Patent Description:
The patent document <CIT>) discloses a method of generating a one-time release code to bring an electronic lock from the locked position to the unlocked position. The principle of this method is that immediately after the use of the release code stored in the memory of the electronic lock to unlock the lock, a new usable release code is generated by its encryption with the use of an encrypting algorithm and with the application of an encrypting key, the new release code will occupy the position of the old release code in the memory of the electronic key while it must also be stored in the memory of the lock and will be used for the next unlocking of the lock. Thanks to the fact that a new release code is available for every unlocking of the lock, this lock achieves a high security level. However, its disadvantage is a relatively high structural complexity, wherein an encrypting algorithm and an encrypting key is necessary to generate a new release code. Another disadvantage is that in case of loss or theft of the electronic key, it might be used or misused by an unauthorized person. This system might also be misused if an unauthorized person succeeds in revealing the encryption algorithm of the newly generated release codes. Although the subject matter of this invention is a method for generating a release code, it is obvious that to use it, each lock must have its own key, i.e. it cannot be used if multiple keys are necessary for one key or if one key should be used to control multiple locks.

The patent document <CIT> discloses how to easily create access using multi-level authorization using hardware and software master keys, requiring the use of three types of software and hardware at each level to operate this lock. The code stored in each key at each level is immutable at all times. A key and lock device comprises a key and a stand-alone lock. The key has an electronic circuitry with a first memory and a first contact. The lock has an electronic circuitry with a second memory means, and a second contact means arranged to co-operate with the first contact means. Also, there is a blocking mechanism adapted to block operation of the lock unless an authorised key is inserted in the lock. The memory of the key stores a public identification item of the key identifying a group of keys having identical mechanical codes. In the memory of the lock, there is provided a list of the public and secret identification items of authorised keys and a list of the public identification item of non-authorised keys. A key is authorised if the public and secret identification items are present in the list of authorised keys and the public identification item thereof is absent in the list of non-authorised keys. This provides for an easy and flexible way of authorising key and lock devices and adding new keys to a system.

The patent document <CIT> discloses a cryptographic lock and how to generate codes using a generator. This invention provides an autonomous random dynamic cryptogram lock system which comprises a lock body and a key body. There are non-volatile memories in both the lock body and key body respectively and each memory stores a set of cryptogram corresponding. When unlocking the microprocessor in the lock body checks the cryptograms. If matching, the lock is unlocked, otherwise it gives up alarm. After unlocking, the microprocessor renews a set of the corresponding real random cryptogram in both memories for unlocking next time. It accomplishes one cryptoguard function every time.

The subject matter of the invention is an electronic security system as defined by the independent claim <NUM>.

If the electronic security system comprises a large number of the electronic release units controllable by one portable electronic controller, an identical set of the backup one-time control codes assigned to this portable electronic controller is always stored in their central memories. The control processors of these electronic release units are programmed to put their actuators into operation, if in the set of the backup one-time control codes of the electronic release unit contacted by the portable electronic control, there is still unused backup one-time control code identical to the one-time control code stored in the internal memory of the portable electronic controller, and to replace the used one-time control code in the internal memory of the portable electronic controller with a copy of the next following backup one-time control code from the set of the backup one-time codes stored in the central memory of the contacted electronic release unit.

In another case, when two and more portable electronic controllers are intended to control one or more electronic release units, the central memories of these electronic release units are divided into memory segments in the number equal to the number of the portable electronic controllers provided to control them. One of the memory segments of the relevant electronic release unit is assigned to each of these portable electronic controllers, a unique set of the backup one-time control codes that is assigned exclusively to the said one portable electronic controller being stored in the said memory segment. The control processor is programmed to put the actuator into operation if in this particular memory segment of this particular electronic release unit, there is a still unused backup one-time control code identical to the one-time control code stored in the internal memory of the used portable electronic controller, and to replace the just used one-time control code in the internal memory of this portable electronic controller with a copy of the next following backup one-time control code from the set stored in the used memory segment of the contacted release unit.

