Access control communication device, method, computer program and computer program product

TECHNICAL FIELD [0001] The invention relates to a communication access control device, a related method, a computer program and a computer program product for facilitating communication between a key device and an access control device.

BACKGROUND OF THE INVENTION [0002] Access control systems based on electronic access are currently provided using a variety of different topologies. One such solution is when electronic locking devices are installed without power. The locking devices can then be powered, after inserting the matching key device, by means of an electrical connection to the key device.

[0003] The problem is in how current access rights are provided to blocking devices. For example, if a person loses a key device, the operator of the access control system should easily and reliably prevent the key device from gaining access to any devices blocking the access control system.

[0004] In the prior art, key devices are updated using dedicated key update devices connected to portable computers. While this may provide updated access permissions for key devices to provide blocking devices, the key update devices are large and bulky, where the keys are not updated very often. This leads to a security breach, as it may take a long time to update the access rights by the operator to send updated access rights to all blocking devices.

[0005] US 2011/140838 A1 discloses a control center by means of which a code identifying the means itself, a user identification code, a first set of information relating to open operations allowed in reading means allowing access is registered in the key coded means and user identifier, a third set of information relating to invalidating measures and a second set of information provided by reading means corresponding to the various openings to be performed. This prevents connection between the control center and the reading means by means of communication means between them.

[0006] WO 2012/097917 A1 presents a user / vehicle identifier by means of which privileges of access rights and user settings are associated with a specific user assigned to a specific vehicle (eg a driver).

In particular, the use relates to the use of a user / vehicle identifier stored in a key and a remote control to associate the privileges of access rights and / or user settings that are associated with the vehicle as determined by the vehicle identifier, the key user and the remote control. A system for vehicle user authentication is described. The system includes an identifier device adapted to store a user / vehicle identifier string in which the user / vehicle identifier string identifies the vehicle user and the vehicle associated with it; and an authentication device adapted to receive a user / vehicle identifier string from the identifier device and for associating the access rights,

[0007] EP 1 321 901 A2 discloses a method for access control to an object in which a movable object or key is used to open or release a lock when the key has been authorized.

SUMMARY [0008] The object of the invention is to provide a more convenient method to ensure communication between an access control device and a blocking device.

According to a first object, an access control communication device is disclosed comprising: a short-range radio communication module; a cellular radio communication module; and a controller adapted to communicate the access rights associated with the key device, by means of a radio communication cell module, with an access control device in a cellular communication network at an access control device connected to a key device using a short-range radio communication module. Such an access control communication device greatly simplifies communication between the key device and the access control device in comparison with the prior art. In addition, such an access control communication device may be small and may be carried e.g. in a user's pocket.

[0010] The controller may be adapted to perform one or more of the following communications with an access control device at an access control device in contact with a key device via a short-range radio communication module: receiving updated access rights to one or more locking devices, receiving updated rights access specifically for the key device, receiving the updated validity period for the key device, receiving the updated time on the key device clock, sending the audit trail for one or more locking devices, and sending the audit trail for the key device. This provides greater security by providing access data between the key device and the access control device.

[0011] The controller may be adapted to communicate with an access control device only when the triggering condition is considered to be true.

[0012] The trigger condition may be true when the timer of the communicative access control device expires.

[0013] The access control communication device may further include a user input device, in which case the triggering condition is true when the update command is detected by the user input device.

[0014] The access control communication device may be part of a mobile communication terminal.

[0015] The access control communication device may further comprise a code entry device, in which case the controller is adapted to extend the validity time of the key device in combination with the access control communication device when the correct code has been entered using the code entry device.

[0016] According to a second subject, a method is described implemented in an access control communication device. The access control communication device includes a short-range radio communication module; a cellular radio communication module; and driver. The method comprises the steps of: determining whether the key device is connected to an access control device by means of a short-range radio communication module; and transfer the access rights associated with the key device, using a radio communication cell module, with the access control device in the cellular communication network.

