System and method for secure entry using door tokens

• US 8,941,465 B2
• Filed: 09/07/2012
• Issued: 01/27/2015
• Est. Priority Date: 12/02/2010
• Status: Expired due to Fees

• Current Assignee: Viscount Systems
• Original Assignee: Viscount Systems
• Inventors: Pineau, Stephen, Lee, David, Wiberg, Ola, Bates, Shayne Peter, Chand, Steven, Raefield, Dennis
• Primary Examiner(s): Negron, Daniell L
• Assistant Examiner(s): OTT, FREDERICK R
• Application Number:
  US13/607,651
• Publication Number:
  US 20130214898A1
• Time in Patent Office: 872 Days
• Field of Search: 340/5.2, 340/5.6
• US Class Current: 340/5.2
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G08B 25/14 Central alarm receiver or annunciator arrangements
• CPC Class Codes: G08C 19/00 Electric signal transmission systems G08C17/00 takes precedence
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

Secure door entry without a traditional card reader is made possible by tagging the door with an unpowered, unique token which can be read by a user'"'"'s personal mobile electronic device. The user'"'"'s device transmits both door and user identification to a remote server, where the decision is made whether to open the door. If so, the server sends an open door signal using the IP suite of protocols to an electronic bridge, which in turn passes the signal on to a door strike, opening the door. Another signal may be sent to an annunciator. Single-use digital tokens may also be used to open the doors. The permissions relating to doors or other physical assets may also be used to grant access to logical assets.

Claims

1. A system for controlling functional devices comprising:

a functional device;

an unpowered token comprising an identifier for, and located in the vicinity of, the functional device;

an electronic bridge connected to the functional device and configured to receive control instructions and pass the control instructions to the functional device;

a server connected to the electronic bridge and configured to generate said control instructions;

wherein the server is configured to;

receive, from a personal mobile electronic device located in the vicinity of the functional device, the respective identifier of the functional device and an identification of the personal mobile electronic device;

retrieve from a database a permission level for a user associated with the identification to access the functional device; and

if the permission level indicates that permission is granted, generate a TCP/IP packet comprising an access granted control instruction and send the packet to the electronic bridge, upon which said electronic bridge passes the access granted control instruction to the functional device causing it to operate; and

wherein the electronic bridge has;

circuits adapted to detect trains of digital pulses from at least one other functional device; and

a central processing unit configured to receive said trains of digital pulses from said circuits, start processing said trains of digital pulses into strings of data signals without first determining a protocol format of said trains of digital pulses, build further TCP/IP packets including said strings of data signals, and send said further TCP/IP packets to the server.

2. The system of claim 1 wherein the electronic bridge passes the control instructions to the functional device transparently, by:

data indicating determining an output of the electronic bridge from the TCP/IP packet;

extracting control data from the TCP/IP packet; and

sending the control data to the output;

wherein the functional device is connected to the output.

3. The system of claim 1, wherein the permission level is also for the user to access one or more logical assets.

4. The system of claim 3, wherein the permission level is set in a single step.

5. The system of claim 3, the database further storing:

records of groups, each group comprising one or more users;

records of zones, each zone comprising one or more of the functional devices; and

permissions of groups to zones;

thereby correlating identifications of users with identifications of functional devices to which the users have been granted permission.

6. The system of claim 1, wherein the functional device is a door strike controlling access through a door, and permission to access the door strike is permission to enter through the door.

7. The system of claim 1 wherein the token is a quick response code.

8. The system of claim 1, wherein the token is in a near field communication chip.

9. The system of claim 1, wherein the server is further configured to:

send a challenge to the personal mobile electronic device;

receive a response from the personal mobile electronic device;

determine whether the response is a correct response; and

generate the TCP/IP packet additionally conditional upon the response being a correct response.

10. The system of claim 1, wherein the server is further configured to:

receive biometric data from the user of the personal mobile electronic device, said biometric data having been obtained by the personal mobile electronic device;

determine whether the biometric data corresponds to previous biometric data stored and related to the user in the database; and

generate the TCP/IP packet additionally conditional upon the biometric data corresponding to the previous biometric data.

11. The system of claim 1, wherein if the permission level indicates that permission is not granted, the server is configured to generate a TCP/IP packet comprising an access denied control instruction and send the packet to the respective electronic bridge, wherein the electronic bridge is configured to pass the access denied control instruction to a further functional device connected thereto causing the further functional device to indicate that access is denied.

12. The system of claim 1, wherein if the permission level indicates that permission is not granted, the server is configured to send a message to the personal mobile electronic device indicating that access is denied.

