Back to results
US 10,854,025 B2Granted
Wearable discovery for authentication
AssigneeAssa Abloy AB
InventorsFredrik Carl Stefan Einberg, Daniel Berg, Philip Hoyer
Life of this patent
Estimating the term…
Abstract
An access control system is described in which a credential may be authenticated and permitted to access a protected resource only after discovery of a second device. Requiring discovery of a second device prior to authentication enhances security by protecting against unauthorized access by an illicit user of a credential.
Claims19
A credential device for an access control system, comprising:
- a first communication interface enabling the credential device to communicate with an access control reader;
- a second communication interface enabling the credential device to communicate with a second device;
- a first memory comprising a key vault and storing a mobile key, the first memory physically separate from all other memory in the credential device;
- a second memory containing instructions configured to:
- enable registration of the second device with the access control system;
- establish communications with the access control reader;
- broadcast a search signal via the second communication interface;
- receive a response to the search signal from the second device, wherein the response comprises a device ID associated with the second device;
- compare the device ID received in the response with stored registration information;
- determine that the device ID received in the response substantially matches the stored registration information;
- in response to determining that the device ID received in the response substantially matches the stored registration information, determine that the second device is registered with the access control system;
- allow the mobile key to be retrieved from the key vault and transmitted to the access control reader via the first communication interface only after determining that the second device is registered with the access control system;
- and
- make an access decision based on at least information from or about the access control reader, wherein the information from or about the access control reader comprises at least one of:
- a serial number, another identification number, a timestamp, a list of authorized credential devices, information corresponding to a public key, information corresponding to a public certificate, and a schedule correlating mobile keys with authorized access times;
- and
- a processor configured to execute the instructions stored in the second memory.
14 more elements
A system, comprising:
- a credential device comprising:
- a first communication interface for communicating with an access control reader;
- a second communication interface for communicating with a second device;
- a first memory comprising a key vault storing a mobile key, the first memory physically separate from all other memory in the credential device;
- a second memory storing an access control module, the access control module comprising instructions configured to:
- enable registration of the second device with an access control system;
- establish communications with the access control reader;
- broadcast a search signal;
- receive a response to the search signal from the second device, wherein the response comprises a device ID associated with the second device;
- compare the device ID received in the response with stored registration information;
- determine that the device ID received in the response substantially matches the stored registration information;
- in response to determining that the device ID received in the response substantially matches the stored registration information, determine that the second device is registered with the access control system;
- allow retrieval of the mobile key from the first memory only upon determining that the second device is registered with the access control system;
- and
- make an access decision based on at least information from or about the access control reader, information from or about the second device, and the mobile key, wherein the information from or about the access control reader comprises at least one of:
- a serial number, another identification number, a timestamp, a list of authorized credential devices, information corresponding to a public key, information corresponding to a public certificate, and a schedule correlating mobile keys with authorized access times;
- a processor for executing the instructions in the access control module.
14 more elements
A method for use in connection with a credential device, comprising:
- using a first wireless communication interface to enable communications between the credential device and a reader of an access control system, the credential device comprising a dedicated memory that comprises a key vault in which a mobile key is stored, the dedicated memory physically separate from all other memory in the credential device;
- using a second wireless communication interface to enable communications between the credential device and a wearable device;
- enabling registration of the wearable device with the access control system;
- establishing communications with the reader;
- broadcasting a search signal via the second wireless communication interface;
- receiving a response to the search signal from the wearable device, wherein the response comprises a device ID associated with the wearable device;
- comparing the device ID received in the response with stored registration information;
- determining that the device ID received in the response substantially matches the stored registration information;
- in response to determining that the device ID received in the response substantially matches the stored registration information, determining that the wearable device is registered with the access control system;
- conditioning retrieval of the mobile key from the dedicated memory and transmission of the mobile key from the credential device to the reader via the first wireless communication interface upon determining that the wearable device is registered with the access control system;
- and
- making an access decision based on at least information from or about the access control reader, wherein the information from or about the access control reader comprises at least one of:
- a serial number, another identification number, a timestamp, a list of authorized credential devices, information corresponding to a public key, information corresponding to a public certificate, and a schedule correlating mobile keys with authorized access times.
10 more elements
Dependencies are inferred from the claim text.