METHOD AND APPARATUS FOR MAKING A DECISION ON A CARD

• US 20150213248A1
• Filed: 03/25/2015
• Published: 07/30/2015
• Est. Priority Date: 08/09/2006
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Davis, Michael L., Wamsley, Robert, Hulusi, Tam
• Granted Patent: US 9,672,345 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Method and devices for making access decisions in a secure access network are provided. The access decisions are made by a portable credential using data and algorithms stored on the credential. Since access decisions are made by the portable credential non-networked hosts or local hosts can be employed that do not necessarily need to be connected to a central access controller or database thereby reducing the cost of building and maintaining the secure access network.

Claims

1. An access control system, comprising:

a reader configured to protect one or more assets;

a mobile device capable of communicating with the reader;

a blacklist containing information related to at least one of;

(i) readers to which the mobile device or a user thereof is not allowed to obtain access and (ii) mobile devices or users thereof to which the reader is not allowed to grant access; and

wherein the blacklist is stored on at least one of the reader and the mobile device.

2. The access control system of claim 1, wherein the blacklist is stored on the mobile device and contains information related to readers that the mobile device or a user thereof is not allowed to obtain access.

3. The access control system of claim 1, wherein the blacklist is stored on the reader and contains information related to mobile devices or users thereof that the reader is not allowed to grant access.

4. The access control system of claim 1, wherein the mobile device is configured make an access control decision for itself based on information obtained from the reader.

5. The access control system of claim 4, wherein additional authentication rules are maintained on the mobile device.

6. The access control system of claim 1, wherein the mobile device comprises a cellular phone.

7. The access control system of claim 1, wherein the blacklist is updated periodically.

8. The access control system of claim 7, wherein the blacklist is updated in response to the detection of one or more events.

9. The access control system of claim 8, wherein the one or more events correspond to a failed authentication between the mobile device and the reader.

10. A method of operating an access control system, comprising:

maintaining a blacklist containing information related to at least one of;

(i) readers to which a credential or a user thereof is not allowed to obtain access and (ii) credentials or users thereof to which the reader is not allowed to grant access; and

communicating at least parts of the blacklist to at least one of readers and credentials in the access control system thereby enabling access control decisions to be made based on information contained in the blacklist.

11. The method of claim 10, wherein the blacklist is communicated to and stored on a credential and contains information related to readers that the credential or a user thereof is not allowed to obtain access.

12. The method of claim 11, wherein the credential comprises a cellular phone.

13. The method of claim 10, wherein the blacklist is communicated to and stored on a reader and contains information related to credentials or users thereof that the reader is not allowed to grant access.

14. The method of claim 10, wherein the credential is configured to make an access control decision for itself based on information obtained from the reader.

15. The method of claim 14, wherein additional rules are maintained on the credential

16. The method of claim 10, wherein the blacklist is updated periodically.

17. The method of claim 16, wherein the blacklist is updated in response to the detection of one or more predetermined events.

18. The method of claim 17, wherein the one or more events corresponds to a failed authentication between a credential and reader.

19. The method of claim 16, wherein the blacklist is updated after a predetermined amount of time has passed since the blacklist was last updated.

20. The method of claim 10, wherein the at least parts of the blacklist are communicated to both readers and credentials.