RiBAC (Risk-based Access Control) is an advanced access control solution designed to meet modern security and privacy demands, particularly in sensitive or crisis scenarios such as pandemics. Built on a modular and scalable architecture, RiBAC ensures secure and privacy-preserving access management via three integrated components: an Identity Management (IDM) server that enables anonymous credential handling, a mobile application providing fast and user-friendly authentication, and a set of hardware readers including RGB and infrared cameras, QR code and RFID readers, and interactive touch screens. RiBAC’s intelligent design supports both standard access control and dynamic, risk-based policies that adapt to real-time factors such as body temperature or vaccination status. Its plug-and-play modularity allows integration into existing on-premises or cloud-based legacy systems. Within the SUNRISE project, RiBAC has been further enhanced with a European Digital COVID Certificate verification module. The system validates user credentials and COVID certificates locally using pre-downloaded public keys, ensuring compliance with security and health policies without compromising privacy.