Monday, November 21, 2016

Inexpensive RFID Door Controller

This is a door controller that goes by a variety of model names and numbers on the internet from Amazon and Ebay.

This is a collection of information that I've gathered together running these systems.  If you aren't familiar with these sorts of things, you will want to consult with some others more knowledgeable, but the information here may help you get you answers to questions about the path you can go through getting everything up and running.

We've had these systems running now for nearly a decade and have had 100% functional for the implementations I've had them in.  Hundreds of users, 10's of thousands of entries and exists, we've never had a problem with the controllers ever.  

These systems go through a variety of names.  These are the common ones that I've seen them under:

"Wiegand 26 Bit TCP IP Door Controller"

HSY-02B HSY-04B HSY-01B

https://www.alibaba.com/product-detail/HSY-Manufacturer-TCP-IP-Door-Access_763217699.html

Similar controllers are the 02b and 01b

There is also either a big brother or maybe a cousin to these boards made by Wiengand called the 2004.net
http://www.wiegand.com.cn/english/support.htm

It seems too be a a similar unit, upgraded/different design perhaps?  I'm not sure but specs and board layout pins seem to be similar.  The import reason for mentioning it is that this site has some additional software that you can try with these apps.
WHAT DOES THIS DO?
So the RFID system, purchased from mostly suppliers in China, is a fairly inexpensive and capable cardkey RFID card system to open doors based on the cards level of access and assignment to both doors and time conditions for those doors.  Once up, you can place your keycard or FOB or other RFID programmed entry device against or near the 'reader' and if your card is authorized, the door will unlock.  Generally speaking, you can leave the cards inside a bag or in your pocket, and simply placing the holder near the reader, and using a radio signal, it can communicate with the FOB and unlock the door if you are authorized.



HOOKING IT UP

Administration Software to the controller(s)

This is actually pretty easy.  These controllers can be standalone, meaning you can buy an RFID controller, and just use the simple GUI on it to control cards and who can get in or out.  If you have 1 controller and maybe less than 25 people, this isn't so bad, since you may only have 4 doors to worry about.  But lets say you have hundreds of people and 8-16-100 doors?  Well you'll want to use the management application that interfaces to these doors.  (its outlined below).  The management application gives far greater control of the doors and the features.  It allows you to manage large number of users access, remote activate/deactivate doors with some mouse clicks, and a large number of other security features that aren't necessarily available.  

The software 'talks' to the RFID boards and uploads/downloads the data.  The management software is not needed to run the doors, its only need to do add/moves/changes to the system.  ALL the doors run 'autonomously', independent from the controller.  So if you shut off the computer running the administration software, the doors don't care, they just keep on doing what they're told to do.  When you make the changes you need to user access, you 'upload' this data with a click of a button to all the controllers, and that data is then sent to the memory of the RFID boards.  Also you can download the data from these boards to the controller computer, merging all the different doors into a single utility to run reports.  Very convenient and easy.  The best part is that the RFID boards are connected to the management software via Ethernet.  Beneficial in larger deployments where you might have a corporate office with doors spread far apart within a building or in different cities.  If there is an established network to those offices, and the management computer can talk to the other networks, you are able to manage those systems.

YES you technically control these boards across the internet, I would highly discourage that practice as the security access to the board itself maybe easily compromised by hackers, we do not know.

RFID Door Controller

There are variations of the same system above that can control more or less doors, this one pictured below has 4 door input/output controls, but the input/output configuration is the same among the various models

First thing.  The board itself needs power,  You'll want a power supply that can deliver 12volts with a 3-5A rating (connects to P2).  This will power the controller and will provide 12volts output to the RFID connections (RD1 - RD4).  The DC amperage requirements will dictate how you are power devices.  If you have controllers that need to be energized in their normal state, its going to be higher power usage than systems that only require power to unlock, assuming its a momentary unlock.

This P2 power connection does NOT provide power to the door strike connections DR1 - DR4.  Power for these connections is provided to the "COM" input on each connection from a separate 12 volt power source.  What this means is a relay on the board itself controls the power from the COM input to the NC/NO input.  So you'll notice in the diagram I have 12 volt sources connected to each COM input (common).  TECHNICALLY yes these could all come from the same 12 volt power supply.  Sometimes some users wish to separate the power.

