This paper proposes a framework to learn about irregular and abnormal behavior of access card user's pattern based on the real-time analysis data. The aim of the technique is to overcome the security level problem set by human and therefore relying on the collected real-time data in order to study the pattern of the access users. The concept of studying the irregular bahavior of the access user is using Predicate Logics for rule checking. An architecture of the model is described which includes the relationship between the user-level and the dependants as well as the accessing points.