UWB Access Rights Update

Abstract

An access control terminal (1) comprises an electronic circuit (11) and an ultra-wideband transceiver (10) connected to the electronic circuit (11), wherein the electronic circuit (11) exchanges messages with a mobile device (2) to determine the distance (d) of the mobile device (2) from the access control terminal (1), and if the mobile device (2) is within a predetermined proximity range (P), transmits to the mobile device (2) one or more update messages configured to update access rights data in the mobile device (2).

Description

Field of the Invention

[0001] The present invention relates to an access control terminal, in particular to an access control terminal comprising an electronic circuit and an ultra-wideband transceiver, a method for updating access rights, and a computer program product for updating access rights. Background of the Invention

[0003] Keyless entry systems have been used in a wide range of applications, from vehicle entry systems and vehicle access control to building and room access control. For very close range applications, radio frequency identification (RFID) transponders (or tags) are often used, which have mostly replaced the early magnetic stripe cards. For applications that do not require very close range, other wireless technologies such as Bluetooth and ultra-wideband have emerged.

[0004] The network topology of an access control system usually comprises a central access rights server to which each access control terminal is connected. The access control device held by the user is brought into proximity with the access control terminal in order to exchange credentials wirelessly. These credentials are then transmitted from the access control terminal to the server, which performs a lookup in the access rights database. If access is authorized, the server sends a signal to the access control terminal which allows access to the user through the electronically controlled front door. The disadvantage of this topology is that it requires each access control terminal to be permanently connected to the server, which is associated with significant costs in terms of wiring and presents a single point of failure. More modern access control systems have handed over access control decisions to the access control terminals themselves. However, if these access control terminals are not connected to a server, the question then arises of how and when to update the access rights database in each access control terminal.

[0005] Other access rights systems reverse this situation by storing a database or table of users' access rights in the access control device itself. At an access control point, the access control terminal and the access control device exchange data containing an identifier of the access control terminal and the user's access rights at the access control point. The access control device must be small and cheap, and therefore a disadvantage of these systems is that they usually have only limited memory, and therefore for large access control systems comprising a large number of access control points, the user's access rights table cannot be stored in its entirety in the access control device. Similarly, updating access rights becomes cumbersome because each affected party must update its access control device with the new access rights. Summary of the invention

[0006] The object of the invention is to provide an access control terminal and a method for updating access rights which do not have at least some of the disadvantages of the prior art. According to the invention, these objects are achieved by the features of the independent claims. In addition, other advantageous embodiments result from the dependent claims.

[0007] The access control terminal comprises an electronic circuit and an ultra-wideband transceiver connected to the electronic circuit. According to the present invention, the above object is achieved in particular that the electronic circuit is configured to: transmit a request message to a mobile device via the ultra-wideband transceiver; and receive a response message from the mobile device via the ultra-wideband transceiver. The electronic circuit is also configured to: use the response message to determine the distance of the mobile device from the access control terminal; and use the distance to determine whether the mobile device is within a predetermined proximity range; and if the mobile device is within the predetermined proximity range, transmit one or more update messages configured to update access permission data in the mobile device to the mobile device.

[0008] In one embodiment, the electronic circuit is configured to determine the distance using a time difference between transmitting a request message and receiving a response message.

[0009] In one embodiment, the electronic circuit is configured to include in the access permission data: access control point permissions, which authorize the user of the mobile device to access at a specific access control point; and / or access control point time, which authorizes the user of the mobile device to access at a specific access control point at a specific time and / or within a specific time period.

[0010] In one embodiment, the electronic circuit is configured to transmit one or more update messages to the mobile device using an ultra-wideband transceiver, a Bluetooth transceiver, a WLAN transceiver, and / or a mobile cellular transceiver.

[0011] In one embodiment, the electronic circuit is further configured to: determine and store multiple distances of the mobile device from the access control terminal; use the multiple distances to determine a predicted path of the mobile device; and if the predicted path of the mobile device is within the proximity during a predetermined update period, transmit via the ultra-wideband transceiver one or more update messages configured to update the access permission data in the mobile device.

