Source: http://patents.com/us-9594889.html
Timestamp: 2017-04-28 20:01:27
Document Index: 161302609

Matched Legal Cases: ['Application No. 2006343377', 'Application No. 2', 'Application No. 2', 'Application No. 06758515', 'Application No. 07113279', 'Application No. 2007203452', 'Application No. 2', 'Application No. 2007203452', 'Application No. 2']

US Patent # 9,594,889. System and method for remotely assigning and revoking access credentials
using a near field communication equipped mobile phone - Patents.com
United States Patent 9,594,889
System and method for remotely assigning and revoking access credentials
using a near field communication equipped mobile phone
The present invention is generally directed toward a mobile device that
can be used in a secure access system. More specifically, the mobile
device can have credential data loaded thereon remotely updated, enabled,
disabled, revoked, or otherwise altered with a message sent from, for
example, a control panel and/or controller in the system.
Inventors: Lowe; Peter R. (Peyton, CO) Applicant: Name City State Country Type Assa Abloy AB Stockholm N/A SE Assignee:
1000002459416
14/674,085
Prior Publication Data Document IdentifierPublication Date US 20150223066 A1Aug 6, 2015 Related U.S. Patent Documents Application NumberFiling DatePatent NumberIssue Date 13404915Feb 24, 2012 12628574Apr 3, 20128150374 11397542Apr 27, 20107706778 60668828Apr 5, 2005 Current U.S. Class: 1/1 Current CPC Class: G06F 21/31 (20130101); G06F 21/45 (20130101); H04L 63/0492 (20130101); H04L 63/062 (20130101); H04L 63/068 (20130101); H04L 63/08 (20130101); H04L 63/0853 (20130101); H04L 63/10 (20130101); H04W 4/008 (20130101); H04W 4/023 (20130101); H04W 12/04 (20130101); H04W 12/06 (20130101); H04W 12/08 (20130101); H04W 48/04 (20130101); H04W 88/02 (20130101); G07C 9/00007 (20130101)
Current International Class: H04M 1/66 (20060101); H04L 29/06 (20060101); G06F 21/31 (20130101); H04W 4/00 (20090101); H04W 48/04 (20090101); H04W 4/02 (20090101); H04W 12/08 (20090101); H04W 12/06 (20090101); G06F 21/45 (20130101); H04W 88/02 (20090101); H04W 12/04 (20090101); G07C 9/00 (20060101)
Field of Search: ;455/445,415,411,414.1,403,461,88 ;370/352 ;726/5,4 ;235/492,382 ;340/5.73,5.6,5.54,994
7197767
7380279
Radicella et al.
7822989
Karkas et al.
2003/0151493
2003/0160681
2003/0179073
2003/0189096
2003/0190887
2003/0216143
2004/0017929
Bramblet et al.
2004/0083212
2004/0117617
2004/0130437
2004/0153767
2004/0167881
2004/0229560
2005/0033962
2005/0055562
2005/0055567
2005/0174214
2005/0178833
2005/0198318
2005/0271250
2006/0164235
2006/0167871
2006/0182661
2006/0224901
2007/0067400
2007/0200665
2008/0107269
2008/0163361
2008/0211620
2009/0183541
Sadighi et al.
2010/0042954
2010/0077466
2010/0106773
Tsutazawa et al.
2010/0245033
2010/0287568
2011/0093928
2011/0187493
Elfstrom et al.
2012/0036575
2012/0114122
2012/0157058
2012/0278901
2013/0093563
2014/0013418
2014/0025408
2014/0123317
Sughihara
2015/0109098
2015/0213247
2015/0213248
2015/0215322
2015/0220711
2015/0220721
2015/0220722
2015/0222613
2015/0222622
2015/0222623
2015/0223067
2015/0288464
0829828
2002-129792
10-2004-032311
WO 02/096070
WO 03/081934
WO 2004/025545
WO 2004/114190
WO 2005/024549
WO 2005/038728
WO 2005/091516
WO 2005/096651
WO 2007/126375
WO 2007/139909
WO 2008/024162
WO 2008/024320
WO 2008/035115
WO 2008/042302
Other References Petition for Ineter Partes Review of U.S. Pat. No. 7,706,778, filed Jun. 18, 2015 64 pages. cited by applicant
.Joint Claim Construction Statement for Case No. SACV-14-00947-CJC (DFMx), Exhibit A of Petition for Inter Partes Review of U.S. Pat. No. 7,706,778, filed Jun. 18, 2015, 21 pages. cited by applicant
.Declaration of Bruce Schneier in Support of Request for Inter Partes Review of the '778 Patent, dated Jun. 17, 2015, 77 pages. cited by applicant
.Petition for Ineter Partes Review of U.S. Pat. No. 8,150,374, filed Jun. 18, 2015 64 pages. cited by applicant
.Declaration of Bruce Schneier in Support of Request for Inter Partes Review of the '374 Patent, dated Jun. 17, 2015, 134 pages. cited by applicant
.U.S. Appl. No. 13/404,915, filed Feb. 24, 2012. cited by applicant
.U.S. Appl. No. 14/674,094, filed Mar. 31, 2015. cited by applicant
.U.S. Appl. No. 14/674,109, filed Mar. 31, 2015. cited by applicant
.U.S. Appl. No. 14/674,125, filed Mar. 31, 2015. cited by applicant
.U.S. Appl. No. 14/674,167, filed Mar. 31, 2015. cited by applicant
.U.S. Appl. No. 14/674,175, filed Mar. 31, 2015. cited by applicant
.U.S. Appl. No. 14/017,065 filed Sep. 3, 2013. cited by applicant
.U.S. Appl. No. 14/668,464, filed Mar. 25, 2015. cited by applicant
.U.S. Appl. No. 14/668,494, filed Mar. 25, 2015. cited by applicant
.U.S. Appl. No. 14/668,507, filed Mar. 25, 2015. cited by applicant
.U.S. Appl. No. 14/668,517, filed Mar. 25, 2015. cited by applicant
.U.S. Appl. No. 14/668,531, filed Mar. 25, 2015. cited by applicant
.U.S. Appl. No. 13/266,929, filed Jan. 9, 2012. cited by applicant
