Electronic lock box proximity access control

• US 8,593,252 B2
• Filed: 09/16/2010
• Issued: 11/26/2013
• Est. Priority Date: 09/16/2010
• Status: Active Grant

• Current Assignee: SentriLock, LLC
• Original Assignee: SentriLock, LLC
• Inventors: Fisher, Scott R.
• Primary Examiner(s): Mehmood, Jennifer
• Assistant Examiner(s): GIRMA, FEKADESELASS
• Application Number:
  US12/883,628
• Publication Number:
  US 20120068817A1
• Time in Patent Office: 1,167 Days
• Field of Search: 340/5.73
• US Class Current: 340/5.73
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 2009/00936 for key cabinets
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/00896 specially adapted for particular uses

Abstract

An electronic lock box system includes a wireless portable transponder that communicates with an electronic lock box using a low power radio link. The portable transponder includes: a wide area network radio to communicate to a central clearinghouse computer, a motion sensor to activate its wide area network radio, and a connector to communicate with a secure memory device. The electronic lock box sends a hail message that is intercepted by the portable transponder; the hail message includes identification information. The portable transponder responds with a message that includes a time sensitive encryption key; the lock box authenticates this response message using its own time sensitive encryption key. If the messages are authenticated, the lock box sends an access event record to the portable transponder, and this access event record is stored in the secure memory device. If a wide area network is available, the portable transponder sends the access event record to the central clearinghouse computer.

Claims

1. A method for operating an electronic lock box system, said method comprising:

(a) providing an electronic lock box having a first processing circuit, a first memory circuit, a first short range wireless communications device, a secure compartment having a movable opening element that is under the control of said first processing circuit, and a first data input device;

(i) periodically inspecting said first data input device to determine if it has been activated, and if so, determining a first input data value that is entered thereon by a user;

(ii) retrieving data stored in said first memory circuit, including a unique to lockbox identifier value;

(iii) constructing a hail message from said unique lockbox identifier value and from said first input data value, and transmitting said hail message using said first short range wireless communications device; and

(b) providing a portable transponder having a second processing circuit, a second memory circuit, and a second short range wireless communications device;

(i) retrieving data stored in said second memory circuit, including a user identifier data value; and

(ii) determining if said second short range wireless communications device has received said hail message from said electronic lock box; and

if so, based upon said user identifier data value, determining if said hail message contains information corresponding to the identity of said user;

(c) if said received hail message corresponds to the identity of said user, then at said portable transponder;

(i) retrieving data stored in said second memory circuit, including a second time sensitive encryption key value;

(ii) executing a second data encryption routine that uses said second time sensitive encryption key value and applies it to said user identifier data value, thereby creating a second encrypted data message;

(iii) transmitting a response message that includes said second encrypted data message, using said second short range wireless communications device; and

(d) at said electronic lock box;

(i) determining if said first short range wireless communications device has received said response message from said portable transponder, and if so;

(ii) retrieving data stored in said first memory circuit, including a first time sensitive encryption key value;

(iii) executing a first data decryption routine that uses said first time sensitive encryption key value and applies it to said response message, thereby generating a first identifier code value; and

(iv) comparing said first identifier code value to said first input data value, and if there is a match, then granting access to said secure compartment of the electronic lock box.

2. The method of claim 1, wherein said hail message is encrypted, and said portable transponder executes a routine to decrypt said hail message to determine said first input data value before it was encrypted by said electronic lock box.

3. The method of claim 2, wherein said step of determining if said hail message corresponds to the identity of a user requires said unencrypted first input data value to be equal to said user identifier data value to find a match.

4. The method of claim 1, further comprising the steps of:

(a) automatically updating, at said electronic lock box, a value of said first time sensitive encryption key value based on the passage of time; and

(b) if said second time sensitive encryption key value has been updated on said portable transponder within a predetermined amount of real time, then a value of said second time sensitive encryption key value will sufficiently correlate to a present value of said first time sensitive encryption key value such that, if said first input data value is equal to said user identifier data value, then access to said secure compartment of the electronic lock box will be granted.

5. The method of claim 4, further comprising the steps of:

(a) if access was granted, sending access event data from said electronic lock box to said portable transponder, using said first short range wireless communications device and using said second short range wireless communications device, and storing said access event data in said second memory circuit.

6. The method of claim 5, further comprising the steps of:

(a) providing said portable transponder with a wide area network wireless communications device that acts as a first wireless data link;

(b) providing a remote central computer that includes a system database and a second wireless data link; and

(c) if access was granted to said secure compartment of the electronic lock box, then uploading said access event data from said portable transponder to said central computer, and storing the access event data in said system database.

