Access Control System and Method for Operating Said System

• US 20090183541A1
• Filed: 04/24/2007
• Published: 07/23/2009
• Est. Priority Date: 04/28/2006
• Status: Active Grant

• Current Assignee: Telcred AB
• Original Assignee: SICS Swedish Institute of Computer Science AB (Government of Sweden)
• Inventors: Cao, Ling, Seitz, Ludwig, Sadighi, Babak
• Granted Patent: US 8,482,378 B2
• Time in Patent Office: Days
• US Class Current: 70/263
• CPC Class Codes: G07C 2009/00388 code verification carried out according to the challenge/response method
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/00825 remotely by lines or wireless communication
• CPC Class Codes: G07C 2009/00865 remotely by wireless communication
• CPC Class Codes: G07C 2009/0088 centrally
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G08C 17/02 using a radio link
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: Y10T 70/625 Operation and control
• CPC Class Codes: Y10T 70/70 Operating mechanism
• CPC Class Codes: Y10T 70/735 Operating elements

Abstract

The present invention relates to a system (10) operable to control access to different physical spaces, each provided with an electrical locking device (12₁, . . . , 12_n), with the aid of a programmable, mobile unit (14). The system (10) comprises an authority means (16) operable to issue access rights connected to the programmable, mobile unit (14) in the form of an authorizing data (AD), which authorizing data (AD) is sent to an authorization means (18) connected to the authority means (16), and operable to generate an alpha-numerical key for the mobile unit (14), and to send the alpha-numerical key and a unique identifier of the mobile unit (14) to an operator (20), which is connected to the authorization means (18). The operator (20) is operable to send the alpha-numerical key to the mobile unit (14) identified by the unique identifier. An electrical locking device (12_i), wherein 1≦i≦n, and the mobile unit (14) uses an authentication protocol with the alpha-numerical key to authenticate the mobile unit (14), wherein the mobile unit, if it has been authenticated, sends the authorizing data (AD) to the electrical locking device (12_i), and if the authorizing data (AD) comprises an identifier of the electrical locking device (12_i), the mobile unit (14) is able to open the electrical locking device (12_n) with the aid of a communication means (22) comprised in the mobile unit (14) for communication in the near field.

Claims

1. A system (10) operable to control access to different physical spaces, each provided with an electrical locking device (12i, . . . , 12_n), with the aid of a programmable, mobile unit (14), characterized in that said system (10) comprises an authority means (16) operable to issue access rights connected to said programmable, mobile unit (14) in the form of an authorizing data (AD), which authorizing data (AD) is sent to an authorization means (18) connected to said authority means (16) and operable to generate an alphanumerical key for said programmable, mobile unit (14) and to send said alphanumerical key and a unique identifier of said mobile unit (14) to an operator (20), which is connected to said authorization means (18), wherein said operator (20) is operable to send said alphanumerical key to said mobile unit (14) identified by said unique identifier, wherein an electrical locking device (12₁), wherein 1≦

i≦

n, and said mobile unit (14) uses an authentication protocol with said alphanumerical key to authenticate said mobile unit (14), wherein said mobile unit (14), if it has been authenticated, sends said authorizing data (AD) to said electrical locking device (12₁), and if said authorizing data (AD) comprises an identifier of said electrical locking device (120 said mobile unit (14) is able to open said electrical locking device (12₁) with the aid of a communication means (22) comprised in said mobile unit (14) for communication in the near field.

2. A system (10) operable to control access to different physical spaces according to claim 1, characterized in that said unique identifier of said mobile unit (14) is a number, and in that said authorizing data (AD) comprises an identification (ID₁;

. . . ;

ID_n) of each locking device (12₁, . . . , 12_n) which said mobile unit (14) should be able to open.

3. A system (10) operable to control access to different physical spaces according to claim 2, characterized in that said alphanumerical key is a symmetric, secret key (kp), and in that a physical space Is provided with an electrical master locking device (24), wherein said authorization means (18) also is operable to send said secret key (kp) and said number identifying said mobile unit (14) to said master locking device (24).

4. A system (10) operable to control access to different physical spaces according to claim 3, characterized in that said master locking device (24) and said mobile unit (14) use said authentication protocol with said secret key (kp) to authenticate said mobile unit (14).

