This manual represents the knowledge at the above-mentioned time. TKH security works non-stop to improve her products. For the most recent technical information please contact your consultant or dealer.

Table of content

1 Introduction

This document describes the restricted areas functionality (2-person functionality) of iProtect. This functionality
was introduced with iProtect version 8.03.

1.1 Functional description

With the functionality described in this document it is possible to impose special conditions on the access to
specific areas and/or doors so that a single person cannot enter an area alone. This functionality can be that:

• • Certain persons (visitors) must be accompanied by authorized persons when they want to enter the
  area

• In some areas always 2 authorized persons must be present

• An alarm is raised when a visitor is unaccompanied in an area for some time.

• An alarm is raised when only 1 person is in a 2-person area.

• Different areas can have different authorization levels.

In general, there can be 2 different types of 2-person access.

1.1.1 Accompanied visitors

With the accompanied visitors functionality, a visitor can not access certain areas on his own. He/she has to
be accompanied by an authorized person (host) who lets the visitor into the area. A host can accompany one
or more visitors.
It is also possible to allow for the visitor to be in the secure area alone for a short period. This makes it possible
that the host shortly leaves the secure area (e.g. visit to the bathroom).

1.1.2 Restricted areas

For restricted areas at least 2 authorized persons (cards) are required to enter an area. This can be used for
a vault or weapons depot where always 2 persons should be present.

It is possible to give some persons (supervisors) higher authorizations as others (supervised) and in this way
differentiate between who is allowed alone in the area (for a limited amount of time).

2 iProtect settings

2.1 License

The Restricted area functionality becomes available with a special license:

• License number 46: Restricted Areas

If the value of this license is 1 the Restricted area functionality is available, otherwise it is not.

The accompanied visitor functionality is available in the standard iProtect access control functionality, no
special license is required.

2.2 Accompanied visitor

In the Area dialog we can make the appropriate settings.

Settings for the Visitor:

• Visitor ‘without host’ alarm time: applicable to accompanied visitors. This is the amount of time
  (mm:ss) that a visitor is allowed to be in the area without the host being present, before an alarm is
  generated.
  o If this value is 00:00 it is not allowed, and an alarm will be raised immediately.
  o If the field is empty, the alarm is disabled.

• Independent access: This is the option whether or not the visitor can (re-) enter the restricted area
  alone, without the host, after leaving the restricted area.

2.3 Restricted areas

First, we must indicate that a certain area has special access conditions. In the details form of the Area, the
checkbox Restricted area must be checked.

When the checkbox Restricted area is checked a number of new settings appear.
Settings for the restricted area:

• Supervisor ‘alone’ alarm time: Applicable to supervised access. This is the amount of time (mm:ss)
  a supervisor is allowed alone in the restricted area. When these time durations are exceeded an alarm
  is raised.
  o If this value is 00:00 it is not allowed, and an alarm will be raised immediately.
  o If the field is empty, the alarm is disabled.

• Supervised person ‘alone’ alarm time: Applicable to supervised access: This is the amount of time
  (mm:ss) a supervised person is allowed alone in the restricted area. When these time durations are
  exceeded an alarm is raised.
  o If this value is 00:00 it is not allowed, and an alarm will be raised immediately.
  o If the field is empty, the alarm is disabled.

• Leaving restrictions: If the checkbox Leaving Restrictions is checked the restricted area restrictions
  also apply when the accompanied person leaves the area (otherwise they only apply when he enters).

Statuses for Restricted Areas:

• Supervisor current status: This shows the status whether the supervisor is alone in the restricted
  area or not

• Supervised person current status: This shows the status whether the supervised person is alone in
  the restricted area or not

2.4 Persons

Under the person entries in the treeview a new item has been added “Restricted Area” This item is visible
when the Restricted Area license is present. In this item the rights of this person in the restricted areas are
managed. The rights regarding the restricted areas are valid for all access cards that belong to this person.

For each restricted area one can indicate if this person is a supervisor for this area (and has special rights) or
not.

For the behavior of the restricted area for this person there are different settings:

• Always two card access: This means that to enter the area, this person must be always being
  accompanied by another person with a valid card.

• Direct access when supervisor present: This means that this person can enter the area when
  somebody with supervisor rights is already present.

• Direct access when somebody present: This means that this person can enter the area on his own
  when somebody (not necessarily a supervisor) is already present.

• No restriction: This means that this person can always enter the restricted area, regardless is
  somebody is already present or not.

2.5 Visitors

There are 2 different mechanisms that decide if a visitor has access to a reader:

1. The normal access rights that the visitor can receive via the card group settings in the visitor
   dialog.

2. When the visitor is accompanied by a host he automatically receives the access rights of the host
   (on that door). Those rights are only valid in a timeframe (x time before and y time after the host
   has presented his card to a reader). This means that the visitor has only access to a door, in a
   small-time frame before and/or after the host has presented his card.

When visitors are accompanied by a host, additional authentication methods (like pin code) are not required.

2.6 Reader

At the reader, the maximum time allowed between offering the first card and the second card to the reader
(before or after) can be defined. Default is 5 seconds. This can be the cards of the visitor and host, of the 2
authorized persons, or of 2 visitors, in any order. This option is only visible when the Restricted Area license
is valid.

For visitors, the time before and after the host can be set. If these are set to zero or empty, the function “allow accompanied access” is off.