Digital method for controlling access to an object, a resource or service by a user

A non-transitory computer readable media having instructions stored thereon, that when executed by a processor, controls access to an object or service by a user, said access to said object or service being controlled by a smart lock access control device (1) comprising a digital communication means (3), a computer (5), a lock (7) for unlocking access to the object or service and a storage memory (9) containing an identifier of the smart lock (Lock-ID), a key pair for asymmetric cryptography (Klock-priv, Klock-pub) and the user having a digital device called virtual key (11) comprising a communication means (13) adapted to communicate with the communication means of the smart lock, a calculator (15) and a storage memory (17) containing an identifier of the virtual key (Key-ID), the identifier (Lock-ID) and the public key (Klock-pub) of the smart lock with which is associated the virtual key and a first information (Kv1) obtained as a result of the signature by the private key (Klock-priv) of the identifiers of the virtual key and of the smart lock (Key-ID, Lock-ID) and an arbitrary parameter (Misc1), the lock of the smart lock comprising at least two levels of access to the object or service associated with two levels of interaction between the virtual key and the user, a first level associated with an implicit interaction by simply having a communication between the communication means of the virtual key and of the smart lock and a second level associated with an interaction with explicit validation of the user, said instructions controlling access to the smart object comprising:

• sending by the smart lock to the virtual key a message comprising:
• the identifier of the smart lock (Lock-ID), a challenge (Ch1) created by the smart lock the signature by the private key of the smart lock (Klock-priv) of information related to the identifier of the smart lock (Lock-ID) and challenge (Ch1);
• and
• the level of interaction required among at least two levels of interaction;
• verifying by the virtual key that the smart lock is known to it by comparison of the smart lock identifier received to that stored by the virtual key;
• validating by the virtual key of the signature by using the public key of the smart lock (Klock-pub);
• and, if the validation is positive selecting and implementing the level of interaction received by the virtual key;
• and
• after validation of the interaction by the virtual key, sending a message by the virtual key to the smart lock comprising:
• the identifier of the virtual key (Key-ID);
• and
• a first opening key depending on the challenge received (Ch1) and the information (Kv1) contained in the virtual key;
• so that if the smart lock validates the opening key, it gives access to the object or service with the access level associated with the interaction level used.

A digital smart lock access control device (1) for controlling access to an object or service by a user, comprising a digital communication means (3), a computer (5), a lock (7) for unlocking the access to the object or service and a storage memory (9) containing an identifier of the smart lock (Lock-ID), a key pair for asymmetric cryptography (Klock-pub, Klock-priv), and being adapted to communicate with a digital device called virtual key (11) comprising a communication means (13) adapted to communicate with the communication means of the smart lock, a computer (15) and a storage memory (17) containing an identifier of the virtual key (Key-ID), the identifier (Lock-ID) and the public key (Klock-pub) of the smart lock to which the virtual key is associated and a first information (Kv1) obtained as a result of the signature by the private key (Klock-priv) of identifiers of the virtual key and of the smart lock (Key-ID, Lock-ID) and of an arbitrary parameter (Misc1), the lock of the smart lock comprising at least 2 levels of access to the object or service associated with 2 levels of interaction between the virtual key and the user, a first level associated with an implicit interaction by simple communication of the means of communication of the virtual key and of the smart lock and a second level associated with an interaction with explicit validation by the user, said access control device to:

• send to the virtual key a message including:
• the identifier of the smart lock (Lock-ID);
• a challenge (Ch1) created by the smart lock;
• the signature by the private key of the smart lock (Klock-priv) information related to the identifier of the smart lock (Lock-ID) and challenge (Ch1);
• and
• the level of interaction required among at least two levels of interaction;
• receive a message from the virtual key including:
• the identifier of the virtual key (Key-ID);
• and
• a first opening key depending on the challenge received (Ch1) and the information (Kv1) contained in the virtual key;
• and
• if the opening key is validated, give access to the object or service with the access level associated with the interaction level used.

A virtual key adapted to communicate with a digital smart lock access control device (1) comprising a digital communication means (3), a computer (5), a lock (7) for unlocking the access to the object or service and a storage memory (9) containing an identifier of the smart lock (Lock-ID), a key pair for asymmetric cryptography (Klock-pub, Klock-priv), said virtual key (11) comprising a communication means (13) adapted to communicate with the communication means of the smart lock, a computer (15) and a storage memory (17) containing an identifier of the virtual key (Key-ID), the identifier (Lock-ID) and the public key (Klock-pub) of the smart lock to which the virtual key is associated and a first piece of information (Kv1) obtained as a result of the signature with the private key (Klock-priv) of identifiers of the virtual key and of the smart lock (Key-ID, Lock-ID) and of an arbitrary parameter (Misc1), the lock of the smart lock comprising at least 2 levels of access to the object or service associated with 2 levels of interaction between the virtual key and the user, a first level associated with an implicit interaction by simple communication of the means of communication of the virtual key and of the smart lock and a second level associated with an interaction with explicit validation of the user, said virtual key to:

• receive from the smart lock a message including:
• the identifier of the smart lock (Lock-ID);
• challenge (Ch1) created by the smart lock;
• the signature by the private key of the smart lock (Klock-priv) of an information related to the identifier of the smart lock (Lock-ID) and the challenge (Ch1);
• and
• the level of interaction required among at least two levels of interaction;
• verify that the smart lock is known to it by comparison of the smart lock identifier received to that stored by the virtual key;
• validate the signature by using the public key of the smart lock (Klock-pub);
• and, if the validation is positive, select and implement the level of interaction received by the virtual key;
• and
• after validation of the interaction, send a message to the smart lock including:
• the identifier of the virtual key (Key-ID);
• and
• a first opening key depending on the challenge received (Ch1) and the information (Kv1) contained in the virtual key.