SYSTEM AND METHOD FOR REMOTELY ASSIGNING AND REVOKING ACCESS CREDENTIALS USING A NEAR FIELD COMMUNICATION EQUIPPED MOBILE PHONE

• US 20150222613A1
• Filed: 03/31/2015
• Published: 08/06/2015
• Est. Priority Date: 04/05/2005
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Lowe, Peter R.
• Granted Patent: US 9,721,076 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

The present invention is generally directed toward a mobile device that can be used in a secure access system. More specifically, the mobile device can have credential data loaded thereon remotely updated, enabled, disabled, revoked, or otherwise altered with a message sent from, for example, a control panel and/or controller in the system.

Claims

1. A method of operating an access control system, comprising:

receiving an indication that a reader has conducted an interaction with at least one access credential;

obtaining information related to the interaction between the reader and the at least one access credential; and

communicating the obtained information to or from a mobile device via a mobile communications network.

2. The method of claim 1, wherein the reader communicates the obtained information to the mobile device via the mobile communications network.

3. The method of claim 1, wherein a control panel communicates the obtained information to the mobile device via the mobile communications network.

4. The method of claim 1, wherein the interaction corresponds to a reader granting access to a holder of the at least one access credential.

5. The method of claim 1, wherein the obtained information is communicated to the mobile device via email.

6. The method of claim 1, wherein the obtained information is communicated to the mobile device via a Short Message Service (SMS) message.

7. The method of claim 1, wherein the obtained information is communicated to the mobile device via TCP/IP.

8. The method of claim 1, wherein the interaction corresponds to a failed authentication between the reader and the at least one access credential.

9. The method of claim 1, wherein the at least one credential is also a mobile device.

10. The method of claim 1, wherein the interaction corresponds to a key failure.

11. The method of claim 1, wherein the obtained information includes location information describing a location of the interaction.

12. A system, comprising:

a reader configured to interact with one or more access credentials; and

a controller configured to receive an indication that the reader has conducted an interaction with an access credential, obtain information related to the interaction, and communicate the obtained information to a mobile device via a mobile communications network.

13. The system of claim 12, wherein the interaction corresponds to a reader granting access to a holder of the access credential.

14. The system of claim 12, wherein the obtained information is communicated to the mobile device via email.

15. The system of claim 12, wherein the obtained information is communicated to the mobile device via a Short Message Service (SMS) message.

16. The system of claim 12, wherein the obtained information is communicated to the mobile device via TCP/IP.

17. The system of claim 12, wherein the interaction corresponds to a failed authentication between the reader and the access credential.

18. The system of claim 12, wherein the access credential is also a mobile device.

19. A reader, comprising:

a credential interface; and

instructions configured to enable the reader to determine that the reader has conducted an interaction with at least one access credential, obtain information related to the interaction with the at least one access credential, and communicate the obtained information to a mobile device via a mobile communications network.

20. The reader of claim 19, wherein the obtained information includes location information describing a location of the interaction.