Back to results
US 10,257,190 B2Granted
Wi-fi enabled credential enrollment reader and credential management system for access control
AssigneeSchlage Lock Company LLC
InventorsDavid M. Baty, Srikanth Venkateswaran, Paul D. Heal
Life of this patent
Estimating the term…
Abstract
A method according to one embodiment includes reading a unique credential identifier of a passive credential device, transmitting the unique credential identifier to a credential management system over a secure wireless connection, receiving credential device data from the credential management system over the secure wireless connection, and transmitting the received credential device data to the passive credential device.
Claims20
A method comprising:
- reading, by a reader device, a unique credential identifier of a passive credential device;
- transmitting, by the reader device, the unique credential identifier to a credential management system over a secure wireless connection;
- receiving, by the reader device, credential device data from the credential management system over the secure wireless connection;
- and
- transmitting, by the reader device, the received credential device data to the passive credential device;
- and further comprising authenticating the reader device to the credential management system, wherein authenticating the reader device to the credential management system comprises:
- receiving, by the credential management system, an authentication message from the reader device, wherein receiving the authentication message comprises receiving a serial number, a current revision of a security subsystem of the reader device, and an encrypted payload including the serial number and a timestamp;
- retrieving, by the credential management system, a stored site key based on the authentication message, wherein retrieving the stored site key comprises retrieving the stored site key based on the serial number;
- and
- verifying, by the credential management system, the authentication message, wherein verifying the authentication message comprises decrypting and verifying the encrypted payload including the serial number and the timestamp.
7 more elements
A credential reader device, comprising:
- a processor;
- and
- a memory comprising a plurality of instructions stored thereon that, in response to execution by the processor, causes the credential reader device to:
- read a unique credential identifier of a passive credential device exclusively powered by wireless signals transmitted by one or more external devices;
- autonomously transmit the unique credential identifier to a credential management system over a secure wireless connection;
- receive credential device data from the credential management system over the secure wireless connection;
- and
- transmit the received credential device data to the passive credential device,
- wherein the credential device data comprises a set of no-tour data for transmittal to an access control device at a user's next presentation of the passive credential device to the access control device;
- and
- wherein the transmitted no-tour data causes the access control device to update access permissions of the passive credential device to a physical area secured by the access control device.
8 more elements
An access control system comprising:
- a credential management system;
- a passive credential device exclusively powered by wireless signals transmitted by one or more external devices;
- and
- a credential reader device configured to (i) read a unique credential identifier of the passive credential device, (ii) transmit the unique credential identifier to the credential management system over a secure wireless connection, (iii) receive credential device data from the credential management system over the secure wireless connection, and (iv) transmit the received credential device data to the passive credential device;
- wherein the credential reader device is a credential enrollment reader configured to (i) autonomously communicate with the credential management system over a secure Wi-Fi connection established between the credential enrollment reader and the credential management system without being physically connected to another computing device and (ii) transmit the received credential device data to the passive credential device to update the passive credential device with access control rights associated with the access control system;
- further comprising a wireless access point;
- and
- wherein the credential enrollment reader directly communicates with the access control point for secure Wi-Fi communication with the credential management system.
5 more elements
Dependencies are inferred from the claim text.