13. The system of claim 1, further comprising a PKI server connected via a network to the server, the PKI server configured to:

receive an identification of the user based on the identification of the personal mobile electronic device;

receive an authentication of the user;

verify the authentication; and

if the authentication is verified, send confirmation of the verified authentication to the server;

wherein the server is configured to generate the TCP/IP packet comprising the access granted control instruction additionally conditional upon receiving said confirmation.

14. The system of claim 1 wherein the server is further configured to:

receive, from a second personal mobile electronic device located in the vicinity of the functional device, a digital token relating to the functional device;

check whether the digital token is valid; and

if the digital token is valid, generate a TCP/IP packet comprising an access granted control instruction and send the packet to the respective electronic bridge, upon which said respective electronic bridge passes the access granted control instruction to the functional device causing it to operate.

15. A method for controlling functional devices comprising:

receiving, by a server, from a personal mobile electronic device located in the vicinity of a functional device, an identifier of the functional device and an identification of the personal mobile electronic device, said identifier having been retrieved from a token located in the vicinity of the functional device;

retrieving, by the server, from a database, a permission level for a user associated with the identification of the personal mobile electronic device to access the functional device;

if the permission level indicates that permission is granted, generating, by the server, a TCP/IP packet comprising an access granted control instruction and sending the packet to an electronic bridge connected to the functional device, wherein the electronic bridge is configured to pass the access granted control instruction to the respective functional device causing it to operate;

receiving, by the server, further TCP/IP packets including strings of data signals, said strings of data signals having been started to be processed by the electronic bridge from trains of digital pulses received by the electronic bridge from at least one other functional device, without first determining a protocol format of said trains of digital pulses.

16. The method of claim 15 further comprising the electronic bridge passing the access granted control instruction to the functional device transparently, by:

determining an output of the electronic bridge from the TCP/IP packet;

extracting control data from the TCP/IP packet; and

sending the control data to the output;

wherein the functional device is connected to the output.

17. The method of claim 15, wherein:

the permission level is also for the user to access one or more logical assets;

the functional device is a door strike controlling access through a door; and

permission to access the door strike is permission to enter through the door.

18. The method of claim 15 further comprising:

receiving, by a server, from a second personal mobile electronic device located in the vicinity of the functional device, a digital token relating to the functional device;

checking whether the digital token is valid; and

if the digital token is valid, generating a TCP/IP packet comprising an access granted control instruction and sending the packet to the electronic bridge, upon which the electronic bridge passes the access granted control instruction to the functional device causing it to operate.

19. One or more non-transitory computer readable media comprising computer readable instructions that, when executed by one or more processors cause a server to:

receive, from a personal mobile electronic device located in the vicinity of a door, an identifier of the door and an identification of the personal mobile electronic device, said identifier having been retrieved from a token located in the vicinity of the door;

retrieve, from a database, a permission level for a user associated with the identification of the personal mobile electronic device to access the door; and

if the permission level indicates that permission is granted, generate a TCP/IP packet comprising an access granted control instruction and send the packet to an electronic bridge connected to a door strike locking the door, wherein the electronic bridge is configured to pass the access granted control instruction to the door strike causing it to unlock the door; and

receive further TCP/IP packets including strings of data signals, said strings of data signals having been started to be processed by the electronic bridge from trains of digital pulses received by the electronic bridge from at least one other functional device, without first determining a protocol format of said trains of digital pulses.

20. The non-transitory computer readable media of claim 19 comprising further computer readable instructions that cause the server to:

send a challenge to the personal mobile electronic device;

receive a response from the personal mobile electronic device;

determine whether the response is a correct response; and

generate the TCP/IP packet comprising the access granted control instruction additionally conditional upon the response being a correct response.

21. The non-transitory computer readable media of claim 19 comprising further computer readable instructions that cause the server to:

receive biometric data from the user of the personal mobile electronic device, said biometric data having been obtained by the personal mobile electronic device;

determine whether the biometric data corresponds to previous biometric data stored and related to the user in the database; and

generate the TCP/IP packet comprising the access granted control instruction additionally conditional upon the biometric data corresponding to the previous biometric data.

22. The non-transitory computer readable media of claim 19 comprising further computer readable instructions that cause the server to:

receive, from a second personal mobile electronic device located in the vicinity of the door, a digital token relating to the door;

check whether the digital token is valid; and

if the digital token is valid, generate a TCP/IP packet comprising an access granted control instruction and send the packet to the electronic bridge, upon which the electronic bridge passes the access granted control instruction to the door strike causing it to unlock the door.