Electronic lock and method

• US 8,902,040 B2
• Filed: 08/18/2011
• Issued: 12/02/2014
• Est. Priority Date: 08/18/2011
• Status: Active Grant

• Current Assignee: Greisen Enterprises, LLC
• Original Assignee: Greisen Enterprises, LLC
• Inventors: Greisen, David J., Greisen, Daniel H.
• Primary Examiner(s): Lim, Steven
• Assistant Examiner(s): SHERWIN, RYAN W
• Application Number:
  US13/199,089
• Publication Number:
  US 20130043973A1
• Time in Patent Office: 1,202 Days
• Field of Search: 340/5.51, 340/5.1, 340/5.2, 340/5.21, 340/5.22, 340/5.28, 340/5.54, 340/5.7, 70266-274, 707/698, 707/747
• US Class Current: 340/5.51
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/0069 actuated in a predetermined sequence
• CPC Class Codes: G07C 9/00817 where the code of the lock can be programmed
• CPC Class Codes: Y10T 70/70 Operating mechanism

Abstract

An electronic lock, system and method for dynamic controlled access, without the lock communicating with or connected to a code server, are provided. The lock includes a locking mechanism, a clock, a microprocessor, and a memory storing a hash function and programmed instructions for the microprocessor to perform certain operations. The microprocessor and memory may be comprised in a microcontroller. When an access code is entered into the lock, the lock microcontroller hashes currently valid access start date/duration combinations with lock identifying data to return valid access codes. If the entered access code equals any of the valid access codes, the locking mechanism is opened. The lock identifying data may include data stored by a lock manufacturer and/or data created by a lock owner. Static access codes may also be programmed into the lock if desired. Caching of valid access codes may be used to reduce processing time.

Claims

1. An electronic lock for dynamic controlled access comprising

a mechanical locking mechanism;

a clock;

a microprocessor;

a memory storing a hash function and instructions for identifying, based at least partly on a current time, at least two currently valid arguments to be hashed by the hash function to produce a hash, each of the currently valid arguments comprising a currently valid time period that includes the current time, at least two of the currently valid time periods being different time periods, the hash of each currently valid argument returning a currently valid access code, such that at least two respective access codes are valid at the current time; and

a human interface device configured to permit a human user to input an access code and to transmit the input access code to the microprocessor;

the memory further containing programmed instructions for the microprocessor to

receive a signal from the clock indicating the current time,

receive the input access code transmitted from the human interface device,

compare the input access code to one of the currently valid access codes, the one of the currently valid access codes having been returned by the microprocessor identifying and hashing one of the currently valid arguments, to determine whether the input access code equals the returned valid access code,

if the input access code does not equal the returned currently valid access code and the input access code has not yet been compared to all of the currently valid access codes, compare the input access code to another currently valid access code returned by the microprocessor hashing another one of the currently valid arguments, at least until either the input access code is determined to equal one of the currently valid access codes or the input access code has been compared to all of the currently valid access codes and does equal any of the currently valid access codes, and

if the input access code is determined to equal one of the currently valid access codes, unlock the mechanical locking mechanism.

2. The electronic lock of claim 1, an invalid input failure defined as the input access code being compared to the currently valid access code corresponding to each currently valid argument and no match being found, the lock further programmed with instructions to

prohibit access code input via the human interface device for a predetermined amount of time if a predetermined impermissible number of input failures have occurred within a predetermined time interval.

3. The electronic lock of claim 1, further comprising a time signal receiver and a time signal antenna, the microprocessor further programmed with instructions to

periodically receive a time signal from the time signal receiver and

update the clock to the current time as indicated by the time signal.

4. The electronic lock of claim 1, further comprising a personal computing device (PCD) interface, the lock, when in a programming mode, being further programmed with instructions to accept programming instructions from a PCD through the PCD interface.

5. The electronic lock of claim 4, the lock further programmed with instructions to enter the programming mode when the microprocessor authenticates, through the PCD interface, a PCD that has been authorized to interact with the electronic lock.

6. The electronic lock of claim 1, further comprising a personal computing device (PCD) interface, the lock further programmed with instructions to send data to a PCD through the PCD interface.