Ive been using these types of power supplies
UHPPOTE AC100-240V to 12V/5A Power Supply Support Backup Battery
Lots of power to run the controller and strikes.  It also has a built in battery charger and will allow the system to continue to function on battery.  Available on Amazon for around $20   They have a lot of functionality in it.
Electric door strikes and magnetic locks can consume a lot of power and should be sourced separately from a different supply than the one powering the board, since its requirements are very.  You don't want to burn out the power supply.

The top and bottom of the board is used for the RFID readers and the exit buttons.

On the right hand side are the door strike connections and mag log controls

Connection Layout Diagram Example
In the diagram above, there is an example of 3 different door types connected.  

Door 1 uses a door strike that is activated with a reader.  This example has a green push button "release" to manually unlock the door for exit.  The strike normal state (no power) is 'locked'.  This means it needs power to unlock.  So it is connected to the "Normally Open" connection on the board.  The "NO" or "NC" doesn't refer to the lock state, it refers to the type of power the door strike needs.  OPEN means the circuit has no power, and only has power for the duration you want to keep the door unlocked.   So on the RFID board, the "NO" connection gets power when a card is successfully used,  a "NC" connection removes the power for the duration you want the door to unlock when a card is used.

Door 2 uses a magnetic lock.  It is connected by a separate 12 volt power supply.  It is using a request to exit button as well, however this button uses a motion sensor to trigger the exit, so it requires an additional power connection to it, which is 12 volt in this example.  The magnetic lock is connected to the "NC" connection.  This provides continuous power to the electro-magnet, and then 'opens' the circuit to cut the power to it to allow the door to open.

Its important to note that there are different magnetic lock types.  The above example, the power to keep the magnetic lock energized and locked is flowing through the controller.  Some magentic locks have independent power to the lock itself, with a separate power feed coming from the RFID to remotely trigger the power on or off in the magnetic lock itself.

Door 3 (currently not connected in the above example, ran out of space on the picture :) )

Door 4 is an example of controlling a latch via separate relay.
WARNING: You need to have some electrical concepts in place to prevent sending power to a system not expecting it.  Implementations are very situation dependent, this example is only a possible solution in a certain set of circumstances.

This example the door latch that is already connected to an existing door system which is priority.  This situation may stem from a shared door where you might have 2 different companies using the same door, each wanting their own system, but need to work with each other, but independently.

This example, the latch is 'normally closed', meaning there is power to the door to keep it locked.  This would be typical of some door strikes, but more commonly a magnetic lock.

Since we want to interrupt the power to the door for the duration of our system, the example shows a 'normally closed' relay being inserted into the power connection for the door lock.  We'll use a relay, controlled by our RFID system, to interrupt the power to this strike when our system wants to open it.

The relay is a normally closed relay and allows the power to the strike to flow through it.
The RFID system is controlling the relay through a NO circuit.
When our system wants to unlock the door, it DR4 changes from the normal "NO" state to a NC state, which sends power to the relay.  The relay activates, and changes from a "NC" state to an "NO" state, which cuts power to the lock and sets the door to unlocked.

RFID READER

I've made a few different model of RFID readers work, but really MOST of the ones I've tried all worked the same.

The basic connections on RFID readers are these:
POSITIVE   - RED
NEGATIVE - BLACK
DATA0 -  GREEN (usually)
DATA1 - WHITE (usually)

There are others, but all ones I connected up worked with this configuration right away.

This is an HID ThinLine II reader and it works with the board discussed in this document.


This is an "HID" reader below, which was $20 from China, so probably less quality, but the ones I have work just fine so far.



This RFID reader can support pin/rfid combination access.
These RFID readers work with and without the use of the key pin pads (to go with the cards).
We use these readers on external doors that are public accessible.  This is due to the insecure nature of RFID skimmers.  These require an RFID pass plus a user pin number to work in conjunction to open the door.

