# US 2009/0183541 A1 · Access Control System and Method for Operating Said System

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2009/0183541 A1
- Document ID: US20090183541A1
- Status: Published application
- Kind: A1
- Application number: 12/226,765
- Filed: 2007-04-24
- Published: 2009-07-23
- Earliest claimed: 2006-04-28
- Assignees: Telcred AB
- Inventors: Babak Sadighi; Ling Cao; Ludwig Seitz
- Web page: https://patentgrep.com/patent/US20090183541A1

## CPC

- G08C 17/02: using a radio link
- G07C 9/00309: {operated with bidirectional data transmission between data carrier and locks}
- G07C 9/00571: {operated by interacting with a central unit}
- G07C 9/27: with central registration
- H04W 12/082: using revocation of authorisation
- G07C 2009/00388: {code verification carried out according to the challenge/response method}
- G07C 2009/00412: {the transmitted data signal being encrypted}
- G07C 2009/00825: {remotely by lines or wireless communication}
- G07C 2009/00865: {remotely by wireless communication}
- G07C 2009/0088: {centrally}
- Y10T 70/625: Operation and control
- Y10T 70/70: Operating mechanism
- Y10T 70/735: Operating elements
- G08C: TRANSMISSION SYSTEMS FOR MEASURED VALUES, CONTROL OR SIMILAR SIGNALS (fluid pressure transmitting systems F15B; mechanical means for transferring the output of a sensing member into a different variable G01D5/00; mechanical control systems G05G)
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- Y10T: TECHNICAL SUBJECTS COVERED BY FORMER US CLASSIFICATION

## Abstract

The present invention relates to a system (10) operable to control access to different physical spaces, each provided with an electrical locking device (121, . . . , 12n), with the aid of a programmable, mobile unit (14). The system (10) comprises an authority means (16) operable to issue access rights connected to the programmable, mobile unit (14) in the form of an authorizing data (AD), which authorizing data (AD) is sent to an authorization means (18) connected to the authority means (16), and operable to generate an alpha-numerical key for the mobile unit (14), and to send the alpha-numerical key and a unique identifier of the mobile unit (14) to an operator (20), which is connected to the authorization means (18). The operator (20) is operable to send the alpha-numerical key to the mobile unit (14) identified by the unique identifier. An electrical locking device (12i), wherein 1≦i≦n, and the mobile unit (14) uses an authentication protocol with the alpha-numerical key to authenticate the mobile unit (14), wherein the mobile unit, if it has been authenticated, sends the authorizing data (AD) to the electrical locking device (12i), and if the authorizing data (AD) comprises an identifier of the electrical locking device (12i), the mobile unit (14) is able to open the electrical locking device (12n) with the aid of a communication means (22) comprised in the mobile unit (14) for communication in the near field.

## Claims

### Claim 1

A system (10) operable to control access to different physical spaces, each provided with an electrical locking device (12i, . . . , 12n), with the aid of a programmable, mobile unit (14), characterized in that said system (10) comprises an authority means (16) operable to issue access rights connected to said programmable, mobile unit (14) in the form of an authorizing data (AD), which authorizing data (AD) is sent to an authorization means (18) connected to said authority means (16) and operable to generate an alphanumerical key for said programmable, mobile unit (14) and to send said alphanumerical key and a unique identifier of said mobile unit (14) to an operator (20), which is connected to said authorization means (18), wherein said operator (20) is operable to send said alphanumerical key to said mobile unit (14) identified by said unique identifier, wherein an electrical locking device (121), wherein 1≦i≦n, and said mobile unit (14) uses an authentication protocol with said alphanumerical key to authenticate said mobile unit (14), wherein said mobile unit (14), if it has been authenticated, sends said authorizing data (AD) to said electrical locking device (121), and if said authorizing data (AD) comprises an identifier of said electrical locking device (120 said mobile unit (14) is able to open said electrical locking device (121) with the aid of a communication means (22) comprised in said mobile unit (14) for communication in the near field.

### Claim 2 (depends on 1)

A system (10) operable to control access to different physical spaces according to claim 1, characterized in that said unique identifier of said mobile unit (14) is a number, and in that said authorizing data (AD) comprises an identification (ID1; . . . ; IDn) of each locking device (121, . . . , 12n) which said mobile unit (14) should be able to open.

### Claim 3 (depends on 2)

A system (10) operable to control access to different physical spaces according to claim 2, characterized in that said alphanumerical key is a symmetric, secret key (kp), and in that a physical space Is provided with an electrical master locking device (24), wherein said authorization means (18) also is operable to send said secret key (kp) and said number identifying said mobile unit (14) to said master locking device (24).

### Claim 4 (depends on 3)

A system (10) operable to control access to different physical spaces according to claim 3, characterized in that said master locking device (24) and said mobile unit (14) use said authentication protocol with said secret key (kp) to authenticate said mobile unit (14).

