Abstract:
The invention relates to an electromechanical lock comprising: an electronic circuitry ( 142 ) for storing a challenge, providing a wireless interface ( 126 ) for a communication device ( 106 ) to read the challenge, receiving and storing a response from the communication device ( 106 ), and authenticating the response, and for issuing an open command provided that the authentication is successful, the circuitry ( 142 ) being configured to receive wirelessly from the communication device ( 106 ) operating power for communication with the communication device and to store the response. The lock comprises an actuator ( 124 ) to receive the open command and to set the lock in a mechanically openable state, and a user interface ( 108 ) configured to receive input from a user, the user interface activating operating power for the authenticating and opening operations.

Description:
FIELD 
       [0001]    The invention relates to electromechanical locks. 
       BACKGROUND 
       [0002]    Various types of electromechanical locks are replacing traditional mechanical locks. Electromechanical locks require an external supply of electric power, a battery inside the lock, a battery inside the key, or means for generating electric power within the lock making the lock user-powered. Electromechanical locks provide many benefits over traditional locks. They provide better security, and the control of keys or security tokens is easier. 
         [0003]    In addition, most electromechanical locks and/or keys and tokens are programmable. It is possible to program the lock to accept different keys and decline others. 
         [0004]    One problem associated with all kind of lock systems is the key or security token distribution. Keys and security tokens must be distributed to users. On the other hand, users may have several keys and security tokens at their disposal which may lead to burdensome handling of the keys and tokens. 
       BRIEF DESCRIPTION 
       [0005]    According to an aspect of the present invention, there is provided an electromechanical lock comprising: an electronic circuitry for storing a challenge, providing a wireless interface for a communication device to read the challenge, receiving and storing a response from the communication device, and authenticating the response, and for issuing an open command provided that the authentication is successful, the circuitry being configured to receive wirelessly from the communication device operating power for communication with the communication device and to store the response, an actuator to receive the open command, and to set the lock in a mechanically openable state, a user interface configured to receive input from a user, and a generator configured to generate operating power from the input for the authenticating and actuator operations. 
         [0006]    According to another aspect of the present invention, there is provided a method for operating an electromechanical lock, comprising: storing a challenge in an electronic circuitry; receiving wirelessly from a communication device operating power for providing a wireless interface for the communication device to read the challenge and receiving and storing a response from the communication device; and receiving with the user interface of the lock input from a user, generating from the input the operating power for authenticating the response; issuing an open command provided that the authentication is successful and setting the lock in a mechanically openable state in response to the open command. 
         [0007]    According to yet another aspect of the present invention, there is provided a computer program product encoding a computer program of instructions for executing a computer process carrying out the steps of: storing a challenge in an electronic circuitry; receiving a Near Field Communication query from a communication device; providing a wireless interface providing an interface for a communication device to read the challenge using Near Field Communication; receiving a response from the communication device using Near Field Communication, storing and authenticating the response; and issuing an open command provided that the authentication is successful. 
         [0008]    The invention has several advantages. The described electronic lock and key system and wireless solutions minimize energy consumption in a wireless lock, enabling self-powered lock solutions. 
         [0009]    In an embodiment of the invention, an electronic wireless key is utilized for wirelessly opening an electronic wireless lock. The key is carried by a person as a part of his wireless communication device and it may be provided with a Near Field Communications (NFC) device. 
         [0010]    Embodiments of the invention may be applied to electromechanical locks having an external power supply, a battery inside the lock or inside the key or user-powered electromechanical locks. 
     
    
     
       LIST OF DRAWINGS 
         [0011]    Embodiments of the present invention are described below, by way of example only, with reference to the accompanying drawings, in which 
           [0012]      FIG. 1A  illustrates an embodiment of an electronic authentication system; 
           [0013]      FIG. 1B  illustrates an embodiment of a self-powered electronic locking system; 
           [0014]      FIG. 2  illustrates an embodiment of a communication unit; 
           [0015]      FIGS. 3A ,  3 B and  3 C are flowcharts illustrating embodiments; and 
           [0016]      FIGS. 4A ,  4 B, and  4 C illustrate embodiments of an electronic locking system. 
