US 9,870,659 B2Granted

Cryptographic key management via a computer server

AssigneeNexkey, Inc.

InventorsJason Hart, Matthew Patrick Herscovitch, Sotoudeh Hamedi Hagh

Life of this patent

Estimating the term…

Loading patent…

Abstract

Some embodiments include a computer server. The computer server can be configured to: add a security system associated with a user account; provision one or more communication devices associated with the security system; configure a cryptographic key to associate at least a communication device amongst the communication devices with the security system; configure an access control file that is cryptographically signed by the computer server and encrypted with the cryptographic key associated with the security system, wherein the access control file contains permissions of the communication devices to the security system; and provide a data payload including the access control file to a first communication device of the communication devices.

Claims17

Dependent claims

A computer server comprising:

a processor configured to:
add a security system associated with a user account;
provision a NFC-enabled communication device associated with the security system comprising an electronic lock, wherein the NFC-enabled communication device is a mobile user device remotely powering the electronic lock to actuate a locking member;
configure a cryptographic key to associate the NFC-enabled communication device, from amongst a plurality of NFC-enabled communication devices, with the security system;
configure an access control file that is cryptographically signed by the computer server and encrypted with the cryptographic key associated with the security system, wherein the access control file contains permissions of the NFC-enabled communication device to the security system;
and
send a data payload including the access control file to the NFC-enabled communication device, and, in response to determining that the NFC-enabled communication device is not previously associated with the security system, the security system receiving the access control file from the NFC-enabled communication device, to establish a new relationship between the NFC-enabled communication device and the security system, the security system validating the access control file.

4 more elements

A processor-implemented method of operating a computing device to implement a security system, comprising:

provisioning the computing device with an authentication certificate capable of uniquely identifying the computing device and capable of being updated, wherein the authentication certificate is a mutual public key infrastructure (PKI) authentication certificate;
sending identifying information, based on the authentication certificate, associated with the computing device to a NFC-enabled customer communication device to validate the security system implemented by the computing device, wherein the NFC-enabled customer communication device is a mobile user device remotely powering an electronic lock to actuate a locking member;
receiving, in response to determining that the NFC-enabled customer communication device is not previously associated with the computing device, an access control list from the NFC-enabled customer communication device, to establish a new relationship between the NFC-enabled customer communication device and the computing device;
validating the access control list against the authentication certificate;
receiving an access request and a customer signature from the NFC-enabled customer communication device in response to the NFC-enabled customer communication device validating the computing device;
and
validating the access request based on the authentication certificate in response to receiving the customer signature.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/498,490Filed 26 Sep 2014 · continuation
Published: US 2015/0015364 A115 Jan 2015
Granted: 16 Jan 2018
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

G07C 9/21
Involving the use of a pass: having a variable access code
G08C 17/02
Arrangements for transmitting signals characterised by the use of a wireless electrical link: using a radio link
H04B 5/22
Characterised by the transmission technique; characterised by the transmission medium: capacitive coupling
E05B 2047/0057
Circuits, feeding, monitoring: feeding

Family

PCT/AU2010/000508Parent of this continuation · filed 3 May 2010
US 2015/0015364 A1Pre-grant publication · published 15 Jan 2015
Application13/318,526Parent of this continuation
US 2012/0096909 A1Published application
US 9,870,659 B2This patent

From the US filing history. Foreign family members aren’t listed.