The above-mentioned structural arrangements of the electronic security assemblies as wholes and the electronic release units as their physically separated parts make possible to create relatively simple and cost-efficient, but especially very effective and safe security devices. The one-time usability of the control code stored in the internal memory of the portable electronic controller and the one-time usability of the control code that is replaced with a copy of a so far unused backup one-time control code from the set of these codes stored in the central memory of the relevant electronic release unit, or in its relevant memory segment, running independently of the human factor, ensure perfect protection of the one-time control code from being copied or misused in another way, as the copy of the backup one-time control code that replaces it is not generated from this just used one-time control code, and therefore it is not dependent on it in any way, and therefore it is not traceable, decodable or calculable in any manner either. From the practical point of view, one of significant benefits of the electronic security system according to the present invention is that it also makes possible to control more electronic release units with one portable electronic controller, or conversely, to assign the multiple portable electronic controllers to one electronic release unit for its multiple users. However, benefits of the electronic security system according to the present invention especially comprise that it makes possible to assign the multiple portable electronic controllers with the same as well as different access options to the multiple electronic release units.

An additional improvement of the security level of the electronic security system according to the present invention is achieved by the fact that the internal memory of the portable electronic controller comprises the own identifier, whose identification data exclusively belong to this portable electronic controller, wherein these identification data are stored in the central memory of the electronic release unit at the same time, where a unique set of backup one-time control codes, also exclusively belonging to this portable electronic controller, is stored separately from the identification data. The control processor of the electronic security system conceived in this way is, besides putting the actuator into operation and replacing the used one-time control code with a copy of a backup one-time control code, also programmed to initially verify the authorization of the used portable electronic controller for communication with the electronic release unit based on the verification of the consistency of the identification data of the identifier stored in the internal memory of the portable electronic controller and in the central memory of the electronic release unit. In the case of multiple release units that are controlled by one portable electronic controller, the data of its identifier are stored in the central memory of each of these electronic release units. In the case of multiple portable electronic controllers intended to control one or more electronic release units, the central memories of these electronic release units are divided into segments in numbers corresponding to the numbers of the portable electronic controllers provided to control them. The identification data of the identifiers of the particular portable electronic controllers are then stored in the memory segments, assigned to them, of the relevant electronic release unit, or relevant electronic control units, if there are more of them, separately from the unique sets of the backup one-time control codes, which are also stored in them.

To avoid using the portable electronic controller by an unauthorized person due to its theft or loss, which are the most significant and practically the only security risks of the electronic security system according to the present invention, the internal memory of the portable electronic controller can be equipped with a blocking code, without the unblocking of which by means of the entry of the blocking code in an unblocker, the portable electronic controller will not be able to establish communication with the electronic release unit, as a result of which its actuator cannot be actuated. The unblocker of this blocking code can then be installed in the manual part of the portable electronic controller. The blocking code of the portable electronic controller may preferably be a PIN code, its unblocker being a keypad adapted for entering this PIN code. The introduction of this additional security element makes the electronic security system according to this invention practically unbeatable, even in case of a loss or theft of the portable electronic controller.

A significant advantage of the electronic security system according to this invention is also that the unique set of mutually different backup one-time control codes may comprise a set of alphanumeric codes composed of any number of any characters that can be registered in an electronic memory, in this case the central memory of the electronic release unit, or subsequently also in the internal memory of the portable electronic controller. Thus, the composition of the control codes does not need to be limited to the characters of a binary or another numeric system only, but besides the numeric characters, it may also use the characters of all existing alphabets, punctuation marks or other characters that can be written in an electronic memory. This provides the possibility of creating a practically unlimited number of combinations of various characters, and therefore a set of backup one-time control codes of a nearly unlimited size.

On every attempt of putting the actuator into operation, the electronic security system according to this invention is characterized by individual steps realized especially on the basis of the corresponding programming of the control processor. In the case of the electronic security system comprising one portable electronic controller for one or more electronic release units, the steps are as follows:.

