Wireless lock system

• US 20060072755A1
• Filed: 10/15/2001
• Published: 04/06/2006
• Est. Priority Date: 10/13/2000
• Status: Active Grant

• Current Assignee: III Holdings 3, LLC
• Original Assignee: Nokia Corporation
• Inventors: Oskari, Koskimies
• Granted Patent: US 7,624,280 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07C 2009/00388 code verification carried out according to the challenge/response method
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/005 whereby the code is a random code
• CPC Class Codes: G07C 2009/00865 remotely by wireless communication
• CPC Class Codes: G07C 2209/04 Access control involving a hierarchy in access rights
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00857 where the code of the data carrier can be programmed

Abstract

A wireless lock and key system using an encryption key pair. When a lock senses a person nearby, the random signal is generated. The key encrypts the signal and returns it to the lock. The lock decrypts the signal and compares it to the original to determine if the lock should be opened. The key may generate temporary tickets for guests to open the lock for limited times.

Claims

1. A wireless lock system, comprising:

an electronic lock device;

an electronic key device;

said lock device and said key device being wirelessly connected;

said lock device storing a public key and said key device storing a private key of an encryption key pair;

said lock device being opened when said key device approaches said lock device, and an encrypted signal is exchanged between said lock device and said key device.

2. The wireless lock system according to claim 1, wherein said lock device and said key device are wirelessly connected using short range communication like Bluetooth protocol.

3. The wireless lock system according to claim 1, wherein said lock device is a virtual lock device in a form of a software module controlling access to digital resources.

4. The wireless lock system according to claim 1, wherein said lock device stores public keys for a plurality of authorized key holders.

5. The wireless lock system according to claim 1, wherein said public key is stored in a plurality of lock devices for which entry is authorized for said key device.

6. The wireless lock system according to claim 1, wherein a different public key is stored in each lock device for which entry is authorized for said key device.

7. The wireless lock system according to claim 1, wherein said electronic key device is a portable wireless device carried by a user.

8. The wireless lock system according to claim 6, wherein said electronic key device is a wireless telephone.

9. The wireless lock system according to claim 6, wherein said electronic key device is worn by the user.

10. The wireless lock system according to claim 1, wherein said key device includes a power source, a processor, non-volatile memory and a transmitter/receiver unit.

11. The wireless lock system according to claim 10, wherein said key device further includes a user authentication device.

12. A wireless lock system, comprising:

an electronic lock device;

an electronic key device;

said lock device and said key device being wirelessly connected;

said lock device storing a public key and said key device storing a private key of an encryption key pair;

said lock device being opened when said key device approaches said lock device, and an encrypted signal is exchanged between said lock device and said key device;

said key device containing electronic tickets for distribution to others which also open said lock device, said tickets being generated by said key device with optional limits.

13. The wireless lock system according to claim 12, wherein said electronic lock device is a virtual lock device in a form of a software module controlling access to digital resources.

14. The wireless lock system according to claim 13, wherein said ticket grants access to at least part of the said digital resources.

15. The wireless lock system according to claim 12, wherein said limits include number of uses.

16. The wireless lock system according to claim 12, wherein said limits include time of day.

17. The wireless lock system according to claim 12, wherein said limits include authorization to generate further tickets.

18. The wireless lock system according to claim 12, wherein said tickets can be transferred electronically.

19. The wireless lock system according to claim 18, wherein said electronic lock device is a virtual lock device in a form of a software module controlling access to digital resources.

20. The wireless lock system according to claim 19, wherein said ticket grants access to at least part of the said digital resources.

21. The wireless lock system according to claim 12, wherein said key device includes a display for indicating the number of available tickets.

22. The wireless lock system according to claim 12, wherein said tickets include expiration date as to validity.

23. The wireless lock system according to claim 12, wherein said tickets include additional information unrelated to the electronic lock and key devices.

24. The wireless lock system according to claim 23, wherein said additional information contains user-related information.

25. The wireless lock system according to claim 12, wherein said key device stores additional information unrelated to said key pair.

26. The wireless lock system according to claim 25, wherein said additional information is a Social Security number.

27. The wireless lock system according to claim 12, wherein said key device includes a personal identification number.

28. The wireless lock system according to claim 12, wherein one of said key device and said lock device includes authenticating information in the form of a coded information known to the user.

29. The wireless lock system according to claim 12, wherein one of said key device and said lock device includes authenticating information in the form of a physical feature of the user.

30. The wireless lock system according to claim 12, wherein said lock device stores a list of invalid key devices.

31. The wireless lock system according to claim 12, wherein said lock device stores a use counter for n-use tickets.

32. The wireless lock system according to claim 12, wherein said lock device includes an identification number where the identification number is hierarchical.

33. A wireless lock system, comprising:

an electronic lock device;

an electronic key device;

an electronic control device;

said lock device and said key device being wirelessly connected;

said lock device storing a public key and said key device storing a private key of an encryption key pair;

said lock device being opened when said key device approaches said lock device, and an encrypted signal is exchanged between said lock device and said key device;

said control device being connectable to said electronic key device for loading said private key and other data into said key device.

34. The wireless lock system according to claim 33, wherein said electronic lock device is a virtual lock device in a form of a software module controlling access to digital resources.

35. The wireless lock system according to claim 33, wherein said key device is non-interactive with a user.

36. The wireless lock system according to claim 33, wherein said control device loads said key device remotely and electronically.

37. The wireless lock system according to claim 33, wherein said key device further loads data into another key.

39. The wireless lock system according to claim 33, wherein confirmation data is input into said control device which forwards confirmation to said key device.

40. A method of operating a wireless lock system, comprising:

storing a public key in said lock device and a private key in said key device, where said private key and said public key are an encryption key pair;

wirelessly connecting an electronic lock device and an electronic key device;

sending a random signal from said lock device to said key device;

encrypting said random signal in said key device using said private key;

returning said encrypted random signal to said lock device;

decrypting said encrypted random signal in said lock device, comparing the result with said random signal and opening said lock device if a match is obtained.

41. The method according to claim 40, further comprising:

generating tickets from said key device, said tickets having optional limits to opening said lock device.

42. The method according to claim 41, wherein said limits include number of uses.

43. The method according to claim 41, wherein said limits include time of day.

44. The method according claim 41, wherein said limits include authority to generate further tickets.

45. The method according to claim 41, further comprising:

providing an electronic control device; and

loading said private key into said key device from said control device.

46. A method of issuing tickets from a key device, comprising:

providing a key device containing a plurality of tickets;

electronically transferring one of said tickets to a ticket holding device;

assigning a unique ticket identifier to said ticket;

assigning optional limits to said ticket;

and digital signing said ticket with a private key of said key device.

47. A method of using tickets issued from a key device to open a lock device, comprising:

broadcasting a service offer from said lock device;

sending a key device identifier stored in said ticket to said lock device;

sending a random number from said lock device to said key device;

encrypting said random number and sending said encrypted random number and said ticket to said lock device;

decrypting said encrypted random number in said lock device and comparing with said random number;

opening said lock device if the comparison is a match.

48. The method according to claim 47, further comprising:

verifying said ticket in said lock device after said comparing and before said opening;

said verifying including decrypting the checksum with a public key;

determining the access rights of the grantor; and

determining the derivative level of the ticket.