Wireless lock system

• US 7,624,280 B2
• Filed: 10/15/2001
• Issued: 11/24/2009
• Est. Priority Date: 10/13/2000
• Status: Active Grant

• Current Assignee: III Holdings 3, LLC (Intellectual Ventures LLC)
• Original Assignee: Nokia Corporation
• Inventors: Oskari, Koskimies
• Primary Examiner(s): Vu; Kimyen
• Assistant Examiner(s): PATEL, NIRAV B
• Application Number:
  US09/976,091
• Publication Number:
  US 20060072755A1
• Time in Patent Office: 2,962 Days
• Field of Search: 380/44, 380/23, 380/270, 380/278, 380/279, 380/277, 380/247, 380/284, 713/186, 713/200, 713/202, 713/168, 713/169, 713/182, 713/185, 713/150, 713/155, 713/157, 713/159, 713/172, 713/175, 713/156, 713/170, 713/176, 340/5.6, 340/572.9, 340/542, 340/5.74, 340/5.8, 340/5.81, 340/5.82, 340/5.83, 340/5.85, 705/41, 705/64, 705/65, 705/18, 705/66, 705/67, 705/76, 726/2, 726/9, 726/20, 726 26- 30, 726/5, 726/10, 726/19, 726/17, 726/21, 709/225, 709/229, 455/410, 455/411, 235/27, 235/130, 235/382, 235/382.5, 235/380, 70/31, 704/29
• US Class Current: 713/185
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07C 2009/00388 code verification carried out according to the challenge/response method
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/005 whereby the code is a random code
• CPC Class Codes: G07C 2009/00865 remotely by wireless communication
• CPC Class Codes: G07C 2209/04 Access control involving a hierarchy in access rights
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00857 where the code of the data carrier can be programmed

Abstract

A wireless lock and key system using an encryption key pair. When a lock senses a person nearby, the random signal is generated. The key encrypts the signal and returns it to the lock. The lock decrypts the signal and compares it to the original to determine if the lock should be opened. The key may generate temporary tickets for guests to open the lock for limited times.

Claims

1. An apparatus comprising:

a processor configured to;

generate an electronic ticket for providing an electronic key device authorization to unlock an electronic lock device, the electronic ticket comprising a public key corresponding to the electronic key device and a link key configured to authenticate an identity of the electronic lock device,

wherein the apparatus is authorized to unlock the electronic lock device,

wherein the ticket is transmittable from the apparatus to the electronic key device and wherein the ticket is electronically signed by the apparatus using a private key of the apparatus,

wherein the public key corresponding to the electronic key device is configured to decrypt a code issued by the electronic lock device and encrypted by the electronic key device, and

wherein the link key of the electronic ticket is generated using a one-way hash of a link key of the apparatus and a lock identifier of the electronic lock device.

2. The apparatus according to claim 1, wherein the processor is further configured to wirelessly communicate using Bluetooth short range communication protocol.

3. The apparatus according to claim 1, wherein said electronic lock device is a virtual lock device in a form of a software module controlling access to a digital resource.

4. The apparatus according to claim 1, wherein said electronic lock device stores public keys for a plurality of authorized key holders.

5. The apparatus according to claim 1, wherein the public key is stored in a plurality of lock devices for which entry is authorized for the apparatus.

6. The apparatus according to claim 1, wherein a different public key is stored in each lock device for which entry is authorized for the apparatus.

7. The apparatus according to claim 1, wherein at least one of the apparatus and the electronic key device comprises a portable wireless device.

8. The apparatus according to claim 7, wherein at least one of the apparatus and the electronic key device comprises a wireless telephone.

9. The apparatus according to claim 7, wherein at least one of the apparatus and the electronic key device is wearable by a user.

10. The apparatus according to claim 1, wherein the apparatus further comprises a power source, non-volatile memory and a transmitter/receiver unit.

11. The apparatus according to claim 10, wherein at least one of the apparatus and the electronic key device further includes a user authentication device.

12. An apparatus comprising:

a processor configured to;

receive at least one electronic ticket transmitted from an electronic key device authorized to unlock an electronic lock device, wherein the at least one received electronic ticket comprises a public key corresponding to the apparatus and a link key configured to authenticate an identity of the electronic lock device, wherein the link key of the electronic ticket is generated using a one-way hash of a link key of the electronic key device and a lock identifier of the electronic lock device,

transmit the at least one electronic ticket to the electronic lock device,

receive a code issued by the electronic lock device,

encrypt the code using a private key of the apparatus, and

transmit the encrypted code to the electronic lock device, wherein the public key of the apparatus is configured to decrypt the encrypted code.

