Systems and methods for commissioning access control devices

• US 8,598,982 B2
• Filed: 05/21/2008
• Issued: 12/03/2013
• Est. Priority Date: 05/28/2007
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Bhandari, Neelendra, Joshi, Priteshkumar D, Reddy, Chandrakanth C, Goel, Parveen Kumar
• Primary Examiner(s): SYED, NABIL H
• Application Number:
  US12/601,610
• Publication Number:
  US 20110115602A1
• Time in Patent Office: 2,022 Days
• Field of Search: 340/5.1, 340/5.2, 340/5.21, 340/5.22, 340/5.23, 340/5.24, 340/5.6, 340/5.64, 340/5.67, 340/5.26, 340/10.1, 340/10.2, 340/10.3, 340/10.4, 340/572.1, 340/539.13, 340/539.21, 340/539.23
• US Class Current: 340/5.6
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G07C 2009/00865 remotely by wireless communication
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Described herein are systems and methods for commissioning access control devices. In overview, a carrier substrate such as a smartcard is used to commission a plurality of access control devices. Measures are implemented such that the individual access control devices are uniquely commissioned. That is, no two devices apply identical commissioning data, hi some embodiments this is achieved by, as part of the commissioning process at a given access control device, modifying one or more aspects of the data carried by the carrier substrate.

Claims

1. A method performed by an access control device having a component configured to read data from a carrier substrate provided by a user and to grant the user access to a physical region or virtual functionality, the method including the steps of:

(a) reading commissioning data from the carrier substrate, the commissioning data being applicable to a first access control device for commissioning the first access control device, the commissioning data including a first unique identifier which is applied to the first access control device upon application of the commission data;

(b) applying the commissioning data to the first access control device thereby to commission the first access control device so that the first access control device operates in accordance with a wider access control environment;

(c) defining a second unique identifier on the basis of the first unique device identifier;

(d) writing the second unique identifier to the carrier substrate in place of the first unique identifier such that a subsequently commissioned second access control device commissioned by the carrier substrate applies the second unique identifier.

2. A method according to claim 1 wherein the carrier substrate is a smartcard.

3. A method according to claim 2 wherein the smartcard is readable in substantially the same manner as an access control card configured for use with the first access control device.

4. A method according to claim 1 wherein step (b) is only performed in the case that the first access control device is uncommissioned.

5. A method according to claim 4 wherein steps (c) and (d) are performed only in the case that step (b) is performed.

6. A method according to claim 1 wherein steps (a) to (d) are carried out by the first access control device.

7. A method according to claim 1 wherein step (c) includes incrementing the first unique identifier to define the second unique identifier.

8. A method according to claim 1 wherein the commissioning data includes a legacy identifier indicative of whether or not one or more subsequent access control devices are to be commissioned by the carrier substrate.

9. A method according to claim 8 wherein the legacy identifier is indicative of a number of subsequent devices access control devices that are to be commissioned by the carrier substrate.

10. A method according to claim 8 including the step of being responsive to the legacy identifier for, in the case that no subsequent access control devices are to be commissioned by the carrier substrate, omitting at least step (d).

11. A method according to claim 1 wherein the commissioning data includes network information which is applied to the first access control device upon application of the commissioning data.

12. A method according to claim 11 wherein the network information includes a first IP address, and step (b) includes applying the first IP address to the first access control device.

13. A method according to claim 12 including the steps of:

(e) defining a second unique IP address on the basis of the first IP address;

(f) writing the second IP address to the carrier substrate in place of the first IP address such that the subsequently commissioned second access control device applies the second IP address.

14. A method according to claim 11 wherein the network information includes constraints for the definition of an IP address.

15. A method according to claim 1 including a step of, on the basis of the applied UID and an IP address derivation protocol, deriving and applying an IP address.

16. A method according to claim 13 wherein step (e) includes incrementing the first IP address to define the second IP address.

17. A method according to claim 1 wherein the commissioning data includes default configuration data for the first access control device.

18. A method according to claim 17 wherein the default configuration data includes data that is constant across all access control devices in the wider access control environment.

19. A controller for a first access control device, the controller including:

an input for reading commissioning data from a carrier substrate, the commissioning data being applicable to the first access control device for commissioning the first access control device, the commissioning data including a first unique identifier which is applied to the first access control device upon application of the commission data;

a processor for;

(i) applying the commissioning data to the first access control device thereby to commission the first access control device;

(ii) defining a second unique identifier on the basis of the first unique device identifier;

an output for writing the second unique identifier to the carrier substrate in place of the first unique identifier such that a subsequently commissioned second access control device commissioned by the carrier substrate applies the second unique identifier.

20. An access control device including:

an input for reading commissioning data from a carrier substrate, the commissioning data being applicable to the first access control device for commissioning the first access control device, the commissioning data including a first unique identifier which is applied to the first access control device upon application of the commission data;

a processor for;

(i) applying the commissioning data to the first access control device thereby to commission the first access control device;

(ii) defining a second unique identifier on the basis of the first unique device identifier;

an output for writing the second unique identifier to the carrier substrate in place of the first unique identifier such that a subsequently commissioned second access control device commissioned by the carrier substrate applies the second unique identifier.