Back to results
US 10,540,835 B2Granted
Access control system with virtual card data
AssigneeCarrier Corporation
InventorsAdam Kuenzi, Jonah J. Harkema
Life of this patent
Estimating the term…
Abstract
An access control system includes a mobile library on a mobile device operable to communicate with the credential service, the mobile library operable to receive the credential from the credential service and a credential module for an access control, the credential module operable to receive virtual card data from the credential, the virtual card data usable to operate the access control.
Claims24
An access control system, comprising:
- a credential service operable to generate an encrypted mobile credential comprising an identifier and virtual card data, the credential service operable to generate a set of encrypted mobile credentials from a permission, wherein the permission specifies access rights for a user to an access control and an access category, and the access category is associated with one or more additional access controls so that the set contains encrypted mobile credentials for the access control;
- a mobile application comprising a mobile library on a mobile device operable to communicate with the credential service, the mobile application operable to initiate communication of the mobile library with the credential service, the mobile library operable to receive the set of encrypted mobile credentials from the credential service, the mobile library operable to receive an advertisement data from the access control or the one or more additional access controls;
- and
- a credential module of the access control that advertises a presence on a periodic rate with the advertisement data that indicates an identifier of the access control such that the mobile library can compare the identifier of the access control or the one or more additional access controls with the identifier in the encrypted mobile credential and send the encrypted mobile credential to the credential module when the mobile application instructs the mobile library to send the encrypted mobile credential to the credential module, the credential module operable to extract virtual card data from the encrypted mobile credential and send the virtual card data to a controller of the access control, wherein the credential module is operable to decrypt and validate the encrypted mobile credential within the credential module by validating a starting date and an expiring date associated with the encrypted mobile credential.
1 more element
A method of managing credentials for a mobile device, the method comprising:
- downloading an encrypted mobile credential to a mobile library on a mobile device via a mobile application, the mobile application operable to initiate communication of the mobile library with a credential service, the encrypted mobile credential comprising an identifier and virtual card data, the credential service operable to generate a set of encrypted mobile credentials from a permission, wherein the permission specifies access rights for a user to an access control and an access category, and the access category is associated with one or more additional access controls so that the set contains encrypted mobile credentials for the access control;
- communicating the encrypted mobile credential from the mobile device when the mobile application instructs the mobile library to send the encrypted mobile credential to a credential module of an access control that advertises a presence on a periodic rate with the advertisement data that indicates an identifier of the access control, the virtual card data extracted from the encrypted mobile credential to operate the access control, the mobile library comprises a set of mobile credentials generated by the credential service based on access categories in addition to the mobile credential with virtual card data generated by the credential service for a specific access control such that the mobile library can compare the identifier of the access control with the identifier in the encrypted mobile credential and send the encrypted mobile credential to the credential module;
- decrypting and validating the encrypted mobile credential within the credential module by validating a starting date and an expiring date associated with the encrypted mobile credential;
- extracting the virtual card data from the encrypted mobile credential;
- and
- communicating the virtual card data from the credential module to operate the access control as a “virtual card read.”
3 more elements
Dependencies are inferred from the claim text.