Source: http://patents.com/us-9767267.html
Timestamp: 2018-12-12 23:16:24
Document Index: 783098132

Matched Legal Cases: ['Application No. 2007203452', 'Application No. 2007203452', 'Application No. 2', 'Application No. 2', 'Application No. 07113279', 'Application No. 06758515', 'Application No. 2', 'Application No. 2006343377']

US Patent # 9,767,267. Method and apparatus for making a decision on a card - Patents.com
United States Patent 9,767,267
Davis , et al. September 19, 2017
Davis; Masha Leah (Austin, TX), Wamsley; Robert (Golden, CO), Hulusi; Tam (Santa Ana, CA)
Family ID: 1000002840864
14/668,517
US 20150220721 A1 Aug 6, 2015
13274863 Nov 5, 2013 8578472
11778145 Dec 6, 2011 8074271
Current CPC Class: G06F 21/35 (20130101); G06F 21/00 (20130101); G06F 21/31 (20130101); G06F 21/34 (20130101); G07C 9/00039 (20130101); G07C 9/00087 (20130101); G07C 9/00119 (20130101); H04L 63/08 (20130101); H04L 63/101 (20130101)
Current International Class: G06F 21/35 (20130101); G06F 21/31 (20130101); H04L 29/06 (20060101); G06F 21/34 (20130101); G06F 21/00 (20130101); G07C 9/00 (20060101)
5678200 October 1997 Levi
6216227 April 2001 Goldstein
6577299 June 2003 Schiller et al.
6624739 September 2003 Stobbe
6859650 February 2005 Ritter
7190948 March 2007 Donley et al.
7197767 March 2007 Kusakabe et al.
7322043 January 2008 Letsinger
7380279 May 2008 Prokupets et al.
7600129 October 2009 Libin et al.
7616091 November 2009 Libin
7706778 April 2010 Lowe
7716486 May 2010 Libin et al.
7730126 June 2010 Crawford
7775429 August 2010 Radicella et al.
7822989 October 2010 Libin et al.
7823193 October 2010 Ritter et al.
7873989 January 2011 Karkas et al.
8074271 December 2011 Davis
8150374 April 2012 Lowe
8572705 October 2013 Ritter et al.
8578472 November 2013 Davis
9396321 July 2016 Davis et al.
2003/0023874 January 2003 Prokupets et al.
2003/0151493 August 2003 Straumann et al.
2003/0160681 August 2003 Menard
2003/0189096 October 2003 Markkanen et al.
2003/0190887 October 2003 Hook et al.
2003/0216143 November 2003 Rose et al.
2004/0017929 January 2004 Bramblet
2004/0049675 March 2004 Micali et al.
2004/0059590 March 2004 Mercredi et al.
2004/0078594 April 2004 Scott
2004/0083212 April 2004 Palmquist
2004/0117617 June 2004 Geller et al.
2004/0130437 July 2004 Stevens
2004/0153767 August 2004 Dolgonos
2004/0167881 August 2004 Masuka
2004/0177270 September 2004 Little et al.
2004/0180646 September 2004 Donley et al.
2005/0033962 February 2005 Libin et al.
2005/0055562 March 2005 Guthery
2005/0055567 March 2005 Libin
2005/0063027 March 2005 Durst, Jr. et al.
2005/0174214 August 2005 Ocana
2005/0178833 August 2005 Kisliakov
2005/0198318 September 2005 Von Mueller et al.
2005/0271250 December 2005 Vallone et al.
2006/0049255 March 2006 von Mueller et al.
2006/0164235 July 2006 Gounder
2006/0167871 July 2006 Sorenson
2006/0170533 August 2006 Chioiu et al.
2006/0182661 August 2006 Aquila
2007/0067400 March 2007 Kawakami et al.
2007/0200665 August 2007 Studerus
2007/0290789 December 2007 Segev
2008/0107269 May 2008 Gehrmann et al.
