Multi-factor authentication electronic lock system and method of use thereof

Abstract

The present invention relates to a multiple authentication electronic lock, a multiple authentication electronic lock system, and a method of using a multiple authentication electronic lock system. The multiple authentication electronic lock comprises a user presence detection system, a biometric authentication system, and a multiple authentication electronic lock controller. When a user approaches the multiple authentication electronic lock, the user presence detection system detects the presence of the user and verifies whether the detected user is a registered authorized user. When the user presence detection system confirms that the detected user is a registered authorized user, the other components of the multiple authentication electronic lock, including the biometric authentication system and the multiple authentication electronic lock controller, are powered on, and the biometric authentication system further verifies the detected authorized user. The multiple authentication electronic lock can only be operated when the biometric authentication system again verifies that the detected authorized user is a registered authorized user.

Description

TECHNICAL FIELD

[0001] The present invention relates to electronic locks, and more particularly to a multi-factor authentication electronic lock, a multi-factor authentication electronic lock system, and a method of using a multi-factor authentication electronic lock system. BACKGROUND

[0002] Many electronic door locks are powered by batteries, and the battery life of these electronic door locks is generally not long. At present, most electronic door locks on the market have fingerprint electronic locks, finger vein electronic locks, face recognition electronic locks, and keyboard electronic locks. These electronic locks only use one type of identity verification method, and they are easy to be defeated. For example, fingerprints can be copied, and users can be forced to use fingerprints or finger veins at gunpoint. Users' faces can be forged using masks, and passwords can be stolen using nearby video cameras. Therefore, a new type of electronic door lock with low power consumption and enhanced security is ideal.

[0003] Therefore, there is still an unsolved need in the art to address the aforementioned deficiencies and shortcomings. SUMMARY

[0004] In one aspect, the present invention relates to a multi-factor authentication electronic lock. In certain embodiments, the multi-factor authentication electronic lock comprises a user presence detection system, a biometric authentication system, and a multi-factor authentication electronic lock controller.

[0005] In certain embodiments, the multi-factor authentication electronic lock controller contains a battery. The multi-factor authentication electronic lock controller is used to register a plurality of authorized users, store information of these registered authorized users, and control the operation of the multi-factor authentication electronic lock.

[0006] In certain embodiments, the user presence detection system is powered by the battery at all times. The user presence detection system detects the presence of a user through a user presence detection device of the user presence detection system, and preliminarily verifies whether the detected user is one of the registered authorized users through the user presence detection device of the user presence detection system.

[0007] In certain embodiments, the biometric authentication system further verifies the detected authorized user through a biometric authentication device, and the biometric authentication system is powered on only after the user presence detection device detects an authorized user and preliminarily verifies that the authorized user is one of the registered authorized users.

[0008] When a user approaches the multi-factor authentication electronic lock, the user presence detection system detects whether the user is one of the registered authorized users. Once the user is determined to be one of the registered authorized users, the biometric verification system and other components of the multi-factor authentication electronic lock are powered on, and the biometric verification system further verifies the detected authorized user. The multi-factor authentication electronic lock can only be operated when the detected authorized user is again verified by the biometric verification system.

[0009] In some embodiments, the user presence detection system includes a set of user presence detection devices and a set of user preliminary verification devices. The set of user presence detection devices includes a passive infrared motion detection device, a radio frequency Doppler motion detection device, and a video camera with human detection capability. The user presence detection devices detect the user's approach and presence within a predetermined range of the multi-factor authentication electronic lock. The user preliminary verification devices include a keypad for entering a user identification number (UID) and a Bluetooth user verification module for contacting a handheld mobile communication device of the detected user. The user preliminary verification devices verify whether the user detected by the user presence detection devices is one of the registered authorized users. Once the user is determined to be one of the registered authorized users, the biometric verification system is powered on and further verifies the detected authorized user.

[0010] In some embodiments, the biometric verification system includes one or more of a fingerprint verification sensor, a finger vein verification sensor, a facial recognition verification sensor, and a keypad. The fingerprint verification sensor verifies the detected authorized user using fingerprint information stored in the authorized user information storage module. The finger vein verification sensor verifies the detected authorized user using finger vein information stored in the authorized user information storage module. The facial recognition verification sensor verifies the detected authorized user using facial recognition information stored in the authorized user information storage module. The keypad is used for the user to input a personal identification password. The keypad verifies the detected authorized user using the personal identification password corresponding to the user's identity data stored in the authorized user information storage module. Once the detected user is determined to be one of the registered authorized users, the biometric verification system is powered on and further verifies the detected authorized user. The multi-factor authentication electronic lock can only be operated when the detected authorized user is again verified by the biometric verification system.