       
    
    
     DESCRIPTION OF EMBODIMENTS 
       [0017]    The following embodiments are exemplary. Although the specification may refer to “an”, “one”, or “some” embodiment(s) in several locations, this does not necessarily mean that each such reference is to the same embodiment(s), or that the feature only applies to a single embodiment. Single features of different embodiments may also be combined to provide other embodiments. 
         [0018]    In an embodiment of the invention, an electronic key is utilized for wirelessly opening an electromechanical wireless lock. The key may be carried by a person as a part of his wireless communication device.  FIG. 1A  shows an embodiment of an electronic locking system. A user  105  is about to open a door  115 . The user has a communication device  106 . 
         [0019]    The communication device  106  refers to a portable computing device. Such computing devices include wireless mobile communication devices operating with or without a subscriber identification module (SIM), including, but not limited to, the following types of devices: mobile phone, smartphone, personal digital assistant (PDA), handset. The communication device  106  may have a wireless network channel  104  connection to a wireless network  102 . The wireless connection channel  104  and the wireless network  102  may be implemented according to the GSM (Global System for Mobile Communications), WCDMA (Wideband Code Division Multiple Access), WLAN (Wireless Local Area Network) or any other suitable standard/non-standard wireless communication means. 
         [0020]    In an embodiment, the communication device  106  comprises a Subscriber Identity Module (SIM) or a Universal Integrated Circuit Card (UICC). The SIM and the UICC are used in mobile communication systems to identify subscribers. Each communication device of a given system comprises such an identification. The SIM and the UICC comprise an integrated circuit capable of performing computations and storing data. 
         [0021]    The communication device  106  is equipped with a short-range wireless communication unit configured to communicate with other respective short-range units upon detecting such a unit. 
         [0022]    In an embodiment, short-range wireless communication is realised with a Near Field Communication (NEC) technique. NFC is a standardized wireless communication technique designed for data exchange between devices over short distances. A typical working distance is about 0 to 20 centimeters. NFC uses a given frequency (13.56 MHz). NFC transceivers may be active, semi-passive or passive. 
         [0023]    Active transceivers comprise a power source which is used to power the transceiver components and the transmission. Passive transceivers comprise do not comprise a power supply. They receive the operating power wirelessly from a magnetic field generated by a nearby NFC transmission. Thus, they are active only when an active transceiver transmits within the coverage area of the transceiver. Passive transceivers do not consume power when they are in an idle state. Typically, passive transceivers are RFID (Radio-frequency identification) tags which comprise a memory circuit and a passive transmitter which is configured to respond to an NFC transmission query. Semi-passive transceivers comprise a power supply but the power supply is used to power a microchip of the transceiver but not to broadcast a signal. To transmit a semi-passive device needs to be powered by an active transceiver. 
         [0024]    The door  115  comprises an electromechanical lock  116 . The lock comprises a lock interface  108 , a lock antenna  112  and a lock bolt  114 . The lock antenna  112  is connected to an electronic circuitry of the lock (not shown in  FIG. 1A ). The circuitry comprises a short-range communication device. The device may be an NFC transceiver. In an embodiment, the NFC transceiver of the lock is a passive transceiver. 
         [0025]    When the user approaches the door he wishes to open, he brings the communication device  106  close to the lock antenna  112 . The electronic circuitry of the lock is powered by the short-range transmission of the communication device and a transaction is initiated. The communication device reads an authentication challenge from the electronic circuitry of the lock. The communication device  106  computes a response and transmits the response to the electronic circuitry of the lock. Next, the user operates the user interface  108  of the lock. The operating may comprise turning a doorknob or inserting a physical key into the lock. The operation activates the lock and provides operating power for the lock to perform the authentication. In the authentication, the lock authenticates the response. In an embodiment, the response is authenticated against the challenge. If the authentication succeeds the lock is set to an openable state and allows the user to operate the lock bolt. 
         [0026]    In the above-described embodiment, the physical key does not perform any authentication but provides the activation of the operating power of the lock. In some embodiments, the key may provide some additional authentication. 
