AUTHORIZATION SYSTEM AND A METHOD OF AUTHORIZATION

• US 20120326868A1
• Filed: 06/26/2012
• Published: 12/27/2012
• Est. Priority Date: 10/21/2005
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Goel, Parveen Kumar
• Granted Patent: US 8,941,464 B2
• Time in Patent Office: Days
• US Class Current: 340/541
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 2209/62 Comprising means for indicating the status of the lock
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/21 having a variable access code
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

An access control system for a secure facility includes an authorization system having an interface, in the form of an interrogator, for receiving the request signal indicative of a user seeking authorization for a predetermined action, such as gaining access through a door. In one example, an authorization system may include an interface for receiving a request signal indicative of a party seeking authorization for a predetermined action. A first processor, that is responsive to the request signal, determines if the authorization is to be granted. If so, the first processor may generate an authorization signal that includes information that is securely coded, and which is indicative of the determination. An operating device, physically spaced from the first processor, may receive the authorization signal, and may decode the securely coded information and subsequently initiating the action, if appropriate.

Claims

1. An authorization system including:

an interface for receiving a request signal indicative of a party seeking authorization for a predetermined action;

a first processor that is responsive to the request signal for determining if the authorization is to be granted and, if so, generating an authorization signal that includes information that is securely coded and which is indicative of the determination; and

an operating device being physically spaced apart from the first processor for receiving the authorization signal, the operating device having a second processor that is responsive to the authorization signal for decoding the information and subsequently initiating the action.

2. A system according to claim 1, wherein the first processor generates the authorization signal in response to each request signal.

3. A system according to claim 2, wherein the information of the authorization signal is encrypted.

4. A system according to claim 3, wherein the authorization signal itself is encrypted.

5. A system according to claim 1, wherein the request signal is not encrypted.

6. A system according to claim 5, wherein the request signal includes identification and authorization information that is encrypted.

7. A system according to claim 1, wherein the request signal is encrypted.

8. A system according to claim 1, wherein the interface is a wireless interface.

9. A system according to claim 1, wherein the interface is a wired interface.

10. A system according to claim 1, wherein the first processor is in communication with a host.

11. A system according to claim 1, wherein the authorization signal is part of a communication session between the first processor and the operating device.

12. A system according to claim 11, wherein the communications session is subject to a predetermined coding of the information.

13. A system according to claim 12, wherein different communications sessions use different predetermined coding of the information.

14. A system according to claim 1, wherein if the authorization is not to be granted, the first processor does not generate the authorization signal.

15. A system according to claim 1, wherein if the authorization is not to be granted, the first processor generates the authorization signal to include information that is securely coded and which is indicative of the determination, and the second processor, upon decoding the information, does one or more of:

not initiating the action; and

generating an alarm signal.

16. A method of authorization, the method including:

receiving a request signal indicative of a party seeking authorization for a predetermined action;

being responsive with a first processor to the request signal for determining if the authorization is to be granted and, if so, generating an authorization signal that includes information that is securely coded and which is indicative of the determination; and

receiving the authorization signal at an operating device that is physically spacing apart from the first processor, the operating device having a second processor that is responsive to the authorization signal for decoding the securely coded information and subsequently initiating the action.

17. The method of claim 16, wherein the authorization signal is encrypted.

18. The method of claim 16, wherein the information of the authorization signal is encrypted, but the authorization signal itself is not encrypted.

20. The authorization system according to claim 17 wherein:

the interface and the party are disposed within a first zone;

the processor is in or adjacent to the first zone and is responsive to the request signal for determining if the authorization is to be granted and, or so, generating the secure signal; and

the operating device is disposed in a second zone that is physically distinct from the first zone.

19. An authorization system including:

an interface for receiving a request signal indicative of a party seeking authorization for a predetermined action;

a processor that is responsive to the request signal for determining if the authorization is to be granted and, if so, generating a secure signal; and

an operating device being physically spaced apart from the processor and responsive to the secure signal for initiating the action.