Authenticating with an authentication server for requesting access to a physical space
AssigneeAssa Abloy AB
InventorsFredrik Einberg, Fredrik Lindersson, Anders Wallbom
Life of this patent
Estimating the term…
Abstract
According to a first aspect, it is provided a method for requesting access to a physical space secured by a lock. The method is performed in a mobile device of a user and comprises the steps of: authenticating the mobile device with an authentication server, resulting in a token, being a data item, indicating one or more access groups to which the user belongs, wherein the token is cryptographically signed by the authentication server; storing the token in the mobile device; obtain a lock identifier of the lock; and transmitting an access request to an access control device, the access request comprising the token and the lock identifier.
Claims23
A method for requesting access to a physical space secured by a lock, the method being performed in a mobile device of a user and comprising:
- authenticating the mobile device with an authentication server, resulting in a token, being a data item, indicating one or more access groups to which the user belongs, wherein the token is cryptographically signed by the authentication server;
- storing the token in the mobile device;
- obtaining a lock identifier of the lock;
- and
- transmitting an access request to an access control device, the access request comprising the token and the lock identifier;
- wherein each of the one or more access groups are mapped to one or more lock identifiers;
- and
- wherein the one or more access groups are configured to be extracted from the token by the access control device and access is granted in response to the access request when the lock identifier of the access request is mapped to at least one of the one or more access groups.
A mobile device for requesting access to a physical space secured by a lock, the mobile device being associated with a user and comprising:
- a processor;
- and
- a memory storing instructions that, when executed by the processor, cause the mobile device to:
- authenticate the mobile device with an authentication server, resulting in a token being a data item indicating one or more access groups to which the user belongs, wherein the token is cryptographically signed by the authentication server;
- store the token in the mobile device;
- obtain a lock identifier of the lock;
- and
- transmit an access request to an access control device, the access request comprising the token and the lock identifier;
- wherein each of the one or more access groups are mapped to one or more lock identifiers;
- and
- wherein the one or more access groups are configured to be extracted from the token by the access control device and access is granted in response to the access request when the lock identifier of the access request is mapped to at least one of the one or more access groups.
A non-transitory computer-readable medium comprising a computer program stored thereon for requesting access to a physical space secured by a lock, the computer program comprising computer program code which, when run on a mobile device associated with a user, causes the mobile device to:
- authenticate the mobile device with an authentication server, resulting in a token being a data item indicating one or more access groups to which the user belongs, wherein the token is cryptographically signed by the authentication server;
- store the token in the mobile device;
- obtain a lock identifier of the lock;
- and
- transmit an access request to an access control device, the access request comprising the token and the lock identifier;
- wherein each of the one or more access groups are mapped to one or more lock identifiers;
- and
- wherein the one or more access groups are configured to be extracted from the token by the access control device and access is granted in response to the access request when the lock identifier of the access request is mapped to at least one of the one or more access groups.
Dependencies are inferred from the claim text.