         [0027]    In an embodiment, the communication device  106  signals the challenge read from the electronic circuitry of the lock to an authentication service  100  using the wireless network channel  104 . The authentication service  100  may calculate the response and transmit it to the communication device  106 . 
         [0028]    In an embodiment, the authentication service may record an audit trail of actions related to the locks of the lock systems. Thus, each attempt to open a lock may be viewed later. In addition, the authentication service may utilize a time-limited access rights management. In an embodiment, the lock may store each action in an audit trail. The authentication service may be realized with one or more computers, servers or computing equipment and associated software. 
         [0029]    Any suitable authentication technique may be used in connection with the embodiments of the present invention. The selection of the authentication technique depends on the desired security level of the lock  106  and possibly also on the permitted consumption of electricity for the authentication (especially in user-powered electromechanical locks) 
         [0030]    In an embodiment, the authentication is performed with a SHA-1 (Secure Hash Algorithm) function, designed by the National Security Agency (NSA). In SHA-1, a condensed digital representation (known as a message digest) is computed from a given input data sequence (known as the message). The message digest is to a high degree of probability unique for the message. SHA-1 is called “secure” because, for a given algorithm, it is computationally infeasible to find a message that corresponds to a given message digest, or to find two different messages that produce the same message digest. Any change to a message will, with a very high probability, result in a different message digest. If the security needs to be increased, other hash functions (SHA-224, SHA-256, SHA-384 and SHA-512) in the SHA family, each with longer digests, collectively known as SHA-2 may be used. 
         [0031]    In an embodiment, the challenge comprises a lock system id, a lock id, access data and a check value. The lock system id identifies the lock system to which the lock belongs. The lock id identifies the lock in the lock system. Each lock in a lock system may comprise a unique identification. The access data may be random numeric data. The check value is a cyclic redundancy check value confirming the integrity of the challenge. 
         [0032]    In an embodiment, the authentication service or the communication device calculating the response may determine on the basis of the response whether the authentication will succeed or not. The communication device  106  may inform the user whether the authentication will succeed or not. 
         [0033]    In an embodiment, a Personal Identification Number (PIN) or finger print data of the user of the communication device may be used when generating a response for the challenge. The communication device may comprise a finger print data reader configured to read a finger print and generate a numeric presentation on the basis of the finger print. 
         [0034]    The challenge may comprise a PIN or finger print query. The user of the communication device may type in the PIN or use the finger print data reader of the communication device. The communication device is configured to send the PIN or the numeric presentation of the finger print as a response to the challenge. The lock may be configured to store a set of PINs and finger prints which allow the opening of the lock. The electronic circuitry of the lock compares the response to the stored values and if a match is found, the authentication is deemed to be successful. 
         [0035]      FIG. 1B  shows a more detailed example of an electromechanical lock  116  and a communication device  106 . The communication device comprises a short-range communication unit  140 . In an embodiment, the short-range communication unit  140  is an NFC transceiver of active type. The communication device  106  may comprise a wireless transceiver  107  for realising a wireless network channel connection to a wireless network, such as a GSM network, a WCDMA network or a WLAN network or any other suitable standard/non-standard wireless communication network. 
         [0036]    The lock  116  comprises an electric circuitry  142 . The lock further comprises a user interface  108  and a generator  122  which is configured to power the lock  116  when the user interface of the lock is operated. 
         [0037]    The electronic circuitry  142  may be implemented as one or more integrated circuits, such as application-specific integrated circuits ASIC. Other embodiments are also feasible, such as a circuit built of separate logic components, or memory units and one or more processors with software. A hybrid of these different embodiments is also feasible. When selecting the method of implementation, a person skilled in the art will consider the requirements set on the power consumption of the device, production costs, and production volumes, for example. The electronic circuitry  142  may be configured to execute computer program instructions for executing computer processes. 
         [0038]    In the embodiment of  FIG. 1B , the electronic circuitry  142  is realized with two circuits. The circuitry comprises a communication unit  128  and a lock electronics circuit  120  which are connected to each other with a communication channel  118 . In an embodiment, the lock electronics circuit  120  is realized with a microcontroller and a memory unit. 
         [0039]    The lock further comprises an antenna  112  connected to the communication unit  126 . In an embodiment, the communication unit  126  is an NFC transceiver of passive type. 
