Wireless device enabled locking system

• US 9,077,716 B2
• Filed: 06/16/2011
• Issued: 07/07/2015
• Est. Priority Date: 06/16/2010
• Status: Active Grant

• Current Assignee: Delphian Systems, LLC
• Original Assignee: Delphian Systems, LLC
• Inventors: Myers, Gary L., Hirpara, Ashok, Veleris, John D., Zimny, Arkadiusz, Cohen, Michael Aaron, Nakshin, Eugene
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): NGUYEN, NGOC THACH D
• Application Number:
  US13/162,334
• Publication Number:
  US 20110311052A1
• Time in Patent Office: 1,482 Days
• Field of Search: 726/5, 726/2
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/08 Access security

Abstract

An encrypted security system and associated methods for controlling physical access. The system includes a security server configured to receive a request for authentication from a mobile device, the request comprising information identifying the mobile device and a physical access control device. The security server forwards an encryption message comprising a plurality of unique identifiers to the physical access control device via the mobile device. The physical access control device is configured to authenticate the plurality of unique identifiers in the encryption message and operate an access control mechanism.

Claims

1. A method of providing, by a networked server via a Web Portal, security services for managing physical access via commands transmitted wirelessly between a mobile device and a controller for actuating a physical access control device, the method comprising:

receiving, by the networked server via the Web Portal, an authentication request issued by the mobile device, the authentication request comprising an authentication information including;

information identifying the mobile device, and

information identifying the physical access control device;

authenticating, by the networked server, the authentication request issued by the mobile device, and in response to the authenticating;

generating, by the networked server, a response message comprising a first encoded portion and a second encoded portion, wherein;

a first encryption engine generates the first encoded portion based upon a command for the physical access control device, and

a second encryption engine generates the second encoded portion based upon a unique series of a plurality of identifiers stored for the physical access control device; and

forwarding to the mobile device, by the networked server, the response message including the first encoded portion and the second encoded portion so as to enable the controller of the physical access control device to authenticate a command message, from the mobile device, including the first encoded portion and the second encoded portion, prior to completing an access control operation, on the physical access control device, corresponding to the command.

2. The method of claim 1 wherein the physical access control device is selected from the group consisting of:

a lock device, a garage door device, and a gate device.

3. The method of claim 1 wherein the unique series of the plurality of identifiers comprises a plurality of encoded shape patterns.

4. The method of claim 3 wherein the shape patterns are geometric shape patterns.

5. The method of claim 1 wherein the response message includes an Advanced Encryption Standard (AES) protocol encryption.

6. The method of claim 1 wherein the first encoded portion comprises one or more encrypted space values.

7. The method of claim 1 wherein the unique series of the plurality of identifiers are used by the controller to authenticate the command message by performing a matching operation to a second unique series of a plurality of identifiers accessible by the controller for the physical access control device.

8. The method of claim 1 wherein the information identifying the physical access control device comprises a Media Access Control (MAC) address and a lock identification number of the physical access control device.

9. The method of claim 1 wherein the controller is configured to communicate, in an online mode, with the networked server via a communications path that does not pass through the mobile device, wherein the method further comprises:

receiving, by the networked server via the communications path that does not pass through the mobile device, a further authentication request from the controller corresponding to a further request from the mobile device, the further authentication request comprising the authentication information including;

information identifying the mobile device, and

information identifying the physical access control device;

further authenticating, by the networked server, the further authentication request, and in response to the further authenticating;

generating, by the networked server in response to the further authenticating, a further response message to the controller; and

forwarding by the networked server, to the controller via the communications path that does not pass through the mobile device, the further response message so as to enable the controller to authenticate the further request from the mobile device, prior to completing an access control operation, on the physical access control device.

10. A method of providing security in a wireless system for a controller and a physical access control device controlling physical access via a command message from a mobile device through a wireless network interface, the method comprising:

establishing a wireless connection between the mobile device and the controller for the physical access control device;

receiving, by the controller, the command message from the mobile device, the command message comprising a first encoded portion and a second encoded portion, wherein;

the first encoded portion is generated by a first encryption engine based upon a command for the physical access control device, and

the second encoded portion is generated by a second encryption engine based upon a unique series of a plurality of identifiers stored for the physical access control device;

authenticating, by the controller decoding the first encoded portion and the second encoded portion, the command message prior to completing the command for the physical access control device; and

causing, by the controller, an operation of physical access control device upon completing the authenticating.

