METHOD AND SYSTEM FOR ACCESS AUTHORIZATION

• US 20130015947A1
• Filed: 12/29/2010
• Published: 01/17/2013
• Est. Priority Date: 01/08/2010
• Status: Abandoned Application

• Current Assignee: Telekom Deutschland GmbH (Deutsche Telekom AG)
• Original Assignee: Telekom Deutschland GmbH (Deutsche Telekom AG)
• Inventors: Best, Manfred
• Application Number:
  US13/520,582
• Publication Number:
  US 20130015947A1
• Time in Patent Office: Days
• US Class Current: 340/5.7
• CPC Class Codes: G01S 19/14 specially adapted for specific applications
• CPC Class Codes: G01S 19/42 Determining position
• CPC Class Codes: G01S 19/48 by combining or switching between position solutions derived from the satellite radio beacon positioning system and position solutions derived from a further system
• CPC Class Codes: G07C 2209/63 Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle
• CPC Class Codes: G07C 2209/64 using a proximity sensor
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

A method for access authorization includes: generating, by a mobile terminal, first location data in relation to the location of the mobile terminal; comparing the first location data with stored second location data and determining that the first location data matches the second location data; establishing, by the mobile terminal, a first connection to an authorization client using a mobile communication network comprising a base station; sending, by the mobile terminal, identification data to the authorization client to request access authorization; establishing, by a detection client, a second connection to the mobile terminal, wherein the second connection is a direct packet switched connection; and granting access to a user of the mobile terminal when a position of the user relative to the detection client matches a predefined position relative to the detection client.

Claims

1-15. -15. (canceled)

16. A method for access authorization, the method comprising:

generating, by a mobile terminal, first location data in relation to the location of the mobile terminal;

comparing the first location data with stored second location data and determining that the first location data matches the second location data;

establishing, by the mobile terminal, a first connection to an authorization client using a mobile communication network comprising a base station;

sending, by the mobile terminal, identification data to the authorization client to request access authorization;

establishing, by a detection client, a second connection to the mobile terminal, wherein the second connection is a direct packet switched connection; and

granting access to a user of the mobile terminal when a position of the user relative to the detection client matches a predefined position relative to the detection client, wherein the predefined position is a specific area relative to a gate, and wherein the gate opens automatically if the user is authorized and the position of the user relative to the detection client matches a predefined position relative to the detection client.

17. The method according to claim 16, wherein the mobile terminal comprises a GPS receiver configured to detect the location of the mobile terminal and to generate the first location data, and wherein a transmission of the identification data to the authorization client takes place automatically.

18. The method according to claim 16, wherein a positioning signal is transmitted repeatedly between the detection client and the mobile terminal using the second connection.

19. The method according to claim 18, wherein the positioning signal is sent every 1 to 5 seconds and the repeated positioning signals having substantially equal signal strength.

20. The method according to claim 18, wherein the detection client comprises a processing unit, a first antenna and a second antenna, wherein the first antenna receives the positioning signal over the second connection in a first signal strength and wherein the second antenna receives the positioning signal of the second connection in a second signal strength, wherein the first signal strength and the second signal strength are evaluated by using the processing unit in order to detect the position of the user relative to the detection client.

21. The method according to claim 16, wherein the predefined position comprises about 4 to 8 square meters.

22. The method according to claim 16, wherein the predefined second position is located directly in front of the gate and corresponds to a first place in a queue of vehicles.

23. The method according to claim 16, wherein alternative access authorization is further provided through use of a company-card.

24. The method according to claim 16, wherein access is granted according to different standards at different time periods.

25. The method according to claim 24, wherein during a particular time period, granting of access requires an additional keyword relative to another time period, wherein the particular period is a weekend, holiday, or nighttime.

26. The method according to claim 16, wherein a database is assigned to the authorization client, wherein the authorization client compares the identification data sent from the mobile terminal with identification data stored at the database to determine whether access is authorized.

27. A system for access authorization, wherein the system comprises:

an authorization client, comprising;

a first radio interface, configured to establish a first connection with a mobile terminal by using a base station of a mobile communication network; and

a first element configured to grant an access authorization;

a detection client, configured to detect a position of a user of the mobile terminal relative to the detection client using a first radio device configured to establish a packet switched second connection with the mobile terminal; and

the mobile terminal, comprising;

a second element, configured to detect the location of the mobile terminal and to generate first location data relating to the detected location of the mobile terminal;

second location data stored at the mobile terminal;

wherein access to a gate is granted to the user of the mobile terminal when the position of the user relative to the detection client matches a predefined position relative to the detection client, wherein the predefine position relative to the detection client is a specific area relative to the gate; and

wherein the gate opens automatically if the user is authorized and the position of the user relative to the detection client matches the predefined position relative to the detection client.

28. The system according to claim 27, further comprising a database assigned to the authorization client, wherein the database contains identification data for access authorization.

29. The system according to claim 27, wherein the second connection is a Bluetooth or W-LAN connection, and wherein the mobile terminal comprises a second radio device configured for communication by the second connection.

30. The system according to claim 27, wherein the detection client comprises a processing unit, a first antenna and a second antenna, wherein the processing unit is configured to evaluate signal strengths, wherein the first antenna is located directly at the gate, and the second antenna is located at a configurable distance from the gate.

31. The system according to claim 27 wherein the stored second location data specifies a position of company buildings with access authorization, wherein the company buildings are office buildings, production halls or car parks.

32. A non-transitory computer-readable medium having processor-executable instructions for access authorization stored thereon, the processor-executable instructions, when executed, causing the following steps to be performed:

generating, by a mobile terminal, first location data in relation to the location of the mobile terminal;

comparing the first location data with stored second location data and determining that the first location data matches the second location data;

establishing, by the mobile terminal, a first connection to an authorization client using a mobile communication network comprising a base station;

sending, by the mobile terminal, identification data to the authorization client to request access authorization;

establishing, by a detection client, a second connection to the mobile terminal, wherein the second connection is a direct packet switched connection; and

granting access to a user of the mobile terminal when a position of the user relative to the detection client matches a predefined position relative to the detection client, wherein the predefined position is a specific area relative to a gate, and wherein the gate opens automatically if the user is authorized and the position of the user relative to the detection client matches a predefined position relative to the detection client.