7. The electronic lock of claim 1, the currently valid time periods at any given current time comprising at least two time periods of different duration.

8. The electronic lock of claim 1, the currently valid time periods comprising at least two time periods having a different start time.

9. The electronic lock of claim 1, there being at least four currently valid time periods valid at any given time.

10. The electronic lock of claim 1, the currently valid time periods including a set of continuous, non-recurring time periods, each time period of the set beginning at a single start time and ending at a single end time.

11. The electronic lock of claim 10, the set of continuous, non-recurring time periods including a time period corresponding to each of the set of sequences of consecutive days ranging from one day to n days and including the current day, each time period including at least a part of the first day and at least a part of the last day of the corresponding sequence and the entirety of any days in between, and each of the time periods including the current time.

12. The electronic lock of claim 11, wherein n is at least 7.

13. The electronic lock of claim 1, the currently valid time periods including at least one periodically recurring time period.

14. The electronic lock of claim 1, the currently valid time periods including at least one periodically recurring time period and at least two discrete, uninterrupted time periods, each discrete time period beginning at a single start time and ending at a single end time.

15. The electronic lock of claim 1, each valid argument further including data input into the human interface device in addition to the input access code each time an access code is input into the human interface device.

16. The electronic lock of claim 15,

the memory further storing a user ID,

the lock further programmed with instructions to compare the additional input data to the user ID, and

the instructions to hash currently valid arguments being subject to the condition that the additional input data equal the user ID.

17. The electronic lock of claim 1, each currently valid argument further including a secret code associated with the electronic lock.

18. The electronic lock of claim 17, the secret code being pre-set, and each currently valid argument further including a programming code that is selected by a user and stored in the electronic lock.

19. The electronic lock of claim 1, the lock further programmed with instructions to

cache a currently valid access code;

each time an input access code is received, if any currently valid access code is cached, compare the input access code to at least one cached currently valid access code; and

if a match is found, unlock the mechanical locking mechanism.

20. The electronic lock of claim 1, the lock further programmed with instructions to

each time an argument becomes currently valid according to the instructions stored in the memory for identifying currently valid arguments, hash automatically the newly valid argument to return a corresponding newly valid access code, and cache automatically the newly valid access code in a memory,

each time a cached access code ceases to be valid, delete automatically the newly invalid access code from the memory,

each time an input access code is received, compare the input access code to any currently valid access codes cached in the memory at least until a match is found between the input access code and one of the currently valid access codes cached in the memory or the input access code has been compared with all the currently valid access codes cached in the memory and no match has been found, and

if a match is found, unlock the mechanical locking mechanism.

21. The electronic lock of claim 1, the lock further programmed with instructions to

each time an argument becomes currently valid according to the instructions stored in the memory for identifying currently valid arguments, cache automatically the newly valid argument in a memory,

each time a cached argument ceases to be valid, delete automatically the newly invalid argument from the memory,

each time a currently valid argument is hashed to return a currently valid access code, automatically cache the currently valid access code in the memory and automatically delete the corresponding currently valid argument from the memory,

each time an access code in the memory ceases to be valid, automatically delete the newly invalid access code from the memory,

each time an input access code is received, compare the input access code to any currently valid access codes cached in the memory at least until a match is found between the input access code and one of the valid access codes cached in the memory or the input access code has been compared with all the cached currently valid access codes and no match has been found,

if a match is found between the input access code and one of the cached currently valid access codes, unlock the mechanical locking mechanism,

if and when the input access code has been compared with all the cached currently valid access codes, no match has been found, and any currently valid argument remains cached in the memory, compare the input access code to a newly calculated currently valid access code returned by the microprocessor hashing a remaining cached currently valid argument at least until a match is found or no currently valid arguments remain in the memory and no match has been found, and

if a match is found between the input access code and one of the newly calculated currently valid access codes, unlock the mechanical locking mechanism.

22. The electronic lock of claim 1,

further comprising a static access code stored in the lock memory,

the lock further programmed with instructions to compare the input access code to the static access code, and if the input access code equals the static access code, unlock the mechanical locking mechanism.