[0012] In addition to an access control terminal, the present invention also relates to a method for updating access rights between an access control terminal and a mobile device, the access control terminal comprising an electronic circuit and an ultra-wideband transceiver connected to the electronic circuit. The method comprises transmitting a request message to the mobile device by the electronic circuit via the ultra-wideband transceiver. The method also comprises receiving a response message from the mobile device by the electronic circuit via the ultra-wideband transceiver. The method also comprises using the response message in the electronic circuit to determine a distance of the mobile device from the access control terminal. The method also comprises: using the distance in the electronic circuit to determine whether the mobile device is within a predetermined proximity; and if the mobile device is within the predetermined proximity, transmitting from the electronic circuit to the mobile device one or more update messages configured to update access rights data in the mobile device.

[0013] In one embodiment, the method comprises using in the electronic circuit a time difference between transmitting a request message and receiving a response message to determine the distance.

[0014] In one embodiment, the method includes the electronic circuit including in the access permission data: access control point permissions, which authorize the user of the mobile device to access at a specific access control point; and / or access control point time, which authorizes the user of the mobile device to access at a specific access control point at a specific time and / or within a specific time period.

[0015] In one embodiment, the method further comprises transmitting, by the electronic circuitry, one or more update messages to the mobile device via an ultra-wideband transceiver, a Bluetooth transceiver, a WLAN transceiver, and / or a mobile cellular transceiver.

[0016] In one embodiment, the method further comprises determining and storing in the electronic circuit a plurality of distances of the mobile device from the access control terminal. The method further comprises using the plurality of distances to determine a predicted path of the mobile device. The method further comprises transmitting, via the ultra-wideband transceiver, one or more update messages configured to update access rights data in the mobile device if the predicted path of the mobile device is within the proximity during a predetermined update period.

[0017] In addition to the access control terminal and the method for updating access rights, the present invention also relates to a computer program product, the computer program product comprising a non-transitory computer-readable medium having computer code stored thereon, the computer code being configured to control a processor of an access control terminal comprising an ultra-wideband transceiver to perform the following operations: transmitting a request message to a mobile device via the ultra-wideband transceiver; and receiving a response message from the mobile device via the ultra-wideband transceiver. The computer code is further configured to control the processor to perform the following operations: using the response message to determine the distance of the mobile device from the access control terminal; and using the distance to determine whether the mobile device is within a predetermined proximity range. The computer code is further configured to control the processor to perform the following operations: if the mobile device is within the predetermined proximity range, transmitting to the mobile device one or more update messages configured to update access rights data in the mobile device.

[0018] In one embodiment, the computer program is configured to control the processor to determine the distance using in the electronic circuit a time difference between transmitting a request message and receiving a response message.

[0019] In one embodiment, the computer program is also configured to control the processor through the electronic circuit, and the access permission data includes: access control point permissions, which authorize the user of the mobile device to access at a specific access control point; and / or access control point time, which authorizes the user of the mobile device to access at a specific access control point at a specific time and / or within a specific time period.

[0020] In one embodiment, the computer program is further configured to control the processor to transmit one or more update messages to the mobile device via the ultra-wideband transceiver, the Bluetooth transceiver, the WLAN transceiver and / or the mobile cellular transceiver.

[0021] In one embodiment, the computer program is further configured to control the processor to determine and store in the electronic circuit a plurality of distances of the mobile device from the access control terminal. The computer program is further configured to control the processor to perform the following operations: determine a predicted path of the mobile device using the plurality of distances; and transmit, via the ultra-wideband transceiver, one or more update messages configured to update access rights data in the mobile device if the predicted path of the mobile device is within the proximity during a predetermined update period. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] The invention will be explained in more detail by way of example with reference to the accompanying drawings, in which:

[0023] Figure 1 A block diagram schematically illustrates the interaction between a mobile device and an access control terminal;

[0024] Figure 2 schematically illustrates a block diagram of a mobile device including a data storage device and an ultra-wideband transceiver interacting with an access control terminal including an electronic circuit, an ultra-wideband transceiver, a data storage device, and a processor;

[0025] Figure 3 A flow chart showing an exemplary sequence of steps for updating access rights between an access control terminal and a mobile device and / or transmitting event data from a mobile device to an access control terminal. DETAILED DESCRIPTION

[0026] exist Figure 1 , Figure 2 and Figure 3 , reference numeral 1 refers to an access control terminal as an electronic device, which is mounted on or in a wall near a door, gate or access control location or integrated into the door or gate itself. The access control terminal 1 also includes an electronic circuit 11 connected to an ultra-wideband transceiver 10. The access control terminal 1 includes an antenna 12 connected to the ultra-wideband transceiver 10. In one embodiment, the access control terminal 1 includes a plurality of antennas 12, which are arranged so that the direction of transmission from the mobile device 2 to the access control terminal 1 can be determined. The plurality of antennas 12 are arranged at a certain distance from each other so that the arrival times of transmissions from the mobile device 2 to the plurality of antennas 12 can be distinguished from each other.