5. A system (10) operable to control access to different physical spaces according to claim 4, characterized in that said master locking device (24) is operable, after said mobile unit (14) has been authenticated, to send an authorization request to said authorization means (18) whereafter said authorization means (18) also is operable to send said authorizing data (AD) concatenated with a message authentication code (MAC_kl (AD)), and an encrypted, secret key of said mobile unit (14) with a symmetric key (kl) (E_kl (kp)) to said master locking device (24).

6. A system (10) operable to control access to different physical spaces according to claim 5, characterized in that said master locking device (24) also is operable to send said authorizing data (AD) concatenated with said message authentication code (MAC_kl (AD)), and said encrypted secret key of said mobile unit (14) with said symmetric key (kl) (E_kl (kp)) to said mobile unit (14) with the aid of a communication means (26) comprised in said master locking device (24) for communication in the near field.

7. A system (10) operable to control access to different physical spaces according to claim 1, characterized in that said mobile unit (14) is operable to send said encrypted secret key of said mobile unit (14) with said symmetric key (kl) (E_kl (kp)) to said electrical locking device (12_i), which in turn also is operable to retrieve said secret key (kp) by decrypting E_kl (kp) with said symmetric key (kl).

8. A system (10) operable to control access to different physical spaces according to claim 7, characterized in that said mobile unit (14) also is operable to send said authorizing data (AD) concatenated with said message authentication code (MAC_kl (AD)) to said electrical locking device (12_i), whereby said electrical locking device (12_i) is operable to verify the validity of said authorizing data (AD) with said message authentication code (MAC) and said symmetric key (kl).

9. A system (10) operable to control access to different physical spaces according to claim 2, characterized in that said alphanumerical key is a symmetric, secret key (kp), wherein said authorization means (18) also is operable to generate said secret key (kp), said authorizing data (AD) concatenated with a message authentication code (MAC_kl (AD)), and an encrypted, secret key of said mobile unit (14) with a symmetric key (ki) (E_kl (kp)), and to send said secret key (kp), said authorizing data (AD) concatenated with said message authentication code (MAC_kl (AD)), said encrypted secret key of said mobile unit (14) with said symmetric key (E_kl (kp)), and said number to said operator (20).

10. A system (10) operable to control access to different physical spaces according to claim 9, characterized in that said operator (20) also is operable to send, besides said secret key (kp), said authorizing data (AD) concatenated with said message authentication code (MAC_kl (AD)), and said encrypted secret key of said mobile unit (14) with said symmetric key (E_kl (kp)) to said mobile unit (14).

11. A system (10) operable to control access to different physical spaces according to claim 10, characterized in that said mobile unit (14) also is operable to establish a communication channel in the near field with said electrical locking device (12_i), and to send said encrypted secret key of said mobile unit (14) with said symmetric key (E_kl (kp)) to said electrical locking device (12₁), which in turn also is operable to retrieve said secret key (kp) by decrypting E_kl (kp) with said symmetric key (kl).

12. A system (10) operable to control access to different physical spaces according to claim 11, characterized in that said mobile unit (14) also is operable to send said authorizing data (AD) concatenated with said message authentication code (MAC_kl (AD)) to said electrical locking device (12_i), whereby said electrical locking device (12;

) is operable to verify the validity of said authorizing data (AD) with said message authentication code (MAC) and said symmetric key (kl).

13. A system (10) operable to control access to different physical spaces according to claim 2, characterized in that said alphanumerical key is an asymmetric key pair (privP, publP), wherein said authorization means (18) also is operable to generate said asymmetric key pair (privP, pubiP), a certificate (certP), and an authorizing data (AD) electronically signed by said authorization means (18) private key (privA), (Sign_privA (AD)) for said mobile unit (14), and to send said authorizing data (AD), said private key (privP) of said mobile unit (14), said certificate (certP), said public key (pubA) of said authorization means (18), said authorization data electronically signed by said authorization means (18) private key (Sign_privA (AD)), and said number to said operator (20).

14. A system (10) operable to control access to different physical spaces according to claim 13, characterized in that said operator (20) also is operable to send said authorizing data (AD), said private key (privP) of said mobile unit (14), said certificate (certP), said public key (pubA) of said authorization means (18), and said authorization data electronically signed by said authorization means (18) private key (Sign_privA (AD)) to said mobile unit (14).

15. A system (10) operable to control access to different physical spaces according to claim 14, characterized in that said mobile unit (14) also is operable to establish a communication channel in the near filed with said electrical locking device (12_i), and to send said certificate (certP) to said electrical locking device (12_i), and to receive a certificate of said locking device (12_i) containing its public key (privL) (certL) from said electrical locking device (12_i).

