Credential driving an automatic lock update

• US 10,135,833 B2
• Filed: 04/22/2016
• Issued: 11/20/2018
• Est. Priority Date: 05/29/2015
• Status: Active Grant

• Current Assignee: Schlage Lock Company LLC (Allegion PLC)
• Original Assignee: Schlage Lock Company LLC (Allegion PLC)
• Inventors: Baumgarte, Joseph W., Hopkins, Benjamin J., Studt, David G.
• Primary Examiner(s): Cribbs, Malcolm
• Application Number:
  US15/136,198
• Publication Number:
  US 20160352749A1
• Time in Patent Office: 942 Days
• Field of Search: None
• CPC Class Codes: G06F 16/2455 Query execution
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

An access control system including a data storage device configured to store a master credential database having a plurality of master identifiers and master status codes, an access control device having a local credential database including a plurality of local identifiers, and an electronic credential including a credential identifier. The access control device is configured to receive the credential identifier from the electronic credential, to determine whether to perform an update based upon the local status code associated with the local identifier of the credential identifier, and to update data in the local credential database with data in the master credential database by way of communication with the data storage device in response to the determining.

Claims

1. An access control system, comprising:

a server configured to store a master credential database including a plurality of master identifiers and master status codes, wherein each of the master identifiers is associated with one of a plurality of local status codes;

an access control device having a processor, a memory having a plurality of instructions stored thereon, and a local credential database including a plurality of local identifiers, wherein each of the plurality of local identifiers is associated with one of the plurality of local status codes, wherein each of the plurality of local identifiers is associated with one of the plurality of the master identifiers, wherein the plurality of local status codes includes a first status code and a second status code, wherein the first status code indicates that the access control device is to grant access to a presented credential having a credential identifier matching the local identifier stored in association with the first status code, and wherein the second status code indicates that the access control device is to initiate an update of the local credential database with data stored on the master credential database; and

an electronic credential including a credential identifier, wherein the credential identifier is associated with one of the plurality of the master identifiers and one of the plurality of the local identifiers,

wherein, in response to execution of the plurality of instructions by the processor, the access control device;

receives the credential identifier from the electronic credential,

determines whether to perform an update based upon the local status code associated with the local identifier of the credential identifier, and

updates data in the local credential database with data in the master credential database by way of communication with the server in response to determining that the local status code associated with the local identifier of the credential identifier is the second status code.

2. The system of claim 1, further comprising a plurality of the electronic credentials, wherein each of the electronic credentials includes a unique credential identifier.

3. The system of claim 1, wherein the electronic credential is configured to receive power from the access control device.

4. The system of claim 1, wherein the electronic credential is a contactless smartcard.

5. The system of claim 1, wherein the electronic credential is a mobile device.

6. The system of claim 1, wherein the access control device and the server are in communication via a wireless connection.

7. The system of claim 6, wherein the wireless connection comprises a WiFi connection.

17. The access control system of claim 1, wherein, in response to execution of the plurality of instructions by the processor, the access control device is further to grant access to the electronic credential without updating the data in the local credential database in response to determining that the local status code associated with the local identifier of the credential identifier is the first status code.

8. An access control device, comprising:

a reader device configured to receive a credential identifier from an electronic credential;

a network communicator configured to transmit and receive data over a network;

a memory device configured to store a credential database including a list of local identifiers, wherein each of the local identifiers has an associated status code selected from a plurality of status codes, wherein the plurality of status codes includes a first status code and a second status code, wherein the first status code indicates that the access control device is to grant access to a presented credential having an identifier matching the local identifier stored in association with the first status code, and wherein the second status code indicates that the access control device is to initiate an update of the credential database with current data stored on a master credential database of a server; and

a processing device configured to receive the credential identifier from the reader device, determine the credential identifier corresponds to a matching one of the local identifiers, transmit a credential database update request to the network by way of the network communicator in response to a determination that the status code associated with the matching local identifier is the second status code, replace data of the credential database with data received from the network in response to the credential database update request, and output a control signal to an electronic device based on the status code associated with the matching local identifier.

9. The device of claim 8, wherein the electronic device comprises a locking mechanism having a locked state and an unlocked state, and wherein the locking mechanism is configured to transition between the locked and unlocked states based on the control signal.

10. The device of claim 8, wherein the electronic device comprises an output component configured to display access request results.

11. The device of claim 8, wherein the electronic device is configured to selectively grant and deny access to a secured area in response to the control signal.

12. The device of claim 11, wherein the access control device is further configured to deny access to the secured area if the credential identifier does not correspond to any of the local identifiers.

18. The device of claim 8, wherein the processing device is configured to output the control signal to the electronic device to grant access to the electronic credential in response to a determination that the status code associated with the matching local identifier is the second status code and in response to a determination that the replaced data of the credential database includes a new status code associated with the matching local identifier that is the first status code.

19. The device of claim 8, wherein the processing device is configured to output the control signal to the electronic device only in response to a determination that the status code associated with the matching local identifier is the first status code to grant access to the electronic credential.

20. The device of claim 8, wherein the control signal is indicative of a denial of access to the electronic credential in response to a determination that the status code associated with the matching local identifier is the first status code.

13. A method for updating a credential database associated with an access control device, the method comprising:

receiving, by the access control device, a presented identifier corresponding with an electronic credential presented to a reader device associated with the access control device;

comparing, by the access control device, the presented identifier to a first credential database including a plurality of potential identifiers, each with an associated status code, wherein the associated status code is selected from a plurality of status codes that includes a first status code and a second status code, wherein the first status code indicates that the access control device is to grant access to a presented electronic credential having an identifier matching the potential identifier associated with the first status code, and wherein the second status code indicates that the access control device is to initiate an update of the first credential database with data stored on a second credential database of a remote server;

identifying, by the access control device, one of the plurality of potential identifiers that matches the received presented identifier; and

determining, by the access control device, the status code associated with the matched one of the plurality of potential identifiers,

wherein in response to the status code associated with the matched one of the plurality of potential identifiers being the second status code, updating the first credential database with data from the second credential database including identifiers, each with an associated status code.

14. The method of claim 13, further comprising receiving the presented identifier at the access control device a second time, and granting access to a secured area if the status code associated with the presented identifier in an updated first credential database is the first status code.

15. The method of claim 13, further comprising granting access to a secured area in response to the status code associated with the matched one of the plurality of potential identifiers being the first status code.

16. The method of claim 13, wherein updating the first credential database includes replacing at least the status code associated with the presented identifier with data from the second credential database.