RFID reader for facility access control and authorization

• US 8,232,860 B2
• Filed: 10/23/2006
• Issued: 07/31/2012
• Est. Priority Date: 10/21/2005
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Goel, Parveen Kumar
• Primary Examiner(s): Bugg, George
• Assistant Examiner(s): Dorsey, Renee
• Application Number:
  US12/090,915
• Publication Number:
  US 20080272881A1
• Time in Patent Office: 2,108 Days
• Field of Search: None
• US Class Current: 340/5.2
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 2209/62 Comprising means for indicating the status of the lock
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/21 having a variable access code
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

An access control system (1) for a secure facility includes an authorization system having an interface, in the form of an interrogator (7), for receiving the request signal indicative of a user seeking authorization for a predetermined action, where that action is to unlock a door that presently blocks a doorway. If that action occurs, the user will be able to progress through the doorway. A processor (8) is responsive to the request signal for determining if the access is to be granted to that user at that particular time. If access is to be granted, processor (8) generates the secure signal. An operating device, which is collectively defined by ports (13), processor (14) and locking device (15), is physically spaced apart from processor (7) and responsive to the secure signal for initiating the action. That is, the action is to progress the locking device to the second configuration. This, in turn, will allow the user to subsequently gain access through the doorway. The action of progressing the locking device to the second configuration is initiated ultimately by device (15)—after processor (14) provides the required signals via one of ports (13)—to allow the user to then physically progress through the doorway.

Claims

1. A reader for an authorization system having a set of components capable of securely coded communication with the reader, the reader including a first processor that establishes securely coded communication with a subset of the components and thereafter communicates only with the components in the subset and is excluded from communicating with the remainder of the components in the set, wherein the first processor generates keys that are provided to the subset of components and not provided to the remainder of the components.

2. A reader according to claim 1 wherein the first processor is excluded from communicating with components not in the set.

3. A reader according to claim 1 wherein the components are selected from:

a host for the authorization system;

an operating device;

a REX device;

other hardware; and

other hardware/software combinations.

4. A reader according to claim 1 wherein the subset is defined by those components able to communicate with the reader at a predetermined time.

5. A reader according to claim 4 wherein the predetermined time is at initialization of the reader.

6. A reader for an authorization system having a set of components capable of securely coded communication with the reader, the reader including a first processor that establishes securely coded communication with a subset of the components and thereafter communicates only with the components in the subset and is excluded from communicating with the remainder of the components in the set;

wherein the components are selected from;

a host for the authorization system, an operating device, a REX device, other hardware, and other hardware/software combinations; and

wherein the host is able to selectively communicate with the reader to vary the components included in the subset.