Back to results
US 11,388,591 B2Granted
Perimeter offline secure exchange of access control token
AssigneeAssa Abloy AB
InventorPhilip Hoyer
Life of this patent
Estimating the term…
Abstract
A method, access control system, and readers for use in an access control system are described. One example of the disclosed method providers the ability to securely augment an existing physical access control system that relies on access control tokens (e.g., credentials) with a secure mobile-based solution allowing the secure local offline exchange of a new access control token for another that can be used with the existing installed access control system.
Claims12
A system, comprising:
- a first reader configured to establish a communication channel with a mobile communication device, wherein the first reader is at a first position in a physical access control system, wherein the first reader is configured to receive one or both of a mobile access control token (MACT) and an access control token (ACT) from the mobile communication device via the communication channel, wherein the first reader is configured to assess a validity of the MACT, wherein the first reader is configured to provide the mobile communication device with a response that indicates the first reader's validity assessment for the MACT, and wherein the response provided by the first reader enables the mobile communication device to present the ACT or another credential derived from the ACT to other readers of the physical access control system;
- and
- a second reader configured to assess a validity of the ACT or a credential derived from the ACT based on a presentation of the ACT or the credential derived from the ACT by the mobile communication device, wherein the second reader is at a second position in the physical access control system that is internal with respect to the first position.
A method, comprising:
- receiving a credential at a mobile communication device, the received credential including a data object that comprises an encrypted access control token (ENC ACT);
- storing the credential in a secured memory location of the mobile communication device;
- determining that the mobile communication device is within communication proximity of a first wireless communication device;
- receiving a communication message back at the mobile communication device from the first wireless communication device, wherein the communication message received at the mobile communication device provides a decryption key for the ENC_ACT;
- and
- enabling the mobile communication device to present the access control token (ACT) or another credential derived from the ACT to a second wireless communication device, thereby enabling the second wireless communication device to assess a validity of the ACT or the credential derived from the ACT.
3 more elements
A method, comprising:
- receiving a credential at a mobile communication device, the received credential including an access control token in first format;
- storing the access control token in the first format in a memory location of the mobile communication device;
- receiving a communication message at the mobile communication device from a first wireless communication device, wherein the communication message received at the mobile communication device provides one or more keys for the access control token;
- and
- enabling the mobile communication device to transform the access control token into a second format with the one or more keys, wherein the access control token in the second format is useable with a reader of an access control system whereas the access control token in the first format is unusable with the reader of the access control system.
2 more elements
Dependencies are inferred from the claim text.