23. The electronic lock of claim 1,

the lock further programmed with instructions to store in the lock memory for a predetermined time a log of recent access attempts, the log including, for each attempt, data indicating:

the time of the attempt, and

whether the attempt was successful.

24. A security system for dynamic controlled access comprising

an electronic lock comprising

a mechanical locking mechanism;

a clock;

a microprocessor;

a memory storing a hash function and instructions for identifying, based at least partly on a current time, at least two currently valid arguments to be hashed by the hash function, each of the currently valid arguments comprising a time period that includes the current time, the time periods comprised in the currently valid arguments collectively being the currently valid time periods, at least two of the currently valid time periods being different time periods, the hash of each currently valid argument returning a currently valid access code, such that at least two respective access codes are valid at the current time; and

a human interface device configured to permit a human user to input an access code and to transmit the input access code to the lock microprocessor;

the lock memory further containing programmed instructions for the lock microprocessor to

receive a signal from the clock indicating the current time,

receive the input access code transmitted from the human interface device,

compare the input access code to one of the currently valid access codes, the one of the currently valid access codes having been returned by the microprocessor identifying and hashing one of the currently valid arguments, to determine whether the input access code equals the returned valid access code,

if the input access code does not equal the returned currently valid access code and the input access code has not yet been compared to all of the currently valid access codes, compare the input access code to another currently valid access code returned by the microprocessor hashing another one of the currently valid arguments, at least until either the input access code is determined to equal one of the currently valid access codes or the input access code has been compared to all of the currently valid access codes and does not equal any of the currently valid access codes, and

if the input access code is determined to equal one of the currently valid access codes, unlock the mechanical locking mechanism; and

a code server comprising a microprocessor and a memory storing the same hash function stored in the lock memory, the code server programmed with instructions to prompt a user to enter a prospective time period for which access to the lock is desired, to evaluate the hash function at the argument corresponding to a time period entered by a user via a user device to return a corresponding access code, and to transmit the corresponding access code to the user, the transmitted access code being valid during the entered prospective time period.

25. The system of claim 24,

the instructions to transmit the corresponding access code to the user comprising instructions to transmit the access code to a user device,

the code server further programmed with instructions to cause the access code transmitted to the user device to be displayed on a display device operatively connected to the user device, and

the lock human interface device including manual entry means for inputting the displayed access code.

26. The system of claim 24, the instructions to transmit the corresponding access code to the user comprising instructions to transmit the access code to a user device, and the lock human interface device being adapted to read the transmitted access code from the user device when a user presents the user device to the human interface device.

27. The system of claim 24,

the code server memory storing a plurality of hash functions and their respective correspondence to a plurality of electronic locks including said electronic lock and other electronic locks,

the code server further programmed with instructions to prompt a user to enter information identifying a lock, and, upon receiving information identifying one of the plurality of electronic locks, to determine the hash function corresponding to the identified lock, and to evaluate the hash function corresponding to the identified lock at the argument corresponding to the entered time period to return an access code valid for the identified lock during the entered time period.

28. The system of claim 27, each of the plurality of hash functions being unique with respect to the rest of the plurality of hash functions.

29. The system of claim 27, the plurality of hash functions including at least two identical hash functions.

30. The system of claim 27, each of the plurality of hash functions being generated from a common hash function by aggregating to the argument of each hash function a lock identifying code.

31. The system of claim 27,

the information identifying the lock including a reset code provided to the lock owner upon purchase of the lock and a lock serial number,

the code server memory storing in association with the lock identifying information a hash of a lock verification argument including at least the reset code, the lock serial number, and a security key stored in the code server, without the code server storing the reset code itself, and

the code server further programmed with instructions

to prompt a user to input the reset code,

to hash the lock verification argument to generate a lock verification hash, and

to compare the lock verification hash with the stored hash,

the instruction to evaluate the hash function at the argument corresponding to the entered time period to generate the access code valid for the identified lock during the time period being subject to the condition that the lock verification hash equal the stored hash.

32. The system of claim 30, the lock identifying code comprising a programming code selected and stored in the code server and in the lock memory by a user.

33. The system of claim 30, the lock identifying code comprising a pre-set secret code stored in the code server and in the lock memory.

