Restricted area access control system

• US 9,589,402 B2
• Filed: 08/18/2015
• Issued: 03/07/2017
• Est. Priority Date: 08/25/2014
• Status: Active Grant

• Current Assignee: Accenture Global Services Limited (Accenture PLC)
• Original Assignee: Accenture Global Services Limited (Accenture PLC)
• Inventors: Raina, Sunil, Somani, Avishek, Cuddihey, Alden, Butler, Scott Thomas, Archibald, Douglas Arthur Michael
• Primary Examiner(s): SHERWIN, RYAN W
• Application Number:
  US14/828,825
• Publication Number:
  US 20160055697A1
• Time in Patent Office: 567 Days
• US Class Current: 1/1
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/15 with arrangements to prevent the passage of more than one individual at a time
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

An access control system controls access to a restricted area. A mobile device exchanges messages with a backend server to validate a user and to control an actuator for a physical barrier responsive to validation. Beacon-based unique identifiers are calculated at validation time for the current location to facilitate the validation.

Claims

1. An access control system to validate access to a restricted area, the system comprising:

at least one electronically-controlled movable physical barrier and respective actuator drive circuit to control actuation of the at least one electronically-controlled movable physical barrier, wherein the at least one electronically-controlled movable physical barrier is located in a sub-location of a plurality of sub-locations of an access control area associated with the restricted area;

a beacon for each sub-location, wherein each beacon broadcasts a signal in its sub-location and the broadcasted signal include a beacon identifier specific to an associated sub-location; and

a server including at least one processor to;

receive a mobile device identifier from a mobile device, wherein the mobile device identifier is calculated by the mobile device based on the beacon identifier included in the broadcasted signal;

determine a proximity of the mobile device to a sub-location of the plurality of sub-locations;

determine whether the mobile device is in a sub-location of the plurality of sub-locations based on the determined proximity of the mobile device to the sub-location;

in response to a determination that the mobile device is in the sub-location, determine whether a user associated with the mobile device is validated to access the restricted area; and

in response to determining the user is validated, invoke opening the physical barrier for the sub-location by sending a validation signal to at least one of the mobile device and the respective actuator driver circuit.

2. The access control system of claim 1, wherein the mobile device detects when it is in the sub-location and enters into an activation mode to send location information for the sub-location and user validation information to the server.

3. The access control system of claim 2, wherein the mobile device sends the user validation information to the server in response to a determination that the mobile device is in the activation mode.

4. The access control system of claim 1, wherein the server sends the validation signal to the mobile device to invoke opening of the physical barrier, and the mobile device sends a signal to the respective actuator driver circuit to open the physical barrier.

5. The access control system of claim 1, wherein the mobile device identifier is unique to the sub-location when compared to identifiers for other sub-locations of the plurality of sub-locations.

6. The access control system of claim 1, wherein the at least one processor uses one or more encryption keys to securely transmit messages to the mobile device in response to determining the mobile device is in the sub-location.

7. The access control system of claim 1, wherein the at least one processor is to authenticate the mobile device based on a token received from the mobile device before validating the user.

8. The access control system of claim 7, wherein the mobile device sends the token for authentication, user credentials for the user, and the mobile device identifier to the server in a single message, and the at least one processor is to authenticate the mobile device and validate the user in a single message exchange with the mobile device.

9. The access control system of claim 1, wherein to determine whether a user associated with the mobile device is validated, the at least one processor is to determine whether a request is received to validate the user and another user associated with the user, and

in response to determining that the request to validate the user and another user is received, including a special command in the validation signal to invoke opening the physical barrier to allow the user and the another user to pass together through the sub-location into the restricted area.

10. The access control system of claim 1, wherein a fare associated with accessing the restricted area is paid from a user account to validate the user.

11. A non-transitory computer readable medium of an access control server controlling access to a restricted area, wherein the non-transitory computer readable medium stores machine readable instructions executable by at least one processor of the access control server, to:

receive a mobile device identifier from a mobile device, wherein the mobile device identifier is calculated by the mobile device based on information received from at least one beacon, the at least one beacon being associated with a sub-location of a plurality of sub-locations within the restricted area;

determine a proximity of the mobile device to a sub-location of the plurality of sub-locations;

determine whether the mobile device is in a sub-location of the plurality of sub-locations based on the determined proximity of the mobile device to the sub-location;

in response to a determination that the mobile device is in the sub-location, determine whether a user associated with the mobile device is validated to access the restricted area; and

in response to determining the user is validated, send a validation signal to at least one of an actuator driver circuit and the mobile device to invoke opening a physical barrier associated with the sub-location.

12. The non-transitory computer readable medium of claim 11, wherein the access control server sends the validation signal to the actuator driver circuit to open the physical barrier.

13. The non-transitory computer readable medium of claim 11, wherein the mobile device identifier is unique to the sub-location when compared to identifiers for other sub-locations of the plurality of sub-locations.

14. The non-transitory computer readable medium of claim 11, wherein the at least one processor uses one or more encryption keys to securely transmit messages to the mobile device in response to determining the mobile device is in the sub-location.

15. The non-transitory computer readable medium of claim 14, wherein the securely transmitted messages authenticate the mobile device and the access control server, and

if the mobile device is authenticated, the securely transmitted messages include the validation signal.

16. The non-transitory computer readable medium of claim 11, wherein the mobile device detects when it is in the sub-location and enters into an activation mode to send location information for the sub-location and user validation information to the access control server.

17. The non-transitory computer readable medium of claim 16, wherein the mobile device sends the user validation information to the access control server in response to a determination that the mobile device is in the activation mode.

18. A mobile device comprising:

at least one short-distance communication interface to receive a beacon identifier from at least one beacon;

a data storage to store an operating system and an access control application; and

a processor to execute the operating system, wherein the operating system determines whether the received beacon identifier is a registered beacon identifier, and in response to a determination that the received beacon identifier is a registered beacon identifier, the processor launches the access control application stored on the mobile device, wherein

the access control application, in response to being launched, is executed by the processor, and the access control application determines whether the mobile device is at a sub-location of an access control area associated with a restricted area, wherein the access control area includes a plurality of sub-locations,

wherein in response to determining the mobile device is at the sub-location, the access control application enters into an activation mode and calculates a mobile device identifier for the mobile device based on the beacon identifier, wherein the mobile device identifier is valid for only the sub-location where the mobile device is currently located, and

wherein the access control application sends the mobile device identifier to a server to validate a user associated with the mobile device and to allow access to the restricted area through the sub-location if the user is validated.

19. The mobile device of claim 18, wherein at least one sensor, disposed on at least one of the mobile device and the at least one beacon, provides a signal to open a physical barrier to allow the user to enter the restricted area if validated and provides a signal to close the physical barrier after the user enters the restricted area.

20. The mobile device of claim 18, wherein the mobile device receives a beacon identifier from each of a plurality of beacons, and to calculate the mobile device identifier, the processor:

selects a particular beacon of the plurality of beacons based on signal strength of each beacon of the plurality of beacons;

calculates the mobile device identifier based on the selected beacon; and

ensures the mobile device is in a desired proximity of the selected beacon based on an analysis of azimuth, angle, and distance, of the mobile device relative to the selected beacon.