[0011] In some embodiments, the user information of registered authorized users stored in the authorized user information storage module includes at least: user name, user's contact phone number, user's email address, user's handheld mobile communication device's MAC address for authenticating the detected user through the Bluetooth user authentication module, user identification number UID for verifying whether the user is one of the registered authorized users, user identification password PIN for verifying that the detected authorized user has the corresponding user identification number, user fingerprint authentication data used by the fingerprint authentication sensor for verifying that the detected authorized user is one of the registered authorized users, user finger vein authentication data used by the finger vein authentication sensor for verifying that the detected authorized user is one of the registered authorized users, and user face recognition authentication data used by the face recognition authentication sensor for verifying that the detected authorized user is one of the registered authorized users. Various combinations of the above data can also be included.

[0012] In some embodiments, the face recognition authentication sensor further includes: a speaker, and a multi-color light emitting diode (LED). The speaker is used to prompt the user to move the user's face to a predetermined position so that the face recognition authentication sensor can obtain one or more images of the user's face within a predetermined range for face recognition. The multi-color LED lights up green when the user's face enters the predetermined range for face recognition. The multi-color LED lights up red when the user's face moves out of the predetermined range for face recognition.

[0013] In some embodiments, the face recognition authentication sensor further includes a display screen. The display screen is used to help the user move the user's face to a predetermined position so that the face recognition authentication sensor can obtain one or more images of the user's face within a predetermined range for face recognition.

[0014] In some embodiments, the multi-factor authentication electronic lock controller includes: a processor, a non-volatile memory storing an operating system and computer executable instructions. The computer executable instructions include: a user detection module, a communication module, a user authentication module, a power module, an authorized user information storage module, and an electronic lock control module.

[0015] In some embodiments, when the computer executable instructions are executed on the processor, the computer executable instructions cause the processor to perform one or more of the following functions:

[0016] The user presentation detection system is powered by the power module and the battery;

[0017] The user presentation detection device detects the user when the user enters the vicinity of the multi-factor authentication electronic lock;

[0018] The user preliminary verification device identifies whether the detected user is one of the registered authorized users of the multi-authentication electronic lock;

[0019] When the user preliminary verification device confirms that the detected user is one of the registered authorized users of the multi-authentication electronic lock, the power module and the battery supply power to the remaining components of the multi-authentication electronic lock;

[0020] The biometric verification system authenticates the detected authorized user by detecting whether the biometric information of the detected authorized user matches the registered authorized user's biometric information stored in the authorized user information storage module; and

[0021] The multi-authentication electronic lock can be operated by the electronic lock control module only when the detected authorized user is again determined by the biometric verification system to be one of the registered authorized users.

[0022] In some embodiments, the face recognition authentication sensor can determine whether more than one user approaches the multi-authentication electronic lock. When the multi-authentication electronic lock is set to accept only one user to operate the multi-authentication electronic lock, the multi-authentication electronic lock can be closed.

[0023] In some embodiments, the computer executable instructions of the multi-authentication electronic lock controller include a user detection module, a communication module, a user authentication module, a power module, an authorized user information storage module, and an electronic lock control module.

[0024] In some embodiments, the user detection module is connected to the user presence detection system and confirms whether the detected user in front of the multi-authentication electronic lock is one of the registered authorized users. The communication module includes at least one Bluetooth module that contacts the detected authorized user's handheld mobile communication device to verify the detected authorized user. The user authentication module is connected to the biometric verification system to authenticate the detected authorized user, uses the communication module when the detected authorized user carries the user's handheld mobile communication device, and uses a keyboard and the detected authorized user's user identification password when the detected authorized user does not carry the user's handheld mobile communication device.

[0025] In some embodiments, the power module provides power from the battery to the user presentation detection system at all times, and the power module provides power to the remaining components of the multiple authentication electronic lock when the user presentation detection system determines that the user detected in front of the multiple authentication electronic lock is one of the registered authorized users. The authorized user information storage module stores user information of all registered authorized users, where the user information of all registered authorized users is inputted into the authorized user information storage module during the registration process. The electronic lock control module controls the locking and unlocking of the multiple authentication electronic lock only when the detected user is verified by the user presentation detection system and further verified by the biometric verification system to be one of the registered authorized users.

