# Patent

## Title
Electronic key for access to a mechatronic cylinder

## Abstract

A method of using an electronic key for access to one or more mechatronic locks when the key moves from place to place, including the key periodically transmitting its geographical location to an access management server so as to allow said server to identify location coordinates for the key, and receiving an access profile from the server where the access profile includes a set of one or more cylinders accessible to the key and is based at least in part on the key's location. If the key's new location causes a change in access profile information associated with the key, the key's previous access profile is preferably replaced with the key's new access profile in an irreversible manner. The key preferably self-supervises its communications with the server by deactivating its access profile if it no longer receives information from the server for a predetermined period of time.

## Background
This application is a continuation of U.S. patent application Ser. No. 11/722,177, now U.S. Pat. No. 8,368,507 B2, issued Jan. 16, 2013; which is a U.S. national stage application from PCT/FR2005/002877 filed on Nov. 18, 2005, which claims priority to French patent application number 0453095 filed on Dec. 20, 2004


This invention relates to the field of electronic keys.
This invention relates more particularly to an electronic key for secure access to an electronic cylinder or, more specifically, a mecatronic cylinder—meaning a cylinder with mechanical components controlled by electronic devices.
The prior art is already familiar with several electronic key systems.
In particular, US Patent application 2002/0095964 proposes an electronic access key for an electronic cylinder. The key and cylinder include a microprocessor, which stores an identification code. When the key makes contact with the cylinder, the key supplies energy to the cylinder's microprocessor through its battery. When this has stabilized, it engages with the key in a code identification process. If the key's code matches one of the codes authorized by the electronic cylinder, an authorization signal is sent to the key's microprocessor, which responds by supplying energy to a coil, causing the cylinder to open.
In this case, the cylinder and the key are programmed using a programming device. Using this device, one can change the authorization access codes for the key and for the cylinder.
One can fully understand that the problem with such solutions proposed by the prior art is that the access profile for a given key is fixed once the programming is complete. Therefore, a user who wishes to visit several different buildings must either plan ahead when programming the access codes for different cylinders or re-program his key when he gets to each new cylinder. The need for a physical programmer also poses a problem related to interoperability between the programmer and the electronic key.
This disadvantage poses a real challenge for traveling users.
The prior art is already familiar with electronic key solutions for an electronic lock that moves through space. This is the case given in U.S. Pat. No. 6,384,709, for example. This patent pertains to means of transportation (such as a truck) to which one wishes to prevent access until such time as it arrives at a specific destination. To do so, the patent discloses the installation of a GPS [Global Positioning System] antenna on the truck, as well as a GPS locator module. The key is programmed to operate at a precise location. Geographic information is recorded in the key's memory. When the truck has arrived at its destination (the destination programmed into the key), the identification codes and the geographic parameters for the key and for the lock match. It is then possible to open [the lock] during a predetermined period of time.
This document solves the problem of a mobile lock, since opening is conditional upon the lock's position.
However, this does not solve the problem of a traveling user, since the global positioning parameters for the key are fixed, which prevents the lock from being opened when necessary, but not programmed by the controlling forces—notably when outside the geographic zone for opening.
This invention intends to remedy this disadvantage of the prior art by providing an electronic key that allows real-time management of access profiles for users of such keys.
To do so, this invention is of the type described above and is remarkable, in its broadest acceptance, in that it concerns an electronic key that enables control over access to a mecatronic cylinder [lock], wherein said electronic key has at least one memory to store information and one microprocessor characterized by having an antenna, and at least one means of wireless communication with a server containing a database of access profiles, and wherein said access information can be modified remotely in accordance with the access profile associated with said key.
Preferably, said means of wireless communication includes a communications module.
It would be advantageous for said means of wireless communication to include a global positioning module.
In another variant, said means of wireless communication includes both a communications module and a global positioning module.
In one method of implementation, said communications module is a GSM, GPRS, or UMTS-type data communications module and said global positioning module is a satellite-based, GPS-type, global positioning module.
Lastly, as an advantage, said global positioning module is an Earth-based, GSM-type, global positioning module.
The invention also pertains to an access control system that includes an electronic key and a server containing a database of access profiles, wherein said electronic key contains at least one wireless communications module to communicate with said server and wherein said server contains a means to manage the access profiles associated with said key.
Lastly, the invention includes a process for communications within the system based on the invention, characterized in that it includes at least one step for sending an access profile from said server to said electronic key.
According to one method of implementation, it also includes a previous step in which the electronic key sends at least one element of information about its global positioning and in which said access profile includes at least one access authorization associated with said global positioning information.
Additionally, said access profile also includes a time parameter associated with said authorization, of which there is at least one [sic].
Based on a second method of implementation, said access profile includes at least one element of information about global positioning, at least one timing information, and at least one access authorization associated with said global positioning information and said timing information, and in that said electronic key carries out a step to compare said global positioning information against its current global positioning and to compare said timing information against the current time in order to validate said authorization.
One will understand the invention better with the help of the description (provided hereinafter purely for explanatory reasons) of a method of implementation for the invention with reference to the attached FIG. 1, which shows a schematic of the communicating key according to the invention.


