US 2015/0040205 A1Published application

System and Method for Physical Access Control

AssigneeBrivo Systems, Inc.

InventorsSteven Van Till, Eoin Cosgrave

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present invention provides, in one aspect, a system and method for managing authentication tokens that operate across multiple types or physical resources binding the tokens to one or more external electronic Identity Providers; generating tokens; authenticating the tokens at multiple physical resources; managing access to physical resources by linking the tokens to the electronic identities; translating the tokens to the appropriate physical token type based on infrastructure services available at the point of service; validating tokens at the physical resource; tracking and conveying usage information; and making use of social group relationships and other data defined by individual usage to, among other things, simplify the process of granting user-generated credentials to persons connected to a given individual via the Identity Provider or an external social network, for example.

Claims17

Dependent claims

A control panel for controlling access to a physical resource, comprising:

an electronic reader for reading at least one required token;
at least one processor and computer software, written on non-transitory computer readable media and containing instructions stored in a memory and executable by the processor to:
receive configuration instructions from a centralized access control management system controlling access to at least a first physical resource, wherein the first physical resource requires a first token type, wherein the centralized access control management system maintains at least one binding between at least one internal identity and identity and authentication information from at least one electronic identity provider that is external to the access control management system, wherein the instructions pertain to the at least one required token for permitting access the first physical resource, wherein the instructions further executable for processing the receipt of identity and authentication information from at least one user derived from the external identity provider and the reading of the at least one required token in order to permit access to the first physical resource.

A system, comprising:

at least one processor, and
at least one memory storing instructions that, when executed by the at least one processor, cause the system to:
receive, by a credentialing and access control system, identity and authentication information associated with at least one internal identity from at least one electronic identity provider that is external to the credentialing and access control system, based on permission granted by at least one user;
generate at least a first physical resource token for permitting physical access to a first physical resource;
associate the first physical resource token with the at least one internal identity;
receive, by the credentialing and access control system and from the at least one user, identity and authentication information derived from the external identity provider that is associated with the at least one internal identity;
receive, by the credentialing and access control system, an indication of interaction of the first physical resource token with the first physical resource;
and
grant access to the first physical resource.

6 more elements

A method, comprising:

providing at least one processor and computer software, written on non-transitory computer readable media and containing instructions stored in a memory and executable by the at least one processor to:
receive, by a credentialing and access control system, identity and authentication information associated with at least one internal identity from at least one electronic identity provider that is external to the credentialing and access control system, based on permission granted by at least one user;
generate at least a first physical resource token for permitting physical access to a first physical resource;
associate the first physical resource token with the at least one internal identity;
receive, by the credentialing and access control system and from the at least one user, identity and authentication information derived from the external identity provider that is associated with the at least one internal identity;
receive, by the credentialing and access control system, an indication of interaction of the first physical resource token with the first physical resource;
and
grant access to the first physical resource.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/519,218Filed 21 Oct 2014
Priority: 14 Mar 2013
Published: 5 Feb 2015
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 9/3234
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…
G07C 9/00571
Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers…:…
G07C 9/27
Involving the use of a pass: with central registration
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities

Family

Application61/782,007Us provisional application · filed 14 Mar 2013
Application14/211,494Continuation · filed 14 Mar 2014
Application14/519,218Continuation
US 2014/0282993 A1Published application
US 8,881,252 B2Related patent
US 8,990,889 B2Related patent
US 2015/0040205 A1This patent

From the US filing history. Foreign family members aren’t listed.