Background
Background
My Role

User Experience Research

User Experience Research

User Experience Research

Product Design

Product Design

Product Design

Design System

Design System

Design System

Information Architecture

Information Architecture

Information Architecture

Smart Access System


A mobile app providing secure and efficient building access. It uses dynamic, temporary QR codes for staff and guests, simplifying access management for companies.

Challenge
Challenge
Project Objectives
Project Objectives
"You can't hit a target you cannot see, and you cannot see a target you do not have."
"You can't hit a target you cannot see, and you cannot see a target you do not have."

ZIG ZIGLAR

ZIG ZIGLAR

Launch a Core MVP
Launch a Core MVP

Design a minimum viable product focused on essential access control features to validate the core concept.

Design a minimum viable product focused on essential access control features to validate the core concept.

Iterate from User Feedback
Iterate from User Feedback

Implement a rapid feedback loop to continuously refine the product and guide its development toward market fit.

Implement a rapid feedback loop to continuously refine the product and guide its development toward market fit.

Prioritize for Impact
Prioritize for Impact

Use a prioritization matrix to focus development on features that offered the highest user value for the least effort.

Use a prioritization matrix to focus development on features that offered the highest user value for the least effort.

"You can't hit a target you cannot see, and you cannot see a target you do not have."

ZIG ZIGLAR

Project Objectives
Launch a Core MVP

Design a minimum viable product focused on essential access control features to validate the core concept.

Iterate from User Feedback

Implement a rapid feedback loop to continuously refine the product and guide its development toward market fit.

Prioritize for Impact

Use a prioritization matrix to focus development on features that offered the highest user value for the least effort.

Research and Testing
Research and Testing
Amy

Empolyee

Mary

Clent

John

Security

Alex

Courier

Two main user groups were identified: Permanent Staff and Temporary Visitors.
Two main user groups were identified: Permanent Staff and Temporary Visitors.
Two main user groups were identified: Permanent Staff and Temporary Visitors.

Recognizing that staff are daily, high-frequency users, the design prioritized their long-term convenience. This justified a slightly more involved setup for staff members, as the initial effort was proportional to the daily value they would receive. For visitors, the focus was on simple, one-time access.

Recognizing that staff are daily, high-frequency users, the design prioritized their long-term convenience. This justified a slightly more involved setup for staff members, as the initial effort was proportional to the daily value they would receive. For visitors, the focus was on simple, one-time access.

Recognizing that staff are daily, high-frequency users, the design prioritized their long-term convenience. This justified a slightly more involved setup for staff members, as the initial effort was proportional to the daily value they would receive. For visitors, the focus was on simple, one-time access.

Technology Comparison
Finding the Right Fit

To select the most suitable technology for the Smart Access System, I compared four leading options. The goal was to find a solution that was secure, user-friendly, and aligned with our MVP strategy of low initial cost and high scalability.

RFID

Fast Scans

Simple tap-and-go user action.

Mature Tech

Reliable and well-understood system.

High Hardware Cost

Requires dedicated RFID readers.

Physical Management

Cards can be lost, stolen, or cloned.

Too Costly

Dependent on proprietary hardware, making it expensive to scale.

Biometric

Peak Security

Unique individual identifiers (fingerprint, face)

Seamless UX

No need for a card or phone.

Prohibitive Cost

Highest initial investment and maintenance

Significant Privacy Concerns

Requires storing sensitive personal data.

Too Complex

High costs and privacy hurdles are unsuitable for an MVP.

NFC

Convenient

Simple tap from a compatible smartphone.

Secure

Supports encryption and is harder to clone than RFID.

Hardware Dependent

Requires NFC readers and user device compatibility.

Higher Cost

More expensive than QR codes to implement.

Not Universally Compatible

Relies on specific hardware for both the system and the user.

QR Codes

Zero Hardware Cost

Works with any smartphone camera.

Instantly Scalable

Easy and free to generate, distribute, and update codes.

Flexible & Secure

Can be made dynamic and temporary to prevent sharing.

Requires User Action

Users must unlock their phone and present the code.

Screen/Print Dependent

Relies on a readable screen or printout.

The Ideal Choice

Offers the best balance of cost, security, and scalability for an MVP, leveraging existing user hardware.

Direction & Solution
Direction & Solution
📱 How It Works?
📱 How It Works?
📱 How It Works?
Two Core User Flows
Two Core User Flows
Two Core User Flows

The Smart Access System is designed with two distinct user journeys to accommodate the different needs of permanent staff and temporary visitors.