7. The method of claim 6, further comprising the steps of:

(a) providing said portable transponder with a display for showing visible information to said user;

(b) determining, by said central computer, if there is existing data stored at the central computer that is to be shared with said user, in which said existing data corresponds to a property where said electronic lock box is sited; and

(c) if so, transmitting said existing data to said portable transponder, and showing said existing data on said display.

8. The method of claim 5, wherein said second memory circuit comprises a portable secure memory device that is removable from said portable transponder.

9. The method of claim 1, further comprising the steps of:

(a) automatically updating, at said electronic lock box, a value of said first time sensitive encryption key value based on the passage of time; and

(b) if said second time sensitive encryption key value has not been updated on said portable transponder within a predetermined amount of time, then a value of said second time sensitive encryption key value will not sufficiently correlate to a present value of said first time sensitive encryption key value such that, even if said first input data value is equal to said stored user identifier data value, access to said secure compartment of the electronic lock box will not be granted.

10. The method of claim 9, further comprising the steps of:

(a) providing said portable transponder with a wide area network wireless communications device that acts as a first wireless data link;

(b) providing a remote central computer that includes a system database and a second wireless data link;

(c) if access was not granted to said secure compartment of the electronic lock box, then transmitting an update request from said portable transponder to said central computer, and downloading an updated encryption key from said central computer to said portable transponder, in real time; and

(d) using the received updated encryption key as said second time sensitive encryption key value, so as to obtain access to said secure compartment of the electronic lock box.

11. A method for operating an electronic lock box system, said method comprising:

(a) providing a central computer that includes a first processing circuit, a first memory circuit, a system database, and a first wireless data link; and

(b) providing a portable transponder having a second processing circuit, a second memory circuit, a motion sensor, and a wide area network wireless communications device that acts as a second wireless data link;

(i) maintaining said wide area network wireless communications device in a low power state during inactive periods when a user is not handling said portable transponder;

(ii) activating said wide area network wireless communications device if said motion sensor provides an input state indicating that said portable transponder is being handled by said user; and

(iii) determining if said portable transponder has a need to communicate with said central computer, and if so, transmitting identification data to said central computer using said wide area network wireless communications device;

wherein said step of determining if said portable transponder has a need to communicate with said central computer occurs if at least one of the following states exists;

(a) said portable transponder requires an updated time sensitive encryption key;

(b) said second memory circuit of the portable transponder contains at least one access event data set pertaining to a system electronic lock box that is to be stored in said database of the central computer; and

(c) said second memory circuit of the portable transponder contains at least one feedback response data set pertaining to a system electronic lock box that is to be stored in said database of the central computer.

12. The method of claim 11, further comprising the steps of:

(a) determining, by said central computer, if there is existing data stored at the central computer that is to be downloaded to said portable transponder, in which said existing data pertains to a property, or pertains to system electronic lock box; and

if so

(b) transmitting said existing data to at least one of;

(i) said portable transponder, using said first wireless data link; and

(ii) said user, using electronic mail.

13. The method of claim 12, wherein said existing data comprises at least one of:

(a) an updating time sensitive encryption key value;

(b) a feedback request;

(c) a local alarm system code;

(d) sales information pertaining to said property;

(e) medical information about an occupant in said property; and

(f) special instructions for a caregiver at said property.

14. An electronic lock box system, comprising:

(a) an electronic lock box having a first processing circuit, a first memory circuit, a first short range wireless communications device, a secure compartment having a movable opening element that is under the control of said first processing circuit, and a first data input device, wherein said electronic lock box generally maintains said first short range wireless communications device in a sleep mode until becoming activated by user manipulation of said first data input device, and once activated, said first short range wireless communications device transmits a hail message; and

(b) a portable transponder having a second processing circuit, a second memory circuit, a second short range wireless communications device, a second data input device for use by said user, and a motion sensor, wherein said portable transponder generally maintains said second short range wireless communications device in a sleep mode until becoming activated by said motion sensor undergoing a change in state indicating that said portable transponder is being handled by said user, and once activated, said second short range wireless communications device receives said hail message and acts upon it;

(c) an attachable/detachable portable secure memory device having a plurality of memory elements;

(d) mounted to said electronic lock box, a first data interface for communicating with said plurality of memory elements of the portable secure memory device, if said portable secure memory device is attached to said electronic lock box; and

(e) mounted to said portable transponder, a second data interface for communicating with said plurality of memory elements of the portable secure memory device, if said portable secure memory device is attached to said portable transponder.

15. The electronic lock box system of claim 14, wherein said a second memory circuit includes a removable portable secure memory device that includes a plurality of memory elements for storing data, including time-sensitive data.

16. The electronic lock box system of claim 14, wherein said second processing circuit is configured:

(a) to determine if said hail message was received from a correct user of said electronic lock box, and if so;

(b) to transmit, using said second short range wireless communications device, a response message that contains a second user identification value and a second time sensitive encryption key value.

