Integrate Biometric Access Control Ecosystem

Project Details

Development of an end-to-end biometric access control ecosystem integrating ZKTeco hardware (InBio Pro / SpeedFace), Chainway P80 Android tablet (Ionic React), Web Application (React) and Backend Services (Node.js / MySQL) with ADMS Push protocol. The system enables centralized enrollment and synchronization of biometric templates (Fingerprint / Face), user management, and device command handling.

Timeline and scope were defined considering the unavailability of physical devices at the start of the project.

01 ORIGINAL SCOPE OF WORK

As per initial agreement — contracted deliverables

The following scope (A–E) represents the contractually agreed work. All items have been delivered.

A. Backend (Node.js / MySQL)

• Design and extend database tables for biometric template storage

• Develop APIs for biometric enrollment and retrieval

• Implement biometric data normalization and storage logic

• Build device synchronization and command queue system

• Implement ZKTeco ADMS Push protocol and heartbeat handling

• Generate and push biometric update commands to devices

• Implement retry, error handling, and basic logging

B. Mobile / Tablet (Chainway P80 — Android / Ionic React)

• Integrate Chainway P80 fingerprint SDK

• Capture fingerprint templates in compatible format

• Capture facial images using tablet camera

• Validate facial image quality and requirements locally

• Transmit biometric data securely to backend APIs

C. Web Application (React + USB Biometric Devices)

• Integrate Web app with USB fingerprint readers via local agent or SDK

• Capture fingerprint data from supported USB devices

• Normalize fingerprint data to BASE64 format

• Implement Web-based biometric enrollment user interface

• Send biometric data securely to backend

D. ZKTeco Devices (SpeedFace / InBio)

• Register and manage biometric devices

• Sync users and biometric templates to devices via ADMS Push

• Handle device heartbeat, offline states, and re-sync logic

E. Testing, Deployment & Support

• Perform end-to-end testing with all hardware components

• Support User Acceptance Testing (UAT)

• Deploy backend services to client environment

• Provide basic documentation and system handover

• Provide post-delivery bug-fix support during warranty period

02 ADDITIONAL WORK DELIVERED BEYOND ORIGINAL SCOPE

Value-added modules — not in initial scope, delivered to make the system production-ready at no additional cost

NOTE: All items in this section were NOT part of the original requirement. They were researched, designed and delivered as extended functionality to ensure a complete, market-ready product.

F1 — WhatsApp Business API Integration

Scope originally had no WhatsApp channel — complete flow built from scratch.

• Meta Developer account setup, Business verification and app configuration

• Privacy Policy creation & hosting for verification (goaliepass.com/privacy-policy.html)

• Test phone number configuration and OTP validation flow

• Automated QR code delivery via WhatsApp upon invitation generation

• Meta submission and 7–10 day review process management for production go-live

F2 — QR Code / Invitation System

Original scope covered only biometric (fingerprint/face) — QR/NFC invites were added.

• Dynamic QR generation for doors with expiry logic (e.g., Valido hasta)

• Invitation API development and backend integration

• QR display in resident/visitor mobile app (app-debug.apk)

• Validation via Wiegand readers connected to InBio controllers

• Offline-capable QR validation after initial sync

F3 — License Plate Reader (LPR) — Patente Vehicular

Not mentioned in original image — new feature branch delivered.

• IP camera integration for automatic plate detection

• Database design: patent_logs and authorized plate registry tables

• Flow: Plate capture → Check authorized user → Open door if valid → Log event

• Dedicated QA environment setup for LPR testing

• Integration ready for both live dashboard and Phase 3 web

F4 — Multi-Language Support (i18n)

Not in scope — requested separately and implemented.

• Localization framework for P80 tablet app (Ionic React)

• Language selection: English, Spanish (AI-translated), Nepali for testing

• Extensible structure to add further languages without code changes

F5 — Roles, Buildings, Units & Zone Templates

Confirmed as Phase 3 addition — beyond initial enrollment scope.

• Edificios-Unidades (Buildings-Units) hierarchical management

• Zone Templates for reusable access permission sets

• One-tap magic link for password reset (email / WhatsApp)

• Role-based filtering: Resident-only view in recorder app, Admin-only management

• User assignment: same unit assignable to multiple users

F6 — DevOps / Infrastructure Automation

Original scope: 'Deploy backend services to client environment' only — full CI/CD & infra built.

• CI/CD pipeline with GitHub organization (MarginTop-Solutions) integration

• DNS migration: GoDaddy → Cloudflare nameserver management

• AWS Certificate Manager (ACM) SSL provisioning & auto-renewal

• S3 bucket setup for face image storage

• Production deployment: dashboard.goaliepass.com with Elastic Beanstalk

• Parallel environment management (ZKTeco-QA-env cloning & isolation)

F7 — Offline Consistency & Hardware Wiring Diagnostics

Beyond basic logging — extensive field hardware support.

• Diagnosis of RS485 EXT LED green-only (no slave response) and Wiegand format errors (Event 42/27, VerifyType 200/4)

• Physical wiring correction (orange/green data wires, black/red power)

• Validation that fingerprint + QR now work offline after sync

• Multiple technician visit coordination and live debugging

• Offline event buffering and re-sync on reconnection

Outcome: Fingerprint and QR now validate locally without internet; events sync when online.

F8 — ZKFinger SDK License R&D and Workaround Architecture

Unplanned R&D — critical to unblock fingerprint flow.

• Evaluation of ZKFinger Windows Standard SDK 5.3.0.33 vs 5.0, license portal research

• Confirmed Linux SDK has no available license/hardware

• Built always-on Windows PC service to receive P80 image → convert to TemplateV10 → push to InBio

• Documented that either SDK license OR hardware attachment is mandatory — provided hardware-based solution

Outcome: Fingerprint enrollment now works end-to-end without additional license purchase.

F9 — Branding & UX Polish

Usability improvements beyond core biometrics.

• Rebrand: Bioacces → Goaliepass Bio, custom app icon

• UX: Single-finger enrollment (vs 10), Login 1234 / Logout, search fix, status OK indicator

• Settings screen with API endpoint switching (including ngrok) and App Center TLK1NC USB default handling