.U.S. Appl. No. 14/668,464, filed Mar. 25, 2015, Davis et al. cited by applicant
.U.S. Appl. No. 14/668,494, filed Mar. 25, 2015, Davis et al. cited by applicant
.U.S. Appl. No. 14/668,507, filed Mar. 25, 2015, Davis et al. cited by applicant
.U.S. Appl. No. 14/668,517, filed Mar. 25, 2015, Davis et al. cited by applicant
.U.S. Appl. No. 14/668,531, filed Mar. 25, 2015, Davis et al. cited by applicant
.U.S. Appl. No. 14/674,094, filed Mar. 31, 2015, Lowe. cited by applicant
.U.S. Appl. No. 14/674,109, filed Mar. 31, 2015, Lowe. cited by applicant
.U.S. Appl. No. 14/674,125, filed Mar. 31, 2015, Lowe. cited by applicant
.U.S. Appl. No. 14/674,167, filed Mar. 31, 2015, Lowe. cited by applicant
.U.S. Appl. No. 14/674,175, filed Mar. 31, 2015, Lowe. cited by applicant
.Esato--"Nokia Launches NFC Shell for Mobile Payments" http://www.esato.com/news/article.php/id=436 (Feb. 25, 2005) (3 pages). cited by applicant
.Indala--"Product Families" www.indala.com/products/index.html (Copyright 2004) (2 pages). cited by applicant
.NFC Forum--"About Near Field Communication" http://www.nfc-forum.org/aboutnfc/ (Copyright 2005) (3 pages). cited by applicant
.Nokia--"Use Cases" http://www.nokia.com (Copyright 2005) (2 pages). cited by applicant
.Phillips Semiconductoers--"Near Field Communication PN511-Transmision module." (Feb. 2004) (18 pages). cited by applicant
.International Search Report for International (PCT) Patent Application No. PCT/US06/15304, mailed Jun. 11, 2008. cited by applicant
.Written Opinion for International (PCT) Patent Application No. PCT/US06/15304, mailed Jun. 11, 2008. cited by applicant
.Official Action for Australian Patent Application No. 2006343377, dated Jun. 3, 2010. cited by applicant
.Official Action for Canadian Patent Application No. 2,647,713 dated Nov. 20, 2012, 2 pages. cited by applicant
.Official Action for U.S. Appl. No. 11/397,542, mailed Oct. 28, 2008. cited by applicant
.Official Action for U.S. Appl. No. 11/397,542, mailed Mar. 31, 2009. cited by applicant
.Official Action for U.S. Appl. No. 11/397,542, mailed Sep. 14, 2009. cited by applicant
.Notice of Allowance for U.S. Appl. No. 11/397,542, mailed Feb. 18, 2010. cited by applicant
.Official Action for U.S. Appl. No. 12/628,574, mailed May 26, 2011. cited by applicant
.Notice of Allowance for U.S. Appl. No. 12/628,574, mailed Nov. 15, 2011 12 pages. cited by applicant
.Official Action for U.S. Appl. No. 13/404,915, mailed Jun. 4, 2012 11 pages. cited by applicant
.Official Action for U.S. Appl. No. 13/404,915, mailed Dec. 3, 2012 16 pages. cited by applicant
.Official Action for U.S. Appl. No. 13/404,915, mailed Jun. 14, 2013 9 pages. cited by applicant
.Examiner's Answer for U.S. Appl. No. 13/404,915, mailed Feb. 7, 2014 19 pages. cited by applicant
.Notice of Allowance for Canadian Patent Application No. 2,647,713 dated Jul. 8, 2013, 1 pages. cited by applicant
.Official Action for U.S. Appl. No. 14/674,125, mailed May 22, 2015 9 pages. cited by applicant
.Official Action for U.S. Appl. No. 14/674,167, mailed Jun. 5, 2015 11 pages. cited by applicant
.Official Action for U.S. Appl. No. 14/017,065, mailed Sep. 30, 2014 17 pages. cited by applicant
.U.S. Appl. No. 14/674,085, filed Mar. 31, 2015, Lowe. cited by applicant
.U.S. Appl. No. 14/674,085, Mar. 31, 2015, Lowe. cited by applicant
.Extended Search Report for European Patent Application No. 06758515.8, dated Jul. 31, 2014, 5 pages. cited by applicant
.Extended Search Report for European Patent Application No. 07113279.9, dated Dec. 7, 2011 6 pages. cited by applicant
.Mjolsnes et al., "On-Line E-Wallet System with Decentralized Credential Keepers," Mobile Networks and Applications, 2003, 8:87-99. cited by applicant
.Notice of Allowance for Australia Patent Application No. 2007203452, dated Mar. 21, 2012 3 pages. cited by applicant
.Notice of Allowance for Canada Patent Application No. 2,596,561, dated Jun. 30, 2014 1 page. cited by applicant
.Notice of Allowance for U.S. Appl. No. 11/778,145, mailed Sep. 20, 2011 10 pages. cited by applicant
.Notice of Allowance for U.S. Appl. No. 13/274,863, mailed Jul. 25, 2013 7 pages. cited by applicant
.Official Action for Australia Patent Application No. 2007203452, dated May 19, 2011 2 pages. cited by applicant
.Official Action for Canada Patent Application No. 2,596,561, mailed Mar. 13, 2013 3 pages. cited by applicant
.Official Action for U.S. Appl. No. 11/778,145, mailed Nov. 18, 2010 20 pages. cited by applicant
.Official Action for U.S. Appl. No. 14/017, 065, mailed Apr. 17, 2015 21 pages. cited by applicant
.Official Action for U.S. Appl. No. 14/017,065, mailed Sep. 30 2014 17 pages. cited by applicant
.Official Action for U.S. Appl. No. 13/274,863, mailed Apr. 12, 2013 6 pages. cited by applicant
.Official Action for U.S. Appl. No. 13/274,863, mailed Aug. 6, 2012 26 pages. cited by applicant. Primary Examiner: Doan; Kiet
No. 13/404,915, filed Feb. 24, 2012, which is a continuation of U.S.
patent application Ser. No. 12/628,574, filed Dec. 1, 2009, now U.S. Pat.
