# US 2019/0357050 A1 · Access control system with trusted third party > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0357050 A1 - Document ID: US20190357050A1 - Status: Published application - Kind: A1 - Application number: 16/477,100 - Filed: 2018-01-19 - Published: 2019-11-21 - Earliest claimed: 2017-01-23 - Assignees: Carrier Corporation - Applicants: Carrier Corporation - Inventors: ASHLEY KENNEDY-FOSTER; BEN HOLM - Web page: https://patentgrep.com/patent/US20190357050A1 ## CPC - G07C 9/00571: {operated by interacting with a central unit} - H04W 12/084: using delegated authorisation, e.g. open authorisation [OAuth] protocol - G06F 21/35: communicating wirelessly - G07C 9/22: in combination with an identity check of the pass holder - G07C 9/26: using a biometric sensor integrated in the pass - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/105: {Multiple levels of security} - H04W 12/06: Authentication - H04W 12/66: {Trust-dependent, e.g. using trust scores or trust relationships} - H04W 12/72: Subscriber identity - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G07C 9/23: by means of a password - G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An access control system is provided and includes a control device disposed to restrict access to a secured resource and a networked device disposed in signal communication with the control device. The networked device requests authentication of a user from a trusted device responsive to a presentation of credentials to the control device in a request for access to the secured resource, the credentials are associated with access rights of the user, the networked device is receptive of the authentication, and the control device permits a level of access to the secured resource in accordance with the access rights upon the reception of the authentication. ## Claims ### Claim 1 An access control system, comprising: a control device disposed to restrict access to a secured resource; and a networked device disposed in signal communication with the control device, wherein: the networked device requests authentication of a user from a trusted device responsive to a presentation of credentials to the control device in a request for access to the secured resource, the credentials are associated with access rights of the user, the networked device is receptive of the authentication, and the control device permits a level of access to the secured resource in accordance with the access rights upon the reception of the authentication. ### Claim 2 (depends on 1) The access control system according to claim 1, wherein the control device comprises a door lock. ### Claim 3 (depends on 1) The access control system according to claim 1, wherein the networked device comprises a server. ### Claim 4 (depends on 1) The access control system according to claim 1, wherein the trusted device comprises a portable computing device. ### Claim 5 (depends on 1) The access control system according to claim 1, wherein the trusted device comprises a smart phone. ### Claim 6 (depends on 1) The access control system according to claim 1, wherein the credentials are presentable as a card or badge. ### Claim 7 (depends on 1) The access control system according to claim 1, wherein the authentication is alphanumeric or biometric. ### Claim 8 (depends on 1) The access control system according to claim 1, wherein data relating to authentication of the user is stored remotely from the control and networked devices. ### Claim 9 An access control system, comprising: a control device, which is disposed to restrict access to a secured resource; and a networked device, which is disposed in signal communication with the control device and configured to distribute an authentication application to a trusted device of a user to whom credentials for access rights are granted, wherein: the networked device requests that the trusted device authenticate the user by executing the authentication application in response to a presentation of the credentials to the control device in a request for access to the secured resource, the networked device is receptive of a positive or negative indication of the authentication of the user from the trusted device, and the control device permits a level of access to the secured resource in accordance with the access rights upon the reception of the positive indication of the authentication by the networked device. ### Claim 10 (depends on 9) The access control system according to claim 9, wherein the control device comprises a door lock. ### Claim 11 (depends on 9) The access control system according to claim 9, wherein the networked device comprises a server. ### Claim 12 (depends on 9) The access control system according to claim 9, wherein the trusted device comprises a portable computing device. ### Claim 13 (depends on 9) The access control system according to claim 9, wherein the trusted device comprises a smart phone. ### Claim 14 (depends on 9) The access control system according to claim 9, wherein the credentials are presentable as a card or badge. ### Claim 15 (depends on 9) The access control system according to claim 9, wherein the authentication application requires alphanumeric or biometric authentication. ### Claim 16 (depends on 15) The access control system according to claim 15, wherein data relating to the alphanumeric or biometric authentication is stored remotely from the control and networked devices. ### Claim 17 A method of operating an access control system, the method comprising: receiving, at a control device disposed to restrict access to a secured resource, a presentation of credentials in a request for access to the secured resource; recognizing that the credentials are associated with access rights of a user; requesting an authentication of the user from a trusted device; and permitting a level of access to the secured resource in accordance with the access rights upon reception of the authentication. ### Claim 18 (depends on 17) The method according to claim 17, further comprising issuing the credentials to the user. ### Claim 19 (depends on 17) The method according to claim 17, further comprising distributing an authentication application to the trusted device. ### Claim 20 (depends on 19) The method according to claim 19, wherein: the authentication application requires alphanumeric or biometric authentication, and data relating to the alphanumeric or biometric authentication is stored remotely from the access control system.