Method and system for controlling access

• US 20040029563A1
• Filed: 03/11/2003
• Published: 02/12/2004
• Est. Priority Date: 09/11/2000
• Status: Abandoned Application

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Berg, Thornsten
• Application Number:
  US10/380,337
• Publication Number:
  US 20040029563A1
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 88/18 Service support devices; Network management devices

Abstract

The invention relates to a method and a system for controlling access, comprising a mobile radio transmission/radio receiving device with a first limited short radio coverage range. The system also has at least one electronic device with a short-range radio transmission/radio receiving module which has a second limited short radio coverage range. The mobile radio transmission/radio receiving device and the short-range radio transmission/radio receiving module are configured in such a way that when the first short radio coverage range at least partially overlap, messages are transmitted for identification. The short-range radio transmission/radio receiving module and the electronic device are also interconnected and configured in such a way that the identification messages that are transmitted are used to check authorization to use the functions of the electronic device. The short-range radio transmission/radio receiving module and the electronic device also have release means which are configured in such a way that the functions of the electronic device are released for use in the case of authorization and the use of these functions is blocked when the overlap no longer exists.

Claims

1. A system for access control having the following features:

a) a mobile radio transmission/radio reception unit (BIU, BM3) has a first limited short-haul radio coverage area (BIU-BT),

b) at least one electronic unit (MP, PC) contains a short-haul radio transmission/radio reception module (BM1, BM2) which has a second short-haul radio coverage area (BT1, BT2),

c) the mobile radio transmission/radio reception unit (BIU, BM3) and the short-haul radio transmission/radio reception module (BM1, BM2) are in a form such that messages for identification are transmitted if there is at least some overlap between the first short-haul radio coverage area (BIU) and the second short-haul radio coverage area (BT1, BT2),

d) the short-haul radio transmission/radio reception module (BM1, BM2) and the electronic unit (MP, PC) are connected to one another such, and are in a form such, that the transmitted identification messages are used for checking authorization to use the functions of the electronic unit (MP, PC),

e) enabling means in a form such that use of the functions of the electronic unit (MP, PC) is enabled if there is authorization, and use of the functions is disabled if there is no longer any overlap.

2. The system as claimed in claim 1, characterized in that

a) the mobile radio transmission/radio reception unit (BIU, BM3) is in a form such that it repeatedly transmits an identification message, with the identification message containing an identifier (IDENTIFIER) which is associated with the mobile radio transmission/radio reception unit (BIU, BM3) and is unique in the system,

b) the short-haul radio transmission/radio reception module (BM1, BM2) is in a form such that the transmitted identification message is received when there is at least some overlap between the first short-haul radio coverage area (BIU-BT) and the second short-haul radio coverage area (BT1, BT2),

c) the short-haul radio transmission/radio reception module (BM1, BM2) and the electronic unit (MP, PC) are connected to one another such, and are in a form such, that the identifier (IDENTIFIER) contained in the identification message is checked to determine whether the identifier provides authorization to enable use of the functions of the electronic unit (MP, PC),

d) use of the functions is enabled only if there is authorization.

3. The system as claimed in claim 1, characterized in that

a) the short-haul radio transmission/radio reception module (BM1, BM2) is in a form such that it repeatedly requests identification messages,

b) the mobile radio transmission/radio reception unit (BIU, BM3) is in a form such that it transmits an identification message upon request, the identification message containing an identifier (IDENTIFIER) which is associated with the mobile radio transmission/radio reception unit (BIU, BM3) and is unique in the system,

c) the short-haul radio transmission/radio reception module (BM1, BM2) and the electronic unit are connected to one another such, and are in a form such, that the identifier (IDENTIFIER) contained in the identification message is checked to determine whether the identifier provides authorization to enable use of the functions of the electronic unit (MP,PC),

d) use of the functions is enabled only if there is authorization.

