System overview of Space Work in progress
Here you can find high level information about SALTO Space network and system components.
About SALTO Space
SALTO Virtual Network
The SALTO Virtual Network (SVN) uses technology that was developed to be used in access control situations that combine both wired and battery-powered locks. Access control data is put on a contactless card, rather than on individual locks. Cards can then be updated anywhere in the building by using an SVN online reader. The SVN removes the need to hardwire every lock on every door. If the online connection is interrupted, the battery-powered locks can continue to work offline.
SALTO data-on-card
SALTO data-on-card means access data is stored on each contactless card (also referred to as a 'key') rather than on the lock as in other access systems. The advantage of this is that the keys can be used to collect and circulate access data throughout an installation as a user moves around. This functionality allows you to add or remove a user's access permissions to SALTO access points that are offline without having to visit the door. When a user presents their key to an SVN reader, changes in their access permissions are retrieved from the SALTO Space database and written onto the key.
Transferring and updating access information
When a user joins an organization, they are issued a key with their appropriate access permissions. However, these permissions can change frequently and keys may become out of date.
In Space, access information is transferred from the operator's PC to an online reader. When a user presents their key to the SVN reader, the latest up-to-date access information is automatically transferred to the key. As the key is used to access doors throughout a building, it updates each door's denylist. At the same time, the lock transfers information such as audit trail events and, if the battery is low, the lock battery status. When the user presents their key to an online reader again, the reader uploads the new information back to the system. In this way, access information is continually updated and circulated throughout the installation.
Space network components
The SALTO Space network typically consists of the following components: the Space server, client PCs, SALTO network devices, and access point devices. The following diagram shows the relationship between these components.
Relationship between the SALTO Space components
Network component icons
| Icon | Description |
|---|---|
 Space server | Contains the Space Service and the SQL database (SQL DB). It manages and controls, in real-time, all SALTO online devices, for example, online doors that are operated using radio frequency (RF) technology. It also processes requests from Space clients. |
 Space client | Runs client applications, for example, Space and the Local IO Bridge. |
 Encoder | An encoder is an external device that reads and updates keys with access information, writes access permissions onto cards (keys). Encoders can be enabled for USB or Ethernet connections. |
 Electronic lock | Allows or denies access, based on the permissions of the presented key. These access point devices can be online or offline and are battery-powered. BLUEnet-enabled locks are equipped with technology that allows online capability whereas standalone locks need to be updated using a PPD device. |
 Portable Programming Device (PPD) | Communicates information to the lock such as door identification and configuration details. This device, which communicates with the locks using NFC, can also be physically connected to the locks. It is used to initialize and update offline devices. See PPD for more information. |
 Controller | Provides real-time access control. Managed by the Space server, the controller works as both an online IP door and as a card updater. Controllers can be connected to readers using a RS485 bus. |
 Gateway | A device intended to be used with access points where online connectivity is needed. Gateways connect to electronic locks enabling offline access points to become connected. A gateway acts as a bridge transferring information using end-to-end encryption to and from the devices behind it to the software. |
 Nodes and repeaters | Also known as extenders, repeaters and nodes allow the distance between a gateway and electronic locks to be increased. A node needs to be physically connected to a gateway using an RS485 cable, whereas SALTO BLUEnet repeaters allow for wireless communication. |
 JustIN Cloud | Acts as a bridge between the Space backend and the JustIN mobile app. |
 JustIN app | The SALTO JustIN Mobile app allows users to use their phones as a key. It ensures users can receive their key online, anytime and anywhere. |
Space system components
The system is composed of five components:
- SALTO Space
- SQL Server and database
- Space Service (and the Space Configurator that controls it)
- Local IO Bridge
The following diagram shows the various components of the Space system.
Space system components
All of the components in this diagram represent SALTO Space components. It does not include possible integrations with other software like, for example, a Property Management System (PMS).
These components are described in the following sections.
SALTO Space
SALTO Space is an online access control management application. It contains the menus that allow admin operators and other operators to set up user profiles, add and delete access points, customize company calendars, obtain audit trails, etc.
These menus and functionality are only available where all the appropriate licensing options are selected. See Registering and licensing Space for more information. To activate specific functionality in Space, you may also have to enable a parameter in Space General Options. See General options for more information about enabling parameters.
Space main menu options
The main menu options are described in the following table.
| Menu item | Option |
|---|---|
| Access points | - Doors - Lockers - Rooms - Zones - Locations - Functions - Outputs - Lockdown areas - Roll-call areas - Limited occupancy areas - Access point timed periods - Access point automatic changes |
| Cardholders | - Users - Visitors - Guests - User access levels - Guest access levels - Visitor access levels - Limited occupancy groups - Cardholder timetables |
| Keys | - Read key - Visitor check-in - Visitor check-out - Delete key - Reset locker data - Automatic key update |
| Monitoring | - Audit trail - Online monitoring - Alarm outputs - Lockdown monitoring - Roll-call monitoring - Limited occupancy monitoring |
| Hotel | - Room status - Reservations - Check-in - Check-in groups - Check-out - Copy guest key - Cancellation of guest lost keys - One-shot key - Programming & spare keys - Edit guest cancelling key - Edit room cleaner key |
| Tools | - Entity exportation - Scheduled jobs - Synchronization - Make DB Backup - Card printing - Reports |
| System | - System auditor - Operators - Operator groups - Partitions - PPD - Desktop reader - SALTO network - Calendars - Time zones - General options - SAM & Issuing options - Third party reader - PMS Authorizations - System resources |
SQL server and database
The SQL Server and SQL database (SQL DB) are used to host and manage the Space database. This database contains all the access control system information such as user permissions, access plans, and key data.
Space service
The Space Service is a Windows service that manages communication between the devices, Space, the database, and any software integrations. It is controlled using the Space Configurator.
The Space Configurator is a desktop application used to set up communication between the various components of the Space system. It is also used to start and stop the Space Service.
The Space Service remains running in the background. It should not be stopped except for maintenance purposes as Space will not work without it. Network devices can continue to operate as standalone or offline devices but will not be able to communicate with the database unless the Space Service is restarted.
Local IO Bridge
The Local IO Bridge is a Windows service. It allows USB devices to be used with Space by creating a link between the USB device and the browser. The Local IO Bridge must be installed on any client PCs you intend to use with a USB encoder or PPD.