17. The electronic lock box system of claim 16, wherein said first processing circuit is configured:

(a) to retrieve a first user identification value from said first data input device, and a first time sensitive encryption key value that is current with respect to real time;

(b) to determine if said response message contains a proper said second user identification value and a proper second time sensitive encryption key value, by using said first user identification value and using said first time sensitive encryption key value; and

(c) if the response message contains proper data, then to grant access to said secure compartment.

18. The electronic lock box system of claim 17, wherein if access was granted, then said first processing circuit is further configured:

(a) to generate access event data; and

(b) to transmit, using said first short range wireless communications device, said access event data to said portable transponder.

19. The electronic lock box system of claim 18, further comprising:

(a) at said portable transponder, a wide area network wireless communications device that acts as a first wireless data link; and

(b) a remotely located central computer that includes a system database and a second wireless data link;

wherein;

(c) said second processing circuit is configured to upload said access event data from said portable transponder to said central computer, by use of said wide area network wireless communications device; and

(d) said central computer is configured to store the access event data in said system database.

20. The electronic lock box system of claim 19, wherein:

(a) if access was not granted, then said second processing circuit is further configured to transmit an update request from said portable transponder to said central computer; and

(b) said central computer is configured to download an updated encryption key from said central computer to said portable transponder, in real time; and

(c) said second processing circuit is further configured to transmit the received updated encryption key as said second time sensitive encryption key value, so as to obtain access to said secure compartment of the electronic lock box.

21. An electronic lock box system, comprising:

(a) a first electronic lock box having a first processing circuit, a first memory circuit, a first short range wireless communications device, and a secure compartment having a movable opening element that is under the control of said first processing circuit, wherein once said first electronic lock box becomes activated, said first short range wireless communications device transmits a first hail message; and

(b) a portable transponder having a second processing circuit, a second memory circuit, and a second short range wireless communications device, wherein once said second short range wireless communications device receives said first hail message, said portable transponder sends a response message to authenticate itself to said first electronic lock box;

(c) after said first electronic lock box receives said response message, and verifies that it is authentic, said first short range wireless communications device begins to periodically transmit a PROMPT message at predetermined intervals;

(d) if said portable transponder is within range, said second short range wireless communications device transmits an ACK message each time said portable transponder receives said periodic PROMPT message;

(e) thereafter, said portable transponder, under control of said second processing circuit, waits for N seconds, and if no further periodic PROMPT message is received during said N seconds waiting interval, then said second processing circuit determines that a “

missing PROMPT”

status is in effect; and

(f) said first electronic lock box, under control of said first processing circuit, waits for M seconds, and if no ACK message is received during said M seconds waiting interval, then said first processing circuit determines that a “

missing ACK”

status is in effect.

22. The electronic lock box system of claim 21, wherein said first electronic lock box tracks a number of times said periodic PROMPT message is sent until said missing ACK status is in effect, and stores that number in said first memory circuit.

23. The electronic lock box system of claim 22, wherein after said first processing circuit determines that a missing ACK status is in effect, said first short range wireless communications device discontinues transmitting said periodic PROMPT message.

24. The electronic lock box system of claim 21, wherein said portable transponder tracks a number of times said periodic PROMPT message is received until said missing PROMPT status is in effect, and stores that number in said second memory circuit.

25. The electronic lock box system of claim 21, further comprising a first timing clock at said first electronic lock box, which determines a first timing value when said first short range wireless communications device begins to transmit said periodic PROMPT message, and determines a second timing value when said first processing circuit determines that a missing ACK status is in effect, and determines a first difference between said first and second timing values and stores said first difference in said first memory circuit.

26. The electronic lock box system of claim 25, wherein after said first processing circuit determines that a missing ACK status is in effect, said first short range wireless communications device discontinues transmitting said periodic PROMPT message.

27. The electronic lock box system of claim 21, further comprising a second timing clock at said portable transponder, which determines a third timing value when said second short range wireless communications device begins to receive said periodic PROMPT message, and determines a fourth timing value when said second processing circuit determines that a missing PROMPT status is in effect, and determines a second difference between said third and fourth timing values and stores said second difference in said second memory circuit.

28. The electronic lock box system of claim 21, further comprising a second electronic lock box having a third processing circuit, a third memory circuit, a third short range wireless communications device, and a second secure compartment having a movable opening element that is under the control of said third processing circuit, wherein once said second electronic lock box becomes activated, said third short range wireless communications device transmits a second hail message;

if said portable transponder receives said second hail message, then said portable transponder terminates sending further ACK messages to said first electronic lock box, even if said portable transponder is still receiving said periodic PROMPT message from said first electronic lock box, and instead said portable transponder sends a second response message to authenticate itself to said second electronic lock box.