Logging access attempts to an area

• US 8,261,319 B2
• Filed: 07/16/2004
• Issued: 09/04/2012
• Est. Priority Date: 10/24/1995
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Corestreet, Ltd. (Assa Abloy AB)
• Inventors: Libin, Phil, Micali, Silvio, Engberg, David
• Primary Examiner(s): Vu, Kim
• Assistant Examiner(s): Debnath, Suman
• Application Number:
  US10/893,174
• Publication Number:
  US 20050044402A1
• Time in Patent Office: 2,972 Days
• Field of Search: 713/182, 713/184, 713/186, 713/193, 726 2- 4, 340/5.2, 340/5.6, 340/5.61, 340/5.7, 340/5.71, 340/5.8, 340/5.81
• US Class Current: 726/2
• CPC Class Codes: G05B 1/00 Comparing elements, i.e. elements for effecting comparison directly or indirectly between a desired value and existing or anticipated values
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

Logging events associated with accessing an area includes recording an event associated with accessing the area to provide an event recording and authenticating at least the event recording to provide an authenticated recording. Recording an event may include recording a time of the event. Recording an event may include recording a type of event. The event may be an attempt to access the area. Recording an event may include recording credentials/proofs used in connection with the attempt to access the area. Recording an event may include recording a result of the attempt. Recording an event may include recording the existence of data other than the credentials/proofs indicating that access should be denied. Recording an event may include recording additional data related to the area. Authenticating the recording may include digitally signing the recording. Authenticating at least the event recording may include authenticating the event recording and authenticating other event recordings to provide a single authenticated recording.

Claims

1. A method of logging events associated with accessing an area, comprising:

recording an event associated with accessing the area to provide an event recording, wherein the event recording is generated after an attempt to access the area, and wherein the event recording includes log entry information that logs the attempt to access the area and is created separately from information presented as part of a request for access during the attempt to access the area; and

authenticating at least the event recording to provide an authenticated recording, wherein the authenticated recording is authenticated at least in part by a door used in the attempt to access the area, the authenticated recording being generated at the door, wherein the door is a disconnected door that, at least intermittently and while generating the authenticated recording, is not able to electronically communicate with any network, and wherein generating the authenticated recording at the door includes the door digitally signing at least one entry of the event recording.

2. A method, according to claim 1, wherein recording an event includes recording a time of the event.

3. A method, according to claim 1, wherein recording an event includes recording a type of event.

4. A method, according to claim 1, wherein recording an event includes recording credentials/proofs used in connection with the attempt to access the area.

5. A method, according to claim 1, wherein recording an event includes recording a result of the attempt.

6. A method, according to claim 4, wherein recording an event includes recording the existence of data other than the credentials/proofs indicating that access should be denied.

7. A method, according to claim 1, wherein recording an event includes recording additional data related to the area.

8. A method, according to claim 1, wherein authenticating the recording includes digitally signing the recording.

9. A method, according to claim 1, wherein authenticating at least the event recording includes authenticating the event recording and authenticating other event recordings to provide a single authenticated recording.

10. A method, according to claim 9, wherein the single authenticated recording is stored on a card.

11. A method, according to claim 1, wherein the authenticated recording is stored on a card.

12. A method, according to claim 11, wherein the card has an other authenticated recording stored thereon.

13. A method, according to claim 12, wherein the other authenticated recording is provided by the card in connection with the card being used to access the area.

14. A method, according to claim 13, wherein access is denied if the other authenticated recording may not be verified.

15. A method, according to claim 13, wherein a controller is provided in connection with accessing the area and wherein the controller further authenticates the other authenticated recording.

16. A method, according to claim 12, wherein the other authenticated recording is authenticated using a digital certificate.

17. A method, according to claim 1, further comprising:

a user presenting a card to attempt to access the area.

18. A method, according to claim 17, further comprising:

the card further authenticating the authenticated recording in connection with the user attempting to access the area.

19. A method, according to claim 17, wherein a controller is provided in connection with accessing the area and wherein the controller and the card together further authenticate the authenticated recording.

20. A method, according to claim 1, further comprising:

providing correlation generation data that indicates the contents of the authenticated recording.

21. A method, according to claim 20, wherein the correlation generation data is bound to the authenticated recording.

22. A method, according to claim 20, wherein the correlation generation data is bound to the authenticated recording and wherein the resulting binding is authenticated.

23. A method, according to claim 22, wherein the resulting binding is digitally signed.

24. A method, according to claim 20, wherein the correlation generation data is a sequence of numbers and wherein a particular one of the numbers is assigned to the event.

25. A method, according to claim 24, further comprising:

authenticating a binding of the particular number and the event.

26. A method, according to claim 25, wherein authenticating the binding includes digitally signing the binding.

27. A method, according to claim 25, wherein authenticating the binding includes one way hashing the binding and then digitally signing the result thereof.

28. A method, according to claim 20, wherein correlation generation data for the event includes information identifying an other event.

29. A method, according to claim 28, wherein the other event is a previous event.

30. A method, according to claim 28, wherein the other event is a future event.

31. A method, according to claim 28, further comprising:

associating a first and second random value for the event;

associating at least one of the first and second random values with the other event; and

binding at least one of the first and second values to the other event.

32. A method, according to claim 20, wherein providing correlation generation data includes using a polynomial to generate the correlation information.

33. A method, according to claim 20, wherein providing correlation generation data includes using a hash chain to generate the correlation information.

34. A method, according to claim 20, wherein the correlation generation data includes information about a plurality of other events.

35. A method, according to claim 20, wherein the correlation generation data includes error correction codes.

36. A method, according to claim 1, further comprising:

disseminating the authenticated recording.

37. A method, according to claim 36, wherein disseminating the authenticated recording includes providing the authenticated recording on cards presented by users attempting to access the area.

38. A method, according to claim 1, wherein the area is defined by walls and the door.

39. A method of logging events associated with accessing an area, comprising:

recording an event associated with accessing the area to provide an event recording, wherein the event recording is generated after an attempt to access the area and wherein the event recording includes log entry information that logs the attempt to access the area and is created separately from information presented as part of a request for access during the attempt to access the area;

authenticating at least the event recording to provide an authenticated recording, wherein the authenticated recording is authenticated at least in part by a door used in the attempt to access the area, the authenticated recording being generated at the door, wherein the door is a disconnected door that, at least intermittently and while generating the authenticated recording, is not able to electronically communicate with any network, and wherein generating the authenticated recording at the door includes the door digitally signing at least one entry of the event recording; and

disseminating the authenticated recording from the door via a transaction that is unrelated to the attempt to access the area.

40. The method, according to claim 39, wherein the transaction that is unrelated to the attempt to access the area includes providing the authenticated recording on a card used in another attempt to access the area, the card used in the another attempt to access the area being different from a card used in the attempt to access the area.