4. The system as claimed in claim 1, characterized in that the mobile radio transmission/radio reception unit (BIU, BM3) and the short-haul radio transmission/radio reception module (BM1, BM2) are in a form such that they operate on the basis of the Bluetooth standard.

5. The system as claimed in claim 4, characterized in that the identifier is the unique Bluetooth address.

6. The system as claimed in claim 5, characterized in that the mobile short-haul radio transmission/radio reception unit (BIU, BM3) and the short-haul radio transmission/radio reception module (BM1, BM2) are in a form such that the [lacuna] transmitted messages for identification is carried out as part of a login procedure performed in line with the Bluetooth standard.

7. The system as claimed in one of claims 1 to 6, characterized in that the mobile radio transmission/radio reception unit (BIU, BM3) has the form and dimensions of a smart card.

8. The system as claimed in one of claims 1 to 6, characterized in that the mobile radio transmission/radio reception unit (BIU, BM3) is integrated in a wristwatch.

15. The method as claimed in one of the preceding claims, characterized in that the identifier (IDENTIFIER) is checked by comparing the identifier (IDENTIFIER) with reference identifiers stored in the radio transmission/radio reception module (BM1, BM2) or in the electronic unit (MP, PC).

9. A method for access control having the following features:

a) messages for identification are transmitted if there is at least some overlap between a first limited short-haul radio coverage area (BIU-BT) for a mobile radio transmission/radio reception unit (BIU, BM3) and a second limited short-haul radio coverage area (BT1, BT2) for a short-haul radio transmission/radio reception module (BM1, BM2) associated with an electronic unit (MP, PC),

b) the transmitted identification messages are evaluated,

c) use of the functions of the electronic unit (MP, PC) [lacuna] the short-haul radio transmission/radio reception module (BM1, BM2) is enabled if evaluation reveals that there is authorization to use the electronic unit (MP, PC),

d) use of the function of the electronic unit (MP, PC) is disabled as soon as there is no longer any overlap.

10. The method as claimed in claim 9, characterized in that

a) the mobile radio transmission/radio reception unit (BIU, BM3) repeats an identification message, the identification message containing an identifier (IDENTIFIER) which is associated with the mobile radio transmission/radio reception unit (BIU, BM3) and is unique in the system,

b) the short-haul radio transmission/radio reception module (BM1, BM2) detects and receives transmitted identification message when there is at least some overlap between the first short-haul radio coverage area (BIU-BT) and the second short-haul radio coverage area (BT1, BT2),

c) the identifier (IDENTIFIER) contained in the identification message is checked to determine whether the identifier (IDENTIFIER) provides authorization to enable use of the functions of the electronic unit (MP, PC),

d) use is enabled only if there is authorization.

11. The method as claimed in claim 10, characterized in that

a) the short-haul radio transmission/radio reception module (BM1, BM2) repeatedly requests identification messages,

b) the mobile radio transmission/radio reception unit (BIU, BM3) transmits an identification message upon request, the identification message containing an identifier (IDENTIFIER) which is associated with the mobile radio transmission/radio reception unit (BIU, BM3) and is unique in the system,

c) the identifier (IDENTIFIER) contained in the identification message is checked to determine whether the identifier provides authorization to enable use of the functions of the electronic unit (MP, PC),

d) use is enabled only if there is authorization.

12. The method as claimed in claim 9, characterized in that the mobile radio transmission/radio reception unit (BIU, BM3) and the short-haul radio transmission/radio reception module (BM1, BM2) are in a form such that they operate on the basis of the Bluetooth standard.

13. The method as claimed in claim 12, characterized in that the identifier (IDENTIFIER) used is the unique Bluetooth address.

14. The system as claimed in claim 13, characterized in that the mobile radio transmission/radio reception unit (BIU, BM3) and the short-haul radio transmission/radio reception module (BM1, BM2) are in a form such that the [lacuna] transmitted messages for identification is carried out as part of a login procedure performed in line with the Bluetooth standard.