[0027] exist Figure 1 , Figure 2 and Figure 3 , reference numeral 2 refers to a mobile device that is an electronic communication device, such as a mobile radiotelephone (cellular phone), a tablet computer, a laptop computer, a smart watch, or another operable portable / mobile electronic device that includes a battery-powered electronic circuit (e.g., a programmed processor and / or an application-specific integrated circuit (ASIC)).

[0028] Reference character d refers to the distance between the mobile device 2 and the access control terminal 1 .

[0029] Reference character T refers to ultra-wideband transmission between the mobile device 2 and the access control terminal 1 or between the access control terminal 1 and the mobile device 2 .

[0030] Reference character P refers to a proximity range, which is a distance from the access control terminal 1 or an area around, adjacent to, or near the access control terminal 1. For example, the proximity range P includes a room or corridor area. In one embodiment, the proximity range P extends to a distance of up to 5 meters from the access control terminal 1, preferably up to a distance of 10 meters, and more preferably up to a distance of 20 meters.

[0031] Reference numeral 2 refers to a mobile device located within the proximity range P of the access control terminal 1. Reference numeral 2' refers to a mobile device located outside the proximity range P of the access control terminal 1.

[0032] In one embodiment, the mobile device 2, 2' is carried by the user and can therefore be stationary or in motion relative to the access control terminal 1. The mobile device 2, 2' can be carried in the user's hand, but can also be carried in the user's clothing or accessories, such as in a pocket or handbag. Due to the nature of the ultra-wideband signal, the mobile device 2, 2' does not need to be within the line of sight of the access control terminal 1.

[0033] Reference numeral 3 refers to a network, specifically a wired or wireless network, which may include a plurality of networks, such as a local area network (LAN), a wireless local area network (WLAN), a cellular network (such as GSM) and the Internet.

[0034] Reference numeral 4 refers to an access rights mechanism, which is a computer system comprising a memory on which access rights data are stored. The computer system implementing the access rights mechanism 4 may be a virtual cloud-based system or a physical computer or server computer.

[0035] In the following paragraphs, reference is made to Figure 2 Described are additional modules and components of the mobile device 2 and the access control terminal 1 .

[0036] The mobile device 2 comprises an ultra-wideband transceiver 20, which is configured to communicate with the electronic circuit 11 of the access control terminal 1 via the antenna 12 and the ultra-wideband transceiver 10 via the antenna 22. The mobile device 2 comprises a data storage device 21, in particular a memory module such as a flash memory, an EEPROM or other non-volatile memory. The data storage device 21 has stored thereon access rights data 211, which comprises access control point rights 212 and access rights time 213. The access rights 212 are associated with the user. The user is also associated with the mobile device 2. If the user switches to using a different mobile device 2, an authentication process occurs, in which the association between the user and the different mobile device 2 is verified. If the association is positively verified, the access rights 212 in the mobile device 2 are set according to the user's access rights. The access control point rights 212 authorize the user of the mobile device 2 to access at specific access control points of the access control system. For example, the user may be authorized to access at a specific set of access control points, but not at other access control points. Such access control points may be doorways or gates. The access control point time 213 authorizes the user of the mobile device 2 to access a specific access control point at a specific time and / or within a specific period of time. For example, the access control point time 213 may authorize the user to access during normal business hours, or may authorize the user to access within a limited period of time (such as an hour or a day). The access control point time 213 may authorize the user to access only a limited number of times, such as once, or only a limited number of times within a given period of time, such as once per day.

[0037] In one embodiment, the data storage device 21 also includes event data 214 received by the mobile device 2 from the access control point. The event data 214 includes information about the status of a specific access control point and an access log file of the specific access control point. The status of a specific access control point indicates the battery level of the specific access control point, an error message describing an error or warning event of the specific access control point, or other diagnostic information, such as a hardware identifier and a software identifier. The access log file indicates which users' devices are subject to access control at a specific access control point. Specifically, the event data 214 includes an identifier associated with the specific access control point, a timestamp indicating the time when the event occurred, and / or an event type.