         [0040]    The lock further comprises an actuator  124  which controls a lock bolt  114 . After a successful authentication the actuator  124  is configured to set the lock in a mechanically openable state. The actuator may be powered by electric power produced with the generator  108 . The actuator  110  may be set to a locked state mechanically, but a detailed discussion thereon is not necessary to illuminate the present embodiments. 
         [0041]    When the actuator  124  has set the lock in a mechanically openable state, the bolt mechanism  114  can be moved by operating the user interface  108 , for example. Other suitable operating mechanisms may be used as well. 
         [0042]      FIG. 2  illustrates an embodiment of the communication unit  126 . It may consist of a communication interface  200  between the antenna  112  and two memory units  202 ,  204 . The communication interface  200  with memory units  202 ,  204  may be an NFC transceiver of a passive type. When the antenna  112  is within the operating range of an active NFC device (for example the communication device  106  of  FIGS. 1A and 1B ) the communication unit  126  is powered through the antenna  112  by the magnetic field generated by the active NFC device. The memory unit  202  is configured to store an authentication challenge and the memory unit  204  is configured to store an authentication response. The active NFC device powers the communication interface  200  with memories  202 ,  204 , reads the challenge wirelessly from the memory unit  202  and stores the response wirelessly in the memory unit  204 . 
         [0043]    When the user interface of the lock is operated the communication unit  126  is powered by the generator  122  of  FIG. 1B  through the interface  206  using the communication channel  118 . The lock electronics  120  read the response from the memory  204  and write a new challenge to the memory unit  202 . 
         [0044]    The memory unit  202  may be permanent memory realized with Flash or EEPROM technology, for example. The memory unit  204  may be non-permanent memory realized with RAM or DRAM technology, for example. The communication unit  126  is configured to store a response in the memory unit  204  only for a predetermined time; otherwise a security risk occurs if a lock is not operated after writing the response. The communication interface  206  illustrates an example of a communication interface between the memory units  202 ,  204  and the lock electronics  120 . A read operation of the memory unit  204  and write operation of the memory unit  202  are powered by the lock when operated. 
         [0045]      FIGS. 3A to 3C  are flowcharts illustrating embodiments of the invention. Here it is assumed that by default the electromechanical lock  116  of the door  115  is in a locked state and it remains in the locked state until set to an openable state. 
         [0046]      FIGS. 3A and 3B  illustrate embodiments from the point of view of the communication device  106 . 
         [0047]    The opening sequence starts is step  300 . 
         [0048]    in step  302 , the user of the communication device  106  initiates the communication device. This may comprise switching the NFC transceiver of the communication device on. The communication device is placed so that the lock antenna is within the coverage area of the NFC transceiver of the communication device. For example, the user may touch the lock antenna with the communication device. 
         [0049]    In step  304 , the communication device  106  transmits an NFC query to the lock. 
         [0050]    In step  306 , the communication device receives the current challenge sent by the lock. 
         [0051]    In step  308  of  FIG. 3A , the communication device  106  computes a response. In an embodiment, the response is computed by the processing unit of the communication device  106 . In an embodiment, the response is computed in a Subscriber Identity Module (SIM) or a Universal Integrated Circuit Card (UICC) located in the communication device  106 . 
         [0052]      FIG. 3B  illustrates another embodiment, where the communication device  106  transmits the challenge to the authentication service  100  in step  320 . 
         [0053]    In step  322  of  FIG. 3B , the authentication service  100  computes a response to the challenge and sends it to the communication device  106 . This embodiment enables a time-limited access rights management and audit trail recording to the authentication service  100 . From thereon, the process continues as in  FIG. 3A  in the following manner. 
         [0054]    In step  310 , the communication device  106  transmits the response to the communication unit of the lock  116 . 
         [0055]      FIG. 3C  illustrates embodiments from the point of view of the electromechanical lock  116 . 
         [0056]    The opening sequence starts is step  330 . 
         [0057]    In step  332 , the communication unit  126  is powered by the transmission of the communication device  106  and the unit receives a query from the communication device. 