The Smart Access System is designed with two distinct user journeys to accommodate the different needs of permanent staff and temporary visitors.

The Smart Access System is designed with two distinct user journeys to accommodate the different needs of permanent staff and temporary visitors.

Profile QR Code
Profile QR Code
Profile QR Code

For Staff & Regular Personnel

For Staff & Regular Personnel

For Staff & Regular Personnel

Login

Pers. QR code

  • One-Time Setup: Users create an account once to generate their unique, personal identity QR code.


  • Dynamic & Secure: The QR code is dynamic, meaning it refreshes periodically. This prevents misuse from screenshots or copied images, ensuring only the live app scre is valid.


  • Convenient Access: For seamless daily use, the app keeps users logged in for a 7-day session.


  • Simple Check-in: Users simply present their in-app QR code to scanners at access points.

Temporary QR code
Temporary QR code
Temporary QR code

For Guests & Visitors

For Guests & Visitors

For Guests & Visitors

Visitor e-from

Temp. QR code

  • Effortless Registration: Visitors can pre-register online or sign in upon arrival by completing a simple digital visitor form.


  • Direct Delivery: Once the form is submitted, a temporary QR code is sent instantly to the guest's email or via SMS.


  • Permissions-Based Access: The code is time-sensitive and permissions-based. It is programmed to grant access only to specific approved areas and only for a limited duration (e.g., during their scheduled meeting time).

🔍 Competitive Analysis
QR Code Implementations

To understand established patterns in QR code usage, I analyzed three prominent apps. The goal was to identify their core strategies, strengths, and weaknesses to inform the design of the Smart Access System.

WeChat
WeChat

Social & Platform Gateway

Social & Platform Gateway

Used for adding contacts, payments, and logging into a vast ecosystem of third-party "Mini Programs."

Used for adding contacts, payments, and logging into a vast ecosystem of third-party "Mini Programs."

Deep Ecosystem Integration

The QR code is the key to a massive, all-in-one platform.

High User Adoption

Ubiquitous in its primary market, making it a standard user behavior.

Significant Privacy Concerns

Data collection and lack of transparency are major issues

Closed Ecosystem

Designed to keep users within the WeChat environment.

PayPal
PayPal

Peer-to-Peer & Merchant Payments

Peer-to-Peer & Merchant Payments

Focused on generating codes for simple, fast, and secure monetary transactions.

Focused on generating codes for simple, fast, and secure monetary transactions.

High Brand Trust & Global Reach

Leverages a trusted, worldwide payment network.

Simplicity & Focus

Easy to use for its core purpose-sending and receiving money.

Fees for Merchants

Transaction fees can be a barrier to merchant adoption.

Limited Scope

Functionality doesn't extend much beyond basic payments.

Yuu
Yuu

Coalition Loyalty Program

Coalition Loyalty Program

A single QR code consolidates rewards points from a wide network of retail and dining partners.

A single QR code consolidates rewards points from a wide network of retail and dining partners.

Unified Customer Rewards

Simplifies loyalty programs for consumers.

Drives Frequent Engagement:

Encourages repeat business across its partner network.

Limited Geographic Reach

Value is restricted almost entirely to Hong Kong.

Dependent on Partner Quality

The program's appeal is tied to its network of participating brands.

🛠️ From Feedback to Features

Following the MVP launch, we established a feedback loop to guide the next development cycle. We collected qualitative data from all key user groups-including admins, reception staff, employees, and security personnel-to understand real-world pain points and opportunities.

This feedback was then synthesized into actionable feature requests. To prioritize development, we used the RICE scoring framework (Reach, Impact, Confidence, Effort), ensuring we focused on initiatives that would deliver the most value to users and align with our project goals.

Turn feedbacks into actionable items

"How do I handle walk-ins, like a last-minute contractor who needs access? Do they have to go through the full registration?"


Admin

Develop a "Quick Grant" feature for admins to issue instant, temporary access passes for unscheduled but authorized personnel.

"I want a page showing my check-in history. A summary of my attendance and available annual leave would be helpful too."


Employee

Create a personal "My Activity" dashboard for employees to view their access logs and integrate with HR data like leave balances.

"Can we automate the check-in process? 

It would free me up to focus on guests who need more personal assistance."