No. 8,150,374, which is a continuation of U.S. patent application Ser.
No. 11/397,542, filed Apr. 3, 2006, now U.S. Pat. No. 7,706,778, which
60/668,828, filed Apr. 5, 2005, the entire disclosures of which are
Claims What is claimed is: 1. A method of controlling physical access to a secure asset, comprising: detecting a change in access rights to the secure asset associated with a mobile device, the mobile
device storing credential information including a first expiration date; determining a first location of the mobile device; based upon the determined first location, wirelessly transmitting a credential information update to the mobile device, the
credential information update including a second expiration date that is different from the first expiration date; receiving an authentication request related to the credential information update while the mobile device resides in a second location that
is different from the first location, the authentication request comprising data stored at a reader of a physical access control system associated with a physical access point of the secure asset; and executing an access control decision with respect to
the reader based on data included in the authentication request.
7. The method of claim 1, wherein detecting the change in access rights to the secure asset comprises detecting an operation corresponding to existing credential information stored at the mobile device, and wherein the credential information
update is based on detecting the operation corresponding to the existing credential information.
11. A method of controlling physical access to a secure asset, comprising: detecting, by a server, a change in access rights to the secure asset associated with a mobile device, the mobile device storing credential information including a first
expiration date; determining, by the server, a first location of the mobile device; transmitting a credential information update from the server to the mobile device, the credential information update including a second expiration date that is
different from the first expiration date; receiving, at the mobile device from a reader of a physical access control system associated with a physical access point of the secure asset, an authentication request related to the credential information
update while the mobile device resides in a second location that is different from the first location, the second location being within a radio frequency (RF) communication range of the reader and the authentication request comprising data stored at the
reader; and executing, by the mobile device, an access control decision with respect to the reader based on one or more of: the credential information update or data included in the authentication request.
12. The method of claim 11, further comprising, executing the access control decision at least in part upon determining that the mobile device is in the second location.
15. A mobile device, comprising: a receiver; a transmitter; and a processor operable to perform operations comprising: transmitting, using the transmitter, a first location of the mobile device to a server; receiving, using the receiver, a
credential information update corresponding to credential information stored at the mobile device, the credential information update including a second expiration date that is different from a first expiration date included in the stored credential
information, and wherein the credential information update is received from the server based on detecting a change in access rights to a secure asset associated with the mobile device receiving, using the receiver, an authentication request related to
the credential information update while the mobile device resides in a second location that is different from the first location, the authentication request comprising data stored at a reader of a physical access control system associated with a physical
access point of the secure asset; and executing an access control decision with respect to the reader based on data included in the authentication request.
16. The mobile device of claim 15, wherein: the processor is operable to execute the access control decision at least in part based on the credential information update.
19. The mobile device of claim 15, wherein: the processor is operable to make a credential update decision by determining at least in part that the mobile device is in the first location; and the transmitter is operable to transmit a
credential update request.
20. The mobile device of claim 15, wherein, the processor is operable to analyze location information and determine whether the mobile device is in the first location by determining that the receiver received the location information while
being within a radio reception area.
23. An apparatus for controlling physical access to a secure asset, comprising: one or more processors; and a storage medium storing instructions that, when executed, are configured to cause the one or more processors to perform operations
comprising: detecting a change in access rights to the secure asset associated with a mobile device, the mobile device storing credential information including a first expiration date; determining a first location of the mobile device; wirelessly
transmitting a credential information update to the mobile device, the credential information update including a second expiration date that is different from the first expiration date; receiving an authentication request related to the credential
information update while the mobile device resides in a second location that is different from the first location, the authentication request comprising data stored at a reader of a physical access control system associated with a physical access point
of the secure asset; and executing an access control decision with respect to the reader based on data included in the authentication request.
24. A system for controlling physical access to a secure asset, comprising: a mobile device that is configured to store credential information including a first expiration date; a reader of a physical access control system associated with a
physical access point of the secure asset; and a server that is wirelessly communicable with the mobile device, wherein the server is operable to perform operations comprising: detecting a change in access rights to the secure asset associated with the
mobile device; determining a first location of the mobile device; and transmitting a credential information update to the mobile device, the credential information update including a second expiration date that is different from the first expiration
date; and wherein the mobile device is operable to perform operations comprising: receiving, from the reader, an authentication request related to the credential information update while the mobile device resides in a second location that is different
from the first location, the second location being within a radio frequency (RF) communication range of the reader and the authentication request comprising data stored at the reader; and executing an access control decision with respect to the reader
based on one or more of: the credential information update or data included in the authentication request. Description FIELD OF THE INVENTION
The invention is directed generally to using mobile devices in an access control system. Specifically, a mobile device utilizing near field communications protocol (NFC) may be used for controlling access to assets, places, or things by having
access credentials remotely assigned and revoked.
