Does the existing access control system have to be replaced?
No. IDMATIC NET can be rolled out incrementally on top of existing infrastructure. Whether individual elements need replacing is determined by the survey and recorded in the design decision.
What happens if the link to the core is lost?
The control point keeps deciding locally: the right, its constraints and its validity are checked. Expired rights are not accepted. Events are buffered and delivered without duplication once the link is restored.
How quickly does a revocation take effect?
With a link or an Edge Hub a revocation propagates promptly. A fully isolated control point applies the last received revocation list, so instant revocation without an exchange channel is not guaranteed.
Is an offline right open-ended?
No. A right verified offline is bounded by the validity set at issuance. Once it expires, the control point denies execution even without a link to the core.
Is a biometric match enough to grant entry?
No. A biometric match confirms identity but is not in itself grounds for access. The decision is taken on the valid right, accounting for zone, action and validity.
How does a secure QR differ from an ordinary link?
A secure QR is a signed container of a right: it carries verifiable constraints and a validity period and is checked locally at the control point. Altering the content invalidates the container.
Which devices is the platform compatible with?
Compatibility is confirmed for a specific device or external system model and version during the survey. Universal compatibility with any device is not declared.
Can the AI assistant open a door or grant a right?
No. The assistant explains decisions, analyses processes and produces recommendations within permitted data. It does not open doors, lift restrictions or grant critical rights.
How does the right to an issue point differ from the right to an asset?
They are separate rights. The right to open an issue point permits access to the storage location; the right to receive a specific asset permits receipt of a specific unit and is recorded as a transfer of custody.
Which deployment options are supported?
On-premise, cloud and hybrid deployment, as well as mobile controllers with offline operation.
How is the business case assessed?
On the customer's own data: volume of requests and approvals, effort, number of sites and control points, share of manual operations. We do not publish universal savings percentages.
What should a pilot include?
One limited but complete scenario: successful execution, denial, a manual decision with a reason, automatic revocation, a WAN outage, restoration of the link, event synchronisation and review against the audit journal.
Related pages
- Platform and the digital physical rightThe digital physical right model in IDMATIC NET: subjects, objects of rights, constraints, the Core / Facade / Edge architecture and incremental rollout over existing infrastructure.
- Security and offline-firstThe IDMATIC NET offline-first approach: local validity checks, revocation lists, anti-passback, WAN recovery without duplicated events and evidential audit.
- MaterialsIDMATIC NET White Paper, platform presentation and overview video. Materials are being prepared for publication and can be requested by email.