11. The method of claim 10 wherein the physical access control device is selected from the group consisting of:

a lock device, a garage door device, and a gate device.

12. The method of claim 10 wherein the unique series of the plurality of identifiers comprises a plurality of encoded shape patterns.

13. The method of claim 12 wherein the shape patterns are geometric shape patterns.

14. The method of claim 10 wherein the command message includes an Advanced Encryption Standard (AES) protocol encryption.

15. The method of claim 10 wherein the first encoded portion comprises one or more encrypted space values.

16. The method of claim 10 wherein the unique series of the plurality of identifiers are used by the controller to authenticate the command message by performing a matching operation to a second unique series of a plurality of identifiers accessible by the controller for the physical access control device.

17. A method of providing security in a wireless system for controlling physical access to a physical access control device, the method comprising:

transmitting, by a mobile device to an authenticating server, an authentication request message comprising authentication information including;

information identifying the mobile device, and

information identifying the physical access control device;

receiving, by the mobile device in response to the transmitting, an authentication response message comprising a first encoded portion and a second encoded portion, wherein;

the first encoded portion is generated by a first encryption engine based upon a command for the physical access control device, and

the second encoded portion is generated by a second encryption engine based upon a unique series of a plurality of identifiers stored for the physical access control device; and

transmitting, by the mobile device to a controller for the physical access control device, a command message through a wireless network interface, the command message comprising the first encoded portion and the second encoded portion so as to enable the controller of the physical access control device to authenticate the command message from the mobile device, including the command, prior to completing an access control operation, on the physical access control device, corresponding to the command.

18. The method of claim 17 wherein the unique series of the plurality of identifiers comprises a plurality of encoded shape patterns.

19. The method of claim 18 wherein the shape patterns are geometric shape patterns.

20. The method of claim 17 wherein the authentication response message includes at least one of the first and second portions encrypted using an Advanced Encryption Standard (AES) protocol encryption.

21. The method of claim 17 wherein the first encoded portion comprises one or more encrypted space values.

22. The method of claim 17 wherein the unique series of the plurality of identifiers are used by the controller to authenticate the command message by performing a matching operation to a second unique series of a plurality of identifiers accessible by the controller for the physical access control device.

23. An encrypted security system for controlling physical access and including a security server and a physical access control device

wherein the security server is configured with a server processor and a server non-transitory computer-readable medium including computer-executable instructions for:

receiving, by the security server via a Web Portal, an authentication request issued by a requesting device, the authentication request comprising an authentication information including;

information identifying the requesting device, and

information identifying the physical access control device;

authenticating, by the security server, the authentication request, and in response to the authenticating;

generating a response message comprising a first encoded portion and a second encoded portion, wherein;

a first encryption engine generates the first encoded portion based upon a command for the physical access control device, and

a second encryption engine generates the second encoded portion based upon a unique series of a plurality of identifiers stored for the physical access control device; and

wherein a controller for the physical access control device is configured with a controller processor and a server non-transitory computer-readable medium including computer-executable instructions for;

receiving a command message from the requesting device, the command message comprising the first encoded portion and the second encoded portion, and

authenticating the command message, by decoding the first encoded portion and the second encoded portion, prior to completing the command for the physical access control device.

24. The system of claim 23 wherein the unique series of the plurality of identifiers comprises a plurality of encoded shape patterns.

25. The system of claim 24 wherein the shape patterns are geometric shape patterns.

26. The system of claim 23 wherein the command message includes an Advanced Encryption Standard (AES) protocol encryption.

27. The system of claim 23 wherein the first encoded portion comprises one or more encrypted space values.

28. The system of claim 23 wherein the unique series of the plurality of identifiers are used by the controller to authenticate the command message by performing to a second unique series of a plurality of identifiers stored in the non-transitory computer readable medium.

29. The encrypted security system of claim 23 wherein the controller is configured to communicate, in an online mode, with the security server via a communications path that does not pass through the requesting device, wherein the security server is further configured for:

receiving, by the security server via the communications path that does not pass through the requesting device, a further authentication request from the controller corresponding to a further request from the requesting device, the further authentication request comprising the authentication information including;

information identifying the requesting device, and

information identifying the physical access control device;

further authenticating, by the security server, the further authentication request, and in response to the further authenticating;

generating, by the security server in response to the further authenticating, a further response message to the controller; and

forwarding by the security server, to the controller via the communications path that does not pass through the requesting device, the further response message so as to enable the controller to authenticate the further request from the requesting device, prior to completing an access control operation, on the physical access control device.