Radio frequency IDs (RFIDs), like contactless smart cards, store credential information that can be used later to gain access to an asset. When presented to a reader/interrogator the smart card transmits the stored credential information for
verification by the reader/interrogator. The reader/interrogator processes the credential information and determines if the smart card being presented is a valid smart card. If the reader/interrogator determines that the credential information on the
smart card is valid then the reader/interrogator sends the initiates any number of actions allowing the holder of the smart card access to a particular asset.
NFC is a communication method that is showing great promise for communication between devices at short range. NFC may be regarded as the same protocol that is used by contactless smart cards working at 13.56 MHz. Several companies are in the
process of announcing mobile phones that incorporate an NFC chip. The communication protocol of a typical NFC chip can be seen for instance in Short Form Specification of the PN511-Transmission module, February 2004 from Philips Semiconductors, which is
The protocol used in NFC can vary depending on the mode that the chip and reader/interrogator are in. For example, if an active NFC mode is used, both a reader/interrogator and target are using their own radio frequency (RF) field to enable
communication between each other. A reader/interrogator is powered to generate an RF filed of a particular frequency, for instance at 13.56 MHz. The target has its own power supply for digital processing and communications. When the target receives a
communication from a reader/interrogator, the target uses its own power supply to generate another RF field to answer the reader/interrogator. Communications can occur back and forth between the reader/interrogator and target. Alternatively, if a
passive NFC mode is implemented, the target answers to a reader/interrogator command in a load modulation scheme. The target is not powered to generate its own RF field. Rather, the target uses energy from the RF created by the reader/interrogator to
create its RF field and reply to be sent back to the reader/interrogator.
If the NFC chip is coupled with a micro-processor, the chip may act like smart cards or the like where communication between a reader and card are performed to gain access to an asset. Typically a mobile phone includes a battery and the NFC
chip can be powered by that battery. If the chip derives power from the mobile phone battery, the NFC chip may communicate with an reader/interrogator according to the active protocol described above. Alternatively, the NFC chip can communicate with a
reader/interrogator in a passive mode. This will eliminate the need for the chip to be powered by the battery of a mobile phone, which may increase the life of the battery.
In most global system for mobile communication (GSM) devices, e.g., mobile phones, there is a Subscriber Identification Module (SIM) that is a secure memory containing all of the owner's account information, as well as space available for
additional applications such as an electronic purse for e-commerce. This memory is accessible from outside of the mobile device, i.e., remotely. Mobile devices carry a secure memory much like smart cards or the like and the new applications in NFC
protocols enable the mobile device to perform functions like smart cards. The ability to have a mobile device also operate as a smart card creates a variety of new applications for the device.
Typical smart cards are a small, usually credit card shaped, device that contains at least a memory device for storing information and a transceiver to communicate with a reader/interrogator. The reader/interrogator communicates through the
transceiver on the smart card to access the stored information. The reader/interrogator may simply read the information, load the information into the memory device or modify existing data in the memory device. For example, if the owner of a smart card
uses a smart card containing financial information to make a purchase, the reader/interrogator can read the information including the owner's identity and the availability of funds. The reader/interrogator can also deduct the purchase amount from the
available funds if it has writing capabilities. Further, the reader/interrogator can store transaction data on the smart card including the time and location of the transaction in addition to the identity of the reader/interrogator.
Smart cards have a variety of uses and can be utilized in any transaction that involves the exchange of data or information between individuals and an institution. For example, smart cards can be used to store information including medical
records, financial information, vehicle maintenance information, pet information, and a virtually limitless variety of other information traditionally printed on paper or plastic or stored on cards having a magnetic stripe or an optical bar code. Smart
card technology has been particularly useful in banking systems and other financial transaction systems. Furthermore, smart cards have been widely used in access control systems. For example, an reader/interrogator may control doors that provide access
to particular assets. The reader/interrogator only allows qualified individuals carrying smart cards, with proper credentials loaded thereon, access through control doors.
In a conventional access control system, the door reader/interrogators positioned at ingress/egress points are connected to a control panel. This control panel is kept up to date with the authorized codes corresponding to persons with
authorized access to the location. When activity occurs, the control panel is updated with the activity information. For example, if the activity related to access gained through a particular door, the door and potentially the person who gained access
are stored in the control panel log. Also, if the activity related to a financial transaction, the information relating to the transaction including amount and who performed the transaction are sent and stored at the control panel. There are, however,
circumstances in which control panels associated with remote locations that are not regularly updated. If a person's status changes from authorized to unauthorized, it might take a relatively long time for the control panel associated with a remote door
to get the message and bar the credential associated with this person from access. Furthermore, typical access control systems are limited in that control panels, either localized or central, are the only source that tracks, logs, and monitors the
activity associated with a given access point. When entries take place in these conventional access control systems, the information is sent to the control panel where it stays. If someone would like to be aware of activity associated with the access
control system they are usually required to physically go to the control panel itself.
It is thus one aspect of the present invention to provide a system and method that automatically updates credentials on a mobile device immediately after authorization changes have been made. In one embodiment, the system and method provides a
controller (e.g., a control panel, number of control panels, host computer, number of host computers, server, and the like), a plurality of readers, and a plurality of mobile devices. Each of the plurality of mobile devices has a memory associated with
them that stores credential information. The readers are typically associated with a particular asset (e.g., a door permitting access to a secure room, a computer permitting access to secure information, a lock permitting access to a safe, etc.). The
readers communicate with the mobile devices to determine if the credential information stored on the memory of the mobile device permits the person using the mobile device to access a particular asset. Credential information is verified at the reader
then transmitted to the controller in order to notify security personnel or the like about the activity that has just taken place at the reader. When credential information is changed at the controller (e.g., access rights for a particular user of a
mobile device have been partially or fully revoked, updated, enabled, augmented, added, etc.), that changed information is relayed to the mobile device via a communication network. The memory of the mobile device is then updated to reflect the change
that was logged at the controller.
