International Journal of Scientific Research and Engineering Development

The increasing reliance on digital systems has created a critical need for robust access control and real-time intrusion detection mechanisms. This paper presents an IoT-Based Secure Access Control System that detects and responds to unauthorized login attempts in real time. The system employs JSON Web Token (JWT) authentication with IP binding, automatic IP-based blocking after repeated failed attempts, account-level locking to prevent credential-stuffing attacks, CSRF token protection,session fixation prevention, and real-time email alerts via PHPMailer over Gmail SMTP. A forgotpassword module using time-limited secure tokens enables safe credential recovery. A centralized admin dashboard provides live monitoring of login history, blocked IPs, trusted IPs, and unknown device alerts. Physical intrusion alerts are delivered through an Arduino UNO connected to a relay module, triggered by a Python monitoring script that polls the server. The system is deployed on a live web server and demonstrates practical applicability for securing IoT-connected environments.

Ritesh Ekbote, Chetan Dhumal, Bhagyashri Koli, Muskan Mulani, Aishwarya Hosale,"IoT-Based Secure Access Control System with Real-Time Intrusion Detection and Alert Mechanism" International Journal of Scientific Research and Engineering Development, V9(3): Page(60-66) May-June 2026. ISSN: 2581-7175. www.ijsred.com. Published by Scientific and Academic Research Publishing.