Near field communication based key sharing techniques

• US 8,410,898 B1
• Filed: 08/16/2012
• Issued: 04/02/2013
• Est. Priority Date: 08/16/2012
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Vasquez, Juan
• Primary Examiner(s): HUNNINGS, TRAVIS R
• Application Number:
  US13/587,096
• Time in Patent Office: 229 Days
• Field of Search: 340/5.1, 340/5.54, 340/5.6
• US Class Current: 340/5.6
• CPC Class Codes: G05B 2219/24161 Use of key, in key is stored access level
• CPC Class Codes: G05B 2219/24167 Encryption, password, user access privileges
• CPC Class Codes: G05B 2219/2628 Door, window
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit

Abstract

A computer-implemented technique includes storing keychains in a memory of a computer. A login identifier and a password are received from a mobile device. The login identifier and the password are verified. Subsequent to the verification, one of the keychains is downloaded from the computer to the mobile device. The keychain includes N keys that are each associated with one of M physical locks of M locking devices, where N and M are integers greater than or equal to 1. The M locking devices or another locking device are monitored. Information in a key log is recorded when each of the N keys is used on one of the M locking devices or another locking device. The information includes a locking device identifier and a key identifier. The mobile device is alerted when each of the N keys is used based on the key log.

Claims

1. A computer-implemented method comprising:

storing a plurality of keychains in a memory of one of a computer and a server, wherein each of the keychains is associated with one of a first plurality of mobile devices and comprises a plurality of keys, wherein each of the keys unlocks one or more physical locks;

receiving a login identifier and a password from a first mobile device via a control module of the one of the computer and the server;

verifying the login identifier and the password via the control module;

subsequent to the control module approving the login identifier and the password, downloading one of the plurality of keychains from the one of the computer and the server to the first mobile device, wherein the one of the plurality of keychains comprises N keys, where N is an integer greater than or equal to 1, and wherein each of the N keys is associated with one or more of M physical locks of M locking devices, where M is an integer greater than or equal to 1;

receiving a key sharing request from the first mobile device;

sharing keys of the one of the plurality of keychains with a second plurality of mobile devices based on a rank of the first mobile device and the key sharing request;

monitoring the M locking devices or another locking device not included in the M locking devices via a log update module;

recording information in a key log via a log update module when each of the N keys is used on one of the M locking devices or another locking device by one of the first plurality of mobile devices and the second plurality of mobile devices, wherein the information includes a mobile device identifier, a locking device identifier and a key identifier; and

alerting the first mobile device when each of the N keys is used via an alert module based on the key log including reporting to the first mobile device the mobile device identifier, the locking device identifier and the key identifier.

2. A computer-implemented method comprising:

storing a plurality of keychains in a memory of one of a computer and a server, wherein each of the keychains comprises a plurality of keys, wherein each of the keys is unlocks one or more physical locks;

receiving a login identifier and a password from a first mobile device via a control module of the one of the computer and the server;

verifying the login identifier and the password via the control module;

subsequent to the control module approving the login identifier and the password, downloading one of the plurality of keychains from the one of the computer and the server to the first mobile device, wherein the one of the plurality of keychains comprises N keys, where N is an integer greater than or equal to 1, and wherein each of the N keys is associated with one or more of M physical locks of M locking devices, where M is an integer greater than or equal to 1;

monitoring the M locking devices or another locking device not included in the M locking devices via a log update module;

recording information in a key log via a log update module when each of the N keys is used on one of the M locking devices or another locking device, wherein the information includes a locking device identifier and a key identifier; and

alerting the first mobile device when each of the N keys is used via an alert module based on the key log including reporting to the first mobile device the locking device identifier and the key identifier.

3. The computer-implemented method of claim 2, further comprising:

receiving a request from the first mobile device via one of the computer and the server to transmit one more of the N keys to a second mobile device; and

transmitting the one more of the N keys to the second mobile device via a transceiver of the one of the computer and server.

4. The computer-implemented method of claim 2, further comprising:

requesting verification information from at least one of the first mobile device and the second mobile device; and

receiving the verification information from the at least one of the first mobile device and the second mobile device; and

transmitting the one or more of the N keys to the second mobile device when the verification information received from the at least one of the first mobile device and the second mobile device is valid.