[0038] The access control terminal 1 includes a processor 14, specifically a microprocessor or an application specific integrated circuit (ASIC), and the access control terminal also includes a communication module (not shown) for communicating with the network 3. The access control terminal 1 also includes a data storage device 13, specifically a non-volatile memory, such as a flash memory or an EEPROM memory. The data storage device 13 includes an update message 131, which is a data file or data packet for updating the access permission data 211 in the mobile device 2 associated with the user.

[0039] In the following paragraphs, reference is made to Figure 3 Described are the steps, functions and operations performed by the access control terminal 1 or its processor 14 or electronic circuit 11 and the mobile device 2 respectively for exchanging and updating access rights in the mobile device 2 .

[0040] In step S1, the access control terminal 1 or its processor 14 or electronic circuit 11 respectively generates a request message. In one embodiment, the request message includes an identifier of the access control terminal 1 and a random number, where the random number is an arbitrary number used once.

[0041] In transmission T1, the request message is transmitted from the access control terminal 1 to the mobile device 2. The mobile device 2 receives the request message via the antenna 22 and the ultra-wideband transceiver 20 of the mobile device 2.

[0042] In step S2, the mobile device 2 generates a response message using the received request message. The response message includes the mobile device identifier of the mobile device 2 and the random number.

[0043] In transmission T2 , the response message is transmitted by the ultra-wideband transceiver 20 of the mobile device 2 and received by the ultra-wideband transceiver 10 of the access control terminal 1 .

[0044] In step S3, if the random number of the response message matches the random number of the request message, the electronic circuit 11 of the access control terminal 1 determines the distance d between the mobile device 2 and the access control terminal 1. In other embodiments, a secure protocol other than exchanging random numbers may be used to securely identify the mobile device 2 and determine the distance d in a manner that is free from man-in-the-middle or side-channel attacks.

[0045] The distance d is determined using a round-trip flight time calculation using the time difference between sending the request message and receiving the response message. The distance d is also determined using a processing time indicating a time delay between the mobile device 2 receiving the request message and transmitting the response message. In one embodiment, the access control terminal 1 includes multiple antennas 12, and determining the distance d also includes determining the transmission direction using multiple distances from the mobile device 2 to each of the antennas 12 by trilateration or by other geometric calculations.

[0046] In step S4, the distance d is used to determine whether the mobile device 2 is within the proximity range P. If the mobile device 2 is not within the proximity range P, the access control terminal 1 returns to step S1 and generates a new request message. In one embodiment, in the process of transmitting multiple request messages and receiving multiple response messages, the access control terminal 1 determines multiple locations of the mobile device 2 associated with a specific time and determines the path of the mobile device 2. By calculating the path, the access control terminal 1 predicts the future location of the mobile device 2 in order to determine whether the mobile device 2 will remain within the proximity range P at a given time.

[0047] In step S5, if the mobile device 2 is within the proximity range P or its predicted position is within the proximity range P, the processor 14 of the access control terminal 1 generates one or more update messages 131 for the corresponding mobile device 2 associated with the user. The update message 131 includes access rights data, including the access control point rights and access rights time of the user of the mobile device 2. The update message 131 is configured to update the access rights data 211 in the data storage device 21 of the mobile device 2. The update message 131 is generated using the mobile phone identifier of the mobile device 2 received in the response message. The update message 131 is generated by the processor 14 using the access rights data received from the access rights authority 4 via the network 3. The access rights data is segmented into one or more update messages 131 by the processor 14 according to the data size of the received access rights data and the size of the data payload of the ultra-wideband transmission. In one embodiment, the access rights authority 4 generates the update messages 131 and transmits them to the access control terminal 1, which stores them in the data storage device 13. In one or more transmissions T3 , the update message 131 is transmitted from the access control terminal 1 to the mobile device 2 via the ultra-wideband transceiver 20 of the mobile device 2 by the electronic circuit 11 and the ultra-wideband transceiver 10 .

