Control System Cooperating with a Mobile Device

• US 20160360020A1
• Filed: 07/16/2015
• Published: 12/08/2016
• Est. Priority Date: 06/03/2015
• Status: Active Grant

• Current Assignee: I-Ting Shen
• Original Assignee: I-Ting Shen
• Inventors: Shen, I-Ting
• Granted Patent: US 9,621,702 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G07C 2009/00325 and the lock having only one limited data transmission range
• CPC Class Codes: G07C 2009/00777 by induction
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00563 using personal physical data of the operator, e.g. finger prints, retinal images, voicepatterns
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces
• CPC Class Codes: H04M 1/72415 for remote control of appliances
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

A control system includes a control device, a controller, a plurality of user mobile devices, and a manager mobile device. An initial first identification information picked up by each user mobile device is sent to the manager mobile device, is authenticated, and is encoded. Every time a user mobile device is connected to the controller for opening the control device, a holder of the user mobile device is requested to input an instant first identification information. After decoding by a decoding key, the controller identifies whether the instant first identification information is identical to the authenticated initial first identification information. The identification result is used to decide whether the control device should be set to be an open state.

Claims

1. A control system comprising:

a control device controllable to be in an open state or a locked state;

a controller including a control module electrically connected to the control device, a main memory electrically connected to the control module, and a wireless transmission device electrically connected to the control module, with the control module controlling the control device to be in the open state or the locked state, and with a decoding key stored in the main memory;

a plurality of user mobile devices, with an access program installed in each of the plurality of user mobile devices, with each of the plurality of user mobile devices including a first processor, a first memory electrically connected to the first processor, and a first wireless transmission module electrically connected to the first processor, with each of the plurality of user mobile devices further including a first input device, and with the first input device configured for electrical connection with the wireless transmission device; and

a manager mobile device, with a management program installed in the manager mobile device, with the manager mobile device including a second processor, a second memory electrically connected to the second processor, and a second wireless transmission module electrically connected to the second processor, with an encoding key stored in the second memory and corresponding to the decoding key, and with the second wireless transmission module configured to permit connection with the wireless transmission device and configured to permit connection with each of the first wireless transmission modules;

with each of the plurality of user mobile devices executing the access program for a first time, each of the plurality of user mobile devices requests a holder thereof to use the first input device to input an initial first identification information and permits the first wireless transmission module to be connected to the wireless transmission device,

wherein when the first wireless transmission module of any one of the plurality of user mobile devices executing the access program is within a communication range of the wireless transmission device, the first wireless transmission module is connected to the wireless transmission device,

wherein when the first wireless transmission module of any one of the plurality of user mobile devices executing the access program is outside of the communication range of the wireless transmission device, the first wireless transmission module is not connected to the wireless transmission device,

wherein when the manager mobile device is executing the access program and is within the communication range of the wireless transmission device, the second wireless transmission module is connected to the wireless transmission device,

wherein when the manager mobile device is executing the access program and is outside of communication range of the wireless transmission device, the second wireless transmission module is not connected to the wireless transmission device,

with the manager mobile device executing the access program, and with any one of the plurality of user mobile devices executing the access program and located outside of a communication range of the second wireless transmission module, the first wireless transmission module of any one of the plurality of user mobile devices is not connected to the second wireless transmission module,

with the first wireless transmission module of any one of the plurality of user mobile devices connected to the second wireless transmission module, the manager mobile device is permitted to obtain the initial first identification information of the connected user mobile device and executes an authentication procedure to generate authenticated initial first identification information, and the encoding key is used to encode the authenticated initial first identification information as first encoded information, and the first encoded information is sent back to the connected user mobile device and is stored in the first memory of the connected user mobile device,

with the first wireless transmission module of each of the plurality of user mobile devices not in connection with the second wireless transmission module, the manager mobile device is not permitted to obtain the initial first identification information of each of the plurality of user mobile devices,

with every time the first wireless transmission module of any one of the plurality of user mobile devices in connection with the wireless transmission device, the access program of the connected user mobile device requests the holder of the connected user mobile device to use the first input device to input an instant first identification information, and the controller obtains the first encoded information and the instant first identification information of the connected user mobile device,

with none of the first wireless transmission modules of the plurality of user mobile devices in connection with the wireless transmission device, the controller is not permitted to obtain the first encoded information and the instant first identification information of each of the plurality of user mobile devices,

wherein the controller is permitted to use the decoding key to decode the first encoded information, obtaining the authenticated initial first identification information contained in the first encoded information,

wherein when the control module identifies that the authenticated initial first identification information of the connected user mobile device is identical to the instant first identification information, the control module sets the control device to be in the open state, and

wherein when the control module identifies that the authenticated initial first identification information of the connected user mobile device is not identical to the instant first identification information, the control module sets the control device to be in the locked state.

