Overview

The QR Key System is a modern access control solution that replaces traditional physical keys with dynamically generated QR codes. This system provides secure, auditable facility access while eliminating the costs and security risks associated with physical key management.

The platform enables administrators to grant, revoke, and track access permissions in real-time, with comprehensive audit logging for security compliance.

Problem Statement

Traditional key management systems face several critical challenges:

  • High costs for rekeying when keys are lost or stolen
  • Difficulty tracking who has access at any given time
  • No audit trail of facility access
  • Time-consuming process to grant or revoke access
  • Security vulnerabilities from unauthorized key duplication

The organization needed a cost-effective, secure, and easily manageable access control system.

Technical Approach

Built on the .NET/Blazor stack with Azure cloud infrastructure:

Core System Architecture

  • Blazor WebAssembly Frontend: Progressive web application for both administrators and users
  • ASP.NET Core Web API: RESTful backend services with authentication and authorization
  • SQL Server Database: Secure storage of user credentials, access permissions, and audit logs
  • Azure App Service: Scalable cloud hosting with automatic SSL/TLS

QR Code System

  • Dynamic Generation: Time-limited QR codes with cryptographic signatures
  • Validation Engine: Real-time verification of code authenticity and access permissions
  • Expiration Logic: Configurable time windows for access codes

Security Features

  • JWT Authentication: Secure token-based user authentication
  • Role-Based Access Control: Granular permissions for different user types
  • Audit Logging: Comprehensive tracking of all access events and administrative actions
  • Encryption: All sensitive data encrypted at rest and in transit

Key Features

Mobile-First Access

Users receive QR codes on their mobile devices, eliminating the need for physical keys or cards

Real-Time Access Control

Administrators can instantly grant or revoke access permissions from anywhere

Comprehensive Audit Trail

Complete logging of all access events with timestamps, user identity, and location data

Temporary Access Codes

Generate time-limited access for contractors, visitors, or one-time entries

Multi-Location Support

Manage access across multiple facilities from a single administrative interface

Impact & Results

  • Eliminated $15,000+ annual costs for physical key replacement and rekeying
  • Reduced access provisioning time from days to minutes
  • Achieved 100% audit compliance with comprehensive access logging
  • Zero security incidents since deployment
  • 95% user satisfaction rating for ease of use