# US 12,217,562 B2 · Technologies for using NFC or QR code to commission a device to the cloud > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,217,562 B2 - Document ID: US12217562B2 - Status: Granted - Kind: B2 - Application number: 17/531,179 - Filed: 2021-11-19 - Published: 2023-05-25 - Granted: 2025-02-04 - Earliest claimed: 2021-11-19 - Assignees: Schlage Lock Company LLC - Applicants: Schlage Lock Company LLC - Inventors: Joseph W. Baumgarte - Web page: https://patentgrep.com/patent/US12217562B2 ## CPC - G07C 9/27: with central registration - G07C 9/00309: {operated with bidirectional data transmission between data carrier and locks} - G07C 9/22: in combination with an identity check of the pass holder - H04L 9/006: {involving public key infrastructure [PKI] trust models (network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - G07C 2009/00412: {the transmitted data signal being encrypted} - G07C 2009/00769: {with data transmission performed by wireless means} - H04L 2209/80: Wireless - G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method of commissioning an access control device to an access control system according to one embodiment includes, by the access control system, receiving a public cryptographic key of a cryptographic key pair from a cryptography circuit manufacturer device, wherein at least the private cryptographic key of the public cryptographic key pair is stored in the cryptography circuit of the access control device; generating commissioning data for in-field commissioning of the access control device in response to receiving the public cryptographic key, wherein the commissioning data for the access control device is associated with a unique identifier located on the access control device; receiving a request from a mobile device for the commissioning data in response to the mobile device scanning the unique identifier on the access control device; and transmitting the commissioning data to the mobile device for transmittal to the access control device. ## Claims ### Claim 1 A method of commissioning an access control device to an access control system, the method comprising: receiving, by the access control system, a public cryptographic key of a cryptographic key pair from a cryptography circuit manufacturer device associated with manufacture of a cryptography circuit of the access control device, wherein the cryptographic key pair includes the public and a corresponding private cryptographic key, and wherein at least the private cryptographic key is stored in the cryptography circuit of the access control device; with the access control system and without powering up the access control device, creating a device twin for the access control device within the access control system, generating commissioning data for in-field commissioning of the access control device in response to receiving the public cryptographic key, and encrypting the commissioning data, wherein the commissioning data for the access control device is associated with a unique identifier located on the access control device; receiving, by the access control system, a request from a mobile device for the commissioning data in response to the mobile device scanning the unique identifier on the access control device; and transmitting, by the access control system, the commissioning data to the mobile device for transmittal to the access control device. ### Claim 2 (depends on 1) The method of claim 1, wherein receiving the public cryptographic key comprises receiving a cryptographic public key certificate including the public cryptographic key. ### Claim 3 (depends on 1) The method of claim 1, wherein the unique identifier is a uniform resource identifier for the access control system associated with the commissioning data for the access control device. ### Claim 4 (depends on 3) The method of claim 3, wherein the unique identifier is stored on an NFC tag of the access control device. ### Claim 5 (depends on 3) The method of claim 3, wherein the unique identifier is included in a QR code of the access control device. ### Claim 6 (depends on 1) The method of claim 1, wherein the commissioning data comprises at least one of a firmware upgrade for the access control device, an updated cryptographic key certificate for the access control device, access control keys for the access control device, or access metadata for the access control device. ### Claim 7 (depends on 1) The method of claim 1, wherein the access control system comprises a cloud-based server and the device twin is created in the cloud-based server. ### Claim 8 (depends on 1) The method of claim 1, further comprising: receiving, by the access control system and before assembly of the access control device, a cryptographically signed serial number of a circuit board from a circuit board manufacturer device associated with manufacture of a circuit board of the access control device that incorporates the cryptography circuit, wherein the cryptographically signed serial number is received in association with a serial number of the cryptography circuit incorporated with the circuit board. ### Claim 9 (depends on 1) The method of claim 1, wherein the access control device is an offline access control device without internet access. ### Claim 10 (depends on 1) The method of claim 1, wherein the mobile device comprises a first mobile device; and further comprising transmitting, by the access control system, the commissioning data to a plurality of mobile devices including the first mobile device. ### Claim 11 (depends on 1) The method of claim 1, further comprising: scanning, by the mobile device, the unique identifier on the access control device; and automatically communicating, by the mobile device, with the access control system in response to scanning the unique identifier on the access control device. ### Claim 12 (depends on 11) The method of claim 11, further comprising: storing, by the mobile device, the commissioning data in a memory of the mobile device in response to communicating with the access control system; and transmitting, by the mobile device, the commissioning data to the access control device to commission the access control device. ### Claim 13 An access control system for commissioning an access control device, the access control system comprising: at least one processor; and at least one memory comprising a plurality of instructions stored thereon that, in response to execution by the at least one processor, causes the access control system to: receive a public cryptographic key of a cryptographic key pair from a cryptography circuit manufacturer device associated with manufacture of a cryptography circuit of the access control device, wherein the cryptographic key pair includes the public and a corresponding private cryptographic key, and wherein at least the private cryptographic key is stored in the cryptography circuit of the access control device; without the access control device being powered up, create a device twin for the access control device within the access control system, generate commissioning data for in-field commissioning of the access control device in response to receipt of the public cryptographic key, and encrypt the commissioning data, wherein the commissioning data for the access control device is associated with a unique identifier located on the access control device; receive a request from a mobile device for the commissioning data in response to the mobile device scanning the unique identifier on the access control device; and transmit the commissioning data to the mobile device for transmittal to the access control device. ### Claim 14 (depends on 13) The access control system of claim 13, wherein to receive the public cryptographic key comprises to receive a cryptographic public key certificate including the public cryptographic key. ### Claim 15 (depends on 13) The access control system of claim 13, wherein the unique identifier is a uniform resource identifier for the access control system associated with the commissioning data for the access control device. ### Claim 16 (depends on 15) The access control system of claim 15, wherein the unique identifier is stored on an NFC tag of the access control device. ### Claim 17 (depends on 15) The access control system of claim 15, wherein the unique identifier is included in a QR code of the access control device. ### Claim 18 (depends on 13) The access control system of claim 13, wherein the commissioning data comprises at least one of a firmware upgrade for the access control device, an updated cryptographic key certificate for the access control device, access control keys for the access control device, or access metadata for the access control device. ### Claim 19 (depends on 13) The access control system of claim 13, wherein the access control system comprises a cloud-based server and the device twin is created on the cloud-based server. ### Claim 20 (depends on 19) The access control system of claim 19, wherein the plurality of instruction cause the access control system to: receive, before assembly of the access control device, a cryptographically signed serial number of a circuit board from a circuit board manufacturer device associated with manufacture of a circuit board of the access control device that incorporates the cryptography circuit, wherein the cryptographically signed serial number is received in association with a serial number of the cryptography circuit incorporated with the circuit board.