13. The apparatus according to claim 12, wherein said electronic lock device is a virtual lock device in a form of a software module controlling access to digital resources.

14. The apparatus according to claim 13, wherein the at least one electronic ticket grants access to at least part of said digital resources.

15. The apparatus according to claim 12, wherein the at least one electronic ticket further includes one or more access limits.

16. The apparatus according to claim 15, wherein the one or more access limits includes time of day.

17. The apparatus according to claim 15, wherein the one or more access limits includes authorization to generate further electronic tickets.

18. The apparatus according to claim 12, wherein the at least one electronic ticket is transmittable to one or more lock devices.

19. The apparatus according to claim 18, wherein said electronic lock device is a virtual lock device in a form of a software module controlling access to digital resources.

20. The apparatus according to claim 19, wherein at least one electronic ticket grants access to at least part of the digital resources.

21. The apparatus according to claim 12, wherein at least one of the apparatus and the electronic key device includes a display for indicating the number of available electronic tickets.

22. The apparatus according to claim 12, wherein the at least one electronic ticket includes an expiration date.

23. The apparatus according to claim 12, wherein the at least one electronic ticket includes a time of day restriction.

24. The apparatus according to claim 23, wherein said additional information contains user-related information.

25. The apparatus according to claim 12, wherein the electronic key device stores additional information unrelated to the private key.

26. The apparatus according to claim 25, wherein said additional information comprises a Social Security number.

27. The apparatus according to claim 12, wherein at least one of the apparatus and the electronic key device includes a personal identification number.

28. The apparatus according to claim 12, wherein at least one of the apparatus, the electronic key device and said electronic lock device includes authentication information in the form of coded information known to a user.

29. The apparatus according to claim 12, wherein at least one of the apparatus, the electronic key device and said electronic lock device includes authentication information in the form of a physical feature of a user.

30. The apparatus according to claim 12, wherein said electronic lock device stores a list of invalid key devices, and denies authorization to any one of the key devices in the list of invalid key devices.

31. The apparatus according to claim 12, wherein said electronic lock device stores a use counter for n-use electronic tickets.

32. The apparatus according to claim 12, wherein said electronic lock device includes an identification number where the identification number is hierarchical in relation to one or more other lock device identification numbers.

33. An apparatus comprising:

a processor configured to;

receive, from a first electronic key device, a ticket comprising a public key of the first electronic key device and a link key configured to authenticate an identity of the apparatus, wherein the link key of the electronic ticket is generated using a one-way hash of a link key of the first electronic key device and a lock identifier of the apparatus, wherein the ticket is generated by a second key device authorized to unlock the apparatus and wherein the ticket is electronically secured by a private key of the second electronic key device,

issue a code to the first electronic key device,

receive an encrypted code corresponding to the issued code encrypted using a private key of the first electronic key device,

determine a decrypted code by decrypting the encrypted code using the public key of the first electronic key device,

determine whether the decrypted code matches the issued code, and

in response to determining that the decrypted code matches the issued code, unlock the apparatus.

34. The apparatus according to claim 33, wherein the apparatus is a virtual lock device for controlling access to digital resources.

35. The apparatus according to claim 33, wherein at least one of the first and second electronic key devices is not user-interactive.

36. The apparatus according to claim 33, further comprising the second electronic key device, the second electronic key device including a control device configured to load the private key into the second electronic key device remotely and electronically.

37. The apparatus according to claim 36, wherein the control device further loads data into at least one other key device.

38. The apparatus according to claim 36, wherein confirmation data is input into the control device which forwards confirmation to the second electronic key device.

39. A method comprising:

generating a ticket on a first key device, wherein the first key device is authorized to unlock an electronic lock device, and wherein the ticket includes a public key of a second key device and a link key configured to authenticate an identity of the electronic lock device, wherein the link key of the electronic ticket is generated using a one-way hash of a link key of the first key device and a lock identifier of the electronic lock device;

electronically securing the ticket with a private key of the first key device; and

transmitting the ticket addressed to the second key device, wherein the public key of the second key device is configured to decrypt a code issued by the electronic device and encrypted by the second key device.

40. The method of claim 39, wherein the first key device is a mobile device.

41. The method of claim 39, wherein the ticket includes one or more use limits.

42. The method of claim 41, wherein the one or more use limits includes a time of day restriction.

43. The method of claim 41, wherein the one or more use limits includes an indication as to whether tickets may be generated by the second key device.