[0048] Because the access permission data may be segmented into a plurality of update messages 131, before the access control terminal 1 starts transmitting the update message 131, the access control terminal 1 determines whether the mobile device 2 or its predicted position is within the proximity range P, respectively, as described above, at step S4. When the transmission and reception range of the ultra-wideband transmission T3 is greater than the proximity range P, it is ensured that the mobile device 2 successfully receives the update message 131 even if the user of the mobile device 2 is not stationary during the transmission of the update message 131. The access control terminal 1 is configured to continue transmitting the update message 131 even if the user of the mobile device 2 leaves the proximity range P during the transmission of the update message 131. This ensures a seamless update process because the user may be in motion when the access control terminal 1 transmits the update message 131.

[0049] The user does not have to handle the mobile device 2 or interact with the mobile device to have the mobile device 2 receive the update message 131. It is only necessary for the user carrying the mobile device 2 to enter the proximity range P. Specifically, the user does not have to present the mobile device 2 to the access rights terminal 1 to have the mobile device 2 receive the update message 131. This makes receiving the update message 131 user-friendly and efficient.

[0050] In step S6, the mobile device 2 updates the access rights data 211 using the received update message 131. The received update message includes the access rights data 211.

[0051] In one embodiment, at step S7, the mobile device 2 generates one or more event data messages. The event data messages include event data 214 received from one or more access control points and stored in the data storage device 21 .

[0052] In (optional) transmission T4, the mobile device 2 transmits one or more event data messages received by the access control terminal 1. The access control terminal 1 forwards the event data 214 to the access rights authority 4 via the network 3. The mobile device 2 transmits the event data 214 to the access control terminal 1 while receiving the update message 131 from the access control terminal 1, or transmits the event data 214 to the access control terminal 1 independently of receiving the update message 131. The event data 214 may also be transmitted from the mobile device 2 without receiving the update message 131.

[0053] Event data 214 is transmitted from the access control point to the access authority agency 4 via the data storage device 21 of the mobile device 2, the access control terminal 1 and the network 3, enabling the system administrator to receive information including the status of the access control point and the access log file when the access control point is not directly connected to the network 3.

[0054] In step S8, after updating the access rights data 211, the mobile device 2 generates a confirmation message comprising the mobile phone identifier of the user's mobile device 2. The confirmation message is transmitted from the mobile device 2 and received by the access control terminal 1 in transmission T5.

Claims

1. An access control terminal (1) for an access control point, the access control terminal comprising an electronic circuit (11) and an ultra-wideband transceiver (10) connected to the electronic circuit (11); wherein the electronic circuit (11) is configured to: transmit (T1) a request message to a mobile device (2) via the ultra-wideband transceiver (10); receive (T2) a response message from the mobile device (2) via the ultra-wideband transceiver (10); use the response message to determine (S3) a distance (d) between the mobile device (2) and the access control terminal (1); use the distance (d) to determine (S4) whether the mobile device (2) is within a predetermined proximity range (P); and if the mobile device (2) is within the predetermined proximity range (P), transmit (T3) to the mobile device (2) one or more update messages (131) configured to update (S6) access rights data (211) in the mobile device (2); The electronic circuit (11) is configured to include in the access rights data (211) access control point rights (212), the access control point rights authorizing a user of the mobile device (2) to access at a specific access control point; Determining (S3) and storing a plurality of distances (d) between the mobile device (2) and the access control terminal (1); using the plurality of distances (d) to determine a predicted path of the mobile device; and transmitting (T3) via the ultra-wideband transceiver (10) the one or more update messages (131) configured to update the access rights data (211) in the mobile device (2) if the predicted path of the mobile device (2) is within the proximity range (P) during a predetermined update period.

2. The access control terminal (1) according to claim 1, wherein: The electronic circuit (11) is configured to determine (S3) the distance (d) using a time difference between transmitting (T1) the request message and receiving (T2) the response message.

3. The access control terminal (1) according to claim 1 or 2, wherein: The electronic circuit (11) is configured to also include in the access permission data (211) an access control point time (213), the access control point time authorizing the user of the mobile device (2) to access at a specific access control point at a specific time and / or within a specific period of time.

4. The access control terminal (1) according to claim 1 or 2, wherein: The electronic circuit (11) is configured to transmit (T3) one or more update messages (131) to the mobile device (2) using at least one of: the ultra-wideband transceiver (10), a Bluetooth transceiver, a WLAN transceiver, a mobile cellular transceiver.

