Abstract: The cloud-based access control system includes a mobile application program and a door unit. The mobile application program has a first identification code, a scanning sub-program, and a receiving sub-program. The door unit includes a camera unit and a two-dimensional code generation unit for capturing a first image and producing a two-dimensional code where a second identification code is encoded. The first image and the second identification code are transmitted to a cloud server. The second identification code may be obtained by the scanning sub-program. The first and second identification codes are transmitted by the mobile application program to a pairing unit of the cloud server for authentication. When the first and second identification codes are matched, the cloud server sends the first image and the second identification code to the receiving sub-program for visual confirmation and an electronic lock may be selectively unlocked.