Solutions

Access control for elevators and buildings

Two subsystems, one platform, sized for your riser and entrances.

AXON covers the elevator cabin with the CCU-32 cabin master and the rest of the building with the ICM-GE master and per-floor nodes. Both decide locally from an on-board card database; the cloud only syncs, logs and updates. Below are the six situations we are asked to solve most often, and how a project runs from survey to remote support.

Offline access decision
DESFire EV3 mutual auth
Encrypted RS-485 + CAN
Web dashboard + mobile app
Access control for **elevators and buildings**
Six solutions

What we solve

Each card links to the topic article that explains the approach in engineering detail. Every solution uses the same boards, the same encrypted buses and the same dashboard, so a building can start with one and add the others later.

Elevator access control

The AXON CCU-32 cabin master reads the in-cabin AXON Reader over encrypted RS-485, decides locally which floors a card may reach and pulses one relay per floor button for 3 seconds. The elevator's own call-button panel stays as it is. One unit drives 32 floors and units chain for taller buildings — no upper limit on floors.

How elevator access works

Multi-entrance buildings

The AXON ICM-GE master holds the card database on board and talks to one AXON Node per landing, entrance, garage or ramp over two encrypted CAN buses — up to 120 access points per port, 240 per master, with more masters added for larger sites. Readers sit behind the node on RS-485. One master, one twisted pair per segment, one policy for the whole building.

Design guide

Anti-cloning RFID

Cards are MIFARE DESFire EV3. The reader derives a per-card key from the UID and runs AES-128 mutual authentication before it reports anything; a copied UID or a MIFARE Classic clone fails at the reader. There is no UID-only trust anywhere in the system, and the credential never travels in the clear.

Anti-cloning explained

Smart building & monitoring

Every grant and deny is logged on the master and published over MQTT/TLS when a link is up. The AXON web dashboard shows events, users and device state across sites; the cloud syncs the card database and delivers firmware over the air, but it is never asked for an access decision.

Smart building guide

Retrofit of Wiegand readers

Keep working Wiegand 26/34 readers and replace only the panel and the bus. AXON AMS sits in the back box behind each reader and forwards its credential as an addressed message on the AXON RS-485 bus; a pass-through variant keeps the old panel live during a phased cutover. Units are in stock.

AXON AMS converter

Remote management & payments

Managers add or block cards, set floor permissions and validity dates from the web dashboard or mobile app; changes reach the masters at the next sync. Resident self-activation and online payment flows are scoped per building. Tell us your case and we will size it with you.

Talk to us
Process

How a project runs with us

Four steps, the same for a single cabin or a whole building. We do the engineering; partner electricians do the installation; you get a system that keeps working when the internet does not.

Survey and sizing

You send us the floor count, number of cabins, entrances, garages and gates, and whether cabling reaches the cabin. We choose the subsystems, count masters, nodes and readers, plan the RS-485 and CAN segments with termination, and pick Ethernet or cellular for the uplink.

Configuration

Cards are DESFire EV3, encoded for the AXON application. Each card gets a floor mask, a validity date and a blocked flag on the master; each node gets its DIP address, device type and relay assignment. Everything is prepared before anyone climbs a ladder.

Installation by partner electricians

The CCU-32 goes in the cabin or machine room, one node per landing or door, readers on RS-485 behind them, and AMS converters behind any Wiegand readers you keep. Buses run on shielded twisted pair with 120 ohm termination at the ends only. We provide the wiring documentation and stay reachable during the work.

Commissioning, training, remote support

Masters authenticate their readers and nodes, we test taps at every point, then hand over the dashboard and mobile app with training for the building manager. After that, logs, database sync and firmware updates run over the uplink, and our engineers support you remotely.

Typical lead time for stocked configurations is one to two weeks. Boards in final test are supplied as pilot units on request. Availability of any specific board is confirmed at the quote.
Scope of supply

What we supply

AXON is a hardware-and-software system, not a panel picked from a catalogue. We design and build every board in Kosovo and hold the shipping modules in local stock, so a standard configuration is typically ready in one to two weeks rather than shipped from abroad.

Around the hardware we supply the AXON web dashboard and mobile app for users, permissions and events, the technical documentation integrators need for wiring and commissioning, and direct engineering support for the partner electricians who install. Prices are given per project, on request.

  • Hardware from local stock: CCU-32 cabin master, ICM-GE master, AXON Node, AXON Reader, AMS converter and relay expansions
  • AXON web dashboard and mobile app for users, floor permissions, validity dates, event logs and device status
  • Technical documentation for every board: wiring, termination, DIP addressing, failure modes, troubleshooting
  • Integrator support during survey, installation and commissioning; remote support, database sync and OTA after handover
Browse the product line
AXON ICM-GE — CAN-bus access master with on-board card database
Comparison

AXON versus typical cloud-only or Wiegand panels

The differences that matter on site: where the decision is made, what happens when the link drops, what travels on the wire and how much cable you pull.

AspectAXONCloud-only / Wiegand panels
Where the access decision is madeOn the master, offline, from a local card database; ICM-GE lookup target under 2 msRound trip to a cloud API on every tap
Behaviour when the uplink dropsKeeps deciding from the last synchronised database, queues events, syncs when the link returnsAccess stops or degrades to a cached rule set
Credential on the wireDESFire EV3 mutual authentication, then AES-128 encrypt-then-MAC with anti-replay counters on RS-485 and CANCleartext Wiegand D0/D1 over long runs, UID trusted as read
Wiring to the access pointsOne twisted pair per segment: RS-485 in the cabin, CAN riser with up to 120 access points per portAn IP drop and switch port per door, or one dedicated Wiegand cable per reader
FAQ

Common questions before a project

Does the system keep working without internet?
Yes. The access decision is made on the CCU-32 or ICM-GE master from the card database stored on the board. If Ethernet and cellular are both down, doors and floors keep behaving as before and events are queued. The cloud only synchronises the database, collects logs and delivers firmware; it is never in the access path.
Can we keep the Wiegand readers already on the wall?
Yes. AXON AMS sits behind each existing Wiegand 26/34 reader and forwards its credential on the AXON RS-485 bus, so only the panel and the wiring change. It does not make MIFARE Classic cards harder to clone; for that, move the card population to DESFire EV3 and fit the AXON Reader on the highest-risk doors.
Who installs the system?
Partner electricians and elevator companies do the physical installation. We size the system, prepare the configuration, supply the wiring documentation, stay reachable during the work and commission the site with the installer. After handover, support, database sync and firmware updates run remotely over the uplink.
Which regions do you serve, and how fast?
We are based in Prishtinë and serve Kosovo, Albania and North Macedonia directly, and B2B customers across Europe. Hardware ships from local stock in Kosovo; stocked configurations are typically ready in one to two weeks. Reach us Monday to Friday, 09:00 to 17:00, at +383 48 296 722 or through the contact form.
Size it for your building

Ready to size a system for your building?

Tell us the floor count, cabins, entrances and gates, and whether cabling reaches the cabin. We size the masters, nodes, readers and uplink, and supply AXON hardware from local stock in Kosovo. Prices on request.