Mobile key using read/write RFID tag

• US 7,471,199 B2
• Filed: 01/10/2005
• Issued: 12/30/2008
• Est. Priority Date: 01/09/2004
• Status: Active Grant

• Current Assignee: Intermec IP Corporation (Honeywell International Inc.)
• Original Assignee: Intermec IP Corporation (Honeywell International Inc.)
• Inventors: Seely, James, Zimmerman, Timothy M., Downs Mullen, Timothy Shane, Roush, Jeffrey Scott
• Primary Examiner(s): Nguyen; Hung T.
• Application Number:
  US11/033,067
• Publication Number:
  US 20050242921A1
• Time in Patent Office: 1,450 Days
• Field of Search: 340/572.1, 340/572.4, 340/539.1, 340/539.11, 340/539.23, 340/825.69, 340/5.1, 340/5.2, 340/5.8, 340/10.1, 340/10.3, 235/375, 235/376, 235/383, 235/385
• US Class Current: 340/572.1
• CPC Class Codes: G07C 2011/02 related to amusement parks
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00857 where the code of the data carrier can be programmed
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder

Abstract

A mobile key includes an RFID tag associated with a memory. The memory holds a secure access code. An authorization status for a person or item associated with the mobile key is determined by interrogating the mobile key using an RFID interrogation field. Security information, such as a secure identifier or access code, physical measurement data, or biometric data may be provided by the mobile key. The key may also comprise a wireless communication device, such as a cellular telephone. Security information, such as an access code, may be provided to the key using the wireless communication device or other communications network.

Claims

1. A method for securing access to a resource, comprising:

providing an RFID interrogation field comprising a selection condition;

detecting a plurality of mobile keys in the interrogation field, each one of the plurality of mobile keys comprising an RFID device connected to a memory, the memory holding an access code and a selection flag that matches the selection condition;

selecting a first mobile key from the plurality of mobile keys, the first mobile key comprising a first RFID device connected to a first memory, the first memory holding a first access code;

communicating with the first RFID device of the first mobile key to receive the first access code; and

determining an authorization status of the first mobile key based on the first access code.

2. The method of claim 1, further comprising transmitting the first access code to the first mobile key for holding in the first memory.

3. The method of claim 2, wherein the transmitting step further comprises transmitting the first access code to a wireless communications device connected to the first memory, the wireless communication device separate from the first RFID device of the first mobile key.

4. The method of claim 3, wherein the transmitting step further comprises using a cellular telephone network to transmit the first access code, wherein the wireless communications device comprises a cellular telephone.

5. The method of claim 2, wherein the transmitting step further comprises wirelessly transmitting the first access code using the first RFID device of the first mobile key.

6. The method of claim 2, further comprising encrypting the first access code before the transmitting step.

7. The method of claim 6, further comprising decrypting the first access code after the communicating step.

8. The method of claim 1, wherein the first access code comprises a secure identification code assigned to the first mobile key.

9. The method of claim 1, wherein the communicating step further comprises receiving physical measurement data pertaining to an item associated with the first mobile key from the first memory.

10. The method of claim 9, wherein the determining step further comprises determining the authorization status by comparing the physical measurement data from the first memory to second physical measurement data for the item from a measuring device.

11. The method of claim 1, wherein the communicating step further comprises receiving biometric data pertaining to a person bearing the first mobile key from the first memory.

12. The method of claim 11, wherein the determining step further comprises determining the authorization status by comparing the biometric data from the first memory to second biometric data for the person from a biometric data input device.

13. The method of claim 1, wherein the communicating step further comprises receiving an account balance from the first memory, and the determining step further comprises determining the authorization status based on the account balance.

14. The method of claim 13, further comprising debiting the account balance, and transmitting the debited account balance to the first mobile key for holding in the first memory.

15. The method of claim 1, wherein the determining step further comprises determining the authorization status based on a time that the first access code is received from the first mobile key.

16. The method of claim 1, wherein the determining step further comprises determining the authorization status based on a comparison of the first access code to information received from a secure database.

17. The method of claim 1, further comprising activating a signaling device on the first mobile key based on the authorization status.

18. The method of claim 1, further comprising admitting a bearer of the first mobile key to a secured area based on the authorization status, and communicating a second time with the first RFID device after the admitting step to confirm the authorization status of the first mobile key.

19. The method of claim 18, further comprising communicating a second time with the first RFID device after the admitting step to revise the authorization status of the first mobile key.

20. The method of claim 1, wherein the determining step further comprises determining a location of the first mobile key by proximity to a nearest antenna for the RFID interrogating field.

21. The method of claim 1, wherein the step of selecting a first mobile key further comprises:

receiving identification information from at least one of the plurality of mobile keys; and

transmitting a fail command if identification information is received from more than one of the plurality of mobile keys.

22. The method of claim 1, further comprising:

selecting a second mobile key from the plurality of mobile keys, the second mobile key comprising a second RFID device connected to a second memory, the second memory holding a second access code;

communicating with the second RFID device of the second mobile key to receive the second access code; and

determining an authorization status of the second mobile key based on the second access code.

