Controlling group access to doors

• US 20050033962A1
• Filed: 07/16/2004
• Published: 02/10/2005
• Est. Priority Date: 10/02/1995
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Corestreet, Ltd. (Assa Abloy AB)
• Inventors: Libin, Phil, Engberg, David, Micali, Silvio
• Granted Patent: US 7,716,486 B2
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

An entity controlling access of a plurality of users to at least one disconnected door includes mapping the plurality of users to a group, for each time interval d of a sequence of dates, having an authority produce a digital signature indicating that members of the group can access door during time interval d, causing at least one of the members of the group to receive the digital signature during time interval d for presentation to the door in order to pass therethrough, having the at least one member of the group present the digital signature to the door D, and having the door open after verifying that (i) the digital signature is a digital signature of the authority indicating that members of the group can access the door at time interval d, and (ii) that the current time is within time interval d. The at least one member of the group may have a user card and the door may have a card reader coupled to an electromechanical lock, and the at least one member of the group may receive the digital signature by storing it into the user card, and may present the digital signature to the door by having the user card read by the card reader.

Claims

1. A method for an entity to control access of a plurality of users to at least one disconnected door, comprising:

mapping the plurality of users to a group;

for each time interval d of a sequence of dates, having an authority produce a digital signature SIGUDd, indicating that members of the group can access door during time interval d;

causing at least one of the members of the group to receive SIGUDd during time interval d for presentation to the door in order to pass therethrough;

having the at least one member of the group present SIGUDd to the door D; and

having the door open after verifying that (i) SIGUDd is a digital signature of the authority indicating that members of the group can access the door at time interval d, and (ii) that the current time is within time interval d.

2. The method of claim 1, wherein the at least one member of the group has a user card and the door has a card reader coupled to an electromechanical lock, and wherein the at least one member of the group receives SIGUDd by storing it into the user card, and presents SIGUDd to the door by having the user card read by the card reader.

3. The method of claim 1, wherein the authority causes SIGUDd to be received by the at least one member of the group during time interval d by posting SIGUDd into a database accessable by the at least one member of the group.

4. The method of claim 1, wherein SIGUDd is a public-key signature, and wherein the door stores the public-key of the authority.

5. The method of claim 1, wherein the door also verifies identity information about the at least one member of the group.

6. The method of claim 1, wherein the identity information about the at least one member of the group includes at least one of:

a PIN and the answer to a challenge of the door.

7. A method of controlling physical access, comprising:

assigning real time credentials to a group of users;

reviewing the real time credentials, wherein the real time credentials include a first part that is fixed and a second part that is modified on a periodic basis, wherein the second part provides a proof that the real time credentials are current;

verifying validity of the real time credentials by performing an operation on the first part and comparing the result to the second part; and

allowing physical access to members of the group only if the real time credentials are verified as valid.

8. A method, according to claim 7, wherein the first part is digitally signed by an authority.

9. A method, according to claim 8, wherein the authority provides the second part.

10. A method, according to claim 9, wherein the second part is provided by an entity other than the authority.

11. A method, according to claim 7, wherein the real time credentials are provided on a smart card.

12. A method, according to claim 7, wherein members of the group obtain the second part of the real time credentials at a first location.

13. A method, according to claim 12, wherein members of the group are allowed access to a second location different and separate from the first location.

14. A method, according to claim 7, wherein at least a portion of the first part of the real time credentials represents a one-way hash applied plurality of times to a portion of the second portion of the real time credentials.

15. A method, according to claim 14, wherein the plurality of times corresponds to an amount of time elapsed since the first part of the real time credentials were issued.

16. A method, according to claim 7, wherein controlling physical access includes controlling access through a door.