Managing access to physical assets

• US 7,061,367 B2
• Filed: 11/14/2003
• Issued: 06/13/2006
• Est. Priority Date: 04/30/2002
• Status: Expired due to Term

• Current Assignee: GE Security Incorporated (Carrier Global Corporation)
• Original Assignee: General Electric Company
• Inventors: Kuenzi, Adam, Luebeck, Jon Marc, Bellamy, Dirk L., Westfall, Scott D., Briskey, Teri Lynné, Beebe, Sean, Sinn, Dean, Mosgrove, Isaac J., Condon, David, Chapin, Ron
• Primary Examiner(s): Zimmerman, Brian
• Assistant Examiner(s): YANG, CLARA I
• Application Number:
  US10/713,771
• Publication Number:
  US 20040160304A1
• Time in Patent Office: 942 Days
• Field of Search: 340/5.21, 340/5.22, 340/5.23, 340/5.24, 340/5.25, 340/5.26, 340/5.27, 340/5.28, 340/5.54, 340/5.6, 340/5.73, 340/10.51, 340/572.1, 340/539.32, 340/5.51, 703/89
• US Class Current: 340/5.21
• CPC Class Codes: B60R 2325/105 Radio frequency identification data [RFID]
• CPC Class Codes: B60R 25/23 using manual input of alphanumerical codes
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: B60R 25/241 whereby access privileges are related to the identifiers
• CPC Class Codes: E05B 19/0005 Key safes E05B35/086 takes precedence
• CPC Class Codes: E05B 2047/0093 including means for preventing manipulation by external shocks, blows or the like
• CPC Class Codes: G07C 11/00 Arrangements, systems or apparatus for checking, e.g. the occurrence of a condition, not provided for elsewhere
• CPC Class Codes: G07C 2009/00936 for key cabinets
• CPC Class Codes: G07C 9/00896 specially adapted for particular uses
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07F 17/0042 for hiring of objects
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: Y10T 70/7768 Key-removal preventing

Abstract

A decentralized key management system for controlling access to multiple vehicles among multiple users includes vehicle keys for the respective vehicles, individual locking key containers for the vehicles, electronic access devices for assignment to the users and a database. Each of the containers has a storage area within which a vehicle key or keys for one vehicle can be stored operable to unlock key containers if authorized. The access devices are operable to unlock the key containers if authorized. The access devices are programmable with information from the database such that an assigned access device is programmed with a specific user'"'"'s access privileges for obtaining access to one or more of the vehicles in the system.

Claims

1. A key management system for controlling access to vehicle keys, comprising:

a key set that includes a vehicle key to a particular vehicle and a key tag associated with the vehicle key, the key tag having an electronically readable identifier stored thereon and an electrical contact portion;

a key container that can be located on or near the vehicle, the key container having a key set storage area secured by an electronic lock, the key container operable to detect the key set when the key set is properly stored in the key set storage area; and

an open architecture electronic access device carried by a user to access the key container, the access device having a memory that is updated with at least the identifier of the key tag when the key container is successfully accessed and the key set is removed from the key set storage area;

wherein the access device is programmed to expire periodically, and wherein information stored in the memory of an expired access device is automatically uploaded to a database.

2. The key management system of claim 1, wherein the key container includes a memory that stores at least the identifier of the key tag of the stored key set.

3. The key management system of claim 1, wherein the memory of the key container includes a lock out list identifying an unauthorized access device or an unauthorized user.

4. The key management system of claim 1, wherein the memory of the access device records the approximate time that a successful access was made.

5. The key management system of claim 1, wherein the memory of the access device records the approximate time that the key tag was returned to the key set storage area.

6. The key management system of claim 1, further comprising a central computer and an associated database for administering the key management system, the central computer allowing an administrator to set the user'"'"'s access privileges and track the user'"'"'s access activity.

7. The key management system of claim 6, wherein the user logs into the central computer to reestablish his expired access privileges.

8. The key management system of claim 1, wherein the user seeking to access the key container uses the access device to communicate the user'"'"'s identifying information and to select one of a predetermined group of codes corresponding to the purpose of the access.

9. The key management system of claim 1, wherein the information stored in the memory of an expired access device is automatically uploaded to a database when the access device is reauthorized.

10. The key management system of claim 1, wherein the key container is operable to communicate with the key set when the electrical contact portion of the key tag is placed to complete an electrical circuit of the key container.

11. The key management system of claim 1, wherein the key container and access device are each programmed to participate in a challenge response exchange with each other during user attempts to access the key container.

12. The key management system of claim 1, wherein the access device memory includes stored privileges associated with a specific user to which the access device has been assigned, and wherein at least some of the privileges are set to expire periodically.

13. The management system of claim 1, wherein the key container memory includes information on access privileges that is used in determining whether the user'"'"'s access request is granted based on comparing the information on access privileges stored in the key container memory with a specific user'"'"'s privileges communicated via the access device.

14. A key management system for controlling access to vehicle keys, comprising:

a key set that includes a vehicle key to a particular vehicle and a key tag associated with the vehicle key, the key tag having a memory having a stored electronically readable identifier and of operable to store tracking information; and

a key container that can be located on or near the vehicle, the key container having a key set storage area secured by an electronic lock, the key container operable to detect the key set when the key set is properly stored in the key set storage area; and

an electronic access device carried by a user to access the key container, the access device having a memory that is updated with at least the identifier of the key tag when the key container is successfully accessed and the key set is removed from the key set storage area.

15. The key management system of claim 14, wherein the key container communicates wirelessly with the key tag.

16. The key management system of claim 14, wherein the key tag and access device are each programmed to participate in a challenge response exchange with each other during user attempts to access the key container.

17. The key management system of claim 14, wherein the access device memory includes stored privileges associated with a specific user to which the access device has been assigned, and wherein at least some of the privileges are set to expire periodically.

18. The key management system of claim 14, wherein the key tag memory includes information on access privileges that is used in determining whether the user'"'"'s access request is granted based on comparing the information on access privileges stored in the key tag memory with a specific user'"'"'s privileges communicated via the access device.

19. A key management system for controlling access to a vehicle key stored proximal to a remotely located vehicle, comprising:

a key container located proximal to one of the remotely located vehicles, the key container having a key storage area for storing a vehicle key associated with the respective vehicle and being secured by an electronic lock;

a key tag associated with the vehicle key, the key tag having a memory with an electronically stored identifier and operable to record information when the key storage area is accessed; and

an electronic key for accessing the key container, the electronic key operable to establish a communications link with the key tag via the key container and having a memory,

wherein information about access events is stored in at least one of the memory of the key tag or the memory of the electronic key.

20. The system of claim 19, wherein the communications link is an infrared link.

21. The system of claim 19, wherein the communications link is an RF link.

22. The system of claim 19, wherein the electronic key is an open architecture personal digital assistant.

23. The system of claim 19, wherein the electronic key is an open architecture mobile phone.

24. The system of claim 19, wherein the key tag is detectible by the key container via a wireless communications link.