As used herein, a "credential" or "credential information" is any data, set of data, encryption scheme, key, and/or transmission protocol used by a particular mobile device to verify its authenticity with a reader/interrogator.
In another embodiment of the present invention, a system and method for periodically updating and/or enabling the credentials of a mobile device and/or reader is provided. Specifically, the controller updates the credential information of a
mobile device on a predetermined periodic basis. Every predetermined period (e.g., every second, minute, hour, day, etc.) the credentials associated with one or a population of mobile devices is updated. At the same time, in one embodiment of the
invention, the information relating to the updated credentials is relayed to the readers so that when a valid mobile device is presented to a reader, the reader is aware of the updated credentials and can assess the validity of the mobile device
appropriately. Alternatively, or in addition to updating the mobile device credentials, the mobile devices may require a periodic enablement of their credentials in order to maintain their validity. For example, the credential information associated
with a particular mobile device may not change, but the information will be erased, expire, or the mobile device may not be allowed to transmit its credential information if it does not receive the periodic enablement messages from the controller. Therefore, when a user is no longer permitted access to a particular asset, the automatic enablement messages are not sent to his/her mobile device. If a user has had their credentials revoked or changed for whatever reason, they may attempt to shield
their mobile device from receiving any authorization disabling messages. By changing the logic of the mobile device such that the credentials periodically time out unless an enabling message is received from the control panel, attempts to maintain or
prolong authorized credentials by shielding mobile devices from a disabling message are thwarted.
In yet another embodiment of the present invention, a system and method for relaying information associated with activities detected at a reader or set of readers to a mobile device is provided. Rather than keeping a log of the activity
information only at the controller, selected mobile devices can receive the activity information from the controller. In a residential lock situation, the system can send a Short Message Service (SMS) message/signal or the like to the mobile device of
the homeowner. A homeowner at work may want to know when a child, housekeeper, or other person enters and exits their house. The selected mobile device could retrieve the message employing a number of other methods. For example, records of activities
at a particular reader can be logged at that reader. A mobile device authorized to recover the activity log could be presented to the reader and the log file could be transferred to and displayed on the mobile device. Likewise, the reader (or the
mobile device) could send the log file to a computer via email using various types of text messaging protocols.
These and other advantages will be apparent from the disclosure of the invention(s) contained herein. The above-described embodiments and configurations are neither complete nor exhaustive. As will be appreciated, other embodiments of the
invention are possible using, alone or in combination, one or more of the features set forth above or described in detail below. BRIEF DESCRIPTION OF THE DRAWINGS
The present invention is generally directed toward a system and method for using mobile communication devices as personal credential verification devices. Specifically, the present invention utilizes communication techniques and protocols to
automatically and remotely update credential information associated with one or a set of mobile devices.
FIG. 1 depicts an access network 100 used to verify the identity of at least one mobile device. In one embodiment of the present invention, the system 100 comprises a controller 102, a hub 104, a plurality of readers 108.sub.1-n, and a
plurality of mobile devices 112.sub.1-k such that n and k are integers wherein n and k are greater than or equal to one, and typically k is greater than n. The plurality of readers 108.sub.1-n may include readers 108 of the same type, as well as readers
of different types. For example, a subset of the plurality of readers 108.sub.1-n may be legacy readers (e.g. readers using older transmission protocols). Whereas another subset of the plurality of readers 108.sub.1-n may be newer readers utilizing
improved and/or more secure protocols.
In the depicted embodiment, the readers 108 are coupled to the controller 102 via the interconnecting hub 104 through interfaces 124 and 128. In an alternate embodiment, the readers 108 may be directly coupled to the respective inputs/outputs
of the controller 102 via interface 129. Interfaces 124 and 128 between the readers 108, the hub 104, and the controller 102 and interface 129 are generally bi-directional interfaces, which may selectively be implemented in a form of wired, wireless,
fiber-optic communication links, or combinations thereof. Even though the interfaces 124, 128, and 129 are depicted as bi-directional interfaces, one of skill in art can appreciate that the interfaces 124, 128, and 129 may be implemented as
unidirectional interfaces that use a unidirectional communication protocol, for example, the Wiegand protocol.
As can be appreciated by one of skill in the art, the interfaces 124, 128, and 129 may be implemented utilizing buses or other types of connections. For example, the I/O ports may be one or more of a USB port, parallel port, serial port, Small
Computer Systems Interface (SCSI) port, modem, Ethernet, and/or an RF interface. The protocols used to communicate between the controller 102 and the readers 108 may include one or more of the TCP/IP protocol, RS 232, RS 485, Current Loop, Power of
Ethernet (POE), Bluetooth, ZigBee, GSM, WiFi, and other communication methods and protocols known in the art.
Bi-directional RF interfaces 120 between a reader 108 and a mobile device 112 are automatically established when the mobile device 112 is placed within an active zone (not shown) of the interrogating reader 108. The active zone of the reader
108 is defined as a three dimensional space where the intensity of RF signals emitted by the reader exceeds a threshold of sensitivity of the mobile device 112 and the intensity of RF signals emitted by the mobile device 112 exceeds a threshold of
sensitivity of the reader 108. The interface 120 shown can be between one or a number of readers 108 and one or a number of mobile devices 11. Furthermore, the interface 120 may utilize known methods and protocols including NFC protocol, Infra Red
communication methods, Bluetooth, ZigBee, GSM, WiFi, and/or other protocols known to those of skill in the art.
