METHOD AND APPARATUS FOR MAKING A DECISION ON A CARD

• US 20150215322A1
• Filed: 03/25/2015
• Published: 07/30/2015
• Est. Priority Date: 08/09/2006
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Davis, Michael L., Wamsley, Robert, Hulusi, Tam
• Granted Patent: US 9,396,321 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Method and devices for making access decisions in a secure access network are provided. The access decisions are made by a portable credential using data and algorithms stored on the credential. Since access decisions are made by the portable credential non-networked hosts or local hosts can be employed that do not necessarily need to be connected to a central access controller or database thereby reducing the cost of building and maintaining the secure access network.

Claims

1. A method, comprising:

storing information at a stand-alone reader, the information stored on the stand-alone reader including a list of devices and/or users that are allowed to access an asset protected by the stand-alone reader;

storing information at a mobile device, the information stored on the mobile device including a list of readers that a holder of the mobile device is allowed to access;

exchanging communications between the stand-alone reader and the mobile device such that at least one of the following occurs;

(i) the stand-alone reader communicates at least some information stored on the stand-alone reader to the mobile device; and

(ii) the mobile device communicates at least some information stored on the mobile device to the stand-alone reader; and

based on the exchange of communications between the stand-alone reader and the mobile device, making an access control decision for the mobile device.

2. The method of claim 1, wherein the access control decision is made by the mobile device.

3. The method of claim 2, wherein the mobile device communicates results of the access control decision to the stand-alone reader thereby allowing the stand-alone reader to implement an action consistent with the access control decision.

4. The method of claim 3, wherein the action includes unlocking a door.

5. The method of claim 1, wherein the access control decision is made by the stand-alone reader.

6. The method of claim 1, wherein the access control decision is made by both the stand-alone reader and the mobile device.

7. A system, comprising:

a reader configured to store a list of devices and/or users that are allowed to access an asset protected by the reader;

a credential configured to store a list of readers that a holder of the credential is allowed to access;

wherein the reader and credential are configured to exchange communications with one another such that at least one of the following occurs;

(i) the reader communicates at least some of the information stored in the list of devices and/or users to the credential; and

(ii) the credential communicates at least some of the information stored in the list of readers to the reader; and

wherein, based on the exchange of communications between the reader and credential, an access control decision is made for the credential.

8. The system of claim 7, wherein the access control decision is made by the credential.

9. The system of claim 8, wherein the credential comprises a cellular phone.

10. The system of claim 8, wherein the credential communicates results of the access control decision to the reader, thereby allowing the reader to implement an action consistent with the access control decision.

11. The system of claim 10, wherein the action includes unlocking a door.

12. The system of claim 7, wherein the access control decision is made by the reader.

13. The system of claim 12, wherein the reader comprises a stand-alone reader.

14. The system of claim 7, wherein the access control decision is made by both the reader and the credential.

15. The system of claim 7, wherein the reader and credential exchange communications via a proximity-based communication protocol.

16. The system of claim 15, wherein the proximity-based communication protocol utilizes a Radio Frequency (RF) inductive field.

17. The system of claim 7, wherein the asset comprises a physical asset.

18. The system of claim 7, wherein the asset comprises a logical asset.

19. The system of claim 7, wherein results of the access control decision are communicated by the credential back to a control panel.

20. The system of claim 19, wherein the results of the access control decision are communicated via a mobile communications network.