2008/0211620 September 2008 Willgert
2009/0139142 June 2009 Li
2010/0042954 February 2010 Rosenblatt et al.
2010/0077466 March 2010 Lowe
2010/0106773 April 2010 Tsutazawa et al.
2010/0287568 November 2010 Sundararaman
2011/0093928 April 2011 Nakagawa et al.
2011/0187493 August 2011 Elfstrom et al.
2012/0036575 February 2012 Davis et al.
2012/0114122 May 2012 Metivier
2012/0157058 June 2012 Lowe
2012/0278901 November 2012 Bunter
2013/0093563 April 2013 Adolfsson et al.
2013/0212661 August 2013 Neafsey et al.
2014/0013418 January 2014 Davis et al.
2014/0025408 January 2014 Ritter et al.
2014/0123317 May 2014 Sugihara
2015/0109098 April 2015 Singh
2015/0213247 July 2015 Davis et al.
2015/0213248 July 2015 Davis et al.
2015/0220711 August 2015 Lowe
2015/0220722 August 2015 Davis et al.
2015/0222613 August 2015 Lowe
2015/0222622 August 2015 Lowe
2015/0222623 August 2015 Lowe
2015/0223066 August 2015 Lowe
2015/0223067 August 2015 Lowe
2015/0288464 October 2015 Tanner et al.
0829828 Mar 1998 EP
1333409 Aug 2003 EP
1562153 Aug 2005 EP
1628255 Feb 2006 EP
1841166 Oct 2007 EP
2839833 Nov 2003 FR
10-2004-032311 Apr 2004 KR
WO 02/096070 Nov 2002 WO
WO 03/081934 Oct 2003 WO
WO 2004/025545 Mar 2004 WO
WO 2004/114190 Dec 2004 WO
WO 2005/024549 Mar 2005 WO
WO 2005/038728 Apr 2005 WO
WO 2005/091516 Sep 2005 WO
WO 2005/096651 Oct 2005 WO
WO 2007/126375 Nov 2007 WO
WO 2007/139909 Dec 2007 WO
WO 2008/024162 Feb 2008 WO
WO 2008/024320 Feb 2008 WO
WO 2008/035115 Mar 2008 WO
WO 2008/042302 Apr 2008 WO
US. Appl. No. 14/668,464, filed Mar. 25, 2015, Davis et al. cited by applicant .
U.S. Appl. No. 14/668,494, filed Mar. 25, 2015, Davis et al. cited by applicant .
U.S. Appl. No. 14/668,507, filed Mar. 25, 2015, Davis et al. cited by applicant .
U.S. Appl. No. 14/668,531, filed Mar. 25, 2015, Davis et al. cited by applicant .
U.S. Appl. No. 14/674,085, filed Mar. 31, 2015, Lowe. cited by applicant .
U.S. Appl. No. 14/674,094, filed Mar. 31, 2015, Lowe. cited by applicant .
U.S. Appl. No. 14/674,109, filed Mar. 31, 2015, Lowe. cited by applicant .
U.S. Appl. No. 14/674,125, filed Mar. 31, 2015, Lowe. cited by applicant .
U.S. Appl. No. 14/674,167, filed Mar. 31, 2015, Lowe. cited by applicant .
U.S. Appl. No. 14/674,175, filed Mar. 31, 2015, Lowe. cited by applicant .
Esato--"Nokia Launches NFC Shell for Mobile Payments" http://www.esato.com/news/article.php/id=436 (Feb. 25, 2005) (3 pages). cited by applicant .
Indala--"Product Families" www.indala.com/products/index.html (Copyright 2004) (2 pages). cited by applicant .
NFC Forum--"About Near Field Communication" http://www.nfc-forum.org/aboutnfc/ (Copyright 2005) (3 pages). cited by applicant .
Nokia--"Use Cases" http://www.nokia.com (Copyright 2005) (2 pages). cited by applicant .
