Guide · 7 min read
Types of access control systems: from card readers to mobile and biometrics
An access control system decides who enters, where and when, and records it all. Types differ in how they identify a person (card, PIN, fingerprint, face, phone) and in architecture (standalone, networked, cloud). This guide sorts them by place.
First: how does the system identify a person?
| Credential | Strengths | Limits | Where it fits |
|---|---|---|---|
| Card or key fob (RFID) | Cheap, fast and familiar | Forgotten and lent; old 125 kHz cards are easily cloned | Offices and compounds, with modern encrypted cards such as DESFire |
| PIN on a keypad | Nothing to carry | Shared and shoulder-surfed; weakest alone | Secondary doors, or as a second factor with a card |
| Fingerprint | Cannot be lent | Affected by dust, dry skin and gloves; slower at busy doors | Server rooms, stores and small offices |
| Face recognition | Touchless and fast, works with masks on modern units | Needs suitable lighting and consent for biometric data | Staff entrances, factories and high-traffic gates |
| Mobile (Bluetooth or NFC) | No cards to print, revoked remotely at once | Needs an app and a charged phone | Modern companies and multi-tenant buildings |
| Number plate (ANPR) | Gate opens without stopping | Vehicles only; needs a dedicated camera | Car parks, residential compounds and gates |
The rule on sensitive sites: two factors together (card + PIN, or face + card) on the doors that matter, one factor on the rest.
Second: how is the system built?
Standalone locks
A lock or reader on the door with its own programming and no network. Fine for one or two doors in a shop or villa. Limits: no central log, and credentials are updated door by door.
Networked system with controllers
A controller per door or group of doors, connected to central software on a site server. It logs every passage, sets permissions by time and place, and links doors to intrusion alarms, cameras and the fire alarm. This is the standard for offices, hospitals and hotels. We specify encrypted OSDP between reader and controller instead of legacy Wiegand.
Cloud system
The same controllers, managed through a browser or app with no on-site server. It suits multi-branch companies and anyone who wants to manage access from anywhere, given stable internet and a clear data retention policy.
Third: what sits on the door itself
- The lock: a maglock that releases on power loss (fail-safe) for doors on escape routes, or an electric strike that stays locked on power loss (fail-secure) for stores. Details in fail-safe or fail-secure.
- Exit button and break-glass: required on every controlled door inside the building.
- Door contact: reports a door held open or forced.
- Fire alarm interface: doors release on the fire signal; we design the interface and coordinate with the fire contractor.
- Gates and turnstiles: speed gates for lobbies, full-height turnstiles for factories, barriers for car parks.
How to choose
- List the doors and classify them: main entrance, internal doors, sensitive rooms, vehicle gates.
- Set the credential and number of factors for each class.
- Pick the architecture by door count and branches: standalone up to 3 doors, networked above that, cloud for multiple branches.
- Ask for OSDP and encrypted cards, and confirm the fire and camera links.
- Plan time and attendance if you want it from the same system; most networked systems produce attendance reports.
We design, install and maintain access control for offices, hospitals, hotels, factories and compounds in Riyadh and across the Kingdom, with vendor-neutral specifications. Read the access control page or book a survey.
Frequently asked questions
What is the best access control system for a small company?
For two or three doors a standalone or small cloud system with encrypted cards or mobile credentials is enough. If growth is planned, start with a networked controller from day one.
Can access control be used for time and attendance?
Yes; most networked and cloud systems produce attendance reports from passage logs or link to the HR system.
Is fingerprint better than a card?
Fingerprint prevents lending but is slower and affected by the environment. At busy sites face or an encrypted card is faster; for sensitive rooms combine two factors.
Can access cards be cloned?
Old 125 kHz and MIFARE Classic cards are easily cloned. Modern encrypted cards such as DESFire EV2/EV3 are secure; see the access cards article.
What happens to doors in a power cut?
It depends on the lock type: doors on escape routes open, store doors stay locked, and a UPS keeps the system running for a few hours.