Method and apparatus for making a decision on a card

• US 10,339,292 B2
• Filed: 09/03/2013
• Issued: 07/02/2019
• Est. Priority Date: 08/09/2006
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Davis, Masha Leah, Wamsley, Robert, Hulusi, Tam
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US14/017,065
• Publication Number:
  US 20140013418A1
• Time in Patent Office: 2,128 Days
• Field of Search: None
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Method and devices for making access decisions in a secure access network are provided. The access decisions are made by a portable credential using data and algorithms stored on the credential. Since access decisions are made by the portable credential non-networked hosts or local hosts can be employed that do not necessarily need to be connected to a central access controller or database thereby reducing the cost of building and maintaining the secure access network.

Claims

1. A method of controlling physical access to a secure asset with a physical access control system including a mobile device and a host, comprising:

receiving location information at the mobile device;

analyzing the location information by an application stored on the mobile device; and

making, by the mobile device, an access control decision as to whether to permit or deny a holder of the mobile device to access the secure asset based on the analysis of the location information; and

determining, by the mobile device, a host identifier based upon the location information.

2. The method of claim 1, further comprising:

transmitting a signal from the mobile device in accord with the access control decision.

3. The method of claim 2, wherein receiving location information comprises receiving location information from a first local host and the method further comprises:

transmitting the signal in accord with the access control decision to the first local host.

4. The method of claim 2, wherein receiving location information comprises receiving location information from a first local host and the method further comprises:

transmitting the signal to a second local host.

5. The method of claim 1, wherein:

the location information is based at least in part on a host serial number; and

the analyzing of the location information comprises accessing host location information associated with the host serial number.

6. The method of claim 1, wherein the mobile device comprises at least one of a smartcard, proximity card, passport, key fob, cellular phone, portable computer, and Personal Digital Assistant (PDA).

7. The method of claim 1, wherein the received location information is at least partially based on a positioning satellite signal.

8. The method of claim 7, further comprising:

receiving time information from the positioning satellite signal.

9. The method of claim 1, wherein communication between a host and the mobile device comprises a mutual authentication exchange and an exchange of the access control decision.

10. The method of claim 1, wherein the received location information is location information of the mobile device.

11. The method of claim 1, wherein the location information is received from a local host.

12. A method of controlling physical access to a secure asset with a physical access control system including a mobile device and a host, comprising:

receiving, at a mobile device, a first location information of the mobile device;

analyzing the first location information by an application stored on the mobile device;

making, by the mobile device, a first access control decision as to whether to permit or deny a holder of the mobile device to access the secure asset based on the analysis of the first location information;

receiving, at the mobile device, a second location information, wherein the second location information is location information for the mobile device;

analyzing the second location information by an application stored on the mobile device; and

making a second access control decision as to whether to permit or deny a holder of the mobile device to access the secure asset based on the analysis of the second location information, wherein the second access control decision is dependent upon the first access control decision.

13. The method of claim 12, further comprising:

placing a first access controller in a first state upon the first access control decision indicating authorization;

determining the state of the first access controller; and

wherein making the second access control decision is based at least in part on the determined state of the first access controller.

14. The method of claim 13, further comprising:

determining the state of the first access controller has changed from the first state to a second state.

15. The method of claim 12, wherein making the second access control decision is based upon determining a time between receiving the first location information and receiving the second location information is within an acceptable time range.