An access control system splits one door's work across four parts. The credential (a card, fob, code, or phone) is what a person presents. The reader collects that identity and passes it along. The controller compares it against permissions and schedules and decides yes or no. The lock is the hardware that holds the door shut or releases it when the controller says so.
One door, four steps
The easiest way to keep the four parts straight is to follow a single entry at a single door. Each step belongs to one part, and each part answers one question.
- Present: the credential answers who is presenting.
- Read: the reader answers what is being presented.
- Decide: the controller answers whether this person is allowed through this door right now.
- Release: the lock answers whether the door is held shut.
When a door lets someone in, all four parts took a turn. When something needs changing, the change usually belongs to just one of them.
The credential and the reader only carry information
A credential is whatever a person uses to identify themselves at the door: a plastic card, a key fob, a keypad code, or an app on a phone. Whatever the form, the credential holds an identifier, a number or code tied to one person in the system. In the usual setup it does not carry a list of doors.
The reader is the device mounted beside the door that picks up that identifier. A card or fob reader senses it at close range, a keypad takes typed digits, and a phone reader listens for the app. Then the reader hands the identifier to the controller. The reader has no idea who that number belongs to or whether they should get in.
The controller decides and the lock follows
The access control controller is the decision-maker. It may be a panel in a closet, a small box near the door, or software running on a server or in the cloud. Wherever it sits, the controller holds the rules: which people may use which doors, on which days and hours, and what should happen if a door is held open too long.
When an identifier arrives from the reader, the controller compares it against those rules. If the answer is yes, it sends a release signal to the door. If not, nothing happens and the door stays shut.
The lock is the hardware on the door that physically holds it closed. On access-controlled doors that is often an electric strike (a powered latch keeper in the frame), a magnetic lock that holds the door against the frame, or an electrified lockset built into the door itself. The lock does not judge anyone. It gets a release signal or it doesn't, and it responds.
Is the card reader the part that unlocks the door?
No. The reader only collects the identifier. The release comes from the controller's decision, carried out by the lock. People often treat whichever part they can see as the whole system, and that leads to asking for the wrong fix.
A new card does not change what a person can open. The card carries an identity, so a new card simply gives the controller a new identifier to recognize. What that person can open depends on the permissions attached to them in the controller.
Replacing a reader does not change permissions either. A new reader collects the same identifiers and hands them to the same controller, which still holds the same rules. The reverse holds too: changing someone's access is a controller task, and nobody needs to touch the reader or the door to do it.
Putting the right part name on a request
Each kind of change lands on a different part, so naming the part makes a request clearer and easier to quote.
- Add or remove a person, or change their hours: permissions in the controller. Nothing at the door changes.
- Add a door: a new reader and lock at that opening, connected to a controller that knows the door exists.
- Replace lost credentials: new cards, fobs, or codes, plus cancelling the old identifiers in the controller so the lost ones stop working.
- Move from cards to phones or codes: new credentials, and possibly readers that can collect the new type.
If you are planning an access control system or want help sorting out which part a change involves, you can call Imperial Locksmith & Security in Midtown Manhattan at (917) 500-1145. Naming the part, or saying you are not sure which one it is, gives the conversation a clear starting point.
Frequently asked questions
Can one controller manage more than one door?
Yes. An access control controller can often handle more than one door, each with its own reader and lock, and some systems link several controllers under one set of software. How many doors a single controller supports depends on the hardware. The role stays the same: the controller holds the permissions and schedules, and the readers and locks at its doors report to it.
Does a smart lock replace the need for a controller?
A smart lock usually combines the reader, the decision, and the lock in one unit on the door, with permissions managed from an app. The controller role still exists. It just lives inside the lock and its software. For a single door that can be enough. Buildings with many doors and users often keep a separate access control controller so all the rules sit in one place.
Is an intercom or video entry panel part of the same chain?
An intercom or video entry panel follows a similar chain, with a person making the decision. A visitor presents themselves by voice or on camera instead of with a credential, and someone inside decides whether to let them in. Pressing the release button sends a signal to the same door lock. Some panels also include a reader, so residents use credentials while visitors use the call button.
Can a keyed override exist alongside an electronic lock?
Yes. Many electronic locks and electrified locksets include a mechanical key cylinder, so a key can open the door without the controller making any decision. A keyed override sits outside the electronic chain, and the controller usually has no record of who used the key. That makes keeping track of who holds those keys as important as tracking who holds cards and codes.