Googled: " s touch s key reader pdf "
and found this PDF document with instructions

https://www.i-keys.de/download_free/sTouch-sKey%20standalone.pdf

Door Strikes

The door strike is operated by electronically by the door controller.

This P2 power connection does NOT provide power to the door strike connections DR1 - DR4.  Power for these connections is provided to the "COM" input on each connection from a separate 12 volt power source.

Electric door strikes and magnetic locks can consume a lot of power and should be sourced separately from a different supply than the one powering the board, since its requirements are very.  You don't want to burn out the power supply.

The controller has connections for either mode.  The important thing to understand is that the system doesn't provide any power to these connections.  You must feed power alternately into these feeds.  

In this diagram, you'll notice that there are two power connections from the power supply going to same board.  The top power connection in the picture is the power for the boards electronics.
The second power connection you see is dedicated solely to the strikes.  Some power supplies have multiple outputs, sometimes you can share.  

The method shown allows you to have dedicated power sources for the strikes.  It also reduces the power required running through the electronics on the board itself.

In this example, the positive line goes to the COM connection on the associated door that you are working on.  Then, depending on the operational type of your strike, you connect it to either Normally Open, or Normally Closed.  In the above example, the strike is a normally closed strike, meaning power is always required to keep the door locked.  When an authorized card is used, the power is turned off to the strike for the duration programmed in the controller, and the door stays unlocked for that time period.

Request to exit button
RFID systems allow a door to open usually either the door handle, latch or magnetic lock on the door frame.  In cases of egress, we need to allow this door to open.  In most cases, door handles, for egress, are usually unlocked.  This means you can, regardless of card state, turn the door handle or push the crash bar and open the door to get out.
In some cases, the handle itself on the door isn't enough to override the system when exiting, In the case of a magnetically locked door, you may require to press a button to release the magnetic lock.  Some, as you approach, sense your approach and will automatically release the door.


 so you need to have some sort of mechanism that detects you are trying to exist and will allow you to do so without a card.  The request to exit button contact, when activated, will trigger the system to release that door for a time period.


On my implementations, my request to exit button itself needed power to light up a light on it.  So I doubled up the power draw from the same power connections that the RFID reader used.



Forced Open/ Open Detection
These boards require an additional module to do some additional input output.
Forced/Unauthorized opening or the leaving of a door open can be detected using a door open sensor

First you'll need this board which connects to the expansion port of the door controller



This board can also be connected to a fire alarm panel, allowing the system to unlock all doors upon the activation of a compatible fire alarm system.

In the diagram this shows the "ALARM OUTPUT" connections, however these can serve as inputs alternatively.

So, for example, you connect this module to your alarm panel, then wire a door open sensor to it.


in the software you can program this, that, upon the door being pushed open without a request to exit or a card (IE someone has forced the door open or left it open) the system can detect it and send an alarm or warning.


Software
The software that is used by these systems appears to be the same flavor of software, just used by various different companies.  The link to the Weingand site has a download you can install and try.  I think you need to register it to make it work long term.

WGACCESS Software (WINDOWS ONLY)  That latest version is 8.97 at time of running.
.  I'm running 7.95 on Windows 10 and 2012R2.  7.75 seems to work on windows 10 too.


Here is an alternate link to the 7.95 version of software 

http://www.wiegand.com.cn/soft/soft_all_32/MJ_all_en.rar

http://www.wiegand.com.cn/english/support.htm

(Access Control + Time & Attendances + Patrol )

Default user and password
User: abc
Password: 123
Extended Function password: 5678
Registration code is 2004

There is a OPENSOURCE intuitive with these controllers, I haven't done much with it yet, but here is a link to it https://github.com/carbonsphere/UHPPOTE


ACCESSING THE DEVICE
There is a built in web GUI in these controllers once they have an IP
http://IP of the device

I've run into challenges sometimes obtaining the default IP of these units. 
These controller boards don't come with DHCP enabled, and a default IP of 192.168.0.0, this isn't immediately accessible.  What you need is this tool to access things

http://www.wiegand.com.cn/zip12/soft/WEBConfig_en.rar

Run this program, while the system is attached 


With this program running and the computer connected to the box, you should see it appear, and you can use this app to assign the IP.