### Claim 5 (depends on 4)

A system (10) operable to control access to different physical spaces according to claim 4, characterized in that said master locking device (24) is operable, after said mobile unit (14) has been authenticated, to send an authorization request to said authorization means (18) whereafter said authorization means (18) also is operable to send said authorizing data (AD) concatenated with a message authentication code (MACkl (AD)), and an encrypted, secret key of said mobile unit (14) with a symmetric key (kl) (Ekl (kp)) to said master locking device (24).

### Claim 6 (depends on 5)

A system (10) operable to control access to different physical spaces according to claim 5, characterized in that said master locking device (24) also is operable to send said authorizing data (AD) concatenated with said message authentication code (MACkl (AD)), and said encrypted secret key of said mobile unit (14) with said symmetric key (kl) (Ekl (kp)) to said mobile unit (14) with the aid of a communication means (26) comprised in said master locking device (24) for communication in the near field.

### Claim 7 (depends on 1)

A system (10) operable to control access to different physical spaces according to claim 1, characterized in that said mobile unit (14) is operable to send said encrypted secret key of said mobile unit (14) with said symmetric key (kl) (Ekl (kp)) to said electrical locking device (12i), which in turn also is operable to retrieve said secret key (kp) by decrypting Ekl (kp) with said symmetric key (kl).

### Claim 8 (depends on 7)

A system (10) operable to control access to different physical spaces according to claim 7, characterized in that said mobile unit (14) also is operable to send said authorizing data (AD) concatenated with said message authentication code (MACkl (AD)) to said electrical locking device (12i), whereby said electrical locking device (12i) is operable to verify the validity of said authorizing data (AD) with said message authentication code (MAC) and said symmetric key (kl).

### Claim 9 (depends on 2)

A system (10) operable to control access to different physical spaces according to claim 2, characterized in that said alphanumerical key is a symmetric, secret key (kp), wherein said authorization means (18) also is operable to generate said secret key (kp), said authorizing data (AD) concatenated with a message authentication code (MACkl (AD)), and an encrypted, secret key of said mobile unit (14) with a symmetric key (ki) (Ekl (kp)), and to send said secret key (kp), said authorizing data (AD) concatenated with said message authentication code (MACkl (AD)), said encrypted secret key of said mobile unit (14) with said symmetric key (Ekl (kp)), and said number to said operator (20).

### Claim 10 (depends on 9)

A system (10) operable to control access to different physical spaces according to claim 9, characterized in that said operator (20) also is operable to send, besides said secret key (kp), said authorizing data (AD) concatenated with said message authentication code (MACkl (AD)), and said encrypted secret key of said mobile unit (14) with said symmetric key (Ekl (kp)) to said mobile unit (14).

### Claim 11 (depends on 10)

A system (10) operable to control access to different physical spaces according to claim 10, characterized in that said mobile unit (14) also is operable to establish a communication channel in the near field with said electrical locking device (12i), and to send said encrypted secret key of said mobile unit (14) with said symmetric key (Ekl (kp)) to said electrical locking device (121), which in turn also is operable to retrieve said secret key (kp) by decrypting Ekl (kp) with said symmetric key (kl).

### Claim 12 (depends on 11)

A system (10) operable to control access to different physical spaces according to claim 11, characterized in that said mobile unit (14) also is operable to send said authorizing data (AD) concatenated with said message authentication code (MACkl (AD)) to said electrical locking device (12i), whereby said electrical locking device (12;) is operable to verify the validity of said authorizing data (AD) with said message authentication code (MAC) and said symmetric key (kl).

### Claim 13 (depends on 2)

A system (10) operable to control access to different physical spaces according to claim 2, characterized in that said alphanumerical key is an asymmetric key pair (privP, publP), wherein said authorization means (18) also is operable to generate said asymmetric key pair (privP, pubiP), a certificate (certP), and an authorizing data (AD) electronically signed by said authorization means (18) private key (privA), (SignprivA (AD)) for said mobile unit (14), and to send said authorizing data (AD), said private key (privP) of said mobile unit (14), said certificate (certP), said public key (pubA) of said authorization means (18), said authorization data electronically signed by said authorization means (18) private key (SignprivA (AD)), and said number to said operator (20).

### Claim 14 (depends on 13)

A system (10) operable to control access to different physical spaces according to claim 13, characterized in that said operator (20) also is operable to send said authorizing data (AD), said private key (privP) of said mobile unit (14), said certificate (certP), said public key (pubA) of said authorization means (18), and said authorization data electronically signed by said authorization means (18) private key (SignprivA (AD)) to said mobile unit (14).

