# US 10,319,160 B2 · Anonymous and ephemeral tokens to authenticate elevator calls

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,319,160 B2
- Document ID: US10319160B2
- Status: Granted
- Kind: B2
- Application number: 15/435,395
- Filed: 2017-02-17
- Published: 2017-08-24
- Granted: 2019-06-11
- Earliest claimed: 2016-02-18
- Assignees: Otis Elevator Company
- Applicants: Otis Elevator Company
- Inventors: Devu Manikantan Shila; Paul A. Simcik; Teems E. Lovett
- Web page: https://patentgrep.com/patent/US10319160B2

## CPC

- G07C 9/21: having a variable access code
- B66B 1/468: {Call registering systems}
- G06F 21/335: {for accessing specific resources, e.g. using Kerberos tickets}
- G07C 9/27: with central registration
- H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)}
- H04L 63/0838: {using one-time-passwords}
- H04L 63/108: {when the policy decisions are valid for a limited amount of time}
- H04W 12/06: Authentication
- B66B 2201/4653: wherein the call is registered using portable devices
- B66B 2201/4676: for checking authorization of the passengers
- G06F 2221/2137: Time limited access, e.g. to a computer or data
- H04W 12/61: Time-dependent
- H04W 88/02: Terminal devices
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- B66B: ELEVATORS; ESCALATORS OR MOVING WALKWAYS ({apparatus for raising or lowering persons on theatrical stages or the like A63J5/12} ; funicular railbound systems with rigid ground-supported tracks and cable traction, e.g. cliff railways, B61B9/00; arrangements of ammunition handlers in vessels B63G3/00; hoists, lifts, or conveyors for loading or unloading in general B65G; braking or detent devices controlling normal movements of winding drums or barrels B66D; ship-lifting devices E02C; garages for many vehicles with mechanical means for lifting vehicles E04H6/12; hoists for feeding ammunition or projectiles to launching apparatus or to loading mechanisms F41A9/00)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

According to one or more embodiments, a system and method for authorizing a user securing an elevator call in a building is provided. For example, the method includes receiving, at a mobile device, a secure authorization token that includes an expiration time, connecting the mobile device to a backend system using the secure authorization token from the mobile device, verifying, using the backend system, an authenticity of the secure authorization token from the mobile device based on at least the expiration time, generating, at the backend system, a secure access token and a random number in response to the authenticity of the secure authorization token being verified, and receiving, at the mobile device, the secure access token and the random number for use making elevator call requests.

## Claims

### Claim 1

A method for authorizing a user securing an elevator call in a building, the method comprising:
requesting, by a property manager, a secure authorization token that includes an expiration time from a backend system;
transmitting, from the property manager, the secure authorization token to a mobile device;
connecting a backend system to the mobile device using the secure authorization token;
verifying, using the backend system, an authenticity of the secure authorization token from the mobile device based on at least the expiration time;
generating, at the backend system, a secure access token and a random number in response to the authenticity of the secure authorization token being verified; and
sending, to the mobile device, the secure access token and the random number for use in making elevator call requests.

### Claim 2 (depends on 1)

The method of claim 1, wherein:
the backend system generates the secure authorization token; and
the backend system transmits the secure authorization token to the property manager.

### Claim 3 (depends on 2)

The method of claim 2, wherein generating, using the backend system, the secure authorization token comprises:
generating the secure authorization token using the expiration time and one or more of an expiration date, a current date, a current time, a building identification, a current user location, a user type, and user preferences.

### Claim 4 (depends on 1)

The method of claim 1, wherein verifying, using the backend system, the authenticity of the secure authorization token from the mobile device based on at least the expiration time further comprises;
verifying the authenticity of the secure authorization token based on one or more of the expiration time and an expiration date, a current date, a current time, a building identification, a current user location, a user type, and user preferences.

