Method and apparatus for making a decision on a card

• US 8,074,271 B2
• Filed: 07/16/2007
• Issued: 12/06/2011
• Est. Priority Date: 08/09/2006
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Davis, Michael L., Wamsley, Robert, Hulusi, Tam
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US11/778,145
• Publication Number:
  US 20080163361A1
• Time in Patent Office: 1,604 Days
• Field of Search: None
• US Class Current: 726/16
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Method and devices for making access decisions in a secure access network are provided. The access decisions are made by a portable credential using data and algorithms stored on the credential. Since access decisions are made by the portable credential non-networked hosts or local hosts can be employed that do not necessarily need to be connected to a central access controller or database thereby reducing the cost of building and maintaining the secure access network.

Claims

1. A method, comprising:

presenting a credential to a reader, said reader associated with an access control system;

said reader transmitting data comprising at least one of a host identifier and timestamp to said credential;

said credential analyzing the at least one of a host identifier and timestamp using an application stored on said credential;

said credential making an access control decision for itself, the access control decision comprising a determination as to whether or not the credential is allowed access to an asset protected by said reader, and the access control decision being based on said analyzing step;

said credential generating a message containing results of said access control decision; and

said credential sending said message to said reader.

2. The method of claim 1, further comprising:

receiving a reply message from said reader at said credential.

3. The method of claim 1, wherein said access control decision comprises a grant of access to the asset protected by said reader, the method further comprising:

said reader transmitting results of said access control decision to an access controller; and

said access controller allowing a user of said credential access to said asset.

4. The method of claim 3, wherein said access controller comprises at least one of a lock for an individual door, a lock for a computer system, a lock for a computer, and a lock for a database.

5. The method of claim 1, wherein said access controller comprises at least one of a lock for an individual door, a lock for a computer system, a lock for a computer, and a lock for a database.

6. The method of claim 1, wherein said access control decision comprises a denial of access to an asset associated with said access control system, the method further comprising:

said access controller denying a user of said credential access to said asset; and

said reader saving said message received from said credential in a log.

7. The method of claim 1, wherein said message is encrypted prior to being sent from said credential to said reader.

8. The method of claim 1, wherein said analyzing step is performed using an authentication key that is shared between said credential and said reader.

9. The method of claim 1, wherein said reader is a non-networked reader.

10. The method of claim 1, further comprising performing authentication between said reader and said credential prior to said reader transmitting data.

11. The method of claim 1, further comprising:

presenting said credential to a reader that is in communication with a validation server;

said credential sending user information to said validation server;

said validation server checking a status of said user information; and

said validation server performing one of the following;

(i) in the event that said status is active, said validation server updating an expiration of said user information and sending said updated user information back to said credential;

(ii) in the event that said status is inactive, said validation server noting said credential as invalid and setting said user information as expired; and

(iii) in the event that said status is active, said validation server doing nothing.

12. The method of claim 1, further comprising updating said application on said credential to reflect current access permissions of said credential.

13. The method of claim 12, wherein a privilege server associated with the access control system performs said update.

14. The method of claim 1, wherein said credential comprises at least one of a smartcard, proximity card, passport, key fob, cellular phone, portable computer, and Personal Digital Assistant (PDA).

15. An access control system, comprising:

at least one local host for controlling access to an asset; and

at least one credential comprising;

a memory for storing an access decision application that is capable of making an access decision for said credential based on data received from the at least one local host, the access control decision comprising a determination as to whether or not the credential is allowed access to the asset protected by said at least one local host; and

a processor for executing said access decision application in connection with said received data, wherein said processor is further capable of generating a message after executing said access decision application and causing said message to be transmitted to the at least one local host, and wherein said message comprises results of said access decision for said credential.

16. The system of claim 15, wherein said received data comprises a local host identifier assigned to the at least one local host.

17. The system of claim 15, wherein said received data comprises at least one of authentication information and a timestamp.

18. The system of claim 15, wherein the at least one local host comprises:

a reader for communicating with the at least one credential; and

an access control device in communication with said reader, wherein results of said access decision received at said reader are transmitted to said access control device for performance by the access control device consistent with said access decision.

19. The system of claim 18, wherein said reader comprises at least one of a Radio Frequency Identification (RFID) reader, a magnetic reader, an optical reader, and a contact electrical reader.

20. The system of claim 15, wherein the at least one credential comprises at least one of a contact smartcard, a contactless smartcard, a proximity card, passport, a key fob, a cellular phone, portable computer, and a Personal Digital Assistant (PDA).

21. The system of claim 15, wherein said memory comprises a nonvolatile memory.

22. The system of claim 15, wherein said access control application comprises at least one data structure at least partially defining access privileges of a user of the at least one credential.

23. The system of claim 15, wherein historical data related to communications with local hosts is stored on said memory of the at least one credential.

24. The system of claim 23, wherein said historical data is used in connection with said access control application to make an access decision.

25. The system of claim 15, wherein the at least one local host directly communicates with only the at least one credential for purposes of making the access decision, but not for all purposes.

26. The system of claim 15, further comprising a validation server for maintaining expiration times of said access decision application stored on the at least one credential.

27. The system of claim 15, further comprising a privilege server capable of updating said access decision application.

28. The system of claim 15, wherein the at least one local host comprises multiple non-networked readers updated by one or more credentials as interactions occur between the one or more credentials and the multiple non-networked readers.

29. The system of claim 15, further comprising a server operable to maintain expiration times of said access decision application stored on the at least one credential and further operable to update said access decision application.

30. A credential for use in a secure access system, comprising:

a memory for storing an access decision application that is capable of making an access decision for said credential based on data received from a local host, the access control decision comprising a determination as to whether or not the credential is allowed access to an asset protected by the local host; and

a processor for executing said access decision application in connection with said received data, wherein said processor is further capable of generating a message after executing said access decision application and causing said message to be transmitted to the local host, and wherein said message comprises results of said access decision for said credential.

31. The credential of claim 30, wherein said received data comprises a local host identifier assigned to said local host.

32. The credential of claim 31, wherein said received data comprises at least one of a random number, key and timestamp.

33. The credential of claim 31, wherein the credential comprises at least one of a contact smartcard, a contactless smartcard, a proximity card, passport, a key fob, a cellular phone, portable computer, and a Personal Digital Assistant (PDA).

34. The credential of claim 31, wherein said memory comprises a nonvolatile memory.

35. The credential of claim 31, wherein said access control application comprises at least one data structure at least partially defining access privileges of a user of said credential.

36. The credential of claim 31, wherein said credential conveys data to said local host that updates said local host.