2. The control system as claimed in claim 1, with the controller further including:

a time module electrically connected to the control module, with the time module providing a date and a time,

wherein the manager mobile device uses the encoding key to encode the authenticated initial first identification information, an access permission start time, and an access permission end time as the first encoded information,

wherein after the controller has obtained the first encoded information of the connected user mobile device and the instant first identification information, the decoding key is used to decode the first encoded information to obtain the authenticated initial first identification information, the access permission start time, and the access permission end time contained in the first encoded information,

wherein when the control module identifies that the authenticated initial first identification information of the connected user mobile device is identical to the instant first identification information and identifies that the time of the time module is between the access permission start time and the access permission end time, the control module sets the control device to be in the open state, and

wherein when the control module identifies that the authenticated initial first identification information of the connected user mobile device is not identical to the instant first identification information or identifies that the time of the time module is not between the access permission start time and the access permission end time, the control module sets the control device to be in the locked state.

3. The control system as claimed in claim 1, with each of the plurality of user mobile devices having a first hardware identification number, with the first hardware identification numbers of the plurality of user mobile devices different from each other,

with the first wireless transmission module of any one of the plurality of user mobile devices in connection with the second wireless transmission module, the manager mobile device is permitted to obtain the first hardware identification number and the initial first identification information of the connected user mobile device, the manager mobile device executes the authentication procedure to generate an authenticated first hardware identification number and authenticated initial first identification information based on the first hardware identification number and the initial first identification information, and the encoding key is used to encode the authenticated first hardware identification number and the authenticated initial first identification information as the first encoded information,

with none of the first wireless transmission modules of the plurality of user mobile devices in communication with the second wireless transmission module, the manager mobile device is not permitted to obtain the initial first identification information and the first hardware identification number of each of the plurality of user mobile devices,

with the first wireless transmission module of any one of the plurality of user mobile devices in communication with the wireless transmission device, the control module is permitted to obtain an instant first hardware identification number of the connected user mobile device,

with none of the first wireless transmission modules of the plurality of user mobile devices in communication with the wireless transmission device, the control module is not permitted to obtain the instant first hardware identification number of each of the plurality of user mobile devices,

wherein when the control module identifies that the authenticated initial first identification information of the connected user mobile device is identical to the instant first identification information and identifies that the authenticated first hardware identification number of the connected user mobile device is identical to the instant first hardware identification number, the control module sets the control device to be in the open state, and

wherein when the control module identifies that the authenticated initial first identification information of the connected user mobile device is not identical to the instant first identification information or identifies that the authenticated first hardware identification number of the connected user mobile device is not identical to the instant first hardware identification number, the control module sets the control device to be in the locked state.

4. The control system as claimed in claim 1, with the manager mobile device including a second hardware identification number, with the manager mobile device further including a second input device electrically connected to the second processor,

with the manager mobile device executing the management program for a first time, a manager using the manager mobile device is requested to use the second input device to input an initial second hardware identification information, a second hardware identification number of the manager mobile device is picked up, the manager mobile device executes an authentication procedure to generate authenticated initial second identification information and an authenticated second hardware identification number based on the initial second identification information and the second hardware identification number, and the decoding key is used to encode the authenticated initial second identification information and the authenticated second hardware identification number as second encoded information,

wherein every time the second wireless transmission module of the manager mobile device is connected to the wireless transmission device of the controller, the manager program of the manager mobile device requests a holder of the manager mobile device to use the second input device to input an instant second identification information and picks up an instant second hardware identification number of the connected manager mobile device, and the controller is permitted to obtain the second encoded information, the instant second hardware identification number, and the instant second identification information,

wherein after the controller has obtained the second encoded information, the second hardware identification number, and the second identification information of the manager mobile device, the decoding key is used to decode the second encoded information to obtain the authenticated second hardware identification number and the authenticated initial second identification information contained in the second encoded information,

wherein when the control module identifies that the authenticated second hardware identification number of the manager mobile device is identical to the instant second hardware identification number and identifies that the authenticated initial second identification information is identical to the instant second identification information of the manager mobile device, the control module sets the control device to be in the open state, and

wherein when the control module identifies that the authenticated second hardware identification number of the manager mobile device is not identical to the instant second hardware identification number or identifies that the authenticated initial second identification information is not identical to the instant second identification information of the manager mobile device, the control module sets the control device to be in the locked state.

