METHOD AND APPARATUS FOR MAKING A DECISION ON A CARD

• US 20150220721A1
• Filed: 03/25/2015
• Published: 08/06/2015
• Est. Priority Date: 08/09/2006
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Davis, Michael L., Wamsley, Robert, Hulusi, Tam
• Granted Patent: US 9,767,267 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Method and devices for making access decisions in a secure access network are provided. The access decisions are made by a portable credential using data and algorithms stored on the credential. Since access decisions are made by the portable credential non-networked hosts or local hosts can be employed that do not necessarily need to be connected to a central access controller or database thereby reducing the cost of building and maintaining the secure access network.

Claims

1. A method, comprising:

determining location information for a credential;

communicating the location information for the credential to a reader; and

enabling the reader to use the location information in connection with determining whether to permit or deny a holder of the credential access to an asset protected by the reader.

2. The method of claim 1, wherein the location information is provided to the reader from the credential.

3. The method of claim 2, wherein the location information corresponds to location information provided to the credential by a second reader that previously read the mobile device credential.

4. The method of claim 3, wherein the location information is used to implement at least one of a pseudo-man-trap and man-trap security feature.

5. The method of claim 4, wherein the credential further carries status information regarding an interaction between the credential and the second reader and provides the status information to the reader for use by the reader in connection with determining whether to permit or deny a holder of the credential access to the asset.

6. The method of claim 5, wherein the status information corresponds to an indication of whether or not the second door is locked.

7. The method of claim 5, wherein the status information includes a key shared between the door and the second door.

8. The method of claim 1, wherein the location information is provided to the reader from a central host.

9. The method of claim 1, wherein the location information is provided to the reader via a communication network.

10. The method of claim 1, wherein the credential comprises a cellular phone.

11. An access control system, comprising:

a reader configured to interact with credentials and selectively provide access to an asset protected by the reader; and

a controller configured to receive location information for a credential and, based on the location information, determine whether to permit or deny a holder of the credential access to the asset.

12. The access control system of claim 11, wherein the location information is provided to the reader from the credential.

13. The access control system of claim 12, wherein the location information corresponds to location information provided to the credential by a second reader that previously read the credential.

14. The access control system of claim 13, wherein the location information is used to implement at least one of a pseudo-man-trap and man-trap security feature.

15. The access control system of claim 14, wherein the credential further carries status information regarding an interaction between the credential and the second reader and provides the status information to the reader for use by the reader in connection with determining whether to permit or deny a holder of the credential access to the asset.

16. The access control system of claim 15, wherein the status information corresponds to an indication of whether or not the second door is locked.

17. The access control system of claim 15, wherein the status information includes a key shared between the door and the second door.

18. The access control system of claim 11, wherein the location information is provided to the reader from a central host.

19. The access control system of claim 11, wherein the location information is provided to the reader via a communication network.

20. The access control system of claim 11, wherein the credential comprises a cellular phone.