What Is Access Control? Components, Types and How It Works

By P-Soft Expert Team October 10, 2026 11 min read

Access control is a system of credentials, card readers, controllers, locks or barriers and software that decides at each gate who may pass, when and through which door, and logs that pass the moment it happens. The most common type in buildings, complexes and factories is card access control, which works with smart cards or tags.

Building managers and security leads looking up “what is access control” for the first time run into a long list of jargon: controller, reader, maglock, barrier, biometrics and dozens more. This guide puts all the pieces together so the picture is complete: what each component does, how a single pass is checked in a fraction of a second, how identification methods differ, and where access control software fits. The aim is to give you a shared vocabulary before you talk to a supplier or installer.

What is access control, and how is it different from an ordinary lock?

An ordinary lock answers a single question: is this the right key? Anyone with the key can get in at any hour, and their visit leaves no trace. If a key is lost, the only safe fix is to change the lock. An access control system changes that equation. Each person’s credential is set up individually, it can be limited to certain hours and doors, and if it is lost you disable just that one, without affecting anyone else.

The other big difference is memory. Access control records every attempt to pass, successful or not. That precise record is what later helps you investigate an incident, look into a complaint or answer an inspector. That’s why access control is best thought of as a system, not as a more expensive lock.

The five components of an access control system

Almost every access control system, whatever the brand or technology, is built from five parts. Knowing what each one does helps you know where to look when something goes wrong.

1. Credential: card, tag, PIN or biometric trait

The credential is what a person carries or knows to identify themselves. Smart cards, key fobs, windscreen sticker tags, PIN codes, fingerprints and faces are common examples. The choice of credential has the biggest effect on cost, speed of passage and level of security. For a closer look at card types, see our RFID card guide.

2. Card reader

The reader is the device beside the door or on the barrier post that reads the credential. With cards, holding the card a short distance from the reader is enough; no physical contact is needed. Some readers simply pass the card number on and leave the decision to the controller.

3. Controller (gate)

The controller is each gate’s local brain. It compares the number it has read with the list of authorised cards, sends the command to unlock and stores the event until it reaches the software. The quality of the controller determines whether the door still works correctly if the link to the central computer drops.

4. Lock, turnstile or barrier

This is where the decision turns into action: an electric strike or magnetic lock on a door, a tripod turnstile or glass speed gate in a lobby, a barrier at a car park entrance. The right type depends on traffic flow, safety and fire regulations, and is usually chosen with the installer’s advice.

5. Management software

The software is where the manager defines people, cards, doors and rules and watches passes live. Without software, controllers are just a collection of separate locks; with it, all the doors become one system.

How does an access control system decide a single pass?

Suppose an employee reaches the entrance in the morning and holds their card up to the reader. Behind that simple gesture, this chain runs:

Read: the reader receives the card’s unique number.
Send to the controller: the number goes to that gate’s controller.
Check against rules: the controller confirms the card is active, belongs to a group allowed at this door, and that the current time falls within that group’s permitted window.
Decide: if every condition is met, the unlock command is sent; otherwise the door stays shut.
Log: the outcome, allowed or denied, is stored with the time and gate name and sent to the software.
Display: the operator or guard sees the event on the live monitoring screen.

The key is step three: the decision should be made at the gate itself, not by waiting on the computer every time. A system that makes its decisions depend on the network will build a queue at the door with every power or network outage.

Types of access control: card, PIN, biometric and license plate recognition

Each identification method suits particular situations. The table below is a general, brand-neutral comparison:

Method	Identifies by	Best for	Watch out for
Smart card and tag	The card or tag’s unique number	Buildings, complexes, car parks, factories with many users	Cards can be lent; card type affects security
PIN code	A number the person remembers	Low-traffic doors and small spaces	Codes get shared easily; weak individual tracking
Biometric (fingerprint, face)	A physical trait	Sensitive rooms with a limited number of users	Privacy considerations; slower at rush hour
License plate recognition	A camera image of the number plate	Public car parks with unknown vehicles	Depends on lighting, plate cleanliness and camera angle

If you’re torn between tags and plate recognition for a vehicle entrance, RFID vs license plate recognition compares the two in detail.

Where does card access control work best?

Card and tag access control is the best choice when you have a fairly stable, known population: an organisation’s staff, a complex’s residents, an office tower’s tenants or a factory’s fleet drivers. Each person is enrolled once and from then on passes in a fraction of a second. Issuing a new card, deactivating an old one and moving people between groups are quick, routine tasks.

On the other hand, if most of your visitors are unknown one-off arrivals, such as the public car park of a shopping centre, cards alone aren’t enough and are usually combined with ticketing or other methods. For a closer look at buying criteria, read the card access control buying guide.

What does access control software do?

The hardware carries out the decision, but the rules are written in the software. Good access control software should at least make these tasks easy for the manager:

Defining people and linking one or more cards to each;
Grouping people so you write a rule once for the group instead of setting up each card;
Setting permitted doors, direction (entry, exit or both) and permitted hours for each group;
Quickly deactivating a lost card without erasing its history;
Showing passes live for the guards and searching the history for the manager;
Separating manager and operator roles so everyone only reaches what they need.

When you read installers’ technical proposals, come back to this list and ask how each of these tasks is done in the proposed software. Precise answers to these few questions reveal the difference between a dependable system and a set of locks wired together.

Common misconceptions about access control systems

“Access control is the same as time and attendance.” They have different goals. Access control is about security and permission to pass; time and attendance is about calculating working hours, leave and pay. Data from one may help the other, but not every access control system includes attendance features.

“Every access control system includes cameras.” CCTV is a separate system. Many card systems don’t record images at all and only store the card ID, the time and the gate.

“More doors only means more expensive hardware.” The number of gates usually affects the software edition or plan too. Before estimating cost, list your doors and the direction of travel at each one.

“If the network goes down, the doors have to be propped open.” In a well-designed system, the gates hold the rules and make the right decision even without the computer.

Where does Nooradio fit in?

Nooradio, P-Soft’s access control software, belongs to the card access control category: the only credential it accepts is a smart card or tag read by the reader at each gate, and it checks and logs both pedestrian and vehicle passes that way. The software is installed on one computer on site, and even without a connection to that computer, each gate accepts or refuses passes using the rules it holds. To be clear: Nooradio doesn’t read licence plates, doesn’t work with cameras, face recognition or fingerprints, and isn’t time and attendance or payroll software. Its interface is in Persian.

The plan mostly depends on the number of gates: Start with up to 2 gates for a small building or office, Pro with up to 8 gates for complexes, factories and car parks (plus grouping, access hours and report export), and Elite with unlimited gates for large sites. Managing the system from a browser and from other computers is on the “coming soon” list. For a full overview of concepts and uses, see our access control guide.

Frequently Asked Questions

What is access control?

A system of credentials, card readers, controllers, locks or barriers and software that decides each person’s permission to pass based on rules and logs every pass.

What is the advantage of card access control over a PIN code?

Each card belongs to one person, so passes can be traced and a lost card can be deactivated on its own; a shared PIN offers neither.

What does the controller do in an access control system?

It checks the card number against the rules, triggers the door to open and logs the event. Because it decides locally, the door keeps working when the network is down.

Is an access control system the same as time and attendance?

No. Access control is for security and permission to pass; time and attendance calculates working hours. Nooradio does access control only.

What credentials does Nooradio work with?

Smart cards and tags only. Plate reading, cameras, face recognition and fingerprints are not part of it.

To see how card access control would work in your building or site, request a Nooradio demo on the access control software page and P-Soft’s experts will get in touch to review your requirements.