SYSTEM AND METHOD FOR REMOTELY ASSIGNING AND REVOKING ACCESS CREDENTIALS USING A NEAR FIELD COMMUNICATION EQUIPPED MOBILE PHONE

• US 20150223067A1
• Filed: 03/31/2015
• Published: 08/06/2015
• Est. Priority Date: 04/05/2005
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Lowe, Peter R.
• Granted Patent: US 9,552,466 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

The present invention is generally directed toward a mobile device that can be used in a secure access system. More specifically, the mobile device can have credential data loaded thereon remotely updated, enabled, disabled, revoked, or otherwise altered with a message sent from, for example, a control panel and/or controller in the system.

Claims

1. A method of operating an access control system, comprising:

updating, in a central database, location information for a mobile device within the access control system;

based on the updated location information for the mobile device, generating new credentials for the mobile device; and

transmitting the new credential information to the mobile device via a mobile communications network.

2. The method of claim 1, wherein the updated information for the mobile device comprises location information describing a location of the mobile device.

3. The method of claim 2, wherein the location information is obtained via a Global Positioning Satellite (GPS) signal.

4. The method of claim 2, wherein the location information is obtained by determining that the mobile device is within proximity of a reader.

5. The method of claim 1, wherein the mobile communications network comprises a cellular communication network.

6. The method of claim 5, wherein the cellular communication network corresponds to at least one of a Global System for Mobile Communications (GSM) network, a Digital Cellular System (DCS), and Personal Communications Systems (PCS).

7. The method of claim 1, wherein the new credentials are generated at a central controller.

8. The method of claim 7, wherein the new credentials are only generated in response to determining that a holder of the mobile device corresponds to a trusted user in the access control system.

9. An access control system, comprising:

a central database containing information related to mobile devices in the access control system along with access permissions associated with the mobile devices;

a controller configured to update location information for a mobile device in the database and, in response to updating the location information for the mobile device, generating new credentials for the mobile device then transmitting the new credentials to the mobile device via a mobile communications network.

10. The access control system of claim 9, wherein the updated information for the mobile device comprises location information describing a location of the mobile device.

11. The access control system of claim 10, wherein the location information is obtained via a Global Positioning Satellite (GPS) signal.

12. The access control system of claim 10, wherein the location information is obtained by determining that the mobile device is within proximity of a reader.

13. The access control system of claim 9, wherein the mobile communications network comprises a cellular network.

14. The access control system of claim 13, wherein the cellular communication network corresponds to at least one of a Global System for Mobile Communications (GSM) network, a Digital Cellular System (DCS), and Personal Communications Systems (PCS).

15. The access control system of claim 9, wherein the new credentials are only generated in response to determining that a holder of the mobile device corresponds to a trusted user in the access control system.

16. A non-transitory computer-readable medium comprising processor-executable instructions, the instructions comprising:

instructions configured to determine that location information for a mobile device has been updated in a central database;

instructions configured to generate new credentials for the mobile device in response to determining that the location information for the mobile device has been updated in the central database; and

instructions configured to transmit the new credential information to the mobile device via a mobile communications network.

17. The computer-readable medium of claim 16, wherein the updated information for the mobile device comprises location information describing a location of the mobile device.

18. The computer-readable medium of claim 17, wherein the location information is obtained via a Global Positioning Satellite (GPS) signal.

19. The computer-readable medium of claim 17, wherein the location information is obtained by determining that the mobile device is within proximity of a reader.

20. The computer-readable medium of claim 16, wherein the mobile communications network comprises a cellular communications network.