At the same time, a command is issued by the control processor to replace the just used one-time control code in the internal memory of the portable electronic controller with a copy of the next following backup one-time control code from the set of these codes stored in the central memory of the contacted electronic release unit. This copy of the backup one-time control code from their set, which is located in the central memory of the contacted electronic release unit, becomes, by being stored in the internal memory of the portable electronic controller, its new one-time control code, i.e. the code which can only be used once, and the set of backup one-time control codes in the central memory of the electronic release unit represents some stack of these control codes that can only be used once.

In the case of the electronic release unit controllable by multiple portable electronic controllers and the corresponding division of the central memory of the electronic release unit, or the central memories of the electronic release units , if there are multiple electronic release units, into memory segments, this process proceeds in the same steps in the memory segment, in whose set of backup one-time control was found a still unused backup one-time control code identical to a one-time control code stored in the internal memory of the used portable electronic controller.

The invention is further clarified in more detail with reference to drawings where:.

The electronic security system according to the exemplary embodiment, which is schematically shown in <FIG>, it comprises one portable electronic controller <NUM> and three electronic release units <NUM>. It is the electronic security assembly for locking (and of course also unlocking) of three objects, e.g. an apartment, office and garage, owned by one person. The portable electronic controller <NUM> comprises an external flash disk with the internal memory <NUM>, in which a one-time control code <NUM> is stored, and whose data concerning the size, serial number and production date, stored in its boot track, represent at the same time the identifier <NUM> of this portable electronic controller <NUM>. Particular electronic release units <NUM> are equipped with the central memories <NUM>, wherein in each of them, the data of the identifier <NUM> of the portable electronic controller <NUM> and an identical set <NUM> of the backup one-time control codes assigned only to it, are stored separately from each other. These electronic release units are further equipped with the actuators <NUM> and identically programmed control processors <NUM>. Each of the control processors <NUM> is programmed to put into operation the actuator <NUM> assigned to it, if the match is found between the data of the identifier <NUM> stored in the internal memory <NUM> of the portable electronic controller <NUM> and in the central memory <NUM> of the relevant electronic release unit <NUM>, and if in the set <NUM> of the backup one-time control codes located in the central memory <NUM> of the contacted electronic release unit <NUM>, there is located, at the same time, a still unused backup one-time control code <NUM>' identical to the one-time control code <NUM> stored in the internal memory <NUM> of the portable electronic controller <NUM>. Each of the control processors <NUM> is also programmed to replace the just used one-time control code <NUM> in the internal memory <NUM> of the portable electronic controller <NUM> with a copy of the next following one-time control code <NUM>' from the set <NUM> of the backup one-time control codes stored in the central memory <NUM> of the contacted electronic release unit <NUM> in the event that its relevant actuator <NUM> is put into operation. The portable electronic controller <NUM> is equipped with the connection contact <NUM>, and each electronic control unit <NUM> is equipped with the activation contact <NUM>. The activation contacts <NUM> of all electronic release units <NUM> are structurally adapted for mutual mechanical connection to the connection contact <NUM> of the portable electronic controller <NUM> (USB contacts), which enables a direct (contact) communication connection between the portable electronic controller <NUM> and individual electronic release units <NUM>, the control processors <NUM> of which are connected in a wired manner to both the central memories <NUM>, and the actuators <NUM>. The electronic release units <NUM> are powered with electricity from the mains (not shown in the figure).

