Electronic access control system

• US 9,965,911 B2
• Filed: 12/07/2016
• Issued: 05/08/2018
• Est. Priority Date: 12/07/2015
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Wishne, Justin
• Primary Examiner(s): BROWN, VERNAL U
• Application Number:
  US15/371,821
• Publication Number:
  US 20170161978A1
• Time in Patent Office: 517 Days
• Field of Search: 340 561
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/357 Cards having a plurality of specified features
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 2009/00404 starting with prompting the lock
• CPC Class Codes: G07C 2009/00436 by the system
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 2009/00865 remotely by wireless communication
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/00904 for hotels, motels, office buildings or the like
• CPC Class Codes: G07C 9/21 having a variable access code
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07F 17/14 for fastenings for doors of containers for safe keeping G07F17/12; for turnstiles
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

A system includes one or more memory devices storing instructions, and one or more processors configured to execute the instructions to perform steps of a method. The system may receive an authentication request from a computing device and determine whether the authentication request corresponds with stored authentication data. Based on the determination, the system may store identification data associated with a smart device corresponding to the authentication request. The system may receive detection data when the smart device is detected within a predetermined area and, in response to a detection, obtain an identifier from the smart device. The system may determine whether the obtained identifier corresponds with the stored identification data. Based on the determination, the system may direct an electronic lock to transition from a locked state to an unlocked state.

Claims

1. A system for authenticating a passive smart device for unlocking an electronic lock, comprising:

one or more memory devices storing instructions; and

one or more processors configured to execute the instructions to;

receive an authentication request from a computing device, the authentication request comprising identification data associated with the passive smart device;

receive secondary identification data from the computing device;

determine whether at least a portion of the authentication request corresponds to authentication data stored in an authentication database;

store the identification data associated with the passive smart device based on the determination that at least a portion of the authentication request corresponds with the authentication data;

store the secondary identification data with the stored identification data;

receive detection data corresponding to a detection of the passive smart device when the passive smart device enters a predetermined location range associated with the electronic lock;

obtain, in response to the detection, an identifier from the passive smart device;

obtain, within a predetermined time following the detection, secondary authentication data from the computing device;

determine whether the obtained identifier corresponds with the stored identification data;

determine whether the obtained secondary authentication data corresponds with the stored secondary identification data; and

responsive to determining that (i) the obtained identifier corresponds with the stored identification data and (ii) the obtained secondary authentication data corresponds with the stored secondary identification data, direct the electronic lock to transition from a locked state to an unlocked state.

2. The system of claim 1, wherein the one or more processors being configured to execute the instructions to obtain the identifier from the passive smart device further comprises sending an identifier request to the passive smart device, the identifier request providing power to a power collection circuit of the passive smart device to enable to the passive smart device to provide the identifier.

3. The system of claim 1, wherein the passive smart device is configured to transmit data only after receiving power from an external power supply.

4. The system of claim 3, wherein the passive smart device comprises one or more of a passive radio-frequency identification (RFID) tag or a passive smart tag.

5. The system of claim 4, wherein the external power supply comprises one or more of an RFID reader device and a smart tag reader device.

6. The system of claim 1, wherein the predetermined location range extends a predetermined distance around the locked entryway.

7. The system of claim 1, wherein the one or more processors is further configured to execute the instructions to provide a notification to the computing device based on the determination that at least a portion of the authentication request corresponds with the authentication data, the notification comprising authentication confirmation data.

8. The system of claim 1, wherein the computing device is a mobile computing device and the electronic lock is an electronic entryway lock.

9. The system of claim 1, wherein the one or more processors are further configured to execute the instructions to:

prior directing the electronic lock to transition from a locked state to an unlocked state, determine whether the identifier was received from the passive smart device during a time period in which the identifier is valid.

