A device that can read credentials and grant access to users based on their user information and access control rules. It acts as a [Reader + Controller].