Phillips Semiconductoers--"Near Field Communication PN511--Transmision module." (Feb. 2004) (18 pages). cited by applicant .
Official Action for Australia Patent Application No. 2007203452, dated May 19, 2011 2 pages. cited by applicant .
Notice of Allowance for Australia Patent Application No. 2007203452, dated Mar. 21, 2012 3 pages. cited by applicant .
Official Action for Canada Patent Application No. 2,596,561, mailed Mar. 13, 2013 3 pages. cited by applicant .
Notice of Allowance for Canada Patent Application No. 2,596,561, dated Jun. 30, 2014 1 page. cited by applicant .
Extended Search Report for European Patent Application No. 07113279.9, dated Dec. 7, 2011 7 pages. cited by applicant .
Official Action for U.S. Appl. No. 11/778,145, mailed Nov. 18, 2010, 20 pages. cited by applicant .
Official Action for U.S. Appl. No. 11/778,145, mailed May 26, 2011, 20 pages. cited by applicant .
Notice of Allowance for U.S. Appl. No. 11/778,145, mailed Sep. 20, 2011 10 pages. cited by applicant .
Official Action for U.S. Appl. No. 13/274,863, mailed Aug. 6, 2012 26 pages. cited by applicant .
Official Action for U.S. Appl. No. 13/274,863, mailed Apr. 12, 2013 6 pages. cited by applicant .
Notice of Allowance for U.S. Appl. No. 13/274,863, mailed Jul. 25, 2013 7 pages. cited by applicant .
Official Action for U.S. Appl. No. 14/017,065, mailed Sep. 30, 2014 17 pages. cited by applicant .
Official Action for U.S. Appl. No. 14/017,065, mailed Apr. 17, 2015 21 pages. cited by applicant .
Declaration of Bruce Schneier in Support of Request for Inter Partes Review of the '374 Patent, dated Jun. 17, 2015, 134 pages. cited by applicant .
Declaration of Bruce Schneier in Support of Request for Inter Partes Review of the '778 Patent, dated Jun. 17, 2015, 77 pages. cited by applicant .
Examiner's Answer for U.S. Appl. No. 13/404,915, mailed Feb. 7, 2014 19 pages. cited by applicant .
Extended Search Report for European Patent Application No. 06758515.8, dated Jul. 31, 2014, 5 pages. cited by applicant .
International Search Report for International (PCT) Patent Application No. PCT/US06/15304, mailed Jun. 11, 2008, 3 pages. cited by applicant .
Joint Claim Construction Statement for Case No. SACV-14-00947-CJC (DFMx), Exhibit A of Petition for Inter Partes Review of U.S. Pat. No. 7,706,778, filed Jun. 18, 2015, 21 pages. cited by applicant .
Mjolsnes et al., "On-Line E-Wallet System with Decentralized Credential Keepers," Mobile Networks and Applications, 2003, 8:87-99. cited by applicant .
Notice of Allowance for Canadian Patent Application No. 2,647,713 dated Jul. 8, 2013, 1 pages. cited by applicant .
Notice of Allowance for U.S. Appl. No. 11/397,542, mailed Feb. 18, 2010. cited by applicant .
Notice of Allowance for U.S. Appl. No. 12/628,574, mailed Nov. 15, 2011 12 paqes. cited by applicant .
Official Action for Australian Patent Application No. 2006343377, dated Jun. 3, 2010. cited by applicant .
Official Action for U.S. Appl. No. 11/397,542, mailed Mar. 31, 2009. cited by applicant .
Official Action for U.S. Appl. No. 11/397,542, mailed Oct. 28, 2008. cited by applicant .
Official Action for U.S. Appl. No. 11/397,542, mailed Sep. 14, 2009. cited by applicant .
Official Action for U.S. Appl. No. 12/628,574, mailed May 26, 2011 23 pages. cited by applicant .
Official Action for U.S. Appl. No. 13/404,915, mailed Dec. 3, 2012 16 pages. cited by applicant .