When operating of the electronic security system in this embodiment, the connection contact <NUM> of the portable electronic controller <NUM> is firstly plugged into the activation contact <NUM> of one of the electronic control units <NUM> depending on which of the objects needs to be unlocked. This operation above will close the communication circuit and an electronic communication is established between the control processor <NUM> of the relevant electronic release unit <NUM>, its central memory <NUM> and the internal memory <NUM> of the portable electronic controller <NUM>. By means of the relevant control processor <NUM>, firstly it is found out whether the data of the identifier <NUM> contained in the internal memory <NUM> of the portable electronic controller <NUM> are identical to its data stored in the central memory <NUM> of the contacted electronic control unit <NUM>. This operation will verify whether it is an authorized use of the portable electronic controller <NUM>. If they are found to match, the relevant control processor <NUM> is further used to verify whether the one-time control code <NUM> stored in the internal memory <NUM> of the portable electronic controller <NUM> is identical to a still unused backup one-time control code <NUM>' contained in the set <NUM> of backup one-time control codes stored in the central memory <NUM> of the contacted electronic release unit <NUM>. If such a still unused backup one-time control code <NUM>' is found in their relevant set <NUM>, the control processor <NUM> will send a signal to the actuator <NUM> controlled by it, which will subsequently carry out a pre-determined release action. At the same time, by means of the relevant control processor <NUM> it is selected from the relevant set <NUM> of the backup one-time control codes, stored in the central memory <NUM> of the contacted electronic release unit <NUM>, the next following backup one-time control code <NUM>', and its copy is used to replace the just used one-time control code <NUM> in the internal memory <NUM> of the portable electronic controller <NUM>. Here, this copy of the backup one-time control code <NUM>' becomes the new one-time control code <NUM> ready for a subsequent one-time use. By means of the relevant control processor <NUM> a record of the use is made for the just used backup one-time control code <NUM>' in the central memory <NUM> of the relevant electronic release unit <NUM>. This backup one-time control code <NUM>' that has been used once cannot be used to replace the one-time control code <NUM> for the second time in spite of the fact that it was not used in the central memories <NUM> of the remaining electronic release units <NUM>, and it remains in them without a record of such a use. For further operation of this electronic security system, this backup one-time control code <NUM>' remains longer unusable in the central memories <NUM> of their remaining electronic release units <NUM>.

The electronic security system according to the exemplary embodiment, which is schematically shown in <FIG>, it comprises four portable electronic controllers <NUM> and one electronic release unit <NUM> controllable by them. It makes it possible to control one electronic release unit <NUM>, e.g. a door lock, with four portable electronic controllers <NUM>. The portable electronic controllers <NUM> have the form of external flash disks equipped with connection contacts <NUM> provided as USB contacts. They are equipped with internal memories <NUM> in which the one-time control codes <NUM> that have been assigned to them are stored, and whose data of size, production number and production date recorded in their boot tracks at the same time represent the identifiers <NUM> of these portable electronic controllers <NUM>. The electronic release unit <NUM> is equipped with an activation contact <NUM>, also having the form of a USB contact adapted to be connected to the connection contacts <NUM> of all four portable electronic controllers <NUM>. It is further equipped with a central memory <NUM> that is divided into four memory segments <NUM>, each of which is provided for one of the portable electronic controllers 1_. In these memory segments <NUM>, the data of the identifiers <NUM> of the assigned portable electronic controllers <NUM> are stored, and separately from them, also the relevant sets <NUM> of backup one-time control codes.

The electronic release unit <NUM> further comprises the actuator <NUM> and the control processor <NUM> that is connected in a wired manner to both the central memory <NUM>, and the actuator <NUM>, and via the activation contact <NUM> of the electronic release unit <NUM> and the connection contacts <NUM> of the portable electronic controllers <NUM> to their internal memories <NUM> as well. The control processor <NUM> is programmed to only activate the electronic security system in case, that in one of their memory segments <NUM>, the data of the identifier <NUM> belonging to the used portable electronic controller <NUM> are stored. The control processor <NUM> is further programmed to subsequently determine whether in the memory segment <NUM> identified this way, there is also a still unused backup one-time control code <NUM>' identical to the one-time control code <NUM> stored in the internal memory <NUM> of this currently used portable electronic controller <NUM>. In case of such a match, it will put the actuator <NUM> into operation. At the same time, the control processor <NUM> is programmed to replace the just used one-time control code <NUM> in the internal memory <NUM> of the used portable electronic controller <NUM> with the next following backup one-time control code <NUM>' from the relevant set <NUM> of the backup one-time control codes stored in the contacted memory segment <NUM>. The electronic release unit <NUM> is powered with electricity from the mains (not shown in the figure).

