity catalog comprises at least one of a corporate directory or an identity provider.

### Claim 26 (depends on 25)

The access card issuance system of claim 25, wherein the corporate directory comprises an Active Directory server communicatively connected to the access card issuance device.
