Key device and associated method, computer program and computer program product

• US 9,589,406 B2
• Filed: 07/03/2014
• Issued: 03/07/2017
• Est. Priority Date: 07/05/2013
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Borg, Anders, Cederblad, Mats, Garmen, Daniel, Jonsson, Tomas, Siklosi, Peter
• Primary Examiner(s): BLOUIN, MARK S
• Application Number:
  US14/901,802
• Publication Number:
  US 20160379431A1
• Time in Patent Office: 978 Days
• Field of Search: 340/5.28
• US Class Current: 1/1
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 2009/00841 by a portable device
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00706 with conductive components, e.g. pins, wires, metallic strips
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

It is presented a key device comprising: a mechanical interface for mechanically maneuvering a lock device upon successful access control. The mechanical interface comprises a connector for powering the lock device and for communication with the lock device such that the lock device is able to perform electronic access control using the key device. The key device further comprises a clock; a memory; a radio communication module; and a controller arranged to, using the radio communication module communicate online with an access control device and use the memory as temporary storage for offline communication between the access control device and one or more lock devices. A corresponding method, computer program and computer program product are also presented.

Claims

1. A key device comprising:

a mechanical interface for mechanically manoeuvring a lock device upon successful access control, the mechanical interface comprising a connector for powering the lock device and for communication with the lock device such that the lock device is able to perform electronic access control using the key device;

a clock;

a memory;

a radio communication module; and

a controller arranged to, using the radio communication module communicate online with an access control device and use the memory as temporary storage for offline communication between the access control device and one or more lock devices;

wherein the controller is arranged to receive an updated time for the clock of the key device by sending a challenge code to the access control device;

receiving a response code along with the updated time, the response code being based on the challenge code; and

determining the updated time to be valid when the response code is determined to be valid.

2. The key device according to claim 1, wherein the controller is arranged to use the memory as temporary storage for a list of access rights from the access control device bound for one or more lock devices.

3. The key device according to claim 2, wherein the list of access rights comprises a revocation list, indicating key devices which are to be barred from gaining access.

4. The key device according to claim 1, wherein the controller is arranged to use the memory as temporary storage for an audit trail from one or more lock devices bound for the access control device.

5. The key device according to claim 1, wherein the controller is arranged to determine the response code to be valid when the response code comprises a correct cryptographic processing result based on the challenge code and the updated time.

6. The key device according to claim 1, wherein the controller is arranged to determine the response code to be valid when the response code comprises a correct cryptographic processing result based on the challenge code and when the response code is received within a threshold time from when the challenge code is sent.

7. The key device according to claim 1, wherein the controller is arranged to perform any one or more of the following communication with the access control device:

receiving updated access rights specifically for the key device, receiving an updated validity time for the key device, and sending an audit trail for the key device.

8. The key device according to claim 1, wherein the controller is arranged to communicate with the access control device to obtain authorization for the key device to be granted access by a lock device when the connector of the key device is connected with a connector of the lock device.

9. The key device according to claim 1, wherein the controller is arranged to only perform the communication with the access control device when a trigger condition has been determined to be true in the key device.

10. The key device according to claim 9, wherein the key device further comprises a user input device, and the trigger condition is true when the user input device is actuated.

11. The key device according to claim 1, further comprising a code input device.

12. The key device according to claim 11, wherein the controller is arranged to require a correct code to be entered using the code input device for the key device to send a signal to request access, when the radio communication module is offline from the access control device.

13. The key device according to claim 12, wherein the controller is arranged to extend a validity time of the key device when a correct code has been entered using the code input device.

14. The key device according to claim 1, wherein the radio communication module is a short range communication module for communication with the access control device via an intermediary access control communication device.

15. The key device according to claim 1, wherein the radio communication module is a cellular network communication module for communication with via a cellular network.

16. A method, performed in a key device, the key device comprising a mechanical interface for mechanically maneuvering a lock device upon successful access control, the mechanical interface comprising a connector for powering the lock device and for communication with the lock device;

and a clock, the method comprising the steps of;

communicating online, using a radio communication module of the key device with an access control device;

comprising receiving an updated time for the clock of the key device by;

sending a challenge code to the access control device;

receiving a response code along with the updated time, the response code being based on the challenge code; and

determining the updated time to be valid when the response code is determined to be valid; and

using a memory of the key device as temporary storage for offline communication between the access control device and one or more lock devices.

17. The method according to claim 16, wherein the step of using the memory as temporary storage comprises using the memory as temporary storage for an updated list of access rights from the access control device bound for one or more lock devices.

18. The method according to claim 17, wherein the list of access rights comprises a revocation list, indicating key devices which are to be barred from gaining access.

19. The method according to claim 16, wherein the step of using the memory as temporary storage comprises using the memory as temporary storage for an audit trail from one or more lock devices bound for the access control device.

20. The method according to claim 16, wherein the step of determining the updated time to be valid comprises determining the response code to be valid when the response code comprises a correct cryptographic processing result based on the challenge code and the updated time.

21. The method according to claim 16, wherein the step of determining the updated time to be valid comprises determining the response code to be valid when the response code comprises a correct cryptographic processing result based on the challenge code and when the response code is received within a threshold time from when the challenge code is sent.

22. The method according to claim 16, wherein the step of communicating with the access control device comprises any one or more of the following substeps:

receiving updated access rights specifically for the key device, receiving an updated validity time for the key device, and sending an audit trail for the key device.

23. The method according to claim 16, further comprising the step of:

determining whether a trigger condition is true;

and wherein the step of communicating with the access control device only occurs when the trigger condition has been determined to be true.

24. The method according to claim 16, further comprising the steps of:

receiving, using a code input device, a code entered by a user when the radio communication module is offline from the access control device; and

communicating with the lock device to request access only when the code is determined to be is correct.

25. The method according to claim 24, further comprising the step of:

extending a validity time of the key device when the code is determined to be correct.

26. A computer program comprising computer program code which, when run on a key device comprising a mechanical interface for mechanically maneuvering a lock device upon successful access control, the mechanical interface comprising a connector for powering the lock device and for communication with the lock device;

and a clock, causes the key device to;

communicate online, using a radio communication module of the key device with an access control device wherein the computer program code causes the key device to receive an updated time for the clock of the key device by sending a challenge code to the access control device;

receiving a response code along with the updated time, the response code being based on the challenge code; and

determining the updated time to be valid when the response code is determined to be valid; and

use a memory of the key device as temporary storage for offline communication between the access control device and one or more lock devices.

27. A computer program product comprising a computer program according to claim 26 and a computer readable means on which the computer program is stored.