23. The method of claim 22, wherein the step of selecting a second mobile key comprises selecting the second mobile key at a time when the first mobile key is not selected.

24. The method of claim 22, wherein the second access code comprises a secure identification code assigned to the second mobile key.

25. The method of claim 22, wherein the communicating step further comprises receiving physical measurement data pertaining to an item associated with the second mobile key from the second memory.

26. The method of claim 22, wherein the communicating step further comprises receiving biometric data pertaining to a person bearing the second mobile key from the second memory.

27. The method of claim 22, wherein the communicating step further comprises receiving an account balance from the second memory, and the determining step further comprises determining the authorization status based on the account balance.

28. An apparatus for controlling access to a resource, comprising:

an RFID base station disposed to provide an RFID interrogation field;

access control hardware configured to control access to a resource depending on an authorization status of a user; and

a controller operably associated with the access control hardware and with the RFID base station, the controller operably associated with a memory holding program instructions for;

providing an RFID interrogation field comprising a selection condition;

detecting a plurality of mobile keys in the interrogation field, each one of the plurality of mobile keys comprising an RFID device and holding an access code and a selection flag that matches the selection condition;

selecting a first mobile key from the plurality of mobile keys, the first mobile key comprising a first RFID device and holding a first access code;

communicating with the first RFID device of the first mobile key to receive the first access code; and

determining an authorization status of the first mobile key based on the first access code.

29. The apparatus of claim 28, wherein the memory further comprises program instructions for decrypting the first access code.

30. The apparatus of claim 28, wherein the memory further comprises program instructions for receiving physical measurement data pertaining to an item associated with the first mobile key.

31. The apparatus of claim 30, wherein the memory further comprises program instructions for determining the authorization status by comparing the physical measurement data from the first mobile key to second physical measurement data for the item from a measuring device.

32. The apparatus of claim 28, wherein the memory further comprises program instructions for receiving biometric data pertaining to a bearer of the first mobile key from the first mobile key.

33. The apparatus of claim 32, wherein the memory further comprises program instructions for determining the authorization status by comparing the biometric data from the first mobile key to second biometric data for the item from a measuring device.

34. The apparatus of claim 28, wherein the memory further comprises program instructions for receiving an account balance from the first mobile key, and further determining the authorization status based on the account balance.

35. The apparatus of claim 34, wherein the memory further comprises program instructions for debiting the account balance, and transmitting the debited account balance to the first mobile key.

36. The apparatus of claim 28, wherein the memory further comprises program instructions for further determining the authorization status based on a time that the first access code is received from the first mobile key.

37. The apparatus of claim 28, wherein the memory further comprises program instructions for determining the authorization status based on a comparison of the first access code to information received from a secure database.

38. The apparatus of claim 28, wherein the memory further comprises program instructions for activating a signaling device on the first mobile key based on the authorization status.

39. The apparatus of claim 38, wherein the memory further comprises program instructions for communicating a second time with the RFID device to confirm the authorization status of the first mobile key.

40. The apparatus of claim 28, wherein the memory further comprises program instructions for determining a location of the first mobile key by proximity to a nearest antenna for the RFID interrogating field.

41. The method of claim 28, wherein the memory further comprises program instructions for:

receiving identification information from at least one of the plurality of mobile keys, wherein the identification information includes, at least in part, access code information; and

transmitting a fail command if identification information is received from more than one of the plurality of mobile keys.

42. The method of claim 28, wherein the memory further comprises program instructions for:

selecting a first mobile key from the plurality of mobile keys, the first mobile key comprising a first RFID device and holding a plurality of access codes; and

communicating with the first RFID device of the first mobile key to receive at least one of the plurality of access codes; and

determining an authorization status of the first mobile key based on the at least one of the plurality of access codes.

43. The apparatus of claim 28, wherein the memory further comprises program instructions for:

selecting a second mobile key from the identified mobile keys, the second mobile key comprising a second RFID and holding a second access code;

communicating with the second RFID device of the second mobile key to receive the second access code; and

determining an authorization status of the second mobile key based on the second access code.

44. A method for securing access to a resource, comprising:

providing an RFID interrogation field comprising a selection condition;

detecting a plurality of mobile keys in the interrogation field, each one of the plurality of mobile keys comprising an RFID device connected to a memory, the memory holding an access code and a selection flap that matches the selection condition;

selecting a first mobile key from the plurality of mobile keys, the first mobile key comprising a first RFID device connected to a first memory, the first memory holding a first access code, comprising

receiving identification information from a first portion of the plurality of mobile keys, wherein (1) each one of the first portion of the plurality of mobile keys includes a counter that is set to zero and (2) each one of a second portion of the plurality of mobile keys includes a counter that is set to an integer that is greater than zero; and

transmitting a fail command if identification information is received from more than one of the plurality of mobile keys, the fail command being used by (1) each one of the first portion of the plurality of mobile keys to set their counter to a random number and (2) each one of the second portion of the plurality of mobile keys to increment their counter, wherein the random number is selected from a number consisting of zero and one;

communicating with the first RFID device of the first mobile key to receive the first access code; and

determining an authorization status of the first mobile key based on the first access code.