Have it search and detect it.  Then when you configure that board, set it to the IP of the network you want it to be part of (if different than your PC controller software).

Try the following user/password combination
user (aka "System Manager" default) is " abc "
password (default) " 654321 "

Here's a link to a manual to a version of this application.  There seem to be a few floating on the net.HERE

There's a MS Access database in the system, the password for it is 168168 " if you want to look at the tables.

FAQ

QUESTION:
Where can I download the controller software?

WGACCESS Software downloaded at http://www.wiegand.com.cn/english/support.htm

QUESTION:
Do I need the door administration software on my computer running all the time for the system work?

No.  The software is for administration purposes only.  You assign cards and permissions in the software, the you upload the data to the controllers.  Once that data is uploaded, the controllers run autonomously.

QUESTION:
Does the software gather logs automatically?

No.  You must click on the controller and do a download to gather the exit/entry log history

3> QUESTION:
I've hooked up ethernet to the door controller board, how do I connect?

The board DEFAULTS to DHCP. 

  • If you have access to the router that hands out DHCP, you can look in the routers DHCP table to see the IP assigned to it.
  • If you know the IP, and the controller is on a different, but local/route able LAN segment, you can manually enter the IP address in.




  • You can also use the administration software to look for the controller board, however the computer running that software has to be on the same network.






  • What is NO and NC?

    This refers to the type of electric circuit that controls the door and should not be mistaken to be a reference to the type of lock you are using with it.  NO and NC are used to describe the connections (switch or on this RFID controller, relays) and manual switches like emergency stop buttons.

    NO stands for "normally open"  (connections are normally open and close when a switch is used).  Normally Open (NO) stops the flow of electricity until its commanded to 'close ' and start the electricity passing through the circuit

    NC stands for "normally closed" (connections are normally closed and open when a switch is used).  Normally Closed (NC) is a circuit which allows the flow of electricity until its commanded to 'open' and stop the electricity from passing. 

    Normally Lock and Normally Unlock

    There are various types of lock mechanisms, and they generally come in two types of default behaviors when there is no power, or its normal mode, either locked or unlocked.  There are various reasons why you would want this, but its normally decided on the state of the door in its majority of use and/or the state of the door when there is a complete power fail of the system.

    The lock type, in conjunction with their connection to the board dictate their behavior when a card is presented for entry.  And this would be how you want the door to be controlled

    A lock, whose natural un-powered state is locked, would usually be connected to a "normally open" circuit on the board.  When the door is to be unlocked, the controller changes the circuit to "closed" sending power to unlock it the door.

    How many doors can the software control

    100 doors using 25 controllers  (4 doors / controller)

    What type of readers are compatible

    The RFID receiver needs to output a 26 bit
    Wiengand signal. 

    Can I use motion sensors to unlock the door?

    Yes

    Is it possible to open 4 doors with just one keypad but 4 different pin-codes? 

    Yes.  However you can't do it through software.  You would need to wire up the door latches to a relay(s), which would trigger the unlock of the doors.  You would want to be careful of power consumption that the relays use, and the power that is delivered.

    Factory Reset / Password Reset of controller board's GUI


    The controller board has a GUI on it, and you can use this to add/remove cards if you want.  The default password can be changed for security purposes, but if you forget it, here's how you clear the password.

    This will reset the IP and Password of the controller.  It will NOT factory reset the unit remaining memory in my experience.  This means that it will maintain card history and configuration within the unit. Meaning door function should continue to work while you perform this procedure.

    If you have lost the configuration password to this board.   Here is what you will need to do.
    First you will need to 'reset' the board in question.  You do this by grounding the SDA and GND pins on the J12 connector.  You'll need to do that for about 5 seconds.
    This will reset the IP/Password for the board back to factory.

    After the rest, you will need this application to allow you to access the board to get an IP set on it.
    http://www.wiegand.com.cn/zip12/soft/WEBConfig_en.rar





    With the power running, I connected the SDA and GND pins.  I had a ping going to the controller in question, and the ping stopped when the controller reset.