### Claim 5 (depends on 1)

The method of claim 1, wherein generating, at the backend system, a secure access token in response to the authenticity of the secure authorization token being verified comprises:
including one or more of a long-term expiration time, a long-term expiration date, a temporary identifier, and a building identification in the secure access token, wherein the temporary identifier is generated using the building identification and a sequence number; and
securing the secure access token using a building specific secret key (KID) to encrypt the secure access token.

### Claim 6 (depends on 1)

The method of claim 1, further comprising:
storing, in a memory device of the mobile device, the secure access token and the random number, wherein the random number is a first random number;
generating, at the mobile device, an elevator service request message based on a user input;
transmitting, from the mobile device, the secure access token to the backend system in response to receiving the user input;
verifying, at the backend system, the secure access token;
generating, at the backend system, a second random number in response to verifying the secure access token;
transmitting, from the backend system, the second random number to the mobile device, wherein the mobile device stores the second random number;
transmitting, from the mobile device, the first random number along with the elevator service request message to the backend system;
storing, at the backend system, the elevator service request message received from the mobile device in response to the first random number being verified; and
transmitting, from the backend system, the elevator service request message to an elevator controller to call an elevator car in response to the first random number and the secure access token being verified.

### Claim 7 (depends on 1)

The method of claim 1, further comprising:
storing, in a memory device of the mobile device, the secure access token and the random number, wherein the random number is a first random number;
generating, at the mobile device, an elevator service request message based on a user input;
transmitting, from the mobile device, the elevator service request message to the backend system;
storing, at the backend system, the elevator service request message received from the mobile device;
generating, at the backend system, a second random number in response to receiving the elevator service request message;
transmitting, from the backend system, the second random number to the mobile device, wherein the mobile device stores the second random number;
transmitting, from the mobile device, the first random number along with the secure access token to the backend system;
verifying, at the backend system, the first random number and the secure access token; and
transmitting, from the backend system, the elevator service request message to an elevator controller to call an elevator car in response to the first random number and the secure access token being verified.

### Claim 8 (depends on 1)

The method of claim 1, wherein the backend system comprises one or more of a server, a server blade, a server rack, a server farm, a distributed server, and a multi-node distributed processing network of computers.

### Claim 9 (depends on 1)

The method of claim 1, wherein the mobile device is located within a proximate distance of the building that the user is securing an elevator call in, wherein the property manager is located off-site from the building, and wherein the backend system is located in a cloud environment connecting to the mobile device and property manager over one or more networks.

### Claim 10

A system for authorizing a user securing an elevator call in a building, the system comprising:
a backend system that generates a secure authorization token that includes an expiration time;
a property manager that requests the secure authorization token from the backend system, and transmits the secure authorization token from the backend system to a mobile device;
the backend system configured to connect with the mobile device;
the backend system configured to verify an authenticity of the secure authorization token from the mobile device based on at least the expiration time, the backend system configured to generate a secure access token and a first random number in response to the authenticity of the secure authorization token being verified, the backend system configured to transmit the secure access token and the first random number to the mobile device for use in generating an elevator service request message;
an elevator controller that receives the elevator service request message generated by the mobile device; and
an elevator car that is controlled by the elevator controller based on the elevator service request message.

### Claim 11 (depends on 10)

The system of claim 10, wherein the secure authorization token comprises one or more of the expiration time, an expiration date, a current date, a current time, a building identification, a current user location, a user type, and user preferences.

### Claim 12 (depends on 10)

The system of claim 10, wherein the backend system verifies the authenticity of the secure authorization token based on one or more of the expiration time and an expiration date, a current date, a current time, a building identification, a current user location, a user type, and user preferences.

### Claim 13 (depends on 10)

The system of claim 10, wherein the backend system includes in the secure access token one or more of a long-term expiration time, a long-term expiration date, a temporary identifier, and a building identification in the secure access token, wherein the temporary identifier is generated using the building identification and a sequence number, and wherein the backend system secures the secure access token using a building specific secret key (KID) to encrypt the secure access token.

