System and method of initializing and controlling locks

• US 10,134,208 B2
• Filed: 09/22/2014
• Issued: 11/20/2018
• Est. Priority Date: 09/20/2013
• Status: Active Grant

• Current Assignee: Sargent & Greenleaf, Inc. (Stanley Black & Decker, Inc.)
• Original Assignee: Sargent & Greenleaf, Inc. (Stanley Black & Decker, Inc.)
• Inventors: Ferry, James Travis
• Primary Examiner(s): Shayanfar, Ali
• Application Number:
  US15/023,476
• Publication Number:
  US 20160217634A1
• Time in Patent Office: 1,520 Days
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/00841 by a portable device
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00912 for safes, strong-rooms, vaults or the like
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/38 with central registration
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04W 12/041 Key generation or derivation

Abstract

A method of initializing an electronic lock in the field includes the steps of providing a unique lock identifier for a lock, providing a unique organization identifier for an organization, generating master encryption keys for the organization derived from the unique organization identifier for that organization, communicating the unique organization identifier and master encryption keys for the organization to a remote mobile device, using the mobile device to remotely generate individual encryption keys for the lock utilizing one of the master encryption keys, the unique organization identifier and the unique lock identifier for the one of the plurality of locks, and using the mobile device to remotely program a manager key to communicate the individual encryption keys to the lock. Communicating the individual encryption keys initializes the lock to the organization'"'"'s lock management system and permits the lock to encrypt and decrypt communications exclusively with the organization'"'"'s lock management system.

Claims

1. A method of remotely initializing an electronic lock at a remote location comprising the steps of:

providing a unique lock identifier for each of a plurality of locks;

providing a unique organization identifier for an organization, wherein the organization controls a lock management system utilizing the plurality of locks;

generating encryption keys for the organization derived from the unique organization identifier for that organization;

loading at least one of a unique organization identifier or unique lock identifier into a database;

communicating the unique organization identifier and encryption keys for the organization to a remote mobile device;

using the mobile device to remotely generate individual encryption keys for one of the plurality of locks at the remote location utilizing at least one of the encryption keys, the unique organization identifier and the unique lock identifier for the one of the plurality of locks;

using the mobile device to remotely program a manager key to communicate the individual encryption keys for one of the plurality of locks to the one of the plurality of locks, the communication of the individual encryption keys initializing the one of a plurality of locks to that organization'"'"'s lock management system and permitting that one of a plurality of locks to encrypt and decrypt communications exclusively with the organization'"'"'s lock management system.

2. The method of claim 1 wherein the step of providing a unique organization identifier includes the step of loading the unique organization identifier onto the system key having a unique digital identity.

3. The method of claim 2 wherein the step of providing a unique lock identifier includes the step of loading the unique lock identifier onto the system key.

4. The method of claim 1 further including the step of loading a field service application on the mobile device.

5. The method of claim 1 wherein the step of remotely programming a manager key to communicate the individual encryption keys is performed by the field service application.

6. The method of claim 1 further including the step of loading the unique lock identifier for each of a plurality of locks and the unique organization identifier for an organization in a database.

7. The method of claim 1 further including the step of providing a manager key for communicating the unique organization identifier and encryption keys.

8. A method of remotely initializing electronic locks in the field comprising the steps of:

providing a unique lock identifier for each of a plurality of locks;

providing at least one unique organization identifier for an organization, wherein the organization controls a lock management system utilizing the plurality of locks, the unique lock identifier and the at least one unique organization identifier being loaded on a system key;

generating encryption keys for the organization derived from the at least one unique organization identifier for that organization;

loading at least one of a unique organization identifier or unique lock identifier into a database;

providing a manager key to communicate the at least one unique organization identifier and encryption keys for the organization to a remote mobile device in the field;

using the mobile device to remotely generate individual encryption keys for one of the plurality of locks utilizing at least one of the encryption keys and the unique organization identifier and the unique lock identifier for the one of the plurality of locks;

using the mobile device to remotely program a manager key to communicate the individual encryption keys for one of the plurality of locks to the one of the plurality of locks, the communication of the individual encryption keys initializing the one of a plurality of locks to that organization'"'"'s lock management system and permitting that one of a plurality of locks to encrypt and decrypt communications exclusively with the organization'"'"'s lock management system.

9. An electronic lock system comprising:

a plurality of locks, wherein the plurality of locks has a unique lock identifier;

an organization having a unique organization identifier, wherein the organization controls a lock management system utilizing the plurality of locks;

a database for loading the unique organization identifier or unique lock identifier; and

the lock system generating encryption keys for the organization derived from the unique organization identifier for that organization and communicating the unique organization identifier and encryption keys for the organization to a remote mobile device,

using the mobile device to remotely generate individual encryption keys for one of the plurality of locks at the remote location utilizing at least one of the encryption keys, the unique organization identifier and the unique lock identifier for the one of the plurality of locks,

and using the mobile device to remotely program a manager key to communicate the individual encryption keys for one of the plurality of locks to the one of the plurality of locks, the communication of the individual encryption keys initializing the one of a plurality of locks to that organization'"'"'s lock management system and permitting that one of a plurality of locks to encrypt and decrypt communications exclusively with the organization'"'"'s lock management system.

10. The electronic lock system of claim 9, wherein the electronic lock system is configured to generate the encryption key using the unique organization identifier.