44. A method comprising:

receiving, at a first key device, a ticket from a second key device, wherein the second key device is authorized to unlock an electronic lock device, and wherein the ticket comprises a public key corresponding to the first key device and a link key configured to authenticate an identity of the electronic lock device, wherein the link key of the electronic ticket is generated using a one-way hash of a link key of the second key device and a lock identifier of the electronic lock device and wherein the ticket is secured by a private key of the second key device,

transmitting the ticket addressed to the electronic lock device,

receiving a code issued by the electronic lock device,

encrypting the code using a private key of the first key device, and

transmitting the encrypted code addressed to the electronic lock device.

45. The method of claim 44, wherein the ticket includes one or more use limits.

46. The method of claim 45, wherein the one or more use limits includes a time of day restriction.

47. A method comprising:

receiving, from a first electronic key device, a ticket comprising a public key of the first electronic key device and a link key configured to authenticate an identity of an electronic lock device, wherein the link key of the ticket is generated using a one-way hash of a link key of a second electronic key device and a lock identifier of the electronic lock device, wherein the ticket is generated by the second key device authorized to unlock the electronic lock device and wherein the ticket is electronically secured by a private key of the second electronic key device,

issuing a code to the first electronic key device,

receiving an encrypted code corresponding to the code encrypted using a private key of the first electronic key device,

determining a decrypted code by decrypting the encrypted code using the public key of the first electronic key device,

determining whether the decrypted code matches the issued code, and

in response to determining that the decrypted code matches the issued code, unlocking the electronic lock device.

48. The method of claim 47, wherein unlocking the electronic lock device includes unlocking a physical lock device in response to determining that the decrypted code matches the issued code.

49. The method of claim 47, wherein the issued code comprises a number.

50. One or more computer readable media storing computer readable instructions that, when executed, cause a processor to perform a method comprising:

receiving, from a first electronic key device, a ticket comprising a public key of the first electronic key device and a link key configured to authenticate an identity of an electronic lock device, wherein the link key of the ticket is generated using a one-way hash of a link key of a second electronic key device and a lock identifier of the electronic lock device, wherein the ticket is generated by the second key device authorized to unlock the electronic lock device and wherein the ticket is electronically secured by a private key of the second electronic key device,

issuing a code to the first electronic key device,

receiving an encrypted code corresponding to the code encrypted using a private key of the first electronic key device,

determining a decrypted code by decrypting the encrypted code using the public key of the first electronic key device,

determining whether the decrypted code matches the issued code, and

in response to determining that the decrypted code matches the issued code, unlocking the electronic lock device.

51. The one or more computer readable media of claim 50, wherein unlocking the electronic lock device includes unlocking a physical lock device in response to determining that the decrypted code matches the issued code.

52. The one or more computer readable media of claim 50, wherein the issued code comprises a number.

53. One or more computer readable media storing computer readable instructions that, when executed, cause a processor to perform a method comprising:

receiving, at a first key device, a ticket from a second key device, wherein the second key device is authorized to unlock an electronic lock device, and wherein the ticket comprises a public key corresponding to the first key device and a link key configured to authenticate an identity of the electronic lock device, wherein the link key of the electronic ticket is generated using a one-way hash of a link key of the second key device and a lock identifier of the electronic lock device and wherein the ticket is secured by a private key of the second key device,

transmitting the ticket addressed to the electronic lock device,

receiving a code issued by the electronic lock device,

encrypting the code using a private key of the first key device, and

transmitting the encrypted code addressed to the electronic lock device.

54. The one or more computer readable media of claim 53, wherein the ticket includes one or more use limits.

55. The one or more computer readable media of claim 54, wherein the one or more use limits includes a time of day restriction.

56. One or more computer readable media storing computer readable instructions that, when executed, cause a processor to perform a method comprising:

generating a ticket on a first key device, wherein the first key device is authorized to unlock an electronic lock device, and wherein the ticket includes a public key of a second key device and a link key configured to authenticate an identity of the electronic lock device, wherein the link key of the electronic ticket is generated using a one-way hash of a link key of the first key device and a lock identifier of the electronic lock device;

electronically securing the ticket with a private key of the first key device; and

transmitting the ticket addressed to the second key device, wherein the public key of the second key device is configured to decrypt a code issued by the electronic device and encrypted by the second key device.

57. The one or more computer readable media of claim 56, wherein the first key device is a mobile device.

58. The one or more computer readable media of claim 56, wherein the ticket includes one or more use limits.