Perimeter offline secure exchange of access control token
AssigneeAssa Abloy AB
InventorPhilip Hoyer
Life of this patent
Estimating the term…
Abstract
A method, access control system, and readers for use in an access control system are described. One example of the disclosed method providers the ability to securely augment an existing physical access control system that relies on access control tokens (e.g., credentials) with a secure mobile-based solution allowing the secure local offline exchange of a new access control token for another that can be used with the existing installed access control system.
Claims20
A system comprising:
- a wireless communication device configured to be positioned at or near an outer perimeter;
- the outer perimeter containing an inner perimeter, the wireless communication device storing a decryption key and configured for transmitting the decryption key to a mobile communication device within communication proximity of the wireless communication device, the decryption key permitting the mobile communication device to decrypt an encrypted data object issued to the mobile communication device to obtain an unencrypted access control token, ACT, or a credential derived from the ACT, enabling the mobile communication device to present the ACT or the credential derived from the ACT to a reader positioned at or near the inner perimeter and configured to assess a validity of the ACT or the credential derived from the ACT based on the presentation of the ACT or the credential derived from the ACT by the mobile communication device.
A method comprising:
- receiving, at a wireless communication device positioned at or near an outer perimeter, a decryption key from a key issuance system, wherein the outer perimeter contains an inner perimeter;
- storing the decryption key at the wireless communication device;
- transmitting the decryption key from the wireless communication device to a mobile communication device within communication proximity of the wireless communication device, the decryption key permitting the mobile communication device to decrypt an encrypted data object issued to the mobile communication device from the key issuance system to obtain an unencrypted access control token, ACT, or a credential derived from the ACT, enabling the mobile communication device to present the ACT or the credential derived from the ACT to a reader positioned at or near the inner perimeter that is configured to assess a validity of the ACT or the credential derived from the ACT based on the presentation of the ACT or the credential derived from the ACT by the mobile communication device.
A non-transitory computer-readable storage medium comprising instructions, that when executed by one or more processors, cause the one or more processors to:
- store a decryption key at a wireless communication device positioned at or near an outer perimeter;
- and
- transmit the decryption key from the wireless communication device to a mobile communication device within communication proximity of the wireless communication device, the decryption key permitting the mobile communication device to decrypt an encrypted data object issued to the mobile communication device to obtain an unencrypted access control token, ACT, or a credential derived from the ACT, enabling the mobile communication device to present the ACT or the credential derived from the ACT to a reader positioned at or near an inner perimeter contained by the outer perimeter, the reader configured to assess a validity of the ACT or the credential derived from the ACT based on the presentation of the ACT or the credential derived from the ACT by the mobile communication device.
Dependencies are inferred from the claim text.