5. The computer-implemented method of claim 2, further comprising:

receiving a verification request from one of the M locking devices to verify one of the N keys;

comparing the one of the N keys to a key stored in the memory; and

transmitting a verification response signal to the one of the M locking devices indicating whether the one of the N keys is valid.

6. The computer-implemented method of claim 2, further comprising:

receiving an information signal at the control module from the first mobile device, wherein the information signal requests information previously requested of the first mobile device by one of the M locking devices; and

transmitting a response signal from the one of the computer and the server to the first mobile device, wherein the response signal includes the information requested of the first mobile device.

7. The computer-implemented method of claim 6, wherein the information requested of the first mobile device comprises at least one of a password, a passcode and a pin.

8. The computer-implemented method of claim 2, further comprising:

at least one of receiving and storing user preferences in the memory; and

transmitting notification signals from the one of the computer and the server to the first mobile device based on the user preferences.

9. The computer-implemented method of claim 8, wherein:

the user preferences comprise log information;

each of the M locking devices transmit signals to the one of the computer and the server indicating use of the N keys by the first mobile device and the other mobile devices at the M locking devices; and

the log information indicates statistics related to the use of the N keys by the first mobile device and other mobile devices at the M locking devices, as tracked by the log update module.

10. The computer-implemented method of claim 9, wherein the notification signals are transmitted to the first mobile device when one or more of the N keys are used by one of the other mobile devices.

11. The computer-implemented method of claim 8, wherein the user preferences comprise key update information, wherein the key update information indicates when the N keys are to be updated.

12. The computer-implemented method of claim 8, further comprising:

receiving alerting criteria from at least one of the first mobile device and the computer;

tracking the user preferences based on the alerting criteria; and

transmitting the notification signals based on the alerting criteria.

13. The computer-implemented method of claim 2, further comprising:

at least one of receiving authorization criteria from the first mobile device and setting authorization criteria via the control module, wherein the authorization criteria indicates the verification information requirements to unlock the M physical locks;

verifying information received from the one of the M locking devices based on the authorization criteria; and

transmitting a verification response signal to the one of the M locking devices to unlock one of the M physical locks when the information received is valid.

14. The computer-implemented method of claim 2, further comprising:

periodically updating the N keys;

transmitting the N keys to the first mobile device; and

transmitting the N keys to respective ones of the M locking devices.

15. The computer-implemented method of claim 2, further comprising:

periodically revoking the N keys; and

transmitting verification response signals to the M locking devices indicating that respective ones of the N keys have been revoked.

16. The computer-implemented method of claim 2, further comprising:

receiving a revoke request from the first mobile device to revoke a key provided to another mobile device; and

transmitting a key update signal to one of the M locking devices indicating that the key provided to another mobile device is invalid.

17. The computer-implemented method of claim 2, further comprising issuing the N keys for the first mobile device with unlimited access.

18. The computer-implemented method of claim 17, further comprising issuing keys with limited access for the M locking devices to mobile devices other than the first mobile device,

wherein each of the keys with limited access becomes invalid after a respective predetermined access period.

19. The computer-implemented method of claim 2, further comprising:

providing unlimited key sharing privileges to the first mobile device; and

providing restricted key sharing privileges to mobile devices other than the first mobile device.

20. The computer-implemented method of claim 2, further comprising:

receiving a unique identifier and verification request from a second mobile device, wherein the verification request is for at least one of (i) a key of one of the M physical locks and (ii) verification information;

determining whether the second mobile device is authorized to unlock the one of the M physical locks associated with the and verification request;

when the second mobile device is authorized, downloading to the second mobile device the at least one of (i) the key for the one of the M physical locks associated with the key request and (ii) the verification information.

21. The computer-implemented method of claim 20, further comprising one of:

receiving an authorization signal from the first mobile device authorizing the second mobile device to receive the at least one of (i) the key for the one of the M physical locks associated with the key request and (ii) the verification information; and

transmitting an authorization request signal to the first mobile device requesting whether the second mobile device is authorized to unlock the one of the M physical locks associated with the key request.

22. The computer-implemented method of claim 21, further comprising:

receiving a signal from the first mobile device authorizing a one-time access key for the one of the M physical locks associated with the key request to be shared with the second mobile device, wherein the one-time access key becomes invalid after being used one time by the second mobile device to unlock the one of the M locks associated with the key request; and

transmitting the one-time access key to the second mobile device.