Controlling access to an area

• US 20050055567A1
• Filed: 07/16/2004
• Published: 03/10/2005
• Est. Priority Date: 10/02/1995
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Corestreet, Ltd. (Assa Abloy AB)
• Inventors: Libin, Phil, Engberg, David, Micali, Silvio
• Granted Patent: US 7,822,989 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: G07C 9/27 with central registration

Abstract

Controlling access includes providing a barrier to access that includes a controller that selectively allows access, at least one administration entity generating credentials/proofs, wherein no valid proofs are determinable given only the credentials and values for expired proofs, the controller receiving the credentials/proofs, the controller determining if access is presently authorized, and, if access is presently authorized, the controller allowing access. The credentials/proofs may be in one part or may be in separate parts. There may be a first administration entity that generates the credentials and other administration entities that generate proofs. The first administration entity may also generate proofs or the first administration entity may not generate proofs. The credentials may correspond to a digital certificate that includes a final value that is a result of applying a one way function to a first one of the proofs.

Claims

1. A method of controlling access, comprising:

providing a barrier to access that includes a controller that selectively allows access;

at least one administration entity generating credentials/proofs, wherein no valid proofs are determinable given only the credentials and values for expired proofs;

the controller receiving the credentials/proofs;

the controller determining if access is presently authorized; and

if access is presently authorized, the controller allowing access.

2. A method, according to claim 1, wherein the credentials/proofs are in one part.

3. A method, according to claim 1, wherein the credentials/proofs are in separate parts.

4. A method, according to claim 3, wherein there is a first administration entity that generates the credentials and other administration entities that generate proofs.

5. A method, according to claim 4, wherein the first administration entity also generates proofs.

6. A method, according to claim 4, wherein the first administration entity does not generate proofs.

7. A method, according to claim 1, wherein the credentials correspond to a digital certificate that includes a final value that is a result of applying a one way function to a first one of the proofs.

8. A method, according to claim 7, wherein each of the proofs is a result of applying a one way function to a future one of the proofs.

9. A method, according to claim 7, wherein the digital certificate includes an identifier for the electronic device.

10. A method, according to claim 1, wherein the credentials include a final value that is a result of applying a one way function to a first one of the proofs.

11. A method, according to claim 10, wherein each of the proofs is a result of applying a one way function to a future one of the proofs.

12. A method, according to claim 1, wherein the credentials include an identifier for a user requesting access.

13. A method, according to claim 1, wherein the credentials/proofs include a digital signature.

14. A method, according to claim 1, wherein the barrier to access includes walls and a door.

15. A method, according to claim 14, further comprising:

providing a door lock coupled to the controller, wherein the controller allowing access includes the controller actuating the door lock to allow the door to open.

16. A method, according to claim 1, further comprising:

providing a reader coupled to the controller, wherein the controller receives credentials/proofs from the reader.

17. A method, according to claim 16, wherein the credentials/proofs are provided on a smart card presented by a user.

18. A method, according to claim 1, further comprising:

providing an external connection to the controller.

19. A method, according to claim 18, wherein the external connection is intermittent.

20. A method, according to claim 18, wherein the controller receives at least a portion of the credentials/proofs using the external connection.

21. A method, according to claim 20, wherein the controller receives all of the credentials/proofs using the external connection.

22. A method, according to claim 20, further comprising:

providing a reader coupled to the controller, wherein the controller receives a remaining portion of the credentials/proofs from the reader.

23. A method, according to claim 22, wherein the credentials/proofs are provided on a smart card presented by a user.

24. A method, according to claim 1, wherein the credentials/proofs include a password entered by a user.

25. A method, according to claim 1, wherein the credentials/proofs include user biometric information.

26. A method, according to claim 1, wherein the credentials/proofs include a handwritten signature.

27. A method, according to claim 1, wherein the credentials/proofs include a secret value provided on a card held by a user.

28. A method, according to claim 1, wherein the credentials/proofs expire at a predetermined time.