*iProtect™ Restricted Areas
This manual represents the knowledge at the above-mentioned time. TKH security works non-stop to improve her products. For the most recent technical information please contact your consultant or dealer.
1 Introduction
This document describes the restricted areas functionality (2-person functionality) of iProtect. This functionality
was introduced with iProtect version 8.03.
1.1 Functional description
With the functionality described in this document it is possible to impose special conditions on the access to
specific areas and/or doors so that a single person cannot enter an area alone. This functionality can be that:
• Certain persons (visitors) must be accompanied by authorized persons when they want to enter the
areaIn some areas always 2 authorized persons must be present
An alarm is raised when a visitor is unaccompanied in an area for some time.
An alarm is raised when only 1 person is in a 2-person area.
Different areas can have different authorization levels.
In general, there can be 2 different types of 2-person access.
1.1.1 Accompanied visitors
With the accompanied visitors functionality, a visitor can not access certain areas on his own. He/she has to
be accompanied by an authorized person (host) who lets the visitor into the area. A host can accompany one
or more visitors.
It is also possible to allow for the visitor to be in the secure area alone for a short period. This makes it possible
that the host shortly leaves the secure area (e.g. visit to the bathroom).
1.1.2 Restricted areas
For restricted areas at least 2 authorized persons (cards) are required to enter an area. This can be used for
a vault or weapons depot where always 2 persons should be present.
It is possible to give some persons (supervisors) higher authorizations as others (supervised) and in this way
differentiate between who is allowed alone in the area (for a limited amount of time).
2 iProtect settings
2.1 License
The Restricted area functionality becomes available with a special license:
License number 46: Restricted Areas
If the value of this license is 1 the Restricted area functionality is available, otherwise it is not.
The accompanied visitor functionality is available in the standard iProtect access control functionality, no
special license is required.
2.2 Accompanied visitor
In the Area dialog we can make the appropriate settings.
Settings for the Visitor:
Visitor ‘without host’ alarm time: applicable to accompanied visitors. This is the amount of time
(mm:ss) that a visitor is allowed to be in the area without the host being present, before an alarm is
generated.
o If this value is 00:00 it is not allowed, and an alarm will be raised immediately.
o If the field is empty, the alarm is disabled.Independent access: This is the option whether or not the visitor can (re-) enter the restricted area
alone, without the host, after leaving the restricted area.
2.3 Restricted areas
First, we must indicate that a certain area has special access conditions. In the details form of the Area, the
checkbox Restricted area must be checked.
When the checkbox Restricted area is checked a number of new settings appear.
Settings for the restricted area:
Supervisor ‘alone’ alarm time: Applicable to supervised access. This is the amount of time (mm:ss)
a supervisor is allowed alone in the restricted area. When these time durations are exceeded an alarm
is raised.
o If this value is 00:00 it is not allowed, and an alarm will be raised immediately.
o If the field is empty, the alarm is disabled.Supervised person ‘alone’ alarm time: Applicable to supervised access: This is the amount of time
(mm:ss) a supervised person is allowed alone in the restricted area. When these time durations are
exceeded an alarm is raised.
o If this value is 00:00 it is not allowed, and an alarm will be raised immediately.
o If the field is empty, the alarm is disabled.Leaving restrictions: If the checkbox Leaving Restrictions is checked the restricted area restrictions
also apply when the accompanied person leaves the area (otherwise they only apply when he enters).
Statuses for Restricted Areas:
Supervisor current status: This shows the status whether the supervisor is alone in the restricted
area or notSupervised person current status: This shows the status whether the supervised person is alone in
the restricted area or not
2.4 Persons
Under the person entries in the treeview a new item has been added “Restricted Area” This item is visible
when the Restricted Area license is present. In this item the rights of this person in the restricted areas are
managed. The rights regarding the restricted areas are valid for all access cards that belong to this person.
For each restricted area one can indicate if this person is a supervisor for this area (and has special rights) or
not.
For the behavior of the restricted area for this person there are different settings:
Always two card access: This means that to enter the area, this person must be always being
accompanied by another person with a valid card.Direct access when supervisor present: This means that this person can enter the area when
somebody with supervisor rights is already present.Direct access when somebody present: This means that this person can enter the area on his own
when somebody (not necessarily a supervisor) is already present.No restriction: This means that this person can always enter the restricted area, regardless is
somebody is already present or not.
2.5 Visitors
There are 2 different mechanisms that decide if a visitor has access to a reader:
The normal access rights that the visitor can receive via the card group settings in the visitor
dialog.When the visitor is accompanied by a host he automatically receives the access rights of the host
(on that door). Those rights are only valid in a timeframe (x time before and y time after the host
has presented his card to a reader). This means that the visitor has only access to a door, in a
small-time frame before and/or after the host has presented his card.
When visitors are accompanied by a host, additional authentication methods (like pin code) are not required.
If queue cards is not selected at the reader a vistor can only be guided by his own host.
If the queue card is selected at the reader the visitor can be guided by any area supervisor (who is allowed to enter the restricted area.
2.6 Reader
At the reader, the maximum time allowed between offering the first card and the second card to the reader
(before or after) can be defined. Default is 5 seconds. This can be the cards of the visitor and host, of the 2
authorized persons, or of 2 visitors, in any order. This option is only visible when the Restricted Area license
is valid.
For visitors, the time before and after the host can be set. If these are set to zero or empty, the function “allow accompanied access” is off.