[0017] The communication step may comprise performing one or more of the following communications activities with the access control device: receiving updated access rights to one or more locking devices, receiving updated access rights specifically for the key device, receiving updated validity time for the key device, receiving updated time on the key device clock, sending an audit trail for one or more locking devices and sending an audit trail for the key device. The method may further comprise the steps of: determining if the trigger condition is true, in which case the communication step with the access control device only occurs when the triggering condition is determined to be true.

[0019] In the step of determining whether the trigger condition is true, the trigger condition may be true if the communication access timer timer expires. [0020] The access control communication device may further include a user input device, in which case the step of determining whether the trigger condition is true, the trigger condition is true when the update command is detected by the user via the user input device.

[0021] The method may further comprise the steps of: receiving, by means of a code-entry device, a code entered by the user; and extending the validity time for the key device connected to the access control communication device.

[0022] The step of communication with the access control device may include operating as a gateway between the key device and the access control device.

[0023] According to a third subject, a computer program including a computer program code is provided that when operated on the access control communication device causes the access control communication device: determines whether the key device is connected to the access control device via a short-range radio communication module; and conveys the access rights associated with the key device, using the radio cellular radio module, with the access control device in the cellular communication network.

[0024] According to a fourth subject, a computer program product is provided comprising a computer program according to a third subject and a means read by a computer on which the computer program is stored.

[0025] It should be noted that any feature of the first, second, third and fourth objects can be used, if desired, in each of these objects.

[0026] In general, all terms used in the claims should be interpreted according to their usual meaning in the art, unless expressly stated otherwise. All references to "element, device, component, measure, step, etc." should be interpreted openly as referring to at least one case of an element, device, component, center, step, etc., unless explicitly stated otherwise. The steps of any disclosed method need not be performed in the disclosed sequence, unless explicitly stated.

BRIEF DESCRIPTION OF THE DRAWINGS [0027] The invention will now be described by way of example with reference to the accompanying drawings, in which:

Fig. 1 is a schematic view illustrating an access control system in which the embodiments shown herein may be applied;

Fig 2 is a schematic view more specifically illustrating the key device and locking device of Fig. 1;

Fig. 3 is a schematic view showing some of the components of the key device of Figures 1 and 2;

Fig. 4 is a schematic view showing the access control communication device of Fig. 1; and

Fig. 5 is a schematic view illustrating a method implemented in the access control communication device of Figures 1 and 4.

DETAILED DESCRIPTION [0028] The invention will now be described in more detail with reference to the accompanying drawings, in which specific embodiments of the invention are shown. This invention may, however, be made in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are exemplified so that this disclosure would be thorough and complete and fully convey the scope of the invention to those skilled in the art. Similar numbers refer to similar elements in the description.

[0029] Fig. 1 is a schematic view illustrating an access control system 3 in which the embodiments shown herein may be applied. There are a number of locking devices 20. The locking devices 20 perform access control of the key devices 1 shown to it, e.g. by placing the key device 1 in the locking device 20, where the locking device 20 is powered by the key device 1. In addition, there is communication between the key device 1 and the interlock device 20, wherein the interlock device performs electronic access control of the key device 1. After granting access, the interlock device 20 is set to the open state, whereby the user may, for example, open the door whose access is controlled by the interlock device 20.

[0030] The key device 1 is provided with a radio communication module by means of which it can communicate with the access control system device 3 of the access control system. The radio communication module is adapted to a short-range radio network (such as Bluetooth, Wi-Fi, etc.) by means of which the key device 1 communicates via a short-range radio link 36 with an access control communication device 70. The access control communication device 70 in turn communicates via the mobile network connection to the cellular network 32. Thus, the access control communication device 70 functions as a gateway, providing access to the access control device 30 for the key device 1 and vice versa.

[0031] The access control device 30 functions as a controller in the access control system 3 and may be implemented e.g. by means of one or more computers, e.g. a server and an operator terminal. The operator may control access control rights and monitor other security aspects of the access control system by means of an access control device.

