Physical access control

• US 7,353,396 B2
• Filed: 04/08/2003
• Issued: 04/01/2008
• Est. Priority Date: 10/02/1995
• Status: Expired due to Fees

• Current Assignee: Assa Abloy AB
• Original Assignee: Corestreet, Ltd. (Assa Abloy AB)
• Inventors: Reyzin, Leo, Libin, Phil, Sinelnikov, Alex, Engberg, David, Micali, Silvio
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Lipman; Jacob
• Application Number:
  US10/409,638
• Publication Number:
  US 20040049675A1
• Time in Patent Office: 1,820 Days
• Field of Search: 713/176, 713/185
• US Class Current: 713/176
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3218 using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

A system and method are disclosed for controlling physical access through a digital certificate validation process that works with standard certificate formats and that enables a certifying authority (CA) to prove the validity status of each certificate C at any time interval (e.g., every day, hour, or minute) starting with C'"'"'s issue date, D₁. C'"'"'s time granularity may be specified within the certificate itself, unless it is the same for all certificates. For example, all certificates may have a one-day granularity with each certificate expires 365 days after issuance. Given certain initial inputs provided by the CA, a one-way hash function is utilized to compute values of a specified byte size that are included on the digital certificate and to compute other values that are kept secret and used in the validation process.

Claims

1. A method for an entity A to control the access of at least one user U to at least one disconnected door D having means to determine the current time, comprising the steps of:

for each time interval d of a sequence of dates, having A produce a digital signature SIGUDd, indicating that user U can access door D during time interval d;

causing a card of the user U to receive SIGUDd during time interval d for presentation to door D in order to pass through D;

having U present the card with SIGUDd to door D; and

having D open after verifying that (i) SIGUDd indeed is a digital signature of A indicating that U can access door D at time interval d, and (ii) that the current time is indeed within time interval d, wherein the door D stores, on the card of the user, information corresponding to an access attempt of a different user.

2. The method of claim 1, wherein D has a card reader coupled with an electromechanical lock, and wherein U presents SIGUDd to D by having his card read by D'"'"'s card reader.

3. The method of claim 1, wherein A causes SIGUDd to be received by U during time interval d by posting SIGUDd into a database accessible by U.

4. The method of claim 1, wherein SIGUDd is a public-key signature, and wherein D stores the public-key of A.

5. The method of claim 1, further comprising:

receiving the information stored on the card at a database disconnected from the door D.

6. The method of claim 1, wherein D also verifies identity information about U.

7. The method of claim 5, wherein the identity information about U includes at least one of:

a PIN and the answer to a challenge of D.

8. A method for controlling the access to at least one disconnected door, comprising:

for each time interval of a sequence of dates, causing an entity to produce a digital signature, wherein the digital signature indicates that at least one user can access the disconnected door during the time interval;

causing a card of a first user to receive the digital signature during the time interval for presentation to the disconnected door in order to pass through the disconnected door; and

after the first user presents the card with the digital signature to the disconnected door, causing the disconnected door to open after verifying that;

(i) the digital signature is a digital signature of the entity indicating that the first user can access the disconnected door at the time interval, and (ii) that a current time is within the time interval, wherein the disconnected door stores, on the card of the first user, information that corresponds to a second user different from the first user.

9. The method of claim 8, wherein the disconnected door has a card reader coupled with an electromechanical lock, and wherein the first user presents the digital signature to the disconnected door by having the card of the first user read by the card reader.

10. The method of claim 8, wherein the entity causes the digital signature to be received by the first user during the time interval by posting the digital signature into a database accessible by the first user.

11. The method of claim 8, wherein the digital signature is a public-key signature, and wherein the disconnected door stores the public-key of the entity.

12. The method of claim 8, further comprising:

receiving the information stored on the card at a database disconnected from the door.

13. The method of claim 8, wherein the disconnected door also verifies identity information about the first user.

14. The method of claim 13, wherein the identity information about the first user includes at least one of:

a PIN and the answer to a challenge of the disconnected door.