[0026] In another aspect, the present application relates to a multiple authentication electronic lock system. In some embodiments, the multiple authentication electronic lock system comprises a multiple authentication electronic lock system server, a communication network, and a set of multiple authentication electronic locks. The multiple authentication electronic lock system server comprises a user information database. Each of the multiple authentication electronic locks comprises a user presentation detection system, a biometric verification system, and a multiple authentication electronic lock controller.

[0027] In some embodiments, the multiple authentication electronic lock controller comprises a battery. The multiple authentication electronic lock controller is used to register authorized users, store information of the registered authorized users, and control the operation of the multiple authentication electronic lock.

[0028] In some embodiments, the user presentation detection system is powered by the battery at all times. The user presentation detection system detects the presence of a user through a user presence detection device of the user presentation detection system, and preliminarily verifies whether the detected user is one of the registered authorized users through a user preliminary verification device of the user presentation detection system.

[0029] In some embodiments, the biometric verification system further verifies the detected authorized user through a biometric verification device. The biometric verification system is powered only after the authorized user is detected by the user presence detection device and preliminarily verified to be one of the registered authorized users.

[0030] When a user approaches the multiple authentication electronic lock, the user presentation detection system detects whether the user is one of the registered authorized users. Once the user is confirmed to be one of the registered authorized users, the biometric verification system and the other components of the multiple authentication electronic lock are powered, and the biometric verification system further verifies the detected authorized user. The multiple authentication electronic lock can only be operated when the detected authorized user is further verified by the biometric verification system.

[0031] In some embodiments, the user presence detection system comprises a set of user presence detection devices and a set of user preliminary authentication devices. The set of user presence detection devices comprises a passive infrared motion detection device, a radio frequency Doppler motion detection device, and a video camera with human detection function. The user presence detection devices detect the presence of a user within a pre-set range of the multi-factor authentication electronic lock. The user preliminary authentication devices comprise a keypad for entering a user identification number (UID) and a Bluetooth user authentication module for contacting a detected user's handheld mobile communication device. The user preliminary authentication devices verify whether the user detected by the user presence detection devices is one of the registered authorized users, and once the user is confirmed to be one of the registered authorized users, the biometric authentication system is powered on and further verifies the detected authorized user.

[0032] In some embodiments, the biometric authentication system comprises at least one or more of a fingerprint authentication sensor, a finger vein authentication sensor, a facial recognition authentication sensor, and a keypad. The fingerprint authentication sensor authenticates the detected authorized user using fingerprint information stored in the authorized user information storage module. The finger vein authentication sensor authenticates the detected authorized user using finger vein information stored in the authorized user information storage module. The facial recognition authentication sensor authenticates the detected authorized user using facial recognition information stored in the authorized user information storage module. The keypad is used for user to enter a personal identification password. The keypad authenticates the detected authorized user using the personal identification password corresponding to the user's identity data stored in the authorized user information storage module. After the user is determined to be one of the registered authorized users, the biometric authentication system is powered on and further verifies the detected authorized user, and the multi-factor authentication electronic lock is operable only when the detected authorized user is again verified by the biometric authentication system.

[0033] In some embodiments, the user information of registered authorized users stored in the authorized user information storage module includes at least: user name, user's contact phone number, user's email address, user's handheld mobile communication device's MAC address for authenticating the detected user through the Bluetooth user authentication module, user identification number UID for verifying whether the user is one of the registered authorized users, user identification password PIN for verifying that the detected authorized user has the corresponding user identification number, user fingerprint authentication data used by the fingerprint authentication sensor for verifying that the detected authorized user is one of the registered authorized users, user finger vein authentication data used by the finger vein authentication sensor for verifying that the detected authorized user is one of the registered authorized users, and user face recognition authentication data used by the face recognition authentication sensor for verifying that the detected authorized user is one of the registered authorized users. Various combinations of the above data can also be included.

[0034] In some embodiments, the face recognition authentication sensor further includes: a speaker, and a multi-color light emitting diode (LED). The speaker is used to prompt the user to move the user's face to a predetermined position so that the face recognition authentication sensor can obtain one or more images of the user's face within a predetermined range for face recognition. The multi-color LED lights up green when the user's face enters the predetermined range for face recognition. The multi-color LED lights up red when the user's face moves out of the predetermined range for face recognition.