When operating the electronic security system in this embodiment, the connection contact <NUM> of one of the portable electronic controllers <NUM> is plugged into the activation contact <NUM> of the electronic release unit <NUM>. This will close the communication circuit and communication is established between the control processor <NUM> and the relevant internal memory <NUM> of the used portable electronic controller <NUM>, and at the same time the memory segments <NUM> of the central memory <NUM> of the electronic release unit <NUM> as well. By means of the control processor <NUM> it is first found out whether the identification data of the identifier <NUM> contained in the internal memory <NUM> of the used portable electronic controller <NUM> are stored in one of the memory segments <NUM> at the same time. If it is not the case, communication will be terminated. If it is the case, it will further check whether in the set <NUM> of the backup one-time control codes stored in the memory segment <NUM> identified this way there is also a still unused backup one-time control code <NUM>' identical to the one-time control code <NUM> of the used portable electronic controller <NUM>. If it is not the case, communication will be terminated. If the result of this check is positive as well, the control processor <NUM> will send a command to the actuator <NUM>, which will execute the action it has been provided for. At the same time, the next following backup one-time control code <NUM>' is copied from the set <NUM> stored in the contacted memory segment <NUM>, and this copy of the code is used to replace the just used one-time control code <NUM> in the internal memory <NUM> of the used portable electronic controller 1_. A record of the use of the just used backup one-time control code <NUM>' will be made by the control processor <NUM> in the relevant memory segment <NUM> of the electronic release unit <NUM>.

Another preferred embodiment of the electronic security system according to this invention consists in that it uses the portable electronic controllers <NUM> as shown in <FIG>, the internal memories <NUM> of which are equipped with the blocking codes <NUM>, advantageously in the form of PIN codes, the unblocker <NUM> in the form of a keypad adapted to enter this blocking code <NUM> and arranged preferentially on an outer side of the portable electronic controller <NUM> is being used for their unblocking. The unblocking of the blocking code <NUM>, which is performed before every use of the portable electronic controller <NUM> in such a way that the user, who is the only one to know it, enters it in the unblocker <NUM>, protects the portable electronic controllers <NUM> from being misused even in case of their loss or theft. Thus, in this embodiment, the electronic security system achieves the maximum security level. The blocking code <NUM> may also be a part of the identifier <NUM> of the portable electronic controller 1_.

Claim 1:
An electronic security system, powered by electricity from the mains and/or from an autonomous power supply, and provided for locking and unlocking especially locks of objects, the electronic security system comprises at least one portable electronic controller (<NUM>) with an internal memory (<NUM>) to store a one-time control code (<NUM>), and at least one separately from the portable electronic controller (<NUM>) arranged an electronic release unit (<NUM>) with a central memory (<NUM>), a control processor (<NUM>) and an actuator (<NUM>) of this system, characterized in that a unique set (<NUM>) of backup one-time control codes assigned to each portable electronic controller (<NUM>) provided to control the relevant electronic release unit (<NUM>) is stored in the central memory (<NUM>) of each electronic release unit (<NUM>), and its control processor (<NUM>) is programmed to pair the one-time control code (<NUM>) with a backup one-time control code (<NUM>') in the set (<NUM>) of the backup one-time control codes by searching through sets (<NUM>) of the backup one-time control codes, to put subsequently the actuator (<NUM>) into operation, to replace the used one-time control code (<NUM>) in the internal memory (<NUM>) of the portable electronic controller (<NUM>) with a copy of the next following backup one-time control code (<NUM>') from the set (<NUM>) of the backup one-time control codes, and to make a record of the use for the just used backup one-time control code (<NUM>') in the central memory (<NUM>) of the relevant electronic release unit (<NUM>) to prevent the once used backup one-time control code (<NUM>') from being used a second time, wherein the control processor (<NUM>) is communicatively connected to both the central memory (<NUM>) and to the actuator (<NUM>) and to the internal memory (<NUM>) as well, whose contact connection with the control processor (<NUM>) is realisable by means of an activation contact (<NUM>) of the electronic release unit (<NUM>), and of a connection contact (<NUM>) of the portable electronic controller (<NUM>).