The controller 102 may be a general-purpose computer adapted for multi-task data processing and suitable for use in various settings including, but not being limited to, business, commercial, residential, and industrial settings. Examples of
suitable types of controllers 102 include, but are not limited to, a control panel, a number of control panels, a host computer, a processor, a server, combinations thereof, and other controllers known to those of skill in the art. A memory of the
controller 102 comprises software program(s) containing a database of records for the access system 100. Alternatively, a database 130 may be separated from the controller 102 as depicted in FIG. 1. The database 130, whether integral to the controller
102, separate from the controller 102, or both, maintains records associated with the readers 108, mobile devices 112 and their respective holders or users, algorithm(s) for acquiring, decoding, verifying, and modifying data contained in the mobile
device, algorithm(s) for testing authenticity and validity of the mobile devices 112, and algorithm(s) for implementing the results of these tests. Specific configurations of the controller 102 are determined based on and compliant with computing and
interfacing capabilities of the readers 108 and/or the hub 104. As used herein, in reference to an individual or an object associated with a mobile device 112, the terms a "holder" and a "user" are used interchangeably.
Each reader 108 is adapted for exchanging information with the controller 102 and for requesting data from the mobile device 112 to verify the authenticity of the mobile device. Typically, a reader 108 is associated with a particular asset
(e.g., a door protecting access to a secure room, a computer lock protecting sensitive information or computer files, a lock on a safe, and the like). In one embodiment, upon verification of credential information stored on the mobile device 112, the
reader 108 generates signals facilitating execution of the results of interrogating the mobile device (e.g., engages/disengages a locking mechanism, allows/disallows movement of a monitored article, temporarily disables itself, activates an alarm system,
provides access to a computer system, provides access to a particular document, and the like). Alternatively, the controller 102 may generate such signals.
In addition to being proximity readers (e.g. readers that verify authenticity of smart cards, mobile devices and the like) the readers 108 may also have additional functionality. The readers 108 may include a keypad or other user input devices
for receipt of additional user known passwords, contact card identification devices, and biometric authentication devices including voice recognition, retina scanners, finger print analyzers, facial feature analyzers, and the like.
In accordance with embodiments of the present invention, a stand-alone reader 108 may be utilized to perform the functionality of both the reader 108 and the controller 102. This stand-alone reader 108 may include, or have access to, the
database 130 that contains data used to determine the authenticity of a mobile device 112 and/or algorithm(s) used to make the determination of authenticity of the mobile device 112. A determination of authenticity for a mobile device 112 is made at the
receiving point rather than having to transmit data across a network from the reader 108 to a controller 102 in order to make a determination of authenticity. The stand-alone reader is further operable to execute instructions based upon the analysis of
the mobile device 112.
A user typically carries the mobile devices 112 in order to verify his/her identity to a reader 108. Acceptable mobile devices 112 include, mobile cellular phones, personal digital assistants (PDAs), Blackberrys.TM., or any other mobile
communication device that can be enabled for use in the access system 100 described. Essentially, the mobile device 112 can perform functions associated with typical mobile devices and can also act like a smart card, RFID, or other type of
identification device. Typical identification devices utilize various protocols to communicate their credential information to a reader in order to gain access to a particular asset. The mobile devices 112, in accordance with embodiments of the present
invention, are enabled to communicate with readers 108 in a similar fashion to that of smart cards and the like.
In accordance with embodiments of the present invention, the controller 102 is able to communicate with at least one of the plurality of the mobile devices 112 using a communication network 116. The communication network 116 utilized may be a
conventional mobile radio network, for example, a GSM network, a Digital Cellular System (DCS), or Personal Communications Systems (PCS). The interface 132 may be a wired or wireless interface allowing the controller 102 to communicate with various
other entities connected to the communication network 116. The mobile device 112 communicates with the communication network 116 via interface 136. The communication network 116 provides a way for the controller 102 to automatically notify and/or
update information to the mobile devices 112 related to the access system 100. Additionally, the communication network 116 allows mobile devices 112 to communicate with each other.
receiver/transmitter 208 including an RF modulation/demodulation unit 212 and an RF antenna 216 for communication with a reader 108, an RF receiver/transmitter 230 including an antenna 226 and an RF modulation/demodulation unit 230 for communication with
the communication network 116, an optional RF rectifier 220, and a power source 224. The processor 204 (e.g., an application specific integrated circuit (ASIC), microprocessor, programmable controller, or the like) uses bi-directional interfaces to
communicate with various other parts of the mobile device 112.
One or more of the above-noted parts of the mobile device may be located on a subscriber identification module (SIM) card, which identifies the user in the communication network 116. SIM cards are already utilized now in GSM, DCS, or PCS mobile
apparatus, among other things. Also, the SIM card may be either a full-sized card or a plug-in card; it is connected to the mobile device through a contact region (not shown) on the surface of the card. Other card formats, as well as contact lists SIM
cards, may, however, likewise be used within the scope of this invention. U.S. Pat. No. 6,859,650 to Ritter, which is herein incorporated by this reference in its entirety, describes using a SIM card located in a mobile device and an interface to
communicate with external devices, without use of a mobile radio network.
As can be seen in FIG. 2, the mobile device 112, in one embodiment, communicates with external devices via two bi-directional interfaces 120 and 136. For example, the interface 120 where the RF antenna 216 transmits RF signals through
free-space to be received by the reader 108. The reader 108 has a transceiver mounted thereon to receive the RF signals transmitted by the mobile device 112. The RF antenna 216 used by the mobile device 112 to create interface 120 may be a coil made by
winding of a wire, by printing or etching of a conductor film, or with strip lines. Depending on the application, a transmission frequency, for instance, of 125 kHz, 13.56 MHz, 400 MHz or 5.2 GHz is used, the applied frequency also being dependent on
the data transmission where needed. A frequency of about 13.56 MHz is preferred. However, in order to ensure compatibility with the readers 108, various other frequencies may be used. Through interface 120, the mobile device 112 and the reader 108 can
exchange data and programs with each other without contact and without making use of the communications network 116. As noted above, the interface 120 is created when the mobile device 112 enters an active region of a reader 108.