16. A system (10) operable to control access to different physical spaces according to claim 15, characterized in that said mobile unit (14) and said electrical locking device (12_i) are operable to authenticate each other using their certificates (certP, certL) and their private keys (privP, privL) with the aid of a two-way Authentication protocol.

18. A method for controlling access to different physical spaces, each provided with an electrical locking device (12₁;

. . . ;

12_n), with the aid of a programmable, mobile unit (14) and with the aid of a system (10), wherein said method comprises the steps;

an authority means (16) comprised in said system (10) issues access rights connected to said mobile unit (14) in the form of an authorizing data (AD);

to send said authorizing data (AD) to an authorization means (18) comprised in said system (10) and connected to said authority means (16);

said authorization means (18) generates an alphanumerical key for said mobile unit (14);

is—

to send said alphanumerical key and a unique identifier of said mobile unit (14) to an operator (20) which is connected to said authorization means (18);

said operator (20) sends said alphanumerical key to said mobile unit (14) identified by said unique identifier;

wherein an electrical Socking device (12_i), wherein 1≦

i≦

n, and said mobile unit (14) use an authentication protocol with said alphanumerical key to authenticate said mobile unit (14);

if said mobile unit (14) has been authenticated, it sends said authorizing data (AD) to said electrical locking device (12_i);

to verify the validity of the authorization data (AD); and

if said authorizing data (AD) comprises an identifier of said electrical locking device (12_i), said mobile unit (14) is able to open said electrical locking device (12_i) with the aid of a communication means (22) comprised in said mobile unit (14) for communication in the near field,

17. A system (10) operable to control access to different physical spaces according to claim 18, characterized in that said mobile unit (14) also is operable, if said mobile unit (14) and said electrical locking device (12_i) have been authenticated, to send said authorizing data (AD) and said authorization data electronically signed by said authorization means (18) private key (Sign_privA (AD)) to said electrical locking device (12j), which verifies said signature.

19. A method for controlling access to different physical spaces according to claim 18, characterized in that said unique identifier of said mobile unit (14) is a number, and in that said authorizing data (AD) comprises an identification (ID₁;

. . . ;

ID_n) of each locking device (12₁;

. . . 12_n) which said mobile unit (14) should be able to open.

20. A method for controlling access to different physical spaces according to claim 19, characterized in that said alphanumerical key is a symmetric, secret key (kp), and in that a physical space is provided with an electrical master locking device (24), wherein said method also comprises the step:

said authorization means (18) sends said secret key (kp) and said number identifying said mobile unit (14) to said master locking device (24).

21. A method for controlling access to different physical spaces according to claim 20, characterized in that said method also comprises the step;

to authenticate said mobile unit (14) with the aid of said master locking device (24) and said mobile unit (14) using said authentication protocol with said secret key (kp).

22. A method for controlling access to different spaces according to claim 21, characterized in that said method also comprises the steps:

if said mobile unit (14) has been authenticated, with the aid of said master 20 locking device (24), to send an authorization request to said authorization means (18); and

with the aid of said authorization means (18), to send said authorizing data (AD) concatenated with a message authentication code (MAC_kl (AD)), and an encrypted secret key of said mobile unit (14) with a symmetric key (kl) (E_kl (kp)) to said master locking device (24).

23. A method for controlling access to different spaces according to claim 22, characterized in that said method also comprises the step:

with the aid of said master locking device (24), to send said authorizing data (AD) concatenated with said message authentication code (MAC_kl (AD)), and said encrypted secret key of said mobile unit (14) with said symmetric key (kl) (E_kl (kp)) to said mobile unit (14) with the aid of a communication means (26) comprised in said master locking device (24) for communication in the near field.

24. A method for controlling access to different physical spaces according to claim 18, characterized in that said method also comprises the steps:

with the aid of said mobile unit (14), to send said encrypted secret key of said mobile unit (14) with said symmetric key (kl) (E_kl (kp)) to said electrical locking device (12_i); and

with the aid of said electrical locking device (12_i, to retrieve said secret key (kp) by decrypting E_kl (kp) with said symmetric key (kl).

25. A method for controlling access to different physical spaces according to claim 24, characterized in that said method also comprises the steps:

with the aid of said mobile unit (14), to send said authorizing data (AD) concatenated with said message authentication code (MAC_kl (AD)) to said electrical locking device (12_i); and

—

with the aid of said electrical locking device (12j), to verify the validity of said authorizing data (AD) with said message authentication code (MAC) and said symmetric key (kl).