### Claim 15 (depends on 14)

A system (10) operable to control access to different physical spaces according to claim 14, characterized in that said mobile unit (14) also is operable to establish a communication channel in the near filed with said electrical locking device (12i), and to send said certificate (certP) to said electrical locking device (12i), and to receive a certificate of said locking device (12i) containing its public key (privL) (certL) from said electrical locking device (12i).

### Claim 16 (depends on 15)

A system (10) operable to control access to different physical spaces according to claim 15, characterized in that said mobile unit (14) and said electrical locking device (12i) are operable to authenticate each other using their certificates (certP, certL) and their private keys (privP, privL) with the aid of a two-way Authentication protocol.

### Claim 17 (depends on 18)

A system (10) operable to control access to different physical spaces according to claim 18, characterized in that said mobile unit (14) also is operable, if said mobile unit (14) and said electrical locking device (12i) have been authenticated, to send said authorizing data (AD) and said authorization data electronically signed by said authorization means (18) private key (SignprivA (AD)) to said electrical locking device (12j), which verifies said signature.

### Claim 18

A method for controlling access to different physical spaces, each provided with an electrical locking device (121; . . . ; 12n), with the aid of a programmable, mobile unit (14) and with the aid of a system (10), wherein said method comprises the steps:
an authority means (16) comprised in said system (10) issues access rights connected to said mobile unit (14) in the form of an authorizing data (AD);
to send said authorizing data (AD) to an authorization means (18) comprised in said system (10) and connected to said authority means (16);
said authorization means (18) generates an alphanumerical key for said mobile unit (14); is—to send said alphanumerical key and a unique identifier of said mobile unit (14) to an operator (20) which is connected to said authorization means (18);
said operator (20) sends said alphanumerical key to said mobile unit (14) identified by said unique identifier;
wherein an electrical Socking device (12i), wherein 1≦i≦n, and said mobile unit (14) use an authentication protocol with said alphanumerical key to authenticate said mobile unit (14);
if said mobile unit (14) has been authenticated, it sends said authorizing data (AD) to said electrical locking device (12i);
to verify the validity of the authorization data (AD); and
if said authorizing data (AD) comprises an identifier of said electrical locking device (12i), said mobile unit (14) is able to open said electrical locking device (12i) with the aid of a communication means (22) comprised in said mobile unit (14) for communication in the near field,

### Claim 19 (depends on 18)

A method for controlling access to different physical spaces according to claim 18, characterized in that said unique identifier of said mobile unit (14) is a number, and in that said authorizing data (AD) comprises an identification (ID1; . . . ; IDn) of each locking device (121; . . . 12n) which said mobile unit (14) should be able to open.

### Claim 20 (depends on 19)

A method for controlling access to different physical spaces according to claim 19, characterized in that said alphanumerical key is a symmetric, secret key (kp), and in that a physical space is provided with an electrical master locking device (24), wherein said method also comprises the step:
said authorization means (18) sends said secret key (kp) and said number identifying said mobile unit (14) to said master locking device (24).

### Claim 21 (depends on 20)

A method for controlling access to different physical spaces according to claim 20, characterized in that said method also comprises the step;
to authenticate said mobile unit (14) with the aid of said master locking device (24) and said mobile unit (14) using said authentication protocol with said secret key (kp).

### Claim 22 (depends on 21)

A method for controlling access to different spaces according to claim 21, characterized in that said method also comprises the steps:
if said mobile unit (14) has been authenticated, with the aid of said master 20 locking device (24), to send an authorization request to said authorization means (18); and
with the aid of said authorization means (18), to send said authorizing data (AD) concatenated with a message authentication code (MACkl (AD)), and an encrypted secret key of said mobile unit (14) with a symmetric key (kl) (Ekl (kp)) to said master locking device (24).

### Claim 23 (depends on 22)

A method for controlling access to different spaces according to claim 22, characterized in that said method also comprises the step:
with the aid of said master locking device (24), to send said authorizing data (AD) concatenated with said message authentication code (MACkl (AD)), and said encrypted secret key of said mobile unit (14) with said symmetric key (kl) (Ekl (kp)) to said mobile unit (14) with the aid of a communication means (26) comprised in said master locking device (24) for communication in the near field.

### Claim 24 (depends on 18)

A method for controlling access to different physical spaces according to claim 18, characterized in that said method also comprises the steps:
with the aid of said mobile unit (14), to send said encrypted secret key of said mobile unit (14) with said symmetric key (kl) (Ekl (kp)) to said electrical locking device (12i); and
with the aid of said electrical locking device (12i, to retrieve said secret key (kp) by decrypting Ekl (kp) with said symmetric key (kl).