[0035] In some embodiments, the face recognition authentication sensor further includes a display screen. The display screen is used to help the user move the user's face to a predetermined position so that the face recognition authentication sensor can obtain one or more images of the user's face within a predetermined range for face recognition.

[0036] In some embodiments, the multi-factor authentication electronic lock controller includes: a processor, a non-volatile memory storing an operating system and computer executable instructions. The computer executable instructions include: a user detection module, a communication module, a user authentication module, a power module, an authorized user information storage module, and an electronic lock control module.

[0037] In some embodiments, when the computer executable instructions are executed on the processor, the computer executable instructions cause the processor to perform one or more of the following functions:

[0038] The user presentation detection system is powered by the power module and the battery;

[0039] The user presentation detection device detects the user when the user enters the vicinity of the multi-factor authentication electronic lock;

[0040] The user preliminary verification device identifies whether the detected user is one of the registered authorized users of the multi-authentication electronic lock;

[0041] When the user preliminary verification device confirms that the detected user is one of the registered authorized users of the multi-authentication electronic lock, the power module and the battery supply power to the remaining components of the multi-authentication electronic lock;

[0042] The biometric verification system authenticates the detected authorized user by detecting whether the biometric information of the detected authorized user matches the registered authorized user's biometric information stored in the authorized user information storage module; and

[0043] The electronic lock control module operates the multi-authentication electronic lock only when the detected authorized user is again determined by the biometric verification system to be one of the registered authorized users.

[0044] In some embodiments, the face recognition authentication sensor can determine whether more than one user approaches the multi-authentication electronic lock. When the multi-authentication electronic lock is set to accept only one user to operate the multi-authentication electronic lock, the multi-authentication electronic lock can be closed.

[0045] In some embodiments, the computer executable instructions of the multi-authentication electronic lock controller include a user detection module, a communication module, a user authentication module, a power module, an authorized user information storage module, and an electronic lock control module.

[0046] In some embodiments, the user detection module is connected to the user presence detection system and confirms whether the detected user in front of the multi-authentication electronic lock is one of the registered authorized users. The communication module includes at least one Bluetooth module that contacts the detected authorized user's handheld mobile communication device to verify the detected authorized user, and a wireless communication module that communicates with the server of the multi-authentication electronic lock system. The user authentication module is connected to the biometric verification system, and when the detected authorized user carries the user's handheld mobile communication device, the communication module is used to authenticate the detected authorized user, and when the detected authorized user does not carry the user's handheld mobile communication device, the keyboard and the user identification password of the detected authorized user are used to authenticate the detected authorized user.

[0047] In certain embodiments, the power module always provides power to the user presentation detection system from the battery, and when the user presentation detection system determines that the user detected in front of the multiple authentication electronic lock is one of the registered authorized users, the battery provides power to the rest of the components of the multiple authentication electronic lock. The authorized user information storage module stores the user information of all registered authorized users, where the user information of all registered authorized users is inputted into the authorized user information storage module during the registration process. The electronic lock control module controls the locking and unlocking of the multiple authentication electronic lock only when the detected user is verified by the user presentation detection system and the biometric verification system as one of the registered authorized users.

[0048] In yet another aspect, the present application relates to a method of using a multiple authentication electronic lock system. In certain embodiments, the method of using a multiple authentication electronic lock system comprises:

[0049] A system administrator installs a set of multiple authentication electronic lock system, registers all authorized users of a set of multiple authentication electronic locks using at least a Bluetooth-enabled handheld mobile communication device, and inputs the user information of all registered authorized users, where the multiple authentication electronic lock system comprises: a multiple authentication electronic lock system server with a user information database, a communication network, and the set of multiple authentication electronic locks;

[0050] For each multiple authentication electronic lock, a battery of the multiple authentication electronic lock provides power to a user presentation detection system, and detects any person approaching the multiple authentication electronic lock;

[0051] Detects any person approaching the multiple authentication electronic lock by one of the user presentation detection devices of the user presentation detection system, and verifies whether the detected user is one of the registered authorized users by one of the user preliminary verification devices of the user presentation detection system once a user is detected within a pre-set range of the multiple authentication electronic lock;

[0052] When the detected user is one of the registered authorized users, the battery of the multiple authentication electronic lock provides power to the rest of the components of the multiple authentication electronic lock, and performs identity verification using one of the biometric user verification devices of the biometric verification system; and

[0053] Operates the multiple authentication electronic lock by the electronic locking mechanism of the multiple authentication electronic lock only when the detected authorized user is verified by the biometric verification system of the multiple authentication electronic lock as one of the registered authorized users.