26. A method for controlling access to different physical spaces according to claim 19, characterized in that said alphanumerical key is a symmetric, secret key (kp), and in that said method also comprises the steps:

with the aid of said authorization means (18), to generate said secret key (kp), said authorizing data (AD) concatenated with a message authentication code (MAC_kl (AD)), and an encrypted, secret key of said mobile unit (14) with a symmetric key (kl) (E_kl (kp)); and

to send said secret key (kp), said authorizing data (AD) concatenated with said message authentication code (MAC_kl (AD)), said encrypted secret key of said mobile unit (14) with said symmetric key (E_kl (kp)), and said number of the mobile unit (14) to said operator (20).

27. A method for controlling access to different physical spaces according to claim 26, characterized in that said method also comprises the step:

with the aid of said operator (20), to send, besides said secret key (kp), said authorizing data (AD) concatenated with said message authentication code (MAC_kl (AD)), and said encrypted secret key of said mobile unit (14) with said symmetric key (E_kl (kp)) to said mobile unit (14).

28. A method for controlling access to different physical spaces according to claim 27, characterized in that said method also comprises the steps;

with the aid of said mobile unit (14), to establish a communication channel in the near field with said electrical locking device (12);

to send said encrypted key of said mobile unit (14) with said symmetric key (E_ki (kp)) to said electrical locking device (12_i); and

—

with the aid of said electrical locking device (12_i), to retrieve said secret key (kp) by decrypting E_kl (kp) with said symmetric key (kl).

29. A method for controlling access to different physical spaces according to claim 28 characterized in that said method also comprises the steps:

with the aid of said mobile unit (14), to send said authorizing data (AD) concatenated with said message authentication code (MAC_kl (AD)) to said electrical locking device (12_i); and

with the aid of said electrical locking device (12_i), to verify the validity of said authorizing data (AD) with aid message authentication code (MAC) and said symmetric key (kl).

30. A method for controlling access to different physical spaces according to claim 19, characterized in that said alphanumerical key is an asymmetric key pair (privP, publP), and in that said method also comprises the steps

with the aid of said authorization means (18), to generate said asymmetric key pair (privP, publP), a certificate (certP), and an authorizing data (AD) electronically signed by said authorization means (18) private key (privA), (Sign_privA (AD)) for said mobile unit (14);

and

to send said authorizing data (AD), said private key (privP) of said mobile unit (14), said certificate (certP), said public key (pubA) of said authorization means (18), said authorization data electronically signed by said authorization means (18) private key (Sign_privA (AD)), and said number of the mobile unit (14) to said operator (20).

31. A method for controlling access to different physical spaces according to claim 30, characterized in that said method also comprises the step:

with the aid of said operator (20), to send said authorizing data (AD), said private key (privP) of said mobile unit (14), said certificate (certP), said public key (pubA) of said authorization means (18) and said authorization data electronically signed by said authorization means (18) private key (Sign_privA (AD)) to said mobile unit.

32. A method for controlling access to different physical spaces according to claim 31, characterized in that said method also comprises the steps:

with the aid of said mobile unit (14), to establish a communication channel in the near field with said electrical locking device (12_i);

to send said certificate (certP) to said electrical locking device (12_i); and

to receive a certificate of said locking device (12_i) containing its public key privL) (certL) from said electrical locking device (12_i).

33. A method for controlling access to different physical spaces according to claim 32, characterized in that said method also comprises the step:

with the aid of said mobile unit (14) and said electrical locking device (12_i), to authenticate each other using their certificates (certP, certL) and their private keys (privP, privL) with the aid of a two-way Authentication protocol,

34. A method for controlling access to different physical spaces according to claim 33, characterized in that said method also comprises the step:

if said mobile unit (14) and said electrical locking device (12_i) have been authenticated, with the aid of said mobile unit (14), to send said authorizing data (AD), and said authorization data electronically signed by said authorization means (18) private key (Sign_privA (AD)) to said electrical locking device (12_i).

35. At least one computer program product (102₁, . . . , 102_n) directly loadable into the internal memory of at least one digital computer (100_i, . . . , 100_n), comprising software code portions for performing the steps of claim 18 when said at least one product (102i, . . . , 102_n) is/are run on said at least one computer (100₁, . . . , 100_n).