34. The system of claim 24,

further comprising a static access code stored in the lock memory,

the lock further programmed with instructions to compare the input access code to the static access code, and if the input access code equals the static access code, unlock the mechanical locking mechanism.

35. The system of claim 34,

the code server memory further storing the static access code and the code server further programmed with instructions to transmit the static access code to the user.

36. A method of providing dynamic controlled access comprising

providing an electronic lock including

a mechanical locking mechanism;

a clock ;

a microprocessor;

a memory storing a hash function and instructions for identifying, based at least partly on a current time, at least two currently valid arguments to be hashed by the hash function, each of the currently valid arguments comprising a time period that includes the current time, the time periods comprised in the currently valid arguments collectively being the currently valid time periods, at least two of the currently valid time periods being different time periods, the hash of each currently valid argument returning a currently valid access code, such that at least two respective access codes are valid at the current time; and

a human interface device configured to permit a human user to input an access code and to transmit the input access code to the lock microprocessor;

the lock memory further containing programmed instructions for the lock microprocessor to

receive a signal from the clock indicating the current time,

receive the input access code transmitted from the human interface device,

compare the input access code to one of the currently valid access codes, the one of the currently valid access codes having been returned by the microprocessor identifying and hashing one of the currently valid arguments, to determine whether the input access code equals the returned valid access code,

if the input access code does not equal the returned currently valid access code and the input access code has not yet been compared to all of the currently valid access codes, compare the input access code to another currently valid access code returned by the microprocessor hashing another one of the currently valid arguments, at least until either the input access code is determined to equal one of the currently valid access codes or the input access code has been compared to all of the currently valid access codes and does not equal any of the currently valid access codes, and

if the input access code is determined to equal one of the currently valid access codes, unlock the mechanical locking mechanism; and

providing to a guest before the start of a prospective access time period a guest access code that will be valid during the prospective access time period.

37. The method of claim 36, said providing a guest access code comprising evaluating the hash function at the argument including the prospective access time period to obtain the guest access code, and said evaluating the hash function comprising

storing the hash function in a code server without the code server communicating with the lock;

and

inputting the prospective access time period into the code server to cause the code server to evaluate the hash function at the argument including the prospective time period to generate and display the guest access code.

38. An electronic lock for dynamic controlled access comprising

a mechanical locking mechanism;

a clock configured to track the current time;

a microprocessor;

a memory storing a hash function; and

a human interface device configured to permit a human user to input an access code and to transmit the access code input by the human user to the microprocessor;

the memory containing programmed instructions for the microprocessor to

receive a signal from the clock to determine the current time,

receive a signal from the human interface device indicating the input access code,

determine a plurality of valid arguments for the hash function, each of the valid arguments including data representing a valid time period, each valid time period including the current time, the evaluation of the hash function at each of the valid arguments returning a valid access code that is a hash of the valid argument, each valid argument and each valid access code remaining valid during the corresponding time period, evaluate the hash function at a first one of the valid arguments to return a first valid access code corresponding to the first valid argument,

compare the input access code to the first valid access code to determine whether the input access code equals the first valid access code,

for each time the input access code is compared to a valid access code and does not match the valid access code, hash another of the valid arguments to return another valid access code, and compare the input access code to the other valid access code until either the input access code equals one of the valid access codes or the input access code has been compared to all of the valid access codes and does not match any of the valid access codes, and

if the input access code is compared to one of the valid access codes and equals the valid access code, unlock the mechanical locking mechanism;

the lock further programmed with instructions to

each time an argument becomes valid, hash automatically the newly valid argument to return the corresponding valid access code, and cache automatically the corresponding valid access code in a memory,

each time a valid access code becomes invalid, delete automatically the newly invalid access code from the memory,

each time an input access code is received, compare the input access code to any valid access codes cached in the memory until a match is found between the input access code and one of the valid access codes cached in the memory or the input access code has been compared with all the valid access codes cached in the memory and no match has been found, and

if a match is found, unlock the mechanical locking mechanism.