Reception

Explore passive check-in solutions, such as geofencing or hands-free Bluetooth, to streamline the process for regular staff.

Strategic Focus for the Next Iteration

Based on the prioritized feedback, we defined three key focuses for the upcoming design and development sprint:

Granular Access Control

Empowering admins with more flexible tools for daily operational needs.

Employee Self-Service

Providing staff with a user-friendly dashboard for their access records and attendance data.

Operational Automation

Streamlining routine check-in tasks to reduce the manual workload for front-desk staff.

Result & Conclusion 🎉
Result & Conclusion 🎉

📱 Key Solutions & Features

📱 Key Solutions & Features

📱 Key Solutions & Features

Based on our research and iterative feedback, we developed several key features to ensure the Smart Access System was flexible, secure, and user-centric.
Based on our research and iterative feedback, we developed several key features to ensure the Smart Access System was flexible, secure, and user-centric.
Based on our research and iterative feedback, we developed several key features to ensure the Smart Access System was flexible, secure, and user-centric.
A. Software-Based Scanner

READER MODE

Instead of relying on expensive, fixed hardware, we built a scanner directly into the app. This Reader Mode allows authorized personnel (like security or reception) to use their own smartphone or tablet as a portable QR code reader, drastically reducing installation costs and increasing operational flexibility.

Instead of relying on expensive, fixed hardware, we built a scanner directly into the app. This Reader Mode allows authorized personnel (like security or reception) to use their own smartphone or tablet as a portable QR code reader, drastically reducing installation costs and increasing operational flexibility.

B. Exportable Attendance Reporting
B. Exportable Attendance Reporting
B. Exportable Attendance Reporting

To extend the system's value for administrators, all access data is aggregated in the admin control panel. This data can be instantly compiled and exported as a formatted spreadsheet (Excel), creating an official attendance list for HR, payroll, or record-keeping.

To extend the system's value for administrators, all access data is aggregated in the admin control panel. This data can be instantly compiled and exported as a formatted spreadsheet (Excel), creating an official attendance list for HR, payroll, or record-keeping.

C. Flexible & Remote Access Control

C. Flexible & Remote Access Control

C. Flexible & Remote Access Control

Configurable Access Rules: Admins can assign different security levels to each door or access point.
Configurable Access Rules: Admins can assign different security levels to each door or access point.
Configurable Access Rules: Admins can assign different security levels to each door or access point.

Remote Door Control: For exceptional cases like deliveries or unscheduled maintenance, admins and receptionists can use a remote function in the app to instantly and securely open any access point from anywhere.

Remote Door Control: For exceptional cases like deliveries or unscheduled maintenance, admins and receptionists can use a remote function in the app to instantly and securely open any access point from anywhere.

Remote Door Control: For exceptional cases like deliveries or unscheduled maintenance, admins and receptionists can use a remote function in the app to instantly and securely open any access point from anywhere.

LEVEL 1

Free Access

No need QR Code

LEVEL 2

Standard Access

Requires a valid QR code.

LEVEL 3

Appointment Access

Requires a QR code linked to a scheduled appointment.

LEVEL 4

Restricted

Grants access only to specifically named individuals.

D. Add-On: The Smart Display Kiosk

To create a fully automated front-desk experience, we designed an optional hardware add-on. The Smart Display is a tablet-based kiosk at the entrance that serves as the followings:

Video intercom and smart doorbell.

Self-service terminal for visitor registration.

Check-in point for scheduled appointments.

💯 The Impact

The project was a success, delivering not only a market-ready product but also a significant, measurable impact on the business and its clients.

Outputs
Outputs
Outputs

Direct Project Deliverables

Direct Project Deliverables

Direct Project Deliverables

Launched the company's first scalable software product (MVP).

Launched the company's first scalable software product (MVP).

Embedded a formal product design methodology into the company culture.

Embedded a formal product design methodology into the company culture.

Evolved the design function from a service-based unit to a strategic product design team.

Evolved the design function from a service-based unit to a strategic product design team.

Outcomes
Outcomes
Outcomes

Measurable Business Impact

Measurable Business Impact

Measurable Business Impact

77.5% Up

Up in Client

Satisfaction Scores.

-50%

in ongoing System

Maintenance Costs.

"改善." kaizen.

open to critique.

I'm Just a Message Away!

Feel free to reach out to learn more!

Email:

yiplung334@gmail.com

Thank you

·

@ Kelvin Yip Copyright

·

All Rights Reserved