[0032] The connection between the key device 1 and the access control device 30 may be used for various purposes. For example, key devices 1 may be used to transmit data from an access control device 30 to locking devices 20. For this to happen, the key devices 1 are connected to the access control device 30 to collect such data from time to time. When each of these key devices 1 is then placed in the locking device 20, the data intended for the locking device 20 is transmitted to the blocking device 20.

[0033] One example will now be presented with reference to access rights. The key device 1 from time to time acquires access rights, which are later transferred to the locking devices 20, after inserting the device 1 of the key. Access rights are stored in the memory of the key device 1, thereby providing asynchronous communication to (or from) blocking devices 20. These access rights may include a revocation list, indicating key devices to be excluded from access. The revocation list is global in the access control system and thus applies to all 1 key devices and all blocking devices 20. Thus, any changes on the revocation list are sent efficiently and without exception in the entire system 3 access control for blocking devices, although they themselves do not have power and can not communicate directly with the access control device 30. However, certain elements in the access rights may be associated with a particular locking device or group of locking devices.

[0034] If the user in the access control system 3 loses the key device, the operator of the access control device 30 may update the access rights in the access control device so that the invalidation list includes the identity of the lost key device. When one or more key devices 1 retrieve a new revocation list, the revocation list is forwarded to each of the interlock devices 20 in which the key device 1 is located. Even a lost key device will in many cases retrieve a new revocation list when the attempt to steal and access via a lost key device is denied.

[0035] Alternatively or additionally, the access rights may include an access control list including a list of key device identifiers that may be accessed. Access rights can be global in the system, for all locking devices, for individual locking devices or for a group of blocking devices.

[0036] Alternatively or additionally, each key device 1 may, from time to time, receive an updated validity period for a given key device 1. Each key device 1 may have access rights that are valid only for a specified period of time after which the device 1 of the key loses its access rights. When the key device 1 is in contact with the access control device, its validity time may be extended. Thus, the key device loses its access rights after a certain time, unless it is in contact with the access control device 30. In one embodiment, updated access rights are retrieved at the same time as the validity of the key device is extended.

[0037] The meaning of this combination of access rights and validity time will now be illustrated by an example. Let's say the key device 1 is stolen. The legitimate owner reports this fact, and new access rights are updated on the access control device 30, preventing the stolen key device from accessing the locking devices in the access control system 3. The thief does not want these new access rights to be passed to the blocking devices and may prevent communication between the key device and the access control device 30 from occurring. However, the validity time will eventually expire and access to the stolen key device 1 will be prevented. If the thief somehow learns that the expiration time has expired and enables the key device 1 to communicate with the access control device 30, the validity period will be extended, but the 1st key device will also download the updated access permissions, and thus the access to the stolen key device 1 will be prevented. Alternatively, the access control device 30 will not extend its validity time, since the stolen key device may be marked as forbidden (or stolen).

[0038] Alternatively or additionally, each key device 1 may, from time to time, receive an updated validity period for the clock of the key device. This guarantees that the key device clock is accurate, which guarantees that the validity times are applied correctly.

[0039] The communication between the key devices 1 and the access control device 30 may also be used in a different direction towards the access control device. The mechanism is the same when communication takes place via an access control communication device 70. But here, the data is transmitted from the locking device 20 to the key device 1. When the key device 1 contacts an access control device 30, data is sent to the access control device 30.

[0040] Thus, the key device 1 uses its memory for temporarily storing data from the locking devices 20 to the access control device 30.

Analogously, the access control communication device 70 can also use its memory to temporarily store data from the locking devices 20 to the access control device 30. For example, the audit path from the locking devices 20 can be downloaded to the access control device 30. The audit trail to an access control device includes data on successful and / or failed attempts to gain access to a given locking device.

[0041] Also, the access path from the key device 1 may be downloaded to the access control device 30, indicating successful and / or failed attempts to gain access to the locking devices by the key device.