The memory 200 of the mobile device 112 generally comprises at least one array of non-volatile memory cells, e.g., static random access memory (SRAM) cells or Flash Memory Cells, among other types of non-volatile memory cells. The memory 200
may also comprise at least one array of dynamic random access memory (DRAM) cells. Therefore a content of at least a portion of the memory 200 may be pre-programmed and write protected thereafter, whereas the content of other portions of the memory 200
may be selectively modified and/or erased by the controller 102 and/or the reader 108.
The mobile device 112, according to embodiments of the present invention, is used as an identification device. Identification information is preferably loaded into a secure area of the memory 200 where it can be accessed by the processor 204 to
communicate to readers 208 via interface 120. Information loaded on the memory 200 may include credential information of the user of the mobile device 112, for instance, unique IDs, manufacture IDs, passwords, keys, encryption schemes, transmission
protocols, and the like. Additionally, the memory 200 may contain executable functions that are used by the processor 204 to run other components of the mobile device 112. When presented to a reader 108, the RF antenna 216 typically receives
interrogating signals via interface 120. The interrogating signals are in the form of RF signals produced by the reader 108.
In accordance with embodiments of the present invention, the memory 200 may further comprise self-authenticating data and/or functions. Examples of self-authenticating data include, but are not limited to, assets the mobile device 112 has
access to, times of allowed access to each asset, and other data that can assist the mobile device in determining if it is eligible to gain access to a particular asset. The self-authenticating functions use the self-authenticating data to enable the
mobile device 112 to make a determination of its own access rights with respect to an asset.
A mobile device 112 that determines its own access rights and permissions is typically referred to as a smart mobile device. In operation, a "smart" mobile device 112 is presented to a reader 108. The reader 108 is associated with one or more
assets and the reader 108 is the gatekeeper of those assets. The reader 108 contains information about its associated assets and usually time of day information. Upon presentation of the mobile device 112 to the reader 108, the reader 108 supplies the
asset information and time of day information to the mobile device 112. The mobile device 112 then analyzes the asset information and time of day information using its self-authenticating data. The mobile device 112 then makes a determination whether
it is allowed to access the given asset (e.g., whether the holder of the mobile device 112 can have access to a room behind a door, a bank account, computer files, etc.) If the mobile device 112 determines that it is allowed access to the particular
asset, then it sends a signal back to the reader 108 indicating that validation of the mobile device 112 has been confirmed and access should be granted. Upon confirmation of validation of the mobile device 112, the reader 108 will unlock the door,
access the bank account, permit access to the computer files, or perform the requisite steps to grant access to the holder of the mobile device 112. If the mobile device 112 determines that it is not allowed access to the particular asset, then it can
either do nothing or send a signal back to the reader 108 indicating that validation of the mobile device 112 was not confirmed and access should not be granted. Upon the receipt of this signal, the reader 108 may perform no action, generate a message
indicating that access was not granted, sound an alarm, or perform some other sort of action in accordance with denying the holder of the mobile device 112 access to the asset.
In operation, the reader 108 and the mobile device 112 use pre-programmed communication protocols. To increase the probability of error-free reception, the same messages may redundantly be repeated a pre-determined number of times or during a
pre-determined timed interval. The interrogating reader 108 generates an interrogating RF signal. The interrogating RF signal of the interrogating reader 108 (or, if the protocol used by the mobile device 112 is an active protocol, RF signals produced
by the mobile device 112) is received by the RFID antenna 216 and is forwarded to the modulation/demodulation unit 212 that in turn demodulates the RF signal and provides the demodulated signal for processing to the processor 204. Upon receipt of the RF
signal by the processor 204, the memory 200 is accessed and relevant credential information is retrieved from the memory 200 by the processor 204. The retrieved credential information is then passed on to the modulation/demodulation unit 212 where it is
modulated and sent to the RF antenna 216. The RF antenna 216 provides the modulated signal back to the reader 108 via interface 120. At the reader 108 or controller 102 the credential information is processed to determine the validity of the mobile
The RF signals generated by the reader 108 inherently contain electromagnetic energy. The signals can be sent to the optional RF rectifier 220 and the energy from those signals can be converted into energy to run various components of the
mobile device 112. A power source 224 is also available to supply power to any other component of the mobile device 112 depicted or not depicted.
In accordance with embodiments of the present invention, the RF receiver/transmitter 234 for communication with the communication network 116 receives update signals (or other communication signals) from the communication network 116. In the
event that the signal received by the antenna 226 is an update signal from the controller 102, the update signal is sent from the antenna 226 to the RF modulation/demodulation unit 230 where the signal is demodulated. The demodulated signal is sent to
the processor 204, which then updates the memory 200 based on the update signal. The RF receiver/transmitter 230 also allows the mobile device 112 to communicate with other devices connected to the communications network 116.
Referring now to FIG. 3, a method of automatically and remotely updating credential information on a mobile device 112 will be described in accordance with embodiments of the present invention. The method begins at step 300 then proceeds to
step 304 where credential information is changed at the controller 102. As noted above, credential information can include any data, set of data, encryption schemes, keys, transmission protocol, and the like, used by a particular mobile device 112 to
verify its authenticity to a reader 108. Altering, modifying, enabling, disabling, revoking, adding, and updating any portion of the credential information may effect a change in the credential information. The credential information changed at the
controller 102 is then updated at the database 130 in step 308. Thereafter, in step 312, information is retrieved from the database 130 by the controller 102 relating to what mobile device the changed information was associated with. The mobile device
corresponding to the changed information is then identified as the target device. For example, if the access rights of one user have been modified, then the mobile device 112 associated with that user is the only mobile device 112 that needs to have its
respective memory 200 updated, and thus the single mobile device 112 is the targeted mobile device 112. Alternatively, a change may relate to a number of mobile devices 112 and each device will need to receive the updated information on its respective
memory 200. Thus each mobile device 112 will become a targeted device.