    Launch the configuration tool.  Your computer will need to be connected to the controller, either on the same lan segment, or directly from your computer to the controller. 
    When you launch the APP, click on "SEARCH" and it will search your network for controllers.  You should see something like the response below, with one of your controllers in showing the IP of 192.168.0.0


    Click on the Controller SN that you want to configure, then click "TRY WEB"

    In my experience, the system will take 15-30 seconds while it applies an IP to the board, enables WEB, and gives you the following default logon screen

    You should now be able to logon to your controller with the default password.
    It will also have applied an IP to your box.  In my experience, its usually the first 3 octets of the laptop or last known ip, and then followed by 123


    You can now reconfigure this box's ip using the ADVANCED OPTIONS button in the thick client, or through the GUI itself.


    Here's some extra pictures I've found on the internet









    The
    name of the access control software
    Brands
    and names apply
    Download
    WGACCESS
    Professional Access Management Software
    V8.9821
    WGACCESS brand,
    WG2000 series
    32-bit brand controller
     APP
    Instructions

    ADCT
    high-end professional access management software
    V8.9821
    ADCT brand,
    ADCT3000 series
    32-bit high-end brand access controller


    Neutral Interface
    OEM ODM Product Access Management Software
    V8.9821
    Neutral, OEM ODM series controller

    Micro-tillage video access control setup instruction manualWGACCESS、Adroitor、ADCT
     
    Access Controller, WEB Function,
    PC Setup Tool, Widget
    (Green Instant Installation)
    V2.7
    Universal for 32-bit access controllers

    WeTilly Cloud Mini Program
    Server Setup Tool
    Widget (Green Instant Installation)
    V3.21
    WGACCESS, Adroitor, ADCT
    brand 32-bit access controller



    Construction wiring specifications

    220V AC power cord

    Use a three-core power cord with a cross-sectional area of more than 1.0 square millimeters and require a power source Be sure to be groundedto avoid power interference


    Electrically lock the wire to the controller

    Use a two-core power cord with a cross-sectional area of more than 1.0 square millimeters.

    If it exceeds 50 metersconsider using thicker wires, or connecting multiple strands in parallel, with a maximum length of no more than 100 meters.


    For the line from the door magnet to the controller, it is recommended to choose a two-core wire with a wire diameter of 0.22Above square millimeters,

    If there is no need to know the opening and closing status of the door online, or there is no need to have the door not closed for a long time, alarm and illegal intrusion alarm interlock, the door magnetic wire can be disconnected.


    The line from the card reader to the controller

    The cross-sectional area of the card reader wiring ≥ 0.22 square millimeters, and both Category 5 and Category 5 network cables are acceptable.


    If you don't need a card reader to distinguish between legal and illegal cards through sound and light feedback, you can not connect BEEPER (blue) and LED (brown), and it is better to twist the data cable Data1Data0 into each other.


    The distance from the reader to the controller should not exceed 100 meters, it is recommended to be within 80 meters, if the distance from the reader to the controller is exceeded50 meters, it is recommended to thicken or multi-strand in one strand to power the card reader, which will help improve the performance of the card reader


    button to the controller's wire

    It is recommended to use two-core wire, with a wire diameter of more than 0.22 square millimeters


    TCP/IP communication line
    Like the wiring method of computer network, the distance from the controller to the switch or HUB is less than 100 meters, and the higher the distance is required for the quality of the cable. It is recommended to use a branded network cable.



    Connection:



    Function description:

      1. Four-way alarm output, which can be freely defined for a certain door and several door functions of the controller;


    2. It can be connected to the output of anti-theft alarm, smoke gas temperature alarm, emergency call and rescue alarm signal, and the output status of each alarm signal can be freely defined through the software, that is, it is set to normally open or normally closed;


    3. It can be connected to the fire closure signal output, and automatically open all the doors of the controller after receiving the fire signal, and generate a fire alarm record for later query;


    4. It can control forced break-in alarm, door not closed for a long time, forced entry alarm, door opening linkage output, invalid card alarm, fire alarm linkage, etc.


    5. The delay holding time of each output can be set, 0-600 seconds.