Grounds
A request, order, contract, work permit, booking or visit request. No right is created without grounds.
What a digital physical right is
The platform governs neither a single card nor a single door, but the right itself as a managed object.
A digital physical right is a verifiable record stating who is allowed to perform a physical action, on what grounds, over which object, in which zone, for which action and for how long: entry, vehicle access, asset issue, equipment use, key custody.
The right originates from confirmed grounds, passes approval, is constrained by object, zone, action and time, is executed at a control point and terminates automatically on expiry or revocation. Every state of the right is recorded and remains available for audit.
Constraints
Object, zone, door, action, validity period and conditions — stated explicitly and verified at execution.
Termination
Automatic expiry or revocation by an authorised person. Every revocation is recorded with its reason.
The right lifecycle
One governed process instead of disconnected operations across several systems.
Grounds
A confirmed document or request from which the right originates.
Approval
An approval route with accountable roles and recorded decisions.
Right
A right with explicit constraints on object, zone, action and time.
Execution
Verification and decision at a control point, fixed or mobile.
Presence / custody
Recording presence in a zone, custody of an asset, equipment or key.
Change / revocation
Extension, narrowing, suspension or revocation with a stated reason.
Completion
Automatic expiry and closure of the related obligations.
Audit
Evidential record: who, what, when, on what grounds and by which decision.
What the platform brings together
Permanent access
Employee rights by unit, role, site and schedule.
Visitors
Request, approval, on-site registration, escorting and visit closure.
Contractors
Rights bound to a contract, work permit, work period and clearances.
Vehicles
Vehicle passes, drivers, passengers, entry zones and routes.
Working time
Presence data for HR and production processes.
Keys
Issue, return and accountability for keys as a distinct object of a right.
Physical assets
The right to receive a specific asset and confirmation of the handover.
Equipment
The right to operate equipment, subject to clearances and validity.
Mobile control points
Verifying rights where there is no fixed infrastructure.
Architecture and operating modes
IDMATIC NET Core
The core: right model, grounds, approvals, policies, revocation and audit.
IDMATIC NET Facade
The interaction layer: user interfaces, APIs and event exchange with external systems.
IDMATIC NET Edge
On-site execution: local verification of the right, operation without a permanent link, synchronisation once WAN is restored.
On-premise, cloud and hybrid deployment are supported, together with mobile controllers and offline-first operation. The platform is rolled out incrementally on top of existing infrastructure: a full replacement of the current access control system is not a prerequisite and is decided per project.
Operating without a permanent link
- Validity of a right is checked locally at the control point; expired rights are not accepted.
- A fully isolated control point uses the last received revocation list — until it is updated, a revocation cannot be applied instantly.
- Consistent global anti-passback requires an Edge Hub or an exchange channel between control points.
- Once WAN is restored, offline events are delivered without duplicates, policies are updated, and both the local decision and the synchronisation time are preserved in the audit trail.
The AI assistant within the control loop
The AI assistant explains decisions that were made, analyses approval and execution processes, helps locate bottlenecks and proposes policy changes. It works only with data the user is permitted to see.
The platform in a few minutes
The overview video follows a right from its basis through to audit, at both fixed and mobile control points.
IDMATIC NET platform overview
The full presentation and the White Paper are available in the Materials section.
Next step
A demonstration or a pilot scenario
We will walk through the platform logic on your scenario: successful entry, denial, manual decision, automatic revocation, WAN outage, recovery and audit.
Related pages
- Platform and the digital physical rightThe digital physical right model in IDMATIC NET: subjects, objects of rights, constraints, the Core / Facade / Edge architecture and incremental rollout over existing infrastructure.
- Right lifecycleThe full lifecycle of a physical right in IDMATIC NET: grounds, approval, right, execution, presence, change, revocation, completion and evidential audit.
- Rollout, pilot and business caseHow IDMATIC NET is rolled out, what a pilot must cover — denials, manual decisions, WAN outage and audit — and how the business case is calculated on the customer's own data.