Once a targeted device is determined in step 312, a message is sent from the controller 102 to the determined (targeted) mobile device 112 via the communication network 116 in step 316. That information is received at the mobile device 112
through interface 136 by the antenna 226 that forwards this information to the RF modulation/demodulation unit 230 where the signal is demodulated. The RF modulation/demodulation unit 230 then sends the demodulated update signal to processor 204. The
processor updates the memory 200 to reflect the change that was made at the controller 102 in step 320.
Referring now to FIG. 4, another method of updating, enabling, and/or revoking the credentials of a mobile device 112 will be described in accordance with embodiments of the present invention. The method starts at step 400 and proceeds to step
404 where a time interval between credential updates is determined. The time period may vary depending upon the requirements and security needs of the system 100. For example, the interval may be set to update credentials every second, minute, hour,
day or a variation thereof. In step 408, new credential information is determined. As noted above, the new credential information may relate to one or a number of mobile devices 112. In step 412, the new credential information is sent to the readers
108. Specifically, the readers 108 need to be made aware of changes of credential information if the changes are related to transmission protocols, keys, password changes, and the like. In step 416, the new credential information is sent to the
respective mobile devices 112. This process is performed to ensure, for example, only mobile devices that are in communication with the communication network 116 have their credentials updated. Typically, when a user is de-enrolled from an access list,
a message will be sent via a communication from the controller 102 to the mobile device 112 to revoke the associated credential information from the memory 200. A message is sent to the mobile device 112 immediately when that user is de-enrolled and
therefore any attempts to gain access to the system 100 will be denied.
If the user who is no longer authorized to gain access to the system 100 intends to create problems, he/she might try to prevent the memory 200 in his/her phone from being de-authorized thereby keeping his/her access credentials on the mobile
device 112. One way a person might do this would be by switching his/her phone off or otherwise shield it from the incoming messages by disabling the antenna 226 or tampering with interface 136. Thereafter he/she may only turn on and expose the mobile
device 112 immediately prior to trying to gain access to an asset through reader 108. In one embodiment of the present invention, a signal (i.e., an SMS signal) periodically transmitted to the mobile device 112 is required to keep the respective
credentials active. Changing the system 100 logic so that the mobile device's 112 credentials time out periodically thwarts these attempts to stop a mobile device 112 from receiving a disable message. If the mobile device 112 does not receive an
enabling message, then the credential information stored thereon will become obsolete.
In embodiments employing a smart mobile device 112, the periodically transmitted message may be required to keep the self-authenticating data and/or functions active and up to date. Essentially, a database of self-authenticating data may have a
time out function such that after a predetermined amount of time, the self-authenticating data expires and erases itself. This way when a smart mobile device 112 is presented to a reader 108, it will not be able to validate its own access rights and
thus will not be able to grant itself access to the asset associated with the given reader 108. The self-authenticating data may also be dynamically changing, thus if the mobile device 112 does not receive the updated version of the authenticating data,
it will not be able to validate its own access rights.
Other functions of a mobile device 112 may also require periodic update/enabling signals in order to allow the smart mobile device 112 to validate its own access rights. For example, communications protocols or communication frequencies between
a reader 108 and a mobile device 112 may also periodically change. If the mobile device 112 does not receive the updated communications directions, it will not be able to communicate properly with the reader 108, thus it will not be able to gain access
to a particular asset.
An alternative embodiment would be to change protocols related to the communication interface 120. The changes could be sent via a message across the communications network 116 to the mobile device 112 such that the mobile device 112 is aware
of the rolling or constantly changing credential information. For example, rolling access codes and keys may be applied to the readers 108 and the mobile devices 112. Any mobile device that is not in communication with the communication network 116
will not be updated with these rolling codes and will therefore not be able to be properly validated by reader 108.
In step 420, the amount of elapsed time since the last credential update is determined and if this time is determined to be greater than or equal to the determined update interval in step 424, the method goes to step 408 and new credential
information is determined. However, if the time elapsed is not greater than the update interval, the process repeats step 420 until the periodic threshold is reached.
Referring now to FIG. 5, a method of relaying information relating to activities in an access system will be described in accordance with at least some embodiments of the present invention. The process starts at step 500 and then proceeds to
step 504 where activity is detected at a reader 108. Information related to that activity is determined in step 508 and potentially logged. The information may be stored at reader 108 and/or sent to controller 102 to be stored in database 130. Thereafter, it is determined if a mobile device 112 is enabled to receive information about the activity that has just occurred in step 512. If there is a mobile device 112 enabled to receive information, the identity of that mobile device 112 is
determined in step 516 by the controller 102, using a comparison of access rights and mobile device identities in the database. Otherwise, the logged information is not sent to any mobile device and the method ends at step 524. Once the enabled mobile
device(s) 112 is determined in step 516, information relating to the activity is sent to the enabled mobile device(s) 112 in step 520.
As noted above, the information relating to the activity may be stored at the reader 108 and logged there. An enabled mobile device 112 may be presented to reader 108 and the log file of activities that have occurred at that particular reader
108 may be relayed to the enabled mobile device 112 in step 520. The information may also be sent to the mobile device via communications network 116 from the controller 102. Messages may be sent using an SMS message or other types of text messages
known in the art. Additionally, the message may be sent via a voice recording to the mobile device 112 where the user of the mobile device can listen to an audio message rather than viewing a digital message.
Previous Patent US 9,594,888 | Next Patent US 9,594,890 File A Patent Application Protect your idea -- Don't let