Authorization system and a method of authorization

• US 8,941,464 B2
• Filed: 06/26/2012
• Issued: 01/27/2015
• Est. Priority Date: 10/21/2005
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Goel, Parveen Kumar
• Primary Examiner(s): Bugg, George
• Assistant Examiner(s): Dorsey, Renee
• Application Number:
  US13/533,334
• Publication Number:
  US 20120326868A1
• Time in Patent Office: 945 Days
• Field of Search: None
• US Class Current: 340/5.2
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 2209/62 Comprising means for indicating the status of the lock
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/21 having a variable access code
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

An access control system for a secure facility includes an authorization system having an interface, in the form of an interrogator, for receiving the request signal indicative of a user seeking authorization for a predetermined action, such as gaining access through a door. In one example, an authorization system may include an interface for receiving a request signal indicative of a party seeking authorization for a predetermined action. A first processor, that is responsive to the request signal, determines if the authorization is to be granted. If so, the first processor may generate an authorization signal that includes information that is securely coded, and which is indicative of the determination. An operating device, physically spaced from the first processor, may receive the authorization signal, and may decode the securely coded information and subsequently initiating the action, if appropriate.

Claims

1. An authorization system including:

an interface for receiving a request signal indicative of a party seeking authorization for a predetermined action, wherein the request signal is received as an RF signal;

an access authorization device containing a first processor, the first processor being configured to receive the request signal and, based on processing of the request signal, determine if the authorization is to be granted and, if so, generate an authorization signal that includes information that is securely coded and which is indicative of the determination, wherein the authorization signal is communicated via wired communication to an actuator device; and

an actuator device that is physically separate from and physically spaced apart from the access authorization device, the actuator device being configured to receive the authorization signal from the access authorization device via the wired communication, the actuator device having a second processor that is configured to process the authorization signal and decode the securely coded information, and wherein the actuator device is configured to initiate the predetermined action in response to the decoding of the securely coded information.

2. The authorization system according to claim 1, wherein the access authorization device generates an authorization signal in response to each request signal.

3. The authorization system according to claim 2, wherein the information of the authorization signal is encrypted.

4. The authorization system according to claim 3, wherein the authorization signal itself is encrypted.

5. The authorization system according to claim 1, wherein the request signal is not encrypted.

6. The authorization system according to claim 5, wherein the request signal includes identification and authorization information that is encrypted.

7. The authorization system according to claim 1, wherein the request signal is encrypted.

8. The authorization system according to claim 1, wherein the interface is a wireless interface.

9. The authorization system according to claim 1, wherein the interface is a wired interface.

10. The authorization system according to claim 1, wherein the access authorization device is in communication with a host.

11. The authorization system according to claim 1, wherein the authorization signal is part of a communication session between the access authorization device and the actuator device.

12. The authorization system according to claim 11, wherein the communications session is subject to a predetermined coding of the information.

13. The authorization system according to claim 12, wherein different communications sessions use different predetermined coding of the information.

14. The authorization A system according to claim 1, wherein if the authorization is not to be granted, the access authorization device does not generate the authorization signal.

15. The authorization system according to claim 1, wherein if the authorization is not to be granted, the access authorization device generates the authorization signal to include information that is securely coded and which is indicative of the determination, and the actuator device, upon decoding the information, does one or more of:

not initiating the action; and

generating an alarm signal.

16. A method of authorization, the method including:

receiving a request signal indicative of a party seeking authorization for a predetermined action, wherein the request signal is received as an RF signal;

operating a access authorization device having a first processor to process the request signal, thereby to determine if the authorization is to be granted and, if so, generate an authorization signal that includes information that is securely coded and which is indicative of the determination, wherein the authorization signal is communicated via wired communication to an actuator device; and

operating a actuator device to receive the authorization signal via the wired communication, the actuator device being physically separate and spaced apart from the access authorization device, the actuator device having a second processor that is configured to process the authorization signal thereby to decode the securely coded information, and wherein the actuator device is configured to initiate the predetermined action in response to the decoding of the securely coded information.

17. The method of claim 16, wherein the authorization signal is encrypted.

18. The method of claim 16, wherein the information of the authorization signal is encrypted, but the authorization signal itself is not encrypted.

19. An authorization system including:

an interface for receiving a request signal indicative of a party seeking authorization for a predetermined action, wherein the request signal is received as an RF signal;

an access authorization device that is configured to receive the request signal and configured to process the request signal thereby to determine if the authorization is to be granted and, if so, generate a secure signal with the use of an encryption key, wherein the secure signal is communicated via wired communication to an actuator device; and

an actuator device being physically separate from and spaced apart from the access authorization device, the actuator device being configured to receive the secure signal via the wired communication, and decrypt and process the secure signal thereby to selectively initiate the action.

20. The authorization system according to claim 19 wherein:

the interface and the party are disposed within a first zone;

the access authorization device is in or adjacent to the first zone and is responsive to the request signal for determining if the authorization is to be granted and, or so, generating the secure signal; and

the actuator device is disposed in a second zone that is physically distinct from the first zone.