Running 36 RFID USB kits from 1 pc

I am normally a cable it first person and leave wifi/wireless for things that need it, only so much spectrum. but the amount of data from an RFID reader will be that small even at slow speeds it should be fine.

The level of security and performance is something that you should define, as that would help select the best method; or at least ensure you have thought about things.
e.g.

  • Someone could turn off you access point… maybe, but they could also turn off a switch… so I dont see that as a real issue here.
  • Someone could “signal jam” the wifi; yeah, but they could also cut your cables.
    and so on…
    My thought is given that you are not likly to secure the cables inside the walls etc, then there is already risk; this risk may not be of any real concern.

e.g. HID Signo readers are not cheap and have lots of things to help secure them. But in the current firmware, any attempt tp connect to it with bluetooth (as it supports bluetooth/phone tokens) results in the reader not responding to anything else. So you place a bluetooth connection box nearby, but hidden and the door will no longer open for anyone… most securty people then leave the door unlocked to allow staff to come and go as needed… security defeated…

key point of the little story, every install will have its pros/cons.

I liked the networked/wifi idea simply because:
a) no cables to run, just need power
b) anti-collision is already taken care of (udp/tcp level)

If you are to run a bus like RS485 then you need to consider how to manage the back and forth between reader and central server. the simplest is the central server will poll each reader and wait until either it gets a valid response or a timeout. this can then lead to some delays if too many readers are on the one bus especially if one or more readers go off line as they will spend the max amount of time at those readers polling timeslot. To address this you would consider more runs with less nodes per run… with a fast enough device at the central location running a hand full of RS485 adapters and poling each in threads would work well.

If they are worried about security, then you can add your own layers as needed.
e.g. You could give every reader/esp32 its own AES key and encrypted the data at the “reader level” then even if someone gets onto your PSK wifi AP, they still cant read/create their own packets as the server should fail is packet checks post decryption.
If someone hacking the wifi is an issue, just keep in mind "what’s stopping them plugging a cable into you RS485 bus, or an ethernet port etc.

Key Point: Security needs to be proportional to the need.

Hi Michael

I just did a search on “OSDP” in my previous post and one result was the web site I linked. Something called “LenelS2”.
The statement re “Protocol” and “Wires” is a direct screen grab straight out of that document which DOES refer to RS485 as a “Protocol” as you can see.
The statements immediately following that are extracts from the same article.
These immediately triggered a large degree of mistrust about any other statements

Of course I do not have that and as I personally am not getting into the RFID business i would probably have no need for it. I would personally believe your document, being that it is a “standard” for this operation.
I was really pointing out the need for caution if, like I just did, you just do a search and find the first article that comes up. If I were embarking on this sort of project and came across these little gems I would treat everything else said with great caution and find another source of information.
Cheers Bob

Just a thought on WIFI security, if someone comes in with a WIFI jammer, each client could send a heartbeat to the server, any dont call in, alarms ??

Yeah, I was thinking about that in a more general sense.
Send “Im Alive” and the server just tracks, if not seen for X time then “something” is wrong with that reader.
This would cover basic things as well, like someone unplugged it to charge their phone; controller locked up etc…
this works for any end-device/comms. setup.

It would also be good to check an actual rfid reading or lack of. if you expect a reading every 15mins or less then maybe a status of yellow if not seen for 20 mins and red 30.

We also need to ensure we tell the end user IF thier tap as been recorded. so connected to the controller at the reader, you will need some sort of feed back, e.g. flash green (from red) and/or a beep

100%. for 36 clients the heartbeat could be in milliseconds