[0042] Alternatively, the key device 1 communicates with the access control device 30 to obtain authorization from the key device 1 for access by the blocking device 20 in real time when the key device 1 is arranged in the locking device 20. Thus, the control device 30 access has full control over which one key device can be accessed by the locking device 20.

[0043] As explained in more detail below, various trigger conditions may be used to initiate communication between the key devices 1 and the access control device.

[0044] Fig. 2 is a schematic view more specifically illustrating the key device and locking device of Fig. 1.

[0045] The key device 1 comprises a connector 12 and a blade 13, which are electrically insulated from each other. The locking device 20 includes a socket with a first connector 22 and a second connector 23. The first connector 22 is positioned so that the first connector 22 galvanically contacts the key device connector 12 when the key device 1 is placed in the socket.

Likewise, the second connector 23 is positioned so that the second connector 23 galvanically contacts the connector 13 of the key device 1 when the key device 1 is placed in the socket. This arrangement provides a double clamp connection between the key device 1 and the locking device 20 when the key device 1 is placed in the locking device seat 20. A double clamp connection is used for communication between the key device 1 and the blocking device and for powering the blocking device by transferring electrical energy It is possible to provide separate connectors (not shown) for supplying the locking device 20 and communication between the key device 1 and the locking device 20.

[0046] Fig. 3 is a schematic view showing some components of the key device of Figs. 1 and 2. Processor 2 is provided by any combination of one or more suitable central processing units (CPUs), a multiprocessor, a microcontroller , a signal processor (DSP), a special purpose circuit, etc., capable of executing program instructions stored in memory 17, which may therefore be a product of a computer program.

[0047] The memory 17 may be any combination of read and write (RAM) memory and read-only memory (ROM). The memory 17 also includes permanent storage, which can be any, for example, a single memory or a combination of semiconductor memory, magnetic memory or optical memory.

[0048] The key device 1 further comprises a radio communication module 6. The radio communication module 6 comprises one or more transceivers comprising analog and digital components and a corresponding number of antennas. The radio communication module can be provided for communication via short-range radio communication (such as Bluetooth, Wi-Fi, etc.) with a communication device

70 access controls. Alternatively, the radio communication module 6 may also be adapted to communicate independently of the cellular network for communication with an access control device. Via the radio communication module 6, the key device 1 can communicate with an access control device as explained above.

[0049] The timer 4 is provided as part of the key device 1 and is used to enforce the validity times described above.

[0050] A battery 18 is provided to power all electrical components of the key device and to power the locking devices as explained above.

The battery 18 can be a rechargeable battery or a replaceable disposable battery.

The key device 1 is alternatively provided with a user input element, such as a button 7 or the like, which may e.g. be used by a user to start communication with an access control device.

[0052] Other components of the key device 1 have been omitted so as not to obscure the concepts set forth herein.

[0053] The wrench device 1 includes a blade 13 for mechanically maneuvering the locking device 20 during a successful access control. The connector 12 is provided with electrical insulation 14 from the blade, providing two independent galvanic contact terminals with a blocking device.

[0054] Fig. 4 is a schematic view illustrating some components of the access control communication device 70 of Fig. 1. The processor 72 is provided by any combination of one or more suitable central processing units (CPU), a multiprocessor, a microcontroller, a signal processor (DSP) , a special purpose integrated circuit, etc. capable of executing software instructions stored in memory 78, which may therefore be a computer program product. The processor 72 may be configured to implement the method described with reference to Figure 5 below.

[0055] The memory 78 may be any combination of read and write (RAM) memory and read-only memory (ROM). The memory 78 also includes permanent storage, which may be, for example, any single memory or a combination of semiconductor memory, magnetic memory or optical memory. Alternatively, some or all of the memory 78 is included in the SIM (Subscriber Identity Module), thereby realizing a secure storage and execution environment for the application, and can provide references that can be used by the cellular communication module 76.

