# US 2019/0169876 A1 · Hybrid physical and logical locking device and mechanism

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0169876 A1
- Document ID: US20190169876A1
- Status: Published application
- Kind: A1
- Application number: 15/829,237
- Filed: 2017-12-01
- Published: 2019-06-06
- Earliest claimed: 2017-12-01
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Shawn D. Hennessy; Nevenko Zunic; Todd P. Seager
- Web page: https://patentgrep.com/patent/US20190169876A1

## CPC

- E05B 19/0017: {Key profiles}
- G06F 16/1774: {Locking methods, e.g. locking methods for file systems allowing shared and concurrent access to files}
- G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards
- G06F 21/445: {by mutual authentication, e.g. between devices or programs}
- G07C 9/00658: {operated by passive electrical keys}
- G07F 7/1016: {Devices or methods for securing the PIN and other transaction-data, e.g. by encryption (arrangements for secret communication, see H04L9/00)}
- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/101: {Access control lists [ACL]}
- G05B 2219/24167: Encryption, password, user access privileges
- G07C 9/00706: {with conductive components, e.g. pins, wires, metallic strips}
- G07C 9/00944: {Details of construction or manufacture}
- H04L 9/3247: {involving digital signatures}
- E05B: LOCKS; ACCESSORIES THEREFOR; HANDCUFFS
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G)

## Abstract

In an approach, a locking device comprises a lock cylinder, a first solenoid valve and a second solenoid valve, a barcode scanner adjacent to the lock cylinder, a spring-loaded interface adjacent to the lock cylinder, and a logical circuit comprising a first disc and a second disc. In an approach for using a hybrid security key in a non-networked device, a locking device of the non-networked device authenticates logical and physical attributes of a hybrid security key, determines authorizations of the hybrid security key, and audits use of hybrid security key while in the locking device of the non-networked device.

## Claims

### Claim 1

A locking device comprising:
a lock cylinder;
a first solenoid valve and a second solenoid valve, wherein:
the first solenoid valve, when engaged, prevents the lock cylinder from rotating around a central axis of the lock cylinder, and
the second solenoid valve, when engaged, prevents the lock cylinder from moving horizontally along the central axis of the locking device;
a barcode scanner adjacent to the lock cylinder;
a spring-loaded interface adjacent to the lock cylinder, wherein upon insertion of a key, the spring-loaded interface physically contacts a portion of the key; and
a logical circuit comprising a first disc and a second disc, wherein the first disc is adjacent to the lock cylinder on a first side and the second disc on a second side.

### Claim 2 (depends on 1)

The locking device of claim 1, further comprising a third disc.

### Claim 3 (depends on 2)

The locking device of claim 2, further comprising a shaft oriented through an opening through a central axis of the first disc, the second disc, and the third disc.

### Claim 4

A method comprising:
responsive to a key being inserted into a front face of a lock cylinder of a locking device, determining whether a physical groove etched into the key arranges a set of locking pins of the locking device in an arrangement that enables rotation of the lock cylinder;
responsive to determining that the physical groove arranges the set of locking pins in the arrangement that enables rotation of the lock cylinder, scanning, by a barcode scanner of the locking device, a barcode of the key, wherein the barcode includes a digital representation of the physical groove etched into the key;
validating the digital representation of the physical groove etched into the key using a public key of a cryptography key pair;
determining whether the digital representation of the physical groove etched into the key stored in the barcode matches a digital representation of the physical groove etched into the key stored in the locking device;
responsive to determining that the digital representation of the physical groove etched into the key stored in the barcode matches the digital representation of the physical groove etched into the key stored in the locking device, disengaging a first solenoid valve, wherein the first solenoid valve, when engaged, prevents the locking cylinder from rotating;
determining whether the key was rotated;
responsive to determining that the key was rotated, disengaging a second solenoid valve, wherein the second solenoid valve, when engaged, prevents the lock cylinder from being moved along a central axis of the locking device;
responsive to the lock cylinder being moved along the central axis of the locking device:
a track key pin of a door of an interior wall of the lock cylinder is engaged, rotating the door of the interior wall open to expose a logical face of the key to an opening of the lock cylinder, wherein the logical face of the key includes at least one contact point, at least one conductive trace, and a smart chip,
a shaft, coupled to a rear face of the lock cylinder, at a first end of the shaft and engaged in a first opening of a central axis of a first disc at a second end of the shaft, is moved along the central axis of the locking device through a second opening of a central axis of a second disc and a third opening of a central axis of a third disc such that the first disc is in physical contact with the second disc;
responsive to the door of the interior wall of the lock cylinder being rotated open, engaging a spring-loaded interface to come in physical contact with the exposed logical face of the key, causing the spring-loaded interface to complete a circuit with the conductive pad, and the spring loaded interface to read the smart chip;
determining whether a unique identifier stored in the barcode matches the unique identifier stored in the smart chip;
responsive to determining that the unique identifier stored in the barcode matches the unique identifier stored in the smart chip, extracting a set of credentials from the key;
determining whether, based on an access control list stored in the locking device, the key is authorized to enable use of a non-networked computing device;
responsive to determining that, based on an access control list stored in the locking device, the key is authorized to enable use of a non-networked computing device, disengaging a set of pins engaged into a set of pin sockets oriented around a perimeter of the third disc, allowing the third disc and the first disc to rotate around the central axis of the locking device.

### Claim 5 (depends on 4)

The method of claim 4, wherein the second disc is immobile.

### Claim 6 (depends on 4)

The method of claim 4, further comprising:
responsive to determining that the physical groove etched into the key does not arrange the set of locking pins of the locking device in an arrangement that enables rotation of the lock cylinder,
engaging the first solenoid valve into the lock cylinder to prevent the removal of the key for a predetermined length of time,
extracting a set of credentials from the key, and
setting off an alarm.

### Claim 7 (depends on 4)

The method of claim 4, further comprising:
responsive to determining that the digital representation of the physical groove etched into the key stored in the barcode does not match a digital representation of the physical groove etched into the key stored in the locking device,
engaging the first solenoid valve into the lock cylinder to prevent the removal of the key for a predetermined length of time,
extracting a set of credentials from the key, and
setting off an alarm.

### Claim 8 (depends on 4)

The method of claim 4, further comprising:
responsive to determining that the key was not rotated in the indicated direction,
engaging a second solenoid valve into the lock cylinder to prevent the removal of the key for a predetermined length of time,
extracting a set of credentials from the key, and
setting off an alarm.

### Claim 9 (depends on 4)

The method of claim 4, further comprising:
responsive to determining that the unique identifier stored in the barcode does not match the unique identifier stored in the smart chip,
engaging a second solenoid valve into the lock cylinder to prevent the removal of the key for a predetermined length of time,
extracting a set of credentials from the key, and
setting off an alarm.

### Claim 10 (depends on 4)

The method of claim 4, further comprising:
responsive to determining that, based on an access control list stored in the locking device, the key is not authorized to enable use of a non-networked computing device, activating an alarm that indicates an authorization failure.

### Claim 11 (depends on 4)

The method of claim 4, further comprising:
indicating, by an indicator external to the locking device, a direction in which to rotate the key.