METHOD AND APPARATUS FOR MAKING A DECISION ON A CARD

• US 20140013418A1
• Filed: 09/03/2013
• Published: 01/09/2014
• Est. Priority Date: 08/09/2006
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Davis, Michael L., Wamsley, Robert, Hulusi, Tam
• Granted Patent: US 10,339,292 B2
• Time in Patent Office: Days
• US Class Current: 726/16
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Method and devices for making access decisions in a secure access network are provided. The access decisions are made by a portable credential using data and algorithms stored on the credential. Since access decisions are made by the portable credential non-networked hosts or local hosts can be employed that do not necessarily need to be connected to a central access controller or database thereby reducing the cost of building and maintaining the secure access network.

Claims

1-38. -38. (canceled)

39. A method, comprising:

receiving location information at a portable credential;

analyzing the location information by an application stored on the portable credential; and

making an access control decision based on the analysis of the location information.

40. The method of claim 39, further comprising:

transmitting a signal from the portable credential in accord with the access control decision.

41. The method of claim 40, wherein receiving location information comprises receiving location information from a first local host and the method further comprises:

transmitting the signal in accord with the access control decision to the first local host.

42. The method of claim 40, wherein receiving location information comprises receiving location information from a first local host and the method further comprises:

transmitting the signal to a second local host.

43. The method of claim 39, wherein:

the location information is based at least in part on a host serial number; and

the analyzing of the location information comprises accessing host location information associated with the host serial number.

44. The method of claim 39, wherein the portable credential is at least one of a smartcard, proximity card, passport, key fob, cellular phone, portable computer, and Personal Digital Assistant (PDA).

45. The method of claim 39, further comprising:

determining a host identifier based upon the location information.

46. The method of claim 39, wherein the received location information is at least partially based on a positioning satellite signal.

47. The method of claim 46, further comprising:

receiving time information from the positioning satellite signal.

48. The method of claim 39, wherein communication between a host and the portable credential is a mutual authentication exchange and an exchange of the access control decision.

49. The method of claim 39, wherein the received location information is location information of the portable credential.

50. The method of claim 39, wherein the location information is received from a local host.

51. A method, comprising:

receiving, at a portable credential, a first location information of the portable credential;

analyzing the first location information by an application stored on the portable credential;

making a first access control decision based on the analysis of the first location information;

receiving, at the portable credential, a second location information; and

analyzing the second location information by an application stored on the portable credential.

52. The method of claim 51, wherein the second location information is location information for the portable credential, wherein the method further comprises:

making a second access control decision based on the analysis of the second location information.

53. The method of claim 52, wherein the second access control decision is dependent upon the first access control decision.

54. The method of claim 52, further comprising:

placing a first access controller in a first state upon the access control decision indicating authorization;

determining the state of the first access controller; and

wherein making the second access control decision is based at least in part on the determined state of the first access controller.

55. The method of claim 54, further comprising:

determining the state of the first access controller has changed from the first state to a second state.

56. The method of claim 51, wherein making the second access control decision is based upon determining a time between receiving the first location information and receiving the second location information is within an acceptable time range.

57. A portable credential, comprising:

a receiver operable to receive location information; and

a processor operable to;

analyze the location information; and

make an access control decision based on the analysis of the location information.

58. The portable credential of claim 57, further comprising a transmitter.

59. The portable credential of claim 58, wherein the access control decision is made for the portable credential and wherein the transmitter is operable to transmit the access control decision to a host.