Official Action for U.S. Appl. No. 13/404,915, mailed Jun. 4, 2012 11 pages. cited by applicant .
Official Action for U.S. Appl. No. 13/404,915, mailed Jun. 14, 2013 9 pages. cited by applicant .
Official Action for U.S. Appl. No. 14/674,125, mailed May 22, 2015 9 pages. cited by applicant .
Official Action for U.S. Appl. No. 14/674,167, mailed Jun. 5, 2015 11 pages. cited by applicant .
Peition for Ineter Partes Review of U.S. Pat. No. 8,150,374, filed Jun. 18, 2015 64 pages. cited by applicant .
Petition for Ineter Partes Review of U.S. Pat. No. 7,706,778, filed Jun. 18, 2015 64 pages. cited by applicant .
Written Opinion for International (PCT) Patent Application No. PCT/US06/15304, mailed Jun. 11, 2008, 5 pages. cited by applicant.
1. A method of operating a physical access control system protecting a secure asset, comprising: determining location information associated with a mobile device; determining, with the mobile device, an identity of a reader of the physical access control system proximate the mobile device based on the location information; and executing, with the mobile device, an access control decision in connection with determining whether to permit or deny a holder of the mobile device access to the secure asset based at least in part of the determined identity of the reader, wherein at least a portion of the location information is provided to the reader from the mobile device and wherein the location information corresponds to location information provided to the mobile device by a second reader that previously received credential information from the mobile device.
2. The method of claim 1, wherein the location information is used by the mobile device, the reader, and at least one additional component of the physical access control system to implement at least one of a pseudo-man-trap and man-trap security feature.
3. The method of claim 2, wherein the mobile device further carries status information regarding an interaction between the mobile device and the second reader and provides the status information to the reader for use by the reader in connection with determining whether to permit or deny a holder of the mobile device access to the asset.
4. The method of claim 3, wherein the status information corresponds to an indication of whether or not a second door associated with the second reader is locked.
5. The method of claim 3, wherein the status information includes a key shared between a door associated with the reader and a second door associated with the second reader.
6. The method of claim 1, wherein the location information is provided to the reader from a central host.
7. The method of claim 1, wherein the location information is provided to the reader via a communication network.
8. The method of claim 1, wherein the mobile device comprises a cellular phone.
9. The method of claim 1, further comprising: selectively communicating, with the mobile device, credential information to the reader, the credential information selected based at least in part on the determined reader identity; and determining, with the reader, whether to permit or deny a holder of the mobile device access to the secure asset based on the credential information.
10. The method of claim 1, further comprising: performing mutual authentication between the mobile device and the reader.
11. An access control system protecting a secure asset, comprising: a mobile device configured to interact with a reader of the access control system, the mobile device comprising: a receiver; a transmitter; and a processor operable to perform operations comprising: determining location information associated with the mobile device; determining an identity of the reader based on the location information; and executing an access control decision in connection with determining whether to permit or deny a holder of the mobile device access to the secure asset based at least in part on the determined identity of the reader, wherein the operations further include communicating at least a portion of the location information to the reader and wherein the location information corresponds to location information provided to the mobile device by a second reader that previously communicated with the mobile device.
12. The access control system of claim 11, wherein the location information is used by the mobile device, the reader, and at least one additional component of the access control system to implement at least one of a pseudo-man-trap and man-trap security feature.
13. The access control system of claim 12, wherein the mobile device carries status information regarding an interaction between the mobile device and the second reader, and wherein the operations further comprise providing the status information to the reader for use by the reader for use by the reader in connection with determining whether to permit or deny a holder of the mobile device access to the asset.
14. The access control system of claim 13, wherein the status information corresponds to an indication of whether or not a second door associated with the second reader is locked.
15. The access control system of claim 13, wherein the status information includes a key shared between a door associated with the reader and a second door associated with the second reader.
