Configurable digital badge holder

• US 10,204,463 B2
• Filed: 03/11/2015
• Issued: 02/12/2019
• Est. Priority Date: 01/03/2007
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Audebert, Yves Gabriel Louis, Le Saint, Eric F., Hart, Jason, Fedronic, Dominique Louis Joseph
• Primary Examiner(s): Gudorf, Laura
• Application Number:
  US14/644,305
• Publication Number:
  US 20150279133A1
• Time in Patent Office: 1,434 Days
• Field of Search: 235382, 235492, 340 52, 340 56, 340 57, 340 101
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 9/21 having a variable access code
• CPC Class Codes: G07C 9/25 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A portable authentication system includes a security module, that may be a smart card, SIM (Subscriber Identity Module), USB controller with a secure chip, or similar module capable of storing one or more credentials, and an interface module such as a digital badge holder that is able to communicate with the security module, for instance by providing a smart card communication interface. The portable authentication system may be either a single integrated system or a dual system where the security module can be removed or disconnected from the interface system.

Claims

1. A method of using a portable authentication device for communication with an Access Control System having a plurality of access points, comprising:

storing at least one credential in a subscriber identification module (SIM) installed within the portable authentication device, the SIM authenticating the portable authentication device to the Access Control System, wherein the SIM is removable from the portable authentication device;

communicating with the plurality of access points using an access point interface component, separate from the SIM, that stores a plurality of interface protocols used to exchange data with the access points, wherein at least one of the access points uses a different protocol than another one of the access points and wherein at least one of the protocols is a contactless protocol;

reading the at least one credential from the SIM and storing the at least one credential in a transient memory on the portable authentication device;

an automated context selection component automatically detecting protocols used by each of the access points to exchange authentication data that authenticates the portable authentication device to the Access Control System; and

if the SIM is removed from the portable authentication device, erasing the at least one credential from the transient memory.

2. A method according to claim 1, wherein the contactless protocol is ISO 14443 compliant.

3. A method according to claim 1, wherein the contactless protocol is conversational.

4. A method according to claim 1, wherein the contactless protocol is non-conversational.

5. A method according to claim 1, further comprising:

detecting when the SIM is removed from the portable authentication device.

6. A method according to claim 1, wherein the access point interface component uses information provided by a cellphone.

7. A method according to claim 1, further comprising:

using a contactless reader.

8. A method according to claim 1, further comprising:

using a wireless reader.

9. A method according to claim 1, wherein the automated context selection component uses global positioning system compliant information.

10. A method according to claim 9, wherein global positioning system compliant information is provided by a cellphone.

11. A method according to claim 1, wherein the SIM authenticates a user before releasing information protected by the SIM.

12. A method according to claim 11, wherein the SIM confirms consent of a user before releasing any information protected by the SIM.

13. A method according to claim 1, further comprising:

erasing the at least one credential from the transient memory if a timer expires.

14. A method according to claim 13, wherein the timer is initiated in response to user credentials being verified.

15. A method according to claim 14, wherein the user credentials are provided for verification in response to the SIM being installed on the portable authentication device.

16. A method according to claim 1, further comprising:

erasing the at least one credential from the transient memory if a maximum number of uses of the at least one credential has been reached.

17. A method according to claim 1, further comprising:

erasing the at least one credential from the transient memory in response to an instruction from a user.