### Claim 25 (depends on 24)

A method for controlling access to different physical spaces according to claim 24, characterized in that said method also comprises the steps:
with the aid of said mobile unit (14), to send said authorizing data (AD) concatenated with said message authentication code (MACkl (AD)) to said electrical locking device (12i); and—with the aid of said electrical locking device (12j), to verify the validity of said authorizing data (AD) with said message authentication code (MAC) and said symmetric key (kl).

### Claim 26 (depends on 19)

A method for controlling access to different physical spaces according to claim 19, characterized in that said alphanumerical key is a symmetric, secret key (kp), and in that said method also comprises the steps:
with the aid of said authorization means (18), to generate said secret key (kp), said authorizing data (AD) concatenated with a message authentication code (MACkl (AD)), and an encrypted, secret key of said mobile unit (14) with a symmetric key (kl) (Ekl (kp)); and
to send said secret key (kp), said authorizing data (AD) concatenated with said message authentication code (MACkl (AD)), said encrypted secret key of said mobile unit (14) with said symmetric key (Ekl (kp)), and said number of the mobile unit (14) to said operator (20).

### Claim 27 (depends on 26)

A method for controlling access to different physical spaces according to claim 26, characterized in that said method also comprises the step:
with the aid of said operator (20), to send, besides said secret key (kp), said authorizing data (AD) concatenated with said message authentication code (MACkl (AD)), and said encrypted secret key of said mobile unit (14) with said symmetric key (Ekl (kp)) to said mobile unit (14).

### Claim 28 (depends on 27)

A method for controlling access to different physical spaces according to claim 27, characterized in that said method also comprises the steps;
with the aid of said mobile unit (14), to establish a communication channel in the near field with said electrical locking device (12);
to send said encrypted key of said mobile unit (14) with said symmetric key (Eki (kp)) to said electrical locking device (12i); and—with the aid of said electrical locking device (12i), to retrieve said secret key (kp) by decrypting Ekl (kp) with said symmetric key (kl).

### Claim 29 (depends on 28)

A method for controlling access to different physical spaces according to claim 28 characterized in that said method also comprises the steps:
with the aid of said mobile unit (14), to send said authorizing data (AD) concatenated with said message authentication code (MACkl (AD)) to said electrical locking device (12i); and
with the aid of said electrical locking device (12i), to verify the validity of said authorizing data (AD) with aid message authentication code (MAC) and said symmetric key (kl).

### Claim 30 (depends on 19)

A method for controlling access to different physical spaces according to claim 19, characterized in that said alphanumerical key is an asymmetric key pair (privP, publP), and in that said method also comprises the steps
with the aid of said authorization means (18), to generate said asymmetric key pair (privP, publP), a certificate (certP), and an authorizing data (AD) electronically signed by said authorization means (18) private key (privA), (SignprivA (AD)) for said mobile unit (14); and
to send said authorizing data (AD), said private key (privP) of said mobile unit (14), said certificate (certP), said public key (pubA) of said authorization means (18), said authorization data electronically signed by said authorization means (18) private key (SignprivA (AD)), and said number of the mobile unit (14) to said operator (20).

### Claim 31 (depends on 30)

A method for controlling access to different physical spaces according to claim 30, characterized in that said method also comprises the step:
with the aid of said operator (20), to send said authorizing data (AD), said private key (privP) of said mobile unit (14), said certificate (certP), said public key (pubA) of said authorization means (18) and said authorization data electronically signed by said authorization means (18) private key (SignprivA (AD)) to said mobile unit.

### Claim 32 (depends on 31)

A method for controlling access to different physical spaces according to claim 31, characterized in that said method also comprises the steps:
with the aid of said mobile unit (14), to establish a communication channel in the near field with said electrical locking device (12i);
to send said certificate (certP) to said electrical locking device (12i); and
to receive a certificate of said locking device (12i) containing its public key privL) (certL) from said electrical locking device (12i).

### Claim 33 (depends on 32)

A method for controlling access to different physical spaces according to claim 32, characterized in that said method also comprises the step:
with the aid of said mobile unit (14) and said electrical locking device (12i), to authenticate each other using their certificates (certP, certL) and their private keys (privP, privL) with the aid of a two-way Authentication protocol,

### Claim 34 (depends on 33)

A method for controlling access to different physical spaces according to claim 33, characterized in that said method also comprises the step:
if said mobile unit (14) and said electrical locking device (12i) have been authenticated, with the aid of said mobile unit (14), to send said authorizing data (AD), and said authorization data electronically signed by said authorization means (18) private key (SignprivA (AD)) to said electrical locking device (12i).

### Claim 35 (depends on 18)

At least one computer program product (1021, . . . , 102n) directly loadable into the internal memory of at least one digital computer (100i, . . . , 100n), comprising software code portions for performing the steps of claim 18 when said at least one product (102i, . . . , 102n) is/are run on said at least one computer (1001, . . . , 100n).