16. The access control system of claim 11, wherein the location information is provided to the reader from a central host.
17. The access control system of claim 11, wherein the location information is provided to the reader via a communication network.
18. The access control system of claim 11, wherein the mobile device comprises a cellular phone.
19. The access control system of claim 11, wherein the operations further comprise: selectively communicating credential information to the reader, the credential information selected based at least in part on the determined reader identity.
20. The access control system of claim 11, wherein the operations further comprise: performing mutual authentication with the reader.
In one embodiment, if access is granted, then the credential issues a secure "unlock request" to the local host. If access is not granted, then no action need be performed. As can be appreciated, a system based on embodiments of this invention can be made secure against playback and other simple attacks by employing suitable cryptographic techniques in authentication and messaging.
Using any type of communication protocol, the credential 216 is capable of communicating with a local host 220a-N. A local host 220 is any type of non-networked access point. The local host 220 controls access to one or more assets such as a building, room, computer, database, file, and so on. The local host 220 is typically assigned a unique ID that identifies the host or the asset protected by the host. In one embodiment, the host ID is passed to the credential 216 in order for the credential 216 to have enough information to make an access decision. In a preferred embodiment, the local host 220 only needs to supply its host ID and the current time to the credential 216.
Each local host 220a-N may store unique data to the host or the application employed by the host in their respective memories 316a-N. The type of data stored in a local host 220 may include a local host ID 586, a control key KD1 590, and the current time 594. The control key KD1 590 is used to authenticate with a credential 216 and more specifically to authenticate with a particular set of application data stored in the application decision application 416. Once authenticated, the local host ID 586 and current time 594 are provided to the credential 216 such that an access decision can be made by the credential 216.
An alternative approach is to put the two-man-rule on the credential 216. In one embodiment, two valid credentials 216 are presented to an outside reader. The credential 216 recognizes that the reader uses two-man-rule and the reader has to cooperate with the credentials 216 by providing information to the second credential 216 that a valid first credential 216 has just been read. The reader can be programmed to use the two-man-rule by transmitting the timestamp of the most recently read valid credential 216 and by having the ability to interpret two different control commands from the credential 216. One possible control command is that the credential 216 is valid but without the command to unlock the door. This occurs when a credential 216 verifies that it is valid, but that the timestamp received from the reader of the most recent valid credential 216 is too old (for example more than five seconds). The second control command, for example, is to unlock the access control device 312. This occurs when the credential 312 verifies that it is valid and that the timestamp from the most recently read valid credential 312 is within the allowed time period defined in the two-man-rule. An example two-man-rule is shown as follows: 1) The first valid credential 216 sends a message to the reader that it is valid and the reader does not immediately unlock the door but instead waits for a second valid credential 216. 2) The second credential 216 receives information from the reader a first credential 216 has just been validated. 3) The second credential 216 has information that this door uses two-man-rule and should, after receiving information about the first valid credential 216, check its own validity with a positive check resulting in the credential 216 sending a control command for the access control device 312 to be unlocked or released. Man-Trap
A pseudo-man-trap can be implemented on non-networked readers. With non-networked readers, the second door is unaware of whether or not the first door is closed and locked or is open; therefore, it cannot be required to remain locked while the first door is open or unlocked (this may be overcome by a local wired or wireless network). Similar results can be obtained by using the credential 216 to carry a message from the first door to the second door regarding its lock-status. The operation of a pseudo-man-trap is described as follows: 1) The credential 216 is presented to the outside reader of the first door and if valid the door is unlocked. 2) After entering the enclosure and waiting for the door to close and lock, the credential 216 is presented to the inside reader of the first door. The card receives a secure message, possibly using a key shared by the two doors, stating that the first door is closed and locked. 3) The credential 216 is presented to the second door and both the credential 216 validation and the first-door-status are checked. If both conditions are satisfied the second door is unlocked.
Previous Patent US 9,767,266 | Next Patent US 9,767,268