LOGGING ACCESS ATTEMPTS TO AN AREA

• US 20160063779A1
• Filed: 08/31/2015
• Published: 03/03/2016
• Est. Priority Date: 04/23/1996
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Libin, Phil, Micali, Silvio, Engberg, David
• Granted Patent: US 9,449,443 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G07C 2209/02 Access control comprising means for the enrolment of users
• CPC Class Codes: G07C 3/00 Registering or indicating the condition or the working of machines or other apparatus, other than vehicles
• CPC Class Codes: G07C 9/20 involving the use of a pass

Abstract

Logging events associated with accessing an area includes recording an event associated with accessing the area to provide an event recording and authenticating at least the event recording to provide an authenticated recording. Recording an event may include recording a time of the event. Recording an event may include recording a type of event. The event may be an attempt to access the area. Recording an event may include recording credentials/proofs used in connection with the attempt to access the area. Recording an event may include recording a result of the attempt. Recording an event may include recording the existence of data other than the credentials/proofs indicating that access should be denied. Recording an event may include recording additional data related to the area. Authenticating the recording may include digitally signing the recording. Authenticating at least the event recording may include authenticating the event recording and authenticating other event recordings to provide a single authenticated recording.

Claims

1. A method of logging events associated with accessing an area, comprising:

recording an event associated with accessing the area to provide an event recording; and

authenticating at least the event recording to provide an authenticated recording.

2. A method, according to claim 1, wherein recording an event includes recording a time of the event.

3. A method, according to claim 1, wherein recording an event includes recording a type of event.

4. A method, according to claim 1, wherein the event is an attempt to access the area.

5. A method, according to claim 4, wherein recording an event includes recording credentials/proofs used in connection with the attempt to access the area.

6. A method, according to claim 4, wherein recording an event includes recording a result of the attempt.

7. A method, according to claim 4, wherein recording an event includes recording the existence of data other than the credentials/proofs indicating that access should be denied.

8. A method, according to claim 1, wherein recording an event includes recording additional data related to the area.

9. A method, according to claim 1, wherein authenticating the recording includes digitally signing the recording.

10. A method, according to claim 1, wherein authenticating at least the event recording includes authenticating the event recording and authenticating other event recordings to provide a single authenticated recording.

11. A method, according to claim 10, wherein the single authenticated recording is stored on a card.

12. A method, according to claim 1, wherein the authenticated recording is stored on a card.

13. A method, according to claim 12, wherein the card has an other authenticated recording stored thereon.

14. A method, according to claim 13, wherein the other authenticated recording is provided by the card in connection with the card being used to access the area.

15. A method, according to claim 14, wherein access is denied if the other authenticated recording may not be verified.

16. A method, according to claim 14, wherein a controller is provided in connection with accessing the area and wherein the controller further authenticates the other authenticated recording.

17. A method, according to claim 13, wherein the other authenticated recording is authenticated using a digital certificate.

18. A method, according to claim 1, further comprising:

a user presenting a card to attempt to access the area.

19. A method, according to claim 18, further comprising:

the card further authenticating the authenticated recording in connection with the user attempting to access the area.

20. A method, according to claim 18, wherein a controller is provided in connection with accessing the area and wherein the controller and the card together further authenticate the authenticated recording.

21. A method, according to claim 1, further comprising:

providing correlation generation data that indicates the contents of the authenticated recording.

22. A method, according to claim 21, wherein the correlation generation data is bound to the authenticated recording.

23. A method, according to claim 21, wherein the correlation generation data is bound to the authenticated recording and wherein the resulting binding is authenticated.

24. A method, according to claim 23, wherein the resulting binding is digitally signed.

25. A method, according to claim 21, wherein the correlation generation data is a sequence of numbers and wherein a particular one of the numbers is assigned to the event.

26. A method, according to claim 25, further comprising:

authenticating a binding of the particular number and the event.

27. A method, according to claim 26, wherein authenticating the binding includes digitally signing the binding.

28. A method, according to claim 26, wherein authenticating the binding includes one way hashing the binding and then digitally signing the result thereof.

29. A method, according to claim 21, wherein correlation generation data for the event includes information identifying an other event.

30. A method, according to claim 29, wherein the other event is a previous event.

31. A method, according to claim 29, wherein the other event is a future event.

32. A method, according to claim 29, further comprising:

associating a first and second random value for the event;

associating at least one of the first and second random values with the other event; and

binding at least one of the first and second values to the other event.

33. A method, according to claim 21, wherein providing correlation generation data includes using a polynomial to generate the correlation information.

34. A method, according to claim 21, wherein providing correlation generation data includes using a hash chain to generate the correlation information.

35. A method, according to claim 21, wherein the correlation generation data includes information about a plurality of other events.

36. A method, according to claim 21, wherein the correlation generation data includes error correction codes.

37. A method, according to claim 1, further comprising:

disseminating the authenticated recording.

38. A method, according to claim 37, wherein disseminating the authenticated recording includes providing the authenticated recording on cards presented by users attempting to access the area.

39. A method, according to claim 1, wherein the area is defined by walls and a door.