[0056] The cellular communication module 76 includes one or more transmitters30 of receivers comprising analog and digital components and a corresponding number of antennas. A cellular communication module 76 is provided for communication with a cellular network, such as the cellular network 32 of Fig. 1, for connecting to an access control device 30.

[0057] A short-range radio communication module 75 is provided for communication via short-range radio communication (such as Bluetooth, Wi-Fi, etc.) e.g. with a key device as explained above.

[0058] A clock 74 is provided and a battery 79 is provided to power all electrical components of the access control communication device 70. The 79 battery can be a rechargeable battery or removable disposable battery.

[0059] A user interface 71 is provided to allow the user to enter data and receive final data. For example, the user interface 71 may include one or more displays that are alternatively tactile, keyboard, microphone, loudspeaker, etc.

[0060] Alternatively, a code entering device 77 is provided as part of the user interface 71. The code entering device 77 may e.g. be used to enable the user to extend the validity time of the key device 1 in contact with the access control communication device 70 when the access control communication device is not available in the cellular network e.g. due to current radio conditions / radio isolation. The device for entering the code can be, for example, a keyboard or part of a properly controlled touch display.

[0061] Other components of the access control communication device 70 are omitted so as not to obscure the concepts set forth herein.

[0062] In one embodiment, the access control communication device 70 may be part of a mobile communication terminal.

[0063] Fig. 5 is a schematic view illustrating a method implemented in the access control communication device of Figures 1 and 4.

[0064] In an alternative trigger step 91, it is determined whether the trigger condition is true. If this is the case, the method is continued at the step of determining communication with the key device. Otherwise, the method repeats the conditional trigger stage 91, alternatively after a period of inactivity.

[0065] The trigger condition may e.g. be such that the timer of the communication access control device will be extinguished. Alternatively or additionally, the triggering condition may be such that the user input element (71 of FIG. 4) of the communication access control device is activated indicating an update command. When this step is omitted, the method starts the step of determining communication with the key device.

[0066] In step 90 for determining communication with a key device, the access control communication device 5 determines whether the key device is connected to the access control device via its short-range radio communication module (see 75 in Figure 4).

[0067] In step 92 of communicating with the access control device, the access control communication device communicates with the access control device whenever possible, acting as the communication gateway described with reference to Figure 1 above, e.g. to update the access rights and / or provide audit logs. The access control communication device may thus act as a gateway between the key device and the access control device. If the access control communication device can not connect to the access control device, it is considered that the access control communication device is offline.

[0068] In conditional code entry step 93, it is determined whether to enter the code. This may be e.g. due to the fact that the access control communication device (and therefore each key device connected) is offline and the code must be entered in order to extend the validity time of the key device in contact with the access control communication device. In one embodiment, code must be entered periodically to extend the validity time of the key device. This can happen every time the validity period is extended or less frequently (or more frequently). This prevents the person who does not know the code from accessing the lost key device even if the revocation list has not yet been updated. In one embodiment, enter the code, every time you need access to the locking device, regardless of whether the key device is offline or online. If you need to enter the code, the method continues in step 94 to receive the entered code: Otherwise, the method terminates.

[0069] In step 94, receiving the entered code, the code is received from the user of the access control communication device using the device for entering the code of the access control communication device.

[0070] In conditional step 95 of the correct code, it is judged whether the code that was entered by the user is correct or not. If this is the case, the method is continued in step 96 of extending the validity period. Otherwise, the method returns to step 94 for receiving the entered code or the method terminates if too many unsuccessful attempts to enter the code have been detected.

[0071] In step 96, extending the time of validity, extends the validity time of the key device in contact with the access control communication device as explained above.

[0072] Alternatively, the method is repeated so that it is ready for further communication between the access control device and the key device.

[0073] The invention is primarily described above with reference to several embodiments. However, one skilled in the art understands that embodiments other than those disclosed above, as defined in the appended claims, are also possible within the scope of the invention.