As illustrated in FIG. 1, the communicating key according to the invention includes several electronic functions to activate an electronic cylinder. These functions are known to professionals in the field in question, and it pertains to a non-volatile EEPROM memory (3), a microprocessor (8), an electrical source (2), an LED to indicate the opening of the cylinder, a means of producing sound to indicate the battery level and/or validity of the key, and a clock (4).
Based on methods of implementation for the invention, this key may either be a contact key or a contactless key.
In the case of a contact key, it includes an electrical source (2) that will activate the electronic cylinder in order to permit the door to be opened once access to the cylinder is authorized.
In the case of a contactless key, an infrared, RFID, or Bluetooth module or any other local wireless device (not depicted) will enable identification of the key in order to ensure access authorization if the key's ID matches an authorized ID.
It should be understood that the electronic methods for opening the cylinder using the electronic key should not be limiting factors for this invention, since a professional in the field is likely to use any sort of communication between the cylinder and the key without, however, exceeding the scope of this invention. In particular, if the key is a contactless key, the cylinder compatible with that key should include electricity in the form of a battery.
In a completely original fashion, the communicating key also includes a means of wireless communication (5).
For the purposes of this invention, it shall be understood that “means of wireless communication (5)” refers to any remote data communication module, such as a GSM, GPRS or
UNITS module or any remote global positioning module of either a satellite-based GPS type or an Earth-based GSM type, or any combination of these two data communication and global positioning modules.
The communicating key according to the invention also includes a transmitter/receiver antenna (6) associated with means of communication (5) in order to communicate with remote servers.
This antenna is connected to the communication and/or global positioning module in order to exchange external data with the key's memory. Preferably and in order to minimize the size of the resulting key, a flat antenna circling the communication and/or global positioning module is selected. However, a professional will understand that the options for global positioning are occasionally difficult depending on the key's surroundings. In particular, the key's global positioning module may not work inside a car. In order to resolve this problem, one might, for example, provide a means of external connection on the key so that it could be connected to an external antenna, such as the car's own antenna, as we see with current GPS systems.
Equipped with these various communication and/or global positioning modules, the electronic key according to the invention can communicate with a server containing a database of access [codes] for the key.
According to a first method of implementation, the communicating key periodically transmits its location to the server. In return, based on the key's global positioning, it receives from the access management server an access profile consisting of a set of cylinders accessible for a predetermined length of time. In this method of implementation, the access profile contains an authorization attribute (for example, IDs for accessible cylinders) and a time attribute (for example, access is authorized for three hours). This access profile will then be periodically updated once the key changes location. If its new location changes the access profile, the current access rights replace the previous rights in the memory in an irreversible manner. Essentially, by receiving coordinates from a key (defined by its ID), a server compares the coordinates with the authorization zones and, if necessary, updates the key's authorizations by remotely transmitting the access authorization.
This updated data is received by the key's communications module and written on the rewritable memory in an irreversible manner.
According to a second method of implementation, the access management server transmits an access profile to the key that comprises a time attribute, a set of authorizations, as well as a geographic attribute. The communicating key records that it has this or that authorization for a given time period and in a given geographic zone. Thus, if [the key] changes geographic zone, the global positioning module in the key will detect the new position, will compare this with the authorization zone, and, if the two do not match, will deactivate the authorizations. Note: The deactivation of authorizations takes place either at the moment when the comparison does not show a similarity between the access profile and the current global positioning and time parameters or at the moment there is an attempt to open the lock, since the key does not then transmit codes matching those for the cylinder if the current parameters do not correspond to the access profile.
It must be noted that in both methods of implementation, if the key no longer receives information coming from the server for a predetermined period, the key deactivates its access profile and the connected authorizations.
It is thereby self-supervising the communications with the remote server.
At the database level, access rights associated with the key can be defined geographically. Thus, [the database] stores authorized access [codes] for a given key ID and geographic zone.
After recording the access authorization in the key's memory, the key can then open the mecatronic cylinder using mechanisms known to a professional.
Remote management of the key's access rights enables an enhanced level of security as compared to known systems. Essentially, in the event keys are lost or stolen, it is possible to disrupt—by making an urgent call or by sending a remotely transmissible code—access rights for the lost or stolen key. Then that key could no longer be used. At any time, it is also possible—by updating the access rights—to disrupt all of the key's authorizations.
However, in the event the means of communication includes a GSM or GPS-type positioning system, the lost or stolen key can easily be recovered.
In addition, the log of operations performed by the key can be viewed thanks to the means of remote communication embedded in the key. In effect, any and all openings of cylinders, any and all changes of position, and any and all changes to permissions can be recorded on the server (7). In this way, all events associated with the key can be “tracked” by the server in order to create a user log or as a means of proof used in legal disputes.
The foregoing description of the invention is provided as an example. It is understood that a professional is in a position to create different variations of the invention without exceeding the scope of the patent.