[0054] In some embodiments, the user presence detection system comprises a set of user presence detection devices and a set of user preliminary authentication devices. The set of user presence detection devices comprises a passive infrared motion detection device, a radio frequency Doppler motion detection device, and a video camera with human detection capability. The user presence detection devices detect the presence of a user within a pre-determined range of the multi-factor authentication electronic lock. The user preliminary authentication devices comprise a keypad for entering a user identification number (UID) and a Bluetooth user authentication module for contacting a detected user's handheld mobile communication device. The user preliminary authentication devices verify whether the user detected by the user presence detection devices is one of the registered authorized users. Upon determining that the user is one of the registered authorized users, the biometric authentication system is powered on and further verifies the detected authorized user.

[0055] In some embodiments, the biometric authentication system comprises one or more of a fingerprint authentication sensor, a finger vein authentication sensor, a facial recognition authentication sensor, and a keypad. The fingerprint authentication sensor authenticates the detected authorized user using fingerprint information stored in the authorized user information storage module. The finger vein authentication sensor authenticates the detected authorized user using finger vein information stored in the authorized user information storage module. The facial recognition authentication sensor authenticates the detected authorized user using facial recognition information stored in the authorized user information storage module. The keypad is used for user to enter a personal identification password. The keypad authenticates the detected authorized user using the personal identification password corresponding to the user's identity data stored in the authorized user information storage module. Upon determining that the detected user is one of the registered authorized users, the biometric authentication system is powered on and further verifies the detected authorized user. The multi-factor authentication electronic lock is operable only when the detected authorized user is further verified by the biometric authentication system.

[0056] These and other aspects of the present application will become apparent from the following description of preferred embodiments obtained with the help of the following drawings, but variations and modifications can be resorted to without departing from the spirit and scope of the inventive concept. BRIEF DESCRIPTION OF DRAWINGS

[0057] The accompanying drawings are included to provide a further understanding of the principles of the application and illustrate embodiments of the present application. Wherever possible, the same reference numerals will be used throughout the drawings to refer to the same or like elements. The drawings are not necessarily to scale, emphasis instead being placed upon illustrating the principles of the application. In the drawings:

[0058] Figure 1According to some embodiments of the present application a schematic view of a multiple authentication electronic lock is shown;

[0059] Figure 2 According to some embodiments of the present application a block diagram of a multiple authentication electronic lock is shown;

[0060] Figure 3 According to some embodiments of the present application a block diagram of a user presence detection system of a multiple authentication electronic lock is shown;

[0061] Figure 4 According to one embodiment of the present application a front view of a multiple authentication electronic lock is shown;

[0062] Figure 5 According to another embodiment of the present application a front view of a multiple authentication electronic lock is shown;

[0063] Figure 6 According to yet another embodiment of the present application a front view of a multiple authentication electronic lock is shown;

[0064] Figure 7 According to some embodiments of the present application a front view of two handheld mobile communication devices at least with Bluetooth communication module and wireless communication module is shown;

[0065] Figure 8 According to some embodiments of the present application a schematic view of a multiple authentication electronic lock system is shown;

[0066] Figure 9 According to some embodiments of the present application a flowchart of a method of using a multiple authentication electronic lock system is shown. DETAILED DESCRIPTION

[0067] The present disclosure is more particularly described in the following examples that are intended to be illustrative only, as numerous modifications and variations within the scope of the present disclosure will be apparent to those skilled in the art. Various embodiments of the present disclosure are now described in detail. Referring to the drawings, like numbers that identify like components, if any, are in the various views of the drawings. The description of aspects of the disclosure herein and throughout the claims that follow are used to illustrate, among other norms, the terms used. Furthermore, as used in the description herein and throughout the claims that follow, the meaning of "in" includes "in" and "on" unless the context clearly dictates otherwise. Additionally, titles or subtitles can be used in the specification for the convenience of a reader, which are not intended to limit the scope of the application. Moreover, some terminology used in the specification includes the more particular synonyms chosen for clarity and avoidance of confusion.