### Claim 14 (depends on 10)

The system of claim 10, wherein the system is further configured to:
store, in a memory device of the mobile device, the secure access token and the first random number;
generate, at the mobile device, an elevator service request message based on a user input;
transmit, from the mobile device, the secure access token to the backend system in response to receiving the user input;
verify, at the backend system, the secure access token;
generate, at the backend system, a second random number in response to verifying the secure access token;
transmit, from the backend system, the second random number to the mobile device, wherein the mobile device stores the second random number;
transmit, from the mobile device, the first random number along with the elevator service request message to the backend system;
store, at the backend system, the elevator service request message received from the mobile device in response to the first random number being verified; and
transmit, from the backend system, the elevator service request message to an elevator controller to call an elevator car in response to the first random number and the secure access token being verified.

### Claim 15 (depends on 10)

The system of claim 10, wherein the system is further configured to:
store, in a memory device of the mobile device, the secure access token and the first random number;
generate, at the mobile device, an elevator service request message based on a user input;
transmit, from the mobile device, the elevator service request message to the backend system;
store, at the backend system, the elevator service request message received from the mobile device;
generate, at the backend system, a second random number in response to receiving the elevator service request message;
transmit, from the backend system, the second random number to the mobile device, wherein the mobile device stores the second random number;
transmit, from the mobile device, the first random number along with the secure access token to the backend system;
verify, at the backend system, the first random number and the secure access token; and
transmit, from the backend system, the elevator service request message to an elevator controller to call an elevator car in response to the first random number and the secure access token being verified.

### Claim 16 (depends on 10)

The system of claim 10, wherein the backend system comprises one or more of a server, a server blade, a server rack, a server farm, a distributed server, and a multi-node distributed processing network of computers.

### Claim 17 (depends on 10)

The system of claim 10, wherein the mobile device is located within a proximate distance of the building that the user is securing an elevator call in, wherein the property manager is located off-site from the building, and wherein the backend system is located in a cloud environment connecting to the mobile device and property manager over one or more networks.

### Claim 18

A computer program product for authorizing a user securing an elevator call in a building, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:
requesting, by a property manager, a secure authorization token that includes an expiration time from a backend system;
transmitting, from the property manager, the secure authorization token to a mobile device;
connecting a backend system to the mobile device using the secure authorization token;
verify, using the backend system, an authenticity of the secure authorization token from the mobile device based on at least the expiration time;
generate, at the backend system, a secure access token and a first random number in response to the authenticity of the secure authorization token being verified; and
send, to the mobile device, the secure access token and the first random number for use in making elevator call requests.

### Claim 19 (depends on 18)

The computer program product of claim 18, further comprising additional program instructions executable by a processor to cause the processor to:
store, in a memory device of the mobile device, the secure access token and the first random number;
generate, at the mobile device, an elevator service request message based on a user input;
transmit, from the mobile device, the secure access token to the backend system in response to receiving the user input;
verify, at the backend system, the secure access token;
generate, at the backend system, a second random number in response to verifying the secure access token;
transmit, from the backend system, the second random number to the mobile device, wherein the mobile device stores the second random number;
transmit, from the mobile device, the first random number along with the elevator service request message to the backend system;
store, at the backend system, the elevator service request message received from the mobile device in response to the first random number being verified; and
transmit, from the backend system, the elevator service request message to an elevator controller to call an elevator car in response to the first random number and the secure access token being verified.

### Claim 20 (depends on 18)

The computer program product of claim 18,
wherein receiving, at the mobile device, the secure authorization token that includes the expiration time comprises:
requesting, by a property manager, the secure authorization token from the backend system;
generating, using the backend system, the secure authorization token, wherein generating the secure authorization token uses the expiration time and one or more of an expiration date, a current date, a current time, a building identification, a current user location, a user type, and user preferences;
transmitting, from the backend system, the secure authorization token to the property manager; and
transmitting, from the property manager, the secure authorization token to the mobile device.