10. A system for authenticating a passive smart device for unlocking an assigned electronic lock of a plurality of electronic locks, comprising:

one or more memory devices storing instructions; and

one or more processors configured to execute the instructions to;

receive an authentication request from a computing device, the authentication request comprising identification data associated with the passive smart device;

determine whether at least a portion of the authentication request corresponds with authentication data stored in an authentication database;

responsive to determining that at least a portion of the authentication request corresponds with the authentication data, store the identification data associated with the passive smart device and associate the identification data associated with the passive smart device with the assigned electronic lock of the plurality of electronic locks;

receive secondary authentication data from the computer device;

store the secondary authentication data with the stored identification data;

receive detection data corresponding to a detection of the passive smart device when the passive smart device enters a predetermined location range associated with the assigned electronic lock of the plurality of electronic locks;

obtain, in response to the detection, an identifier from the passive smart device;

determine whether the identifier received from the passive smart device was received during a time period in which the identifier is valid;

receive, within a predetermined time following the detection, secondary authentication attempt data from the computing device;

determine whether the obtained identifier corresponds with the stored identification data;

determine whether the secondary authentication attempt data corresponds with the stored secondary authentication data; and

responsive to determining that (i) the identifier was received from the passive smart device at the assigned electric lock, (ii) the identifier was received from the passive smart device during a time period in which the identifier is valid, and (iii) the obtained identifier corresponds with the stored identification data, direct the assigned electronic lock to transition from a locked state to an unlocked state.

11. The system of claim 10, wherein the one or more processors being configured to execute the instructions to obtain the identifier from the passive smart device further comprises sending an identifier request to the passive smart device, the identifier request providing power to a power collection circuit of the passive smart device to enable to the passive smart device to provide the identifier.

12. The system of claim 10, wherein the passive smart device is configured to transmit data only after receiving power from an external power supply.

13. The system of claim 10, wherein the one or more processors is further configured to execute the instructions to provide a notification to the computing device based on the determination that at least a portion of the authentication request corresponds with the authentication data, the notification comprising authentication confirmation data.

14. The system of claim 10, wherein the computing device is a mobile computing device and the electronic lock is an electronic entryway lock.

15. A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause a mobile computing device to:

receive a reservation request for access to a restricted area during a reservation time;

transmit the reservation request to a key server;

obtain check-in information for a user;

transmit the check-in information to the key server;

obtain secondary authentication data for the user, the secondary authentication data being indicative of a secret passcode;

transmit the secondary authentication data to the key server;

obtain a key data from the key server;

establish electronic communication with a smart device;

transmit the key data and at least one key limitation to the smart device;

responsive to receiving verification of the key data, obtain secondary passcode information from the user and within a predetermined time following an establishment of electronic communication the smart device and a lock system; and

transmit the secondary passcode information to the lock system.

16. The non-transitory computer-readable medium of claim 15, wherein the electronic communication with the smart device provides power to a power collection circuit on the smart device.

17. The non-transitory computer-readable medium of claim 15, further storing instructions that, when executed by one or more processors, cause the mobile computing device to:

determine that the key data is encrypted; and

decrypt the key data prior to transmission to the smart device.

18. The non-transitory computer-readable medium of claim 15, wherein the instructions to establish electronic communication with the smart device further cause the mobile computing device to connect with a wireless transceiver of the smart device, the wireless transceiver comprising at least one of:

a near field communication (NFC) transceiver, a Bluetooth transceiver, a low-energy Bluetooth transceiver, an RFID transceiver, and an ambient backscatter communication (ABC).

19. The non-transitory computer-readable medium of claim 15 further storing instructions that, when executed by one or more processors, cause the mobile computing device to:

generate an expiration time for the key data; and

transmit the expiration time for the key to the smart device.

20. The non-transitory computer-readable medium of claim 15, further storing instructions that, when executed by one or more processors, cause the mobile computing device to cause the key data to be stored on the smart device.

21. The non-transitory computer-readable medium of claim 15, further storing instructions that, when executed by one or more processors, cause the mobile computing device to:

generate at least one key limitation; and

transmit the at least one key limitation to the smart device.

22. The non-transitory computer-readable medium of claim 21, wherein the at least one key limitation comprises a minimum wireless signal strength.

23. The non-transitory computer-readable medium of claim 21, wherein the at least one key limitation comprises at least one gesture performed with the smart device.