         [0058]    In step  334 , the current challenge is read from the memory  202  and transmitted from the interface  200  to the communication device using the antenna  112 . 
         [0059]    In step  336 , the interface  200  of the communication unit receives a response from the communication device  106 . The interface stores the response in the memory  204 . The memory  204  is configured to store the response for a predetermined time period. 
         [0060]    The above operations in the communication unit  126  are powered by the NFC transmission of the communication device. 
         [0061]    In step  338 , the lock receives a user input from the user interface of the lock. The input activates power for the rest of the opening sequence operations. 
         [0062]    In step  340 , a lock electronics circuit  120  reads the current challenge from its internal memory where it is stored. 
         [0063]    In step  342 , the lock electronics circuit  120  computes a new challenge and stores it in its internal memory and in the memory  202  via the channel  118  and the interface  206 . 
         [0064]    In step  344 , the lock electronics circuit  120  roads the response from the memory  204  via the channel  118  and the interface  206 . 
         [0065]    In step  346 , the lock electronics circuit  120  authenticates the response. In an embodiment, the lock electronics circuit  120  authenticates response against the challenge. 
         [0066]    In step  348  it is checked whether the authentication was successful. 
         [0067]    If it was, the lock electronics circuit  120  sends an open command to the actuator  124  of the lock in step  350 . The actuator  124  sets the lock into an openable state. 
         [0068]    If the authentication failed, the lock electronics circuit  120  does not send an open command to the actuator  124  of the lock in step  352  and the lock remains in a locked state. 
         [0069]    Above, step  338  comprised the activation of power for the lock on the basis of the input from the user. The input operations on the user interface may comprise turning a doorknob or inserting a physical key into the lock. The operation activates the lock and provides operating power for the lock to perform authentication. 
         [0070]    In embodiments utilising the lock structure of  FIG. 1B , the operating of the user interface  108  of the lock enables the generator to power the lock  116 . The generator may generate electricity from the turning of a door knob or a key insertion. 
         [0071]      FIGS. 4A ,  4 B, and  4 C illustrate examples of other embodiments of an electronic locking system. 
         [0072]    In the example of  FIG. 4A , the lock antenna  112  is embedded in the door knob  108 . In this embodiment, the door opening sequence may comprise the following steps. At first, a user touches the knob  108  by a communication device  106 . In the second phase, the knob  108  is turned by the user  105  to activate power for authentication and set the lock  116  to an openable state. In the third phase, turning the knob  108  operates the bolt  114 . In addition, a lever type operation interface can be used instead of a bolt structure. The user experiences the second and the third phase as one continuous turn of the knob. 
         [0073]    In the example of  FIG. 4B , the lock antenna  112  is located on the door and a key  134  is used for operating a lock  116 . The user interface of the lock comprises a keyhole  144 . In this embodiment the door opening sequence may comprise the following steps. At first, a user touches the antenna  112  with the communication device  106 . In the second phase, the key  134  is inserted into the keyhole  114  of the lock  116  to activate power for authentication and set the lock  116  to an openable state. In the third phase, the turning of the key  134  operates the bolt  114 . 
         [0074]    The example of  FIG. 4C  illustrates a lock  116 , which is a combination of the lock structures of  FIGS. 4A and 4B . The lock of  FIG. 4C  may have different operation modes. In an embodiment, the lock  116  authenticates both the key  134  and the response received from the communication device  106 . The lock is set into an openable state if both authentications are successful. 
         [0075]    In another embodiment, the lock  116  authenticates the response received from the communication device  106 . The key  134  is only used to operate the lock mechanism. 
         [0076]    In another embodiment, the lock operation may be different for different users. Some users use the key  134  for authentication. Some users (temporary users, for example) use the communication device  106  for authentication and open the lock  116  by turning the knob  108 . 
         [0077]    In an embodiment, features of the invention are realized as software. Embodiments may be realized as a computer program product encoding a computer program of instructions for executing a computer process carrying out the above described steps for operating an electromechanical lock. 
         [0078]    It will be obvious to a person skilled in the art that, as technology advances, the inventive concept can be implemented in various ways. The invention and its embodiments are not limited to the examples described above but may vary within the scope of the claims.