5. The control system as claimed in claim 4, wherein each first input device is an image pick-up device, the holder of a respective one of the plurality of user mobile devices is requested to use the first input device to pick up a facial image of the holder of the respective one of the plurality of user mobile devices, and characteristics of the facial image of the holder of the respective one of the plurality of user mobile devices are encoded to be used as the initial first identification information or the instant first identification information, and

wherein the second input device is an image pick-up device, the holder of the manager mobile device is requested to use the second input device to pick up a facial image of the holder of the manager mobile device, and characteristics of the facial image of the holder of the manager mobile device are encoded to be used as the initial second identification information or the instant second identification information.

6. The control system as claimed in claim 4, wherein each first input device is a microphone, the holder of a respective one of the plurality of user mobile devices is requested to use the first input device to pick up a voice of the holder of the respective one of the plurality of user mobile devices, and the voice of the holder of the respective one of the plurality of user mobile devices is edited as a vocal print which is used as the initial first identification information or the instant first identification information, and

wherein the second input device is a microphone, the holder of the manager mobile device is requested to use the second input device to pick up a voice of the holder of the manager mobile device, and the voice of the holder of the manager mobile device is edited as a vocal print which is used as the initial second identification information or the instant second identification information.

7. The control system as claimed in claim 4, wherein each first input device is a fingerprint input device, the holder of a respective one of the plurality of user mobile devices is requested to use the first input device to pick up a fingerprint of the holder of the respective one of the plurality of user mobile devices, and characteristics of the fingerprint are encoded to be used as the initial first identification information or the instant first identification information, and

the second input device is a fingerprint input device, the holder of the manager mobile device is requested to use the second input device to pick up a fingerprint of the holder of the manager mobile device, and characteristics of the fingerprint are encoded to be used as the initial second identification information or the instant second identification information.

8. The control system as claimed in claim 4, each first input device is a finger vein recognition device, the holder of a respective one of the plurality of user mobile devices is requested to use the first input device to pick up a finger vein image of the holder of the respective one of the plurality of user mobile devices, and characteristics of the finger vein image of the holder of the respective one of the plurality of user mobile devices are encoded to be used as the initial first identification information or the instant first identification information, and

the second input device is a finger vein recognition device, the holder of the manager mobile device is requested to use the second input device to pick up a finger vein image of the holder of the manager mobile device, and characteristics of the finger vein image of the holder of the manager mobile device are encoded to be used as the initial second identification information or the instant second identification information.

9. The control system as claimed in claim 4, wherein each first input device is an iris recognition device, the holder of a respective one of the plurality of user mobile devices is requested to use the first input device to pick up the iris image of the holder of the respective one of the plurality of user mobile devices, and characteristics of the iris image of the holder of the respective one of the plurality of user mobile devices are encoded to be used as the initial first identification information or the instant first identification information, and

wherein the second input device is an iris recognition device, the holder of the manager mobile device is requested to use the second input device to pick up the iris image of the holder of the manager mobile device, and characteristics of the iris image of the holder of the manager mobile device are encoded to be used as the initial second identification information or the instant second identification information.

10. The control system as claimed in claim 4, wherein each first input device includes a touch screen, the holder of the user mobile device is requested to use the touch screen of the first input device to input a pin number or a specific FIGURE of the holder of the user mobile device, and the pin number or the specific FIGURE of the holder of the user mobile device is used as the initial first identification information or the instant first identification information,

wherein the second input device is a touch screen, the holder of the manager mobile device is requested to use the touch screen of the second input device to input a pin number or a specific FIGURE of the holder of the manager mobile device, and the pin number or the specific FIGURE of the holder of the manager mobile device is used as the initial second identification information or the instant second identification information.

11. The control system as claimed in claim 1, wherein the control device is a door lock adapted to be mounted to a door, with the door lock including:

a locking mechanism electrically connected to the control module, with the control module controllable to be in a locking state or an unlocking state; and

a latch operably connected to the locking mechanism, with the latch movable between a latching position and an unlatching position,

wherein when the control module identifies that the authenticated initial first identification information of the connected user mobile device is identical to the instant first identification information, the control module controls the locking mechanism to be in the unlocking state permitting the latch to move from the latching position to the unlatching position, and the door lock is in an open state, and

wherein when the control module identifies that the authenticated initial first identification information of the connected user mobile device is not identical to the instant first identification information, the control module controls the locking mechanism to be in the locking state not permitting the latch to move from the latching position to the unlatching position, and the door lock is in a locked state.