Access control for elevators and buildings
AXON covers the elevator cabin with the CCU-32 cabin master and the rest of the building with the ICM-GE master and per-floor nodes. Both decide locally from an on-board card database; the cloud only syncs, logs and updates. Below are the six situations we are asked to solve most often, and how a project runs from survey to remote support.

What we solve
Each card links to the topic article that explains the approach in engineering detail. Every solution uses the same boards, the same encrypted buses and the same dashboard, so a building can start with one and add the others later.
Elevator access control
The AXON CCU-32 cabin master reads the in-cabin AXON Reader over encrypted RS-485, decides locally which floors a card may reach and pulses one relay per floor button for 3 seconds. The elevator's own call-button panel stays as it is. One unit drives 32 floors and units chain for taller buildings — no upper limit on floors.
How elevator access worksMulti-entrance buildings
The AXON ICM-GE master holds the card database on board and talks to one AXON Node per landing, entrance, garage or ramp over two encrypted CAN buses — up to 120 access points per port, 240 per master, with more masters added for larger sites. Readers sit behind the node on RS-485. One master, one twisted pair per segment, one policy for the whole building.
Design guideAnti-cloning RFID
Cards are MIFARE DESFire EV3. The reader derives a per-card key from the UID and runs AES-128 mutual authentication before it reports anything; a copied UID or a MIFARE Classic clone fails at the reader. There is no UID-only trust anywhere in the system, and the credential never travels in the clear.
Anti-cloning explainedSmart building & monitoring
Every grant and deny is logged on the master and published over MQTT/TLS when a link is up. The AXON web dashboard shows events, users and device state across sites; the cloud syncs the card database and delivers firmware over the air, but it is never asked for an access decision.
Smart building guideRetrofit of Wiegand readers
Keep working Wiegand 26/34 readers and replace only the panel and the bus. AXON AMS sits in the back box behind each reader and forwards its credential as an addressed message on the AXON RS-485 bus; a pass-through variant keeps the old panel live during a phased cutover. Units are in stock.
AXON AMS converterRemote management & payments
Managers add or block cards, set floor permissions and validity dates from the web dashboard or mobile app; changes reach the masters at the next sync. Resident self-activation and online payment flows are scoped per building. Tell us your case and we will size it with you.
Talk to usHow a project runs with us
Four steps, the same for a single cabin or a whole building. We do the engineering; partner electricians do the installation; you get a system that keeps working when the internet does not.
Survey and sizing
You send us the floor count, number of cabins, entrances, garages and gates, and whether cabling reaches the cabin. We choose the subsystems, count masters, nodes and readers, plan the RS-485 and CAN segments with termination, and pick Ethernet or cellular for the uplink.
Configuration
Cards are DESFire EV3, encoded for the AXON application. Each card gets a floor mask, a validity date and a blocked flag on the master; each node gets its DIP address, device type and relay assignment. Everything is prepared before anyone climbs a ladder.
Installation by partner electricians
The CCU-32 goes in the cabin or machine room, one node per landing or door, readers on RS-485 behind them, and AMS converters behind any Wiegand readers you keep. Buses run on shielded twisted pair with 120 ohm termination at the ends only. We provide the wiring documentation and stay reachable during the work.
Commissioning, training, remote support
Masters authenticate their readers and nodes, we test taps at every point, then hand over the dashboard and mobile app with training for the building manager. After that, logs, database sync and firmware updates run over the uplink, and our engineers support you remotely.
What we supply
AXON is a hardware-and-software system, not a panel picked from a catalogue. We design and build every board in Kosovo and hold the shipping modules in local stock, so a standard configuration is typically ready in one to two weeks rather than shipped from abroad.
Around the hardware we supply the AXON web dashboard and mobile app for users, permissions and events, the technical documentation integrators need for wiring and commissioning, and direct engineering support for the partner electricians who install. Prices are given per project, on request.
- Hardware from local stock: CCU-32 cabin master, ICM-GE master, AXON Node, AXON Reader, AMS converter and relay expansions
- AXON web dashboard and mobile app for users, floor permissions, validity dates, event logs and device status
- Technical documentation for every board: wiring, termination, DIP addressing, failure modes, troubleshooting
- Integrator support during survey, installation and commissioning; remote support, database sync and OTA after handover

AXON versus typical cloud-only or Wiegand panels
The differences that matter on site: where the decision is made, what happens when the link drops, what travels on the wire and how much cable you pull.
| Aspect | AXON | Cloud-only / Wiegand panels |
|---|---|---|
| Where the access decision is made | On the master, offline, from a local card database; ICM-GE lookup target under 2 ms | Round trip to a cloud API on every tap |
| Behaviour when the uplink drops | Keeps deciding from the last synchronised database, queues events, syncs when the link returns | Access stops or degrades to a cached rule set |
| Credential on the wire | DESFire EV3 mutual authentication, then AES-128 encrypt-then-MAC with anti-replay counters on RS-485 and CAN | Cleartext Wiegand D0/D1 over long runs, UID trusted as read |
| Wiring to the access points | One twisted pair per segment: RS-485 in the cabin, CAN riser with up to 120 access points per port | An IP drop and switch port per door, or one dedicated Wiegand cable per reader |
Common questions before a project
Does the system keep working without internet?
Can we keep the Wiegand readers already on the wall?
Who installs the system?
Which regions do you serve, and how fast?
Ready to size a system for your building?
Tell us the floor count, cabins, entrances and gates, and whether cabling reaches the cabin. We size the masters, nodes, readers and uplink, and supply AXON hardware from local stock in Kosovo. Prices on request.