We define "Secure Space" as a physical space in which any resource is always protected from its unauthorized users in terms of enforcing its authorization policies assuredly. Aiming to build such secure spaces, this paper proposes an architecture and a model for space entry control based on its dynamically changing contents, such as users, physical resources and virtual resources outputted by some embedded devices. We first describe the architecture and then formalize the model and mechanism for secure spaces.