Hub key service

• US 10,249,119 B2
• Filed: 07/21/2016
• Issued: 04/02/2019
• Est. Priority Date: 12/23/2011
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Matthews, III, Joseph H., Vasudevan, Lavanya, Thomas, Shawn M., Schrader, Joseph A., Chen, Ted Tai-Yu, Sarin, Raman K.
• Primary Examiner(s): Dolly, Kendall
• Application Number:
  US15/216,552
• Publication Number:
  US 20160328902A1
• Time in Patent Office: 985 Days
• CPC Class Codes: G06F 3/0481 based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/21 for social networking applications

Abstract

In embodiments of a hub key service, a device includes a communication interface for communication coordination with one or more associated devices of the device, and the associated devices correspond to hub members. A hub manager is implemented to generate an electronic key that includes access permissions, which are configurable to enable controlled access for the hub members, such as to a building, vehicle, media device, or location. The hub manager can then correlate the electronic key with the device to enable access to the building, vehicle, media device, or location with the device utilized as the electronic key.

Claims

1. A system, comprising:

a processor; and

a computer-readable storage device storing computer-readable instructions which, when executed by the processor, cause the processor to;

provide a sign-on service for a plurality of members of a group, the plurality of members of the group having a plurality of associated identifiers;

obtain, at the sign-on service, authentication credentials from an individual mobile computing device;

responsive to obtaining the authentication credentials at the sign-on service, attempt to authenticate the individual mobile computing device or an individual user of the individual mobile computing device; and

in at least one instance when the individual mobile computing device or the individual user is authenticated and the individual mobile computing device or the individual user has an individual identifier indicating membership in the group, enable the individual mobile computing device to unlock a physical lock by configuring an electronic key to unlock the physical lock and distributing the electronic key to the individual mobile computing device over a network.

2. The system of claim 1, embodied as a cloud server device.

3. The system of claim 1, wherein the physical lock secures a vehicle or a building.

4. The system of claim 1, wherein the group is a data-sharing group that shares private data within the group.

5. The system of claim 4, wherein the computer-readable instructions, when executed by the processor, cause the processor to:

synchronize at least some of the private data with other mobile computing devices associated with the group.

6. The system of claim 1, wherein the authentication credentials comprise a user identifier and a password.

7. The system of claim 6, wherein the individual identifier indicating membership in the group comprises the user identifier.

8. A computing device, comprising:

a processor; and

a computer-readable storage device storing computer-readable instructions which, when executed by the processor, cause the processor to;

send authentication credentials over a network to a remote sign-on service, the remote sign-on service using the authentication credentials to authenticate the computing device or a user of the computing device to a cloud service, the cloud service establishing the computing device or the user as a member of a group having one or more other members based at least on an identifier of the computing device or the user;

based at least on membership in the group, obtain access permission to unlock a physical lock by obtaining an electronic key over the network from the cloud service; and

after obtaining the access permission, unlock the physical lock by communicating the electronic key received over the network to the physical lock.

9. The computing device of claim 8, wherein the authentication credentials comprise the identifier and a password.

10. The computing device of claim 9, wherein the computer-readable instructions, when executed by the processor, cause the processor to:

employ near-field communication to communicate the electronic key to the physical lock.

11. The computing device of claim 10, wherein the near-field communication is wireless radio frequency communication.

12. The computing device of claim 8, wherein the physical lock controls access to a building, a vehicle, a safe, or a cabinet.

13. The computing device of claim 8, embodied as a mobile device.

14. A method comprising:

provisioning a group of members having associated computing devices;

providing a sign-on service for authentication of individual members of the group;

obtaining, at the sign-on service, authentication credentials from an individual mobile computing device;

responsive to receiving the authentication credentials at the sign-on service, attempting to authenticate the individual mobile computing device or an individual user of the individual mobile computing device; and

in at least one instance when the individual mobile computing device or the individual user is authenticated and the individual mobile computing device or the individual user has an individual identifier indicating membership in the group, enabling the individual mobile computing device to control a physical lock by communicating an electronic key over a network to the individual mobile computing device.

15. The method of claim 14, further comprising:

generating the electronic key and configuring the electronic key with access permissions to control the physical lock.

16. The method of claim 15, further comprising:

after configuring the electronic key with the access permissions, modifying the access permissions of the electronic key to limit use of the electronic key to control the physical lock.

17. The method of claim 16, further comprising:

limiting the use of the electronic key to control the physical lock to a designated time of day.

18. The method of claim 16, further comprising:

limiting the use of the electronic key to control the physical lock to a specific time window.

19. The method of claim 14, further comprising:

monitoring accesses to the physical lock by the individual members of the group.

20. The method of claim 14, further comprising:

providing a private, shared space to the members of the group based at least on membership in the group, the members accessing shared data via the private, shared space.