## Claims

1. A method of using an electronic key for access to one or more mechatronic locks, comprising said key moving from one geographical location to another, and said key:
(a) periodically transmitting its geographical location to an access management server so as to allow said server to identify location coordinates for said key, said key defined by its ID;
(b) receiving, and saving in said key's internal memory, an access profile from said server, said access profile based at least in part on said key's geographical location, and said access profile comprising a set of one or more mechatronic locks accessible to said key;
(c) causing said server to periodically update access profile information associated with said key once said key changes its geographical location; and
(d) if said key's new location causes a change in said access profile information, replacing in said key's internal memory said key's previous access profile with said key's new access profile in an irreversible manner.

2. The method of claim 1 further comprising using said key's internal clock function to determine times within which said set of locks are accessible to said key, said times based at least in part on said access profile stored in said key's internal memory.

3. The method of claim 1 further comprising using said key's internal global positioning function to determine said key's geographical location.

4. The method of claim 1 further comprising said key self-supervising its communications with said server by said key deactivating its access profile if said key no longer receives information from said server for a predetermined period of time, thereby preventing said key from accessing said set of one or more locks if said key is no longer sufficiently communicating with said server.

5. A method of using an electronic key for access to one or more mechatronic locks, comprising said key moving from one geographical location to another, and said key:
(a) receiving, and saving in said key's internal memory, an access profile from an access management server, said access profile comprising a time attribute, a set of authorizations, and a geographic attribute;
(b) processing said access profile so as to determine a time period and geographic zone of authorization within which said key may access a set of one or more mechatronic locks associated with said set of authorizations;
(c) periodically detecting its geographical location and current time parameters, comparing said detected geographical location and current time parameters with said time period and geographic zone of authorization associated with said access profile, and preventing said key from accessing said set of one or more locks associated with said set of authorizations if the detected location and current time of said key does not match said time period and geographic zone of authorization; and
(d) if said key's new location causes a change in said access profile information, replacing in said key's internal memory said key's previous access profile with said key's new access profile in an irreversible manner.

6. The method of claim 5 further comprising using said key's internal clock function to determine times within which said set of locks are accessible to said key, said times based at least in part on said access profile stored in said key's internal memory.

7. The method of claim 5 further comprising using said key's internal global positioning function to determine said key's geographical location.

8. The method of claim 5 further comprising said key self-supervising its communications with said server by said key deactivating its access profile if said key no longer receives information from said server for a predetermined period of time, thereby preventing said key from accessing said set of one or more locks if said key is no longer sufficiently communicating with said server.

9. A method of using an electronic key for access to one or more mechatronic locks, comprising said key moving from one geographical location to another, and said key:
(a) receiving, and saving in said key's internal memory, an access profile from an access management server, said access profile comprising a time attribute, a set of authorizations, and a geographic attribute;
(b) processing said access profile so as to determine a time period and geographic zone of authorization within which said key may access a set of one or more mechatronic locks associated with said set of authorizations;
(c) self-supervising its communications with said server by said key deactivating its access profile if said key no longer receives information from said server for a predetermined period of time, thereby preventing said key from accessing said set of one or more locks if said key is no longer sufficiently communicating with said server; and
(d) if said key's new location causes a change in said access profile information, replacing in said key's internal memory said key's previous access profile with said key's new access profile in an irreversible manner.

10. The method of claim 9 further comprising said key periodically detecting its geographical location and current time parameters, comparing said detected geographical location and current time parameter with said time period and geographic zone of authorization associated with said access profile, and preventing said key from accessing said set of one or more locks associated with said set of authorizations if the detected location and current time of said key does not match said time period and geographic zone of authorization.

11. The method of claim 9 further comprising using said key's internal clock function to determine times within which said set of locks are accessible to said key, said times based at least in part on said access profile stored in said key's internal memory.

12. The method of claim 9 further comprising using said key's internal global positioning function to determine said key's geographical location.