5. A method for updating access rights between an access control terminal (1) and a mobile device (2), the access control terminal (1) comprising an electronic circuit (11) and an ultra-wideband transceiver (10) connected to the electronic circuit (11), wherein: The method comprises: The electronic circuit (11) transmits (T1) a request message to the mobile device via the ultra-wideband transceiver (10); receiving (T2) a response message from the mobile device (2) via the ultra-wideband transceiver (10) by the electronic circuit (11); using the response message in the electronic circuit (11) to determine (S3) a distance (d) between the mobile device (2) and the access control terminal (1); using the distance (d) in the electronic circuit (11) to determine (S4) whether the mobile device (2) is within a predetermined proximity range (P); and if the mobile device (2) is within the predetermined proximity range (P), transmitting (T3) from the electronic circuit (11) to the mobile device (2) one or more update messages (131) configured to update access rights data (211) in the mobile device (2); The electronic circuit (11) includes in the access rights data (211) access control point rights (212), the access control point rights authorizing the user of the mobile device (2) to access at a specific access control point; determining and storing in the electronic circuit (11) a plurality of distances (d) between the mobile device (2) and the access control terminal (1); determining a predicted path for the mobile device using the plurality of distances (d); and If the predicted path of the mobile device (2) is within the proximity range (P) during a predetermined update period, transmitting (T3) via the ultra-wideband transceiver (10) the one or more update messages (131) configured to update the access rights data (211) in the mobile device (2).

6. The method according to claim 5, wherein: The method comprises determining (S3) the distance (d) in the electronic circuit (11) using a time difference between transmitting (T1) the request message and receiving (T2) the response message.

7. The method according to claim 5 or 6, wherein: The method comprises: The electronic circuit (11) includes at least one of the following in the access permission data (211): an access control point permission (212), which authorizes the user of the mobile device (2) to access at a specific access control point; and an access control point time (213), which authorizes the user of the mobile device (2) to access at a specific access control point at a specific time and / or within a specific time period.

8. The method according to claim 5 or 6, wherein: The method also includes the electronic circuit (11) transmitting (T3) one or more update messages (131) to the mobile device (2) via at least one of: the ultra-wideband transceiver (10), a Bluetooth transceiver, a WLAN transceiver, a mobile cellular transceiver.

9. A computer program product comprising a non-transitory computer readable medium having computer code stored thereon, the computer code being configured to control a processor (14) of an access control terminal (1) comprising an ultra-wideband transceiver (10) so that the processor (14) performs the following steps: transmitting (T1) a request message to a mobile device (2) via the ultra-wideband transceiver (10); receiving (T2) a response message from the mobile device (2) via the ultra-wideband transceiver (10); using the response message to determine (S3) a distance (d) between the mobile device (2) and the access control terminal (1); using the distance (d) to determine (S4) whether the mobile device (2) is within a predetermined proximity range (P); as well as transmitting (T3) to the mobile device (2) one or more update messages (131) configured to update access rights data (211) in the mobile device (2), if the mobile device (2) is within the predetermined proximity range (P); and comprising an electronic circuit (11), The electronic circuit (11) includes in the access permission data (211) access control point permissions (212), the access control point permissions authorizing the user of the mobile device (2) to access at a specific access control point; determining and storing in the electronic circuit (11) a plurality of distances (d) between the mobile device (2) and the access control terminal (1); determining a predicted path of the mobile device using the plurality of distances (d); as well as If the predicted path of the mobile device (2) is within the proximity range (P) during a predetermined update period, transmitting (T3) via the ultra-wideband transceiver (10) the one or more update messages (131) configured to update the access rights data (211) in the mobile device (2).

10. The computer program product according to claim 9, wherein: The computer code is configured to control the processor (14) to perform the following steps: determining (S3) the distance (d) in the electronic circuit (11) using a time difference between transmitting (T1) the request message and receiving (T2) the response message.

11. The computer program product according to claim 9 or 10, wherein: The computer code is further configured to control the processor to perform the following steps: The electronic circuit (11) includes at least one of the following in the access permission data (211): an access control point permission (212), which authorizes the user of the mobile device (2) to access at a specific access control point; and an access control point time (213), which authorizes the user of the mobile device (2) to access at a specific access control point at a specific time and / or within a specific time period.

12. The computer program product according to claim 9 or 10, wherein: The computer code is also configured to control the processor to perform the following steps: transmitting (T3) one or more update messages (131) to the mobile device (2) via at least one of: the ultra-wideband transceiver (10), Bluetooth transceiver, WLAN transceiver, mobile cellular transceiver.

Images