Electronic security system

• US 5,745,044 A
• Filed: 04/09/1992
• Issued: 04/28/1998
• Est. Priority Date: 05/11/1990
• Status: Expired due to Term

• Current Assignee: Medeco Security Locks Incorporated (Assa Abloy AB)
• Original Assignee: Medeco Security Locks Incorporated (Assa Abloy AB)
• Inventors: Hall, Charles, Hyatt, Richard G. Jr., Trent, Douglas
• Primary Examiner(s): ZIMMERMAN, BRIAN A
• Application Number:
  US07/865,849
• Time in Patent Office: 2,210 Days
• Field of Search: 340/825.31, 340/825.34, 70/278, 380/43, 380/44, 380/45
• US Class Current: 340/5.23
• CPC Class Codes: G07B 15/00 Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points handling coins or valuable papers, e.g. banknotes, G07D; apparatus for vending or hiring articles or services activated by coins, credit cards, paper currency or the like G07F7/00, G07F17/00
• CPC Class Codes: G07C 2009/00388 code verification carried out according to the challenge/response method
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/0042 the transmitted data signal containing a code which is changed
• CPC Class Codes: G07C 2009/00468 after n uses
• CPC Class Codes: G07C 2009/00634 Power supply for the lock
• CPC Class Codes: G07C 2009/00761 with data transmission performed by connected means, e.g. mechanical contacts, plugs, connectors
• CPC Class Codes: G07C 2009/00825 remotely by lines or wireless communication
• CPC Class Codes: G07C 2009/0088 centrally
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/21 having a variable access code
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07F 17/105 for money boxes for saving clocks G07F17/0007
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

An electronic security system includes an electronic lock mechanism and an electronic key, each of which is provided with a microprocessor controller and a memory storing data including an ID code and encryption key codes. The lock microprocessor may either change ID codes stored in its memory or encrypt a seed number to be used for determining access to the lock. The key can only be used to access the lock either once or for a limited number of successive times, and must thereafter be reprogrammed by a host computer to be loaded with either the proper ID code or the appropriate encryption key code for that lock. The electronic lock operates a solenoid which retracts a bolt-blocking mechanism that prevents the unlocking of the bolt even when a key having the correct mechanical key cuts is inserted into the lock. Power for operating the electronic lock as well as the solenoid is provided by a power supply within the key. In a preferred embodiment the key unit is composed of a handheld computer and key module interface.

Claims

1. An electronic security system, comprising:

a lock, including

a lock memory storing therein an identification number of said lock, an encryption code associated with said lock, and a seed number, and

means for encrypting said stored seed number with said encryption code to generate an encrypted seed number;

key means couplable with said lock for communicating therewith, including

a key memory storing therein a list of lock identification numbers and corresponding encryption codes,

means for receiving said identification number of said lock and said seed number from said lock,

means for encrypting said received seed number with an encryption code retrieved from said key code corresponding to said received identification number to generate an encrypted seed number, and

means for transmitting said encrypted seed number to said lock;

said lock further including

means for comparing said encrypted seed number received from said key means with the encrypted seed number generated in said lock, and

means for enabling said key means to open said lock upon determination by said means for comparing that said encrypted seed numbers match.

2. An electronic security system according to claim 1, wherein said lock further includes means for replacing said stored seed number in said lock memory with said encrypted seed number upon determination by said means for comparing that said encrypted seed numbers match.

3. An electronic security system according to claim 1, wherein said key means further includes means for deleting from said key memory the encryption code corresponding to a lock identification number of a lock which has been opened.

4. An electronic security system according to claim 3, wherein said means for deleting includes means for counting the number of accesses of said key means to a specific lock and deleting said encryption code when said number of accesses has reached a predetermined value.

5. An electronic security system according to claim 1, wherein said list of lock identification numbers and corresponding encryption codes in said key memory are encrypted with an encryption code corresponding to said key means;

said key means further including means for decrypting said list of lock identification numbers and corresponding encryption codes with said encryption code corresponding to said key means to produce decrypted lock identification numbers and corresponding decrypted encryption codes.

6. An electronic security system according to claim 5, further comprising computer means for programming said key means with a specific route composed of a plurality of lock identification numbers and corresponding encryption codes.

7. An electronic security system according to claim 6, wherein said key memory stores a plurality of routes, each of said plurality of routes being valid only for a specific date;

said key means further including means for storing the current date and for retrieving only those routes determined to be valid for said current date for comparison with lock identification numbers received from respective locks.

8. An electronic security system according to claim 6, wherein said key means further comprises a modem for communicating with said computer means over telephone lines.

9. An electronic security system according to claim 6, wherein said computer means encrypts said route with a daykey encryption code generated by said computer means, encrypts said daykey encryption code with said encryption code corresponding to said key means, and transmits said encrypted daykey encryption code with said route to said key means.

10. An electronic security system, comprising:

a lock mechanism;

controller means for controlling the operation of said lock mechanism, including

means for storing a code number,

means for modifying said stored code number according to a stored predetermined algorithm,

means for receiving an input code number,

means for comparing said modified code number with said input code number,

means for enabling said lock mechanism to be operated when said input code number matches said modified code number, and

means for replacing said stored code number with said modified code number when said input code number matches said modified code number;

key means for operating said lock mechanism including means for storing said predetermined algorithm, means for calculating a code number according to said predetermined algorithm, means for outputting said calculated code number to said controller means as said input code number, and means for operating said lock mechanism when enabled by said controller means; and

means for writing said predetermined algorithm into said key means corresponding to said predetermined algorithm stored in said controller means.

11. An electronic security system as set forth in claim 10, wherein said key means comprises a handheld computer and an interface module coupled to said handheld computer for interfacing said handheld computer with said lock mechanism, at least said means for outputting being located in said interface module.

12. An electronic security system as set forth in claim 10, wherein said key means further comprises mechanical key cuts for operating said lock mechanism.

13. An electronic security system as set forth in claim 10, wherein said means for writing comprises a computer.

14. An electronic security system as set forth in claim 10, wherein said controller means comprises a microprocessor.

15. An electronic security system, comprising:

a lock, including means for unlocking said lock based on received specific data; and

key means for operating said lock, comprising

a handheld computer including means for storing encoded data, and

an interface module detachably coupled to said handheld computer for interfacing said handheld computer with said lock, including means for decoding said encoded data stored in said handheld computer into decoded data and means for generating said specific data for transmission to said lock based on said decoded data.