SYSTEM AND METHOD FOR REMOTELY ASSIGNING AND REVOKING ACCESS CREDENTIALS USING A NEAR FIELD COMMUNICATION EQUIPPED MOBILE PHONE

• US 20150222623A1
• Filed: 03/31/2015
• Published: 08/06/2015
• Est. Priority Date: 04/05/2005
• Status: Abandoned Application

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Lowe, Peter R.
• Application Number:
  US14/674,125
• Publication Number:
  US 20150222623A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

The present invention is generally directed toward a mobile device that can be used in a secure access system. More specifically, the mobile device can have credential data loaded thereon remotely updated, enabled, disabled, revoked, or otherwise altered with a message sent from, for example, a control panel and/or controller in the system.

Claims

1. A method, comprising:

determining an interval between credential updates for an access control system;

upon expiration of the interval, generating new credential information; and

sending the new credential information to a mobile device within the access control system such that failure of the mobile device to receive the new credential information will result in the mobile device losing its ability to at least one of;

(i) mutually authenticate with a reader in the access control system and (ii) make an access control decision for itself within the access control system.

2. The method of claim 1, further comprising, sending at least some of the new credential information to a reader within the access control system.

3. The method of claim 2, wherein the reader receives the new credential information via a wireless communications network.

4. The method of claim 3, wherein the wireless communications network comprises a GSM network, Bluetooth, and ZigBee.

5. The method of claim 1, wherein the new credential information comprises at least one of a key and an identifier of readers in the access control system that the mobile device is allowed to access.

6. The method of claim 1, wherein the credential information has a time to live.

7. The method of claim 1, wherein the interval is specific to a particular user in the access control system.

8. The method of claim 1, wherein the interval is specific to an entire facility.

9. The method of claim 1, wherein the interval corresponds to a predetermined amount of time.

10. The method of claim 1, wherein the interval corresponds to an event-based interval.

11. An access control system, comprising:

a controller configured to determine an interval between credential updates for the access control system and upon expiration of the interval, generate new credential information for distribution to one or more mobile devices enrolled in the access control system such that failure of the one or more mobile devices to receive the new credential information will result in the one or more mobile devices losing its ability to at least one of;

(i) mutually authenticate with a reader in the access control system and (ii) make an access control decision for itself within the access control system.

12. The access control system of claim 11, wherein the controller is further configured to send at least some of the new credential information to the reader.

13. The access control system of claim 12, wherein the reader receives the new credential information via a wireless communications network.

14. The access control system of claim 13, wherein the wireless communications network comprises a cellular network, a Bluetooth network, and a ZigBee network.

15. The access control system of claim 11, wherein the new credential information comprises at least one of a key and an identifier of readers in the access control system that the mobile device is allowed to access.

16. The access control system of claim 11, wherein the credential information has a time to live.

17. The access control system of claim 11, wherein the interval is specific to a particular user in the access control system.

18. The access control system of claim 11, wherein the interval is specific to an entire facility.

19. The access control system of claim 11, wherein the interval corresponds to a predetermined amount of time.

20. The access control system of claim 11, wherein the interval corresponds to an event-based interval.