39. An electronic lock for dynamic controlled access comprising

a mechanical locking mechanism;

a clock configured to track the current time;

a microprocessor;

a memory storing a hash function; and

a human interface device configured to permit a human user to input an access code and to transmit the access code input by the human user to the microprocessor;

the memory containing programmed instructions for the microprocessor to

receive a signal from the clock to determine the current time,

receive a signal from the human interface device indicating the input access code,

determine a plurality of valid arguments for the hash function, each of the valid arguments including data representing a valid time period, each valid time period including the current time, the evaluation of the hash function at each of the valid arguments returning a valid access code that is a hash of the valid argument, each valid argument and each valid access code remaining valid during the corresponding time period, evaluate the hash function at a first one of the valid arguments to return a first valid access code corresponding to the first valid argument,

compare the input access code to the first valid access code to determine whether the input access code equals the first valid access code,

for each time the input access code is compared to a valid access code and does not match the valid access code, hash another of the valid arguments to return another valid access code, and compare the input access code to the other valid access code until either the input access code equals one of the valid access codes or the input access code has been compared to all of the valid access codes and does not match any of the valid access codes, and

if the input access code is compared to one of the valid access codes and equals the valid access code, unlock the mechanical locking mechanism;

the lock further programmed with instructions to each time an argument becomes valid, cache automatically the newly valid argument in a memory,

each time a cached valid argument becomes invalid, delete automatically the newly invalid argument from the memory,

each time a valid argument is hashed to return a valid access code, automatically cache the valid access code in the memory and automatically delete the corresponding valid argument from the memory,

each time a valid access code in the memory becomes invalid, automatically delete the newly invalid access code from the memory,

each time an input access code is received, compare the input access code to any valid access codes cached in the memory until a match is found between the input access code and one of the valid access codes cached in the memory or until the input access code has been compared with all the cached valid access codes and no match has been found,

if a match is found between the input access code and one of the cached valid access codes, unlock the mechanical locking mechanism,

if and when the input access code has been compared with all the cached valid access codes, no match has been found, and any valid argument remains cached in the memory, hash each remaining cached valid argument in turn to return a newly calculated valid access code and compare the input access code to each newly calculated valid access code until a match is found or until no valid arguments remain in the memory and no match has been found, and

if a match is found between the input access code and one of the newly calculated valid access codes, unlock the mechanical locking mechanism.

40. A security system for dynamic controlled access comprising

an electronic lock comprising

a mechanical locking mechanism;

a clock configured to track the current time;

a microprocessor;

a memory storing a hash function; and

a human interface device configured to permit a human user to input an access code and to transmit the access code input by the human user to the lock microprocessor;

the lock memory containing programmed instructions for the microprocessor to

receive a signal from the clock to determine the current time,

receive a signal from the human interface device indicating the input access code,

determine a plurality of valid arguments for the hash function, each of the valid arguments including data representing a time period that includes the current time, the evaluation of the hash function at each of the valid arguments returning a valid access code that is a hash of the valid argument, each valid argument and each valid access code remaining valid during the corresponding time period, evaluate the hash function at a first one of the valid arguments to return a first valid access code corresponding to the first valid argument,

compare the input access code to the first valid access code to determine whether the input access code equals the first valid access code,

for each time the input access code is compared to a valid access code and does not match the valid access code, hash another of the valid arguments to return another valid access code, and compare the input access code to the other valid access code until either the input access code equals one of the valid access codes or the input access code has been compared to all of the valid access codes and does not match any of the valid access codes, and

if the input access code is compared to one of the valid access codes and equals the valid access code, unlock the mechanical locking mechanism; and

a code server comprising a microprocessor and a memory storing the same hash function stored in the lock memory, the code server programmed with instructions to prompt a user to enter a prospective time period for which access to the lock is desired, to evaluate the hash function at the argument corresponding to a time period entered by a user via a user device to return a corresponding access code, and to transmit the corresponding access code to the user, the transmitted access code being valid during the entered time period;

the code server memory storing a plurality of hash functions and their respective correspondence to a plurality of electronic locks including said electronic lock and other electronic locks, and

the code server further programmed with instructions to prompt a user to enter information identifying a lock, and, upon receiving information identifying one of the plurality of electronic locks, to determine the hash function corresponding to the identified lock, and to evaluate the hash function corresponding to the identified lock at the argument corresponding to the entered time period to return an access code valid for the identified lock during the entered time period.