METHODS AND APPARATUS RELATING TO A SECURITY SYSTEM

• US 20110001603A1
• Filed: 11/27/2008
• Published: 01/06/2011
• Est. Priority Date: 12/10/2007
• Status: Abandoned Application

• Current Assignee: ECKey Corporation
• Original Assignee: ECKey Corporation
• Inventors: Willis, Nicholas Hedley
• Application Number:
  US12/747,259
• Publication Number:
  US 20110001603A1
• Time in Patent Office: Days
• US Class Current: 340/5.2
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A method of receiving secure information from a mobile communication device to control an authorisation device in a security system, the method including the steps of the authorisation device: receiving an electronic key transmitted by the mobile communication device; decoding the key using a decoding technique to retrieve a hidden token; and decrypting the retrieved token to retrieve the secure information.

Claims

1-59. -59. (canceled)

60. A method of retrieving secure information from a mobile communication device to control an authorisation device in a security system, the method including the steps of the authorisation device:

receiving an electronic key transmitted by the mobile communication device;

decoding the key using a decoding technique to retrieve a hidden token, wherein the token is hidden in an unencrypted image using a steganographic technique; and

decrypting the retrieved token to retrieve the secure information by receiving identification information from the mobile communication device that identifies the mobile communication device, and decrypting the token using the identification information.

61. The method of claim 60 further including the steps of requesting and verifying a personal identification number from the mobile communication device prior to receiving the electronic key.

62. The method of claim 60 wherein the secure information includes access rights information for controlling an entry point in the security system, the method further including the steps of the authorisation device:

retrieving the access rights information from the secure information;

determining if the retrieved access rights information is valid, and

providing access to the entry point upon a positive determination.

63. The method of claim 62, wherein the step of determining if the access rights information is valid includes the steps of:

determining the current time, day or date,

detecting the time, day or date associated with the retrieved access rights information,

determining if the time, day or date of the retrieved access rights information complies with the current time, day or date, and, upon a positive determination, validating the retrieved access rights information.

64. The method of claim 63 whereupon a negative compliance determination the method further includes the step of placing the mobile communication device on a list of invalid devices and/or outputting an alarm.

65. The method of claim 63, wherein the step of determining if the access rights information is valid includes the steps of determining if the retrieved access rights information is the same as stored access rights associated with the mobile communication device, and, upon a positive determination, validating the retrieved access rights information.

66. The method of claim 60 wherein the secure information includes function information for controlling functions of the authorisation device, the method further including the steps of the authorisation device:

retrieving the function information from the secure information;

determining the function associated with the function information, and

executing the function on the authorisation device.

67. The method of claim 66, wherein the secure information includes a serial number and the method further includes the steps of

reading the serial number,

determining if the serial number read is the next in sequence, and, upon a positive determination,

executing the function.

68. An authorisation device in a security system, the authorisation device including a communication interface arranged to retrieve secure information from a mobile communication device, wherein the secure information is used to control the authorisation device, the authorisation device arranged to receive an electronic key via the communication interface;

decode the key using a decoding technique to retrieve a hidden token wherein the token is decoded from an unencrypted image using a steganographic technique; and

decrypt the retrieved token to retrieve the secure information by being further arranged to receive identification information from the mobile communication device that identifies the mobile communication device, and

decrypt the secure information using the identification information.

69. The authorisation device of claim 68 further arranged to request and verify a personal identification number from the mobile communication device prior to arranging to receive the electronic key.

70. The authorisation device of claim 68 wherein the secure information includes access rights information for controlling the entry point in the security system, the authorisation device further including control means to control access to an entry point in the security system and arranged to:

retrieve the access rights information from the secure information;

determine if the retrieved access rights information is valid, and

control the entry point to provide access upon a positive determination.

71. The authorisation device of claim 70 further arranged to determine if the access rights information is valid by:

determining the current time, day or date,

detecting the time, day or date associated with the retrieved access rights information,

determining if the time, day or date of the retrieved access rights information complies with the current time, day or date, and, upon a positive compliance determination,

validating the retrieved access rights information.

72. The authorisation device of claim 71 whereupon a negative compliance determination the authorisation device is further arranged to place the mobile communication device on a list of invalid devices and/or output an alarm.

73. The authorisation device of claim 70 further arranged to validate the access rights information by determining if the retrieved access rights information is the same as stored access rights associated with the mobile communication device, and, upon a positive determination, validating the retrieved access rights information.

76. A method of creating an electronic key for controlling an authorisation device in a security system including the steps of:

encrypting secure information to form an electronic token using an encryption key, wherein the encryption key includes identification information for a mobile communication device that identifies the mobile communication device, where the mobile communication device is intended to transfer the secure information to the authorisation device, and

encoding the electronic token to hide the token in an unencrypted image using a steganographic technique within the electronic key.

77. The method of claim 76, wherein the secure information includes access rights information to provide access to an entry point in the security system.

78. The method of claim 76, wherein the secure information includes function information for controlling functions on the authorisation device.

79. The method of claim 78, wherein the secure information further includes a sequential serial number.

80. A key management system for creating an electronic key for controlling an authorisation device in a security system, the key management system arranged to:

encrypt secure information to form an electronic token using an encryption key, wherein the encryption key includes identification information for a mobile communication device that identifies the mobile communication device, where the mobile communication device is intended to transfer the secure information to the authorisation device, and

encode the electronic token to hide the token in an unencrypted image using a steganographic technique within the electronic key.

81. The key management system of claim 80, wherein the secure information includes access rights information to provide access to an entry point in the security system.

82. The key management system of claim 80, wherein the secure information includes function information for controlling functions on the authorisation device.

83. The key management system of claim 82, wherein the secure information further includes a sequential serial number.

84. A data structure for controlling an authorisation device in a security system, the data structure including an encoded electronic token, the token having been encoded to be hidden in an unencrypted image using a steganographic technique, wherein the electronic token includes encrypted secure information, wherein the secure information is encrypted using identification information for identifying a mobile communication device intended to transfer the secure information to the authorisation device.