Building a High-Concurrency Edge-First Accreditation System

The Challenge of High-Concurrency Physical Access

Traditional centralized architectures struggle with the demands of physical access control at large-scale events, where thousands of users may attempt to cross sensor thresholds simultaneously. Relying on standard REST API calls to a cloud database can lead to catastrophic network saturation and unacceptable latency, preventing gates from opening promptly. This necessitates a resilient, real-time telemetry pipeline that prioritizes local validation.

Edge-First Validation Architecture

To achieve sub-20 millisecond gate opening times, the system employs an edge-first validation architecture. All Role-Based Access Control (RBAC) logic resides on local edge nodes within the venue's intranet. This setup ensures that access decisions, like validating an RFID or mobile pass against clearance levels, occur without any external WAN calls.

const Redis = require('ioredis');
const localCache = new Redis({ host: '10.0.0.5', port: 6379 });

async function processPhysicalAccess(credentialPayload, gateId) {
  const { hexUid, timestamp } = credentialPayload;
  const delegate = await localCache.hgetall(`credential:${hexUid}`);
  const gateRules = await localCache.hgetall(`gate:${gateId}`);

  if (delegate && Number(delegate.clearanceLevel) >= Number(gateRules.requiredClearance)) {
    hardwareController.openGate(gateId);
    await localCache.rpush('telemetry_sync_buffer', JSON.stringify({ uid: hexUid, zone: gateRules.zoneId, action: 'ENTRY', ts: timestamp || Date.now() }));
  }
}

Decoupling Hardware Validation from Cloud Analytics

A crucial design decision is the complete isolation of the hardware validation loop from the cloud sync worker. After local validation and gate opening, spatial event data is buffered locally (e.g., using Redis `rpush`). A separate, asynchronous worker then continuously drains this `telemetry_sync_buffer` and pushes batched payloads to the centralized cloud via WebSockets. This architectural pattern ensures that even if the venue's external Wi-Fi drops, physical gates continue to function without interruption. Once connectivity is restored, the buffered telemetry seamlessly synchronizes, updating real-time dashboards.