# US 2019/0172287 A1 · Rolling Code Based Proximity Verification for Entry Access > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0172287 A1 - Document ID: US20190172287A1 - Status: Published application - Kind: A1 - Application number: 16/145,402 - Filed: 2018-09-28 - Published: 2019-06-06 - Earliest claimed: 2017-12-01 - Assignees: Openpath Security Inc. - Applicants: OpenPath Security Inc. - Inventors: Cameron Kaye; Samy Kamkar; Robert J. Peters; Alexander A. Kazerani - Web page: https://patentgrep.com/patent/US20190172287A1 ## CPC - G07C 9/00309: {operated with bidirectional data transmission between data carrier and locks} - G07C 2009/00492: {whereby the code is a rolling code} - G07C 2009/00769: {with data transmission performed by wireless means} - G07C 2209/63: Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle - G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE ## Abstract The solution is directed to access control systems and verifying proximity of a user to an access point that the user is wirelessly requesting access to. The proximity verification is based on placing proximity hubs adjacent to the different access points. Each proximity hub advertises a different unique identifier that changes periodically over a short-range wireless network and can be detected with a mobile device if the mobile device is physically within a short distance from the proximity hub. The unique identifier changes based on a rolling code. A user is permitted access to a restricted access point in response to the mobile device sending over a different long-range wireless network, the unique identifier advertised from a proximity hub adjacent to a desired access point and user access credentials authenticating access privileges of the user to the desired access point. ## Claims ### Claim 1 A method comprising: broadcasting a periodically changing rolling code from a device that is associated with a secured resource, the rolling code corresponds to a changing name of a wireless network or wireless device; receiving a request comprising a first value and a second value; obtaining a set of rolling codes recently advertised from the device based on the first value from the request matching a static identifier uniquely identifying the device or the secured resource from a set of devices or a set of secured resources; and providing access to the secured resource based on (i) the first value from the request matching the static identifier uniquely identifying the device or the secured resource, and (ii) the second value from the request matching one of the set of rolling codes. ### Claim 2 (depends on 1) The method of claim 1 further comprising obtaining access credentials from a physical access card, proximity card, or smart card placed over the device, and providing access to the secured resource based on the access credentials from the physical access card, the proximity card, or the smart card being authorized to access the secured resource. ### Claim 3 (depends on 1) The method of claim 1 further comprising generating a magnetic field from the device, the magnetic field providing power to a physical access card, a proximity card, or a smart card placed in the magnetic field, and causing the physical access card, the proximity card, or the smart card to transmit data to the device. ### Claim 4 (depends on 1) The method of claim 1, wherein the changing name comprises a changing Bluetooth device name or changing service set identifier (SSID). ### Claim 5 (depends on 1) The method of claim 1 further comprising restricting access to the secured resource based on (i) the first value from the request differing from the static identifier uniquely identifying the device or the secured resource, or (ii) the second value from the request not matching one of the set of rolling codes. ### Claim 6 (depends on 5) The method of claim 5, said restricting comprises locking or retaining a locked state of the secured resource. ### Claim 7 (depends on 1) The method of claim 1, wherein granting access comprises unlocking an electronically controlled lock or a mechanical lock of the secured resource. ### Claim 8 (depends on 1) The method of claim 1, wherein said broadcasting comprises advertising a plurality of messages at different times, wherein each message comprises the unique identifier and a different rolling code value, and wherein the unique identifier may come before or after the different rolling code value in the message. ### Claim 9 (depends on 1) The method of claim 1 further comprising receiving the rolling code using a Bluetooth radio of a user mobile device when the rolling code corresponds to a changing Bluetooth device name, and receiving the rolling code using a WiFi radio of the user mobile device when the rolling code corresponds to a changing SSID. ### Claim 10 (depends on 1) The method of claim 1 further comprising receiving access credentials from a user mobile device submitting the request. ### Claim 11 (depends on 10) The method of claim 10, wherein said providing comprises selecting a set of authorized users or devices for the secured resource from other sets of authorized users or devices for other secured resources based on the first value from the request, and authorizing access to the secured resource based on the access credentials being associated with an authorized user or device from the set of authorized users or devices. ### Claim 12 (depends on 1) The method of claim 1 further comprising tracking the set of rolling codes recently advertised from the device at an access control unit (ACU), that is remote from the device, based on the ACU and the device being configured with a particular seed value for generating the rolling code, and wherein said providing comprises matching, at the ACU, the first value from the request to the static identifier, and (ii) matching the second value from the request matching one of the set of rolling codes. ### Claim 13 (depends on 12) The method of claim 12, wherein said providing comprises issuing an open command from the ACU to the secured resource. ### Claim 14 A method comprising: distributing at least two different messages from a particular device at different times to one or more user mobile devices in wireless range of the particular device, wherein the at least two messages comprise a common first value and different second values; detecting, at the particular device or a user mobile device of the one or more user mobile devices, a user action initiating a request to access a secured resource; and performing an access request procedure with the user mobile device in response to the detecting occurring within a particular period of time of the distributing, wherein performing the access request procedure comprises providing, from the user mobile device to the particular device, access credentials, and the first and second values from a most recent message of the at least two messages distributed by the particular device. ### Claim 15 (depends on 14) The method of claim 14 further comprising receiving access to a secured resource located adjacent to the particular device based on (i) the first value provided during the access request procedure matching a static identifier uniquely identifying the particular device or the secured resource, and (ii) the second value provided during the access request procedure matching of different second values wirelessly transmitted from the particular device. ### Claim 16 (depends on 14) The method of claim 14 further comprising scanning for the at least two messages over a first wireless network without establishing a connection to the particular device. ### Claim 17 (depends on 14) The method of claim 14, wherein performing the access request procedure comprises (i) identifying a request to access the secured resource based on the first value provided by the user mobile device matching a static identifier uniquely identifying the particular device or the secured resource, (ii) verifying permission to access the secured resource based on the access credentials, and (iii) verifying proximity of the user mobile device to the particular device based on the second value provided by the user mobile device matching a recently distributed second value from the particular device. ### Claim 18 An access control system comprising: a secured resource that can be remotely opened and closed; an access device associated with the secured resource, the device comprising: a rolling code generator; and a wireless radio advertising, over a wireless first network, a periodically changing message comprising (i) an identifier uniquely identifying the access device or the secured resource, and (ii) a rolling code that is periodically changed by the rolling code generator; and an access control unit (ACU) controlling access to the shared resource, the ACU comprising a network interface to a different second network, and a processor configured to: receive access credentials, a first value, and a second value in response to engaging in an access request procedure with a user mobile device; and open access to the secured response in response to (i) successfully verifying the access request procedure is directed to the secured resource based on the first value matching the identifier uniquely identifying the access device or the secured resource, (ii) successfully verifying the user mobile device is authorized to access based on the access credentials, and (iii) successfully verifying the proximity of the user mobile device to the access device based on the second value matching a rolling code that is recently advertised by the access device. ### Claim 19 (depends on 18) The access control system of claim 18, wherein the access device further comprises (i) a magnetic field generator generating a magnetic field powering a physical access card, a proximity card, or a smart card within a particular distance from the access device, and (ii) an antenna receiving access credentials from the physical access card, the proximity card, or the smart card within the particular distance from the access device. ### Claim 20 (depends on 18) The access control system of claim 18, wherein the ACU further comprises the rolling code generator, and a seed value used to generate the same periodically changing rolling code as the rolling code generator of the access device.