Patent ID: 11869295
Assignee: ASSA ABLOY AMERICAS RESIDENTIAL INC.
Field: Control (Instruments)
Classification: CPC G  H | IPC G  H

Claim 7:
8. An electronic lock comprising:
a programmable circuit;
a short-range wireless communication interface communicatively coupled to the programmable circuit;
a memory storing instructions which, when executed, cause the programmable circuit to:
establish a communication connection with a mobile device over a short-range wireless communication protocol via the short-range wireless communication interface;
perform at least a portion of a mutual authentication process in which the electronic lock is authenticated to the mobile device and the mobile device is authenticated to the electronic lock;
perform a key generation process with the mobile device to generate an encryption key and a decryption key at the electronic lock; and
perform encrypted communication with the mobile device using the encryption key and the decryption key, the encrypted communication occurring via an unbonded connection using the short-range wireless communication protocol via the short-range wireless communication interface,

wherein the mutual authentication process includes a mobile device authentication phase and an electronic lock authentication phase;
the mobile device authentication phase including the electronic lock being configured to:
receive a certificate from the mobile device;
verify the certificate received from the mobile device relative to a public version of the certificate;
send a random challenge to the mobile device;
receive a digital signature from the mobile device, the digital signature being generated by a certificate holder and based, at least in part, on the random challenge;
verify the digital signature based on the random challenge and a public key of the certificate holder; and
transmit to the mobile device a result of verifying the digital signature; and

the electronic lock authentication phase including the electronic lock being configured to:
transmit a lock certificate to the mobile device; and
transmit a lock digital signature to the mobile device, the lock digital signature being generated based on a second random challenge.