[0068] The terms used in the specification generally have their ordinary meanings in the art, in the context of the disclosure, and in the specific context of each term's usage. Certain terms used to describe the present disclosure are discussed below or elsewhere in the specification, to provide additional guidance to the practitioner in relation to the description of the present disclosure. For convenience, certain terms can be highlighted, such as using italics and / or quotation marks. The use of highlighting has no influence on the scope and meaning of a term. The scope and meaning of a term are the same, in the same context, whether or not highlighted. It can be appreciated that the same thing can be said in more than one way. Consequently, alternative language and synonyms can be used for any one or more terms discussed herein, and no special significance is to be placed upon whether or not a term is elaborately recited herein. Synonyms for certain terms are provided. Recitation of one or more synonyms does not exclude the use of other synonyms. The use of examples anywhere in this specification, including examples of any terms discussed herein, is illustrative only, and in no way limits the scope and meaning of the disclosure or of any exemplified term. Likewise, the disclosure is not limited to the various embodiments given in this specification.

[0069] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure belongs. In case of conflict, the document, including definitions, controls.

[0070] As used herein, "about" generally means within 20%, preferably within 10%, and more preferably within 5% of a given value or range. Numerical amounts given herein are approximations, meaning that if an exact number is not specified, the term "about" can be inferred.

[0071] As used herein, "a plurality" refers to two or more.

[0072] As used herein, the terms "comprises", "comprising", "includes", "including", "carrying", "has", "having", "contains", "containing", "uninvolved", and the like can be understood to be open-ended, i.e., to mean including but not limited to.

[0073] As used herein, the term digital key is defined as a digital code stored in a physical electronic key to operate an electronic lock electronically. An active electronic key can store an active digital key, while a passive electronic key can store a passive digital key. To improve the security of the electronic lock, the digital keys can be encrypted during the transmission of the digital keys between the electronic key and the electronic lock.

[0074] As used herein, the phrase at least one of A, B, and C should be interpreted to mean logical (A or B or C) using non-exclusive logical OR. It will be understood that one or more steps within a method can be executed in different order (or concurrently) without altering the principles of the present disclosure.

[0075] As used herein, the term module can refer to, be part of, or include an Application Specific Integrated Circuit (ASIC); an electronic circuit; a combinational logic circuit; a field programmable gate array (FPGA); an electronic key processor (shared, dedicated, or group) that executes code; other suitable hardware components that provide the described functionality; or a combination of the foregoing, such as in a system-on-chip. The term module can include memory (shared, dedicated, or group) that stores code, which is executed by the electronic key processor.

[0076] The term code, as used above, can include software, firmware, and / or microcode, and can refer to programs, routines, functions, classes, and / or objects. The term shared, as used above, means that some or all code from multiple modules can be executed using a single (shared) electronic key processor. Further, some or all code from multiple modules can be stored in a single (shared) memory. The term group, as used above, means that some or all code from a single module can be executed using a group of electronic key processors. Further, some or all code from a single module can be stored using a group of memories.

[0077] The apparatuses and methods described herein can be implemented by one or more computer programs executed by one or more electronic key processors. The computer programs include electronic key processor executable instructions stored on a non-transitory tangible computer readable medium. The computer programs can also include stored data. Non-limiting examples of non-transitory tangible computer readable media are nonvolatile memory, magnetic storage, and optical storage.

[0078] The present disclosure will now be described more fully with reference to the accompanying drawings, in which embodiments of the present disclosure are shown. The present disclosure may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and fully convey the scope of the disclosure to those skilled in the art. Like numbers refer to like elements throughout.

[0079] In one aspect, as shown in FIG. 1, the present disclosure relates to a self-contained multiple identity verification electronic lock 100. In certain embodiments, the multiple identity verification electronic lock 100 includes a user presence detection system 110, a biometric verification system 120, and a multiple identity verification electronic lock controller 130. Figures 1 to 7 In certain embodiments, the multiple identity verification electronic lock controller 130 contains a battery 136. The multiple identity verification electronic lock controller 130 is used to register multiple authorized users, store information of the authorized users, and control the operation of the multiple identity verification electronic lock 100.

[0080] In certain embodiments, the multiple identity verification electronic lock controller 130 contains a battery 136. The multiple identity verification electronic lock controller 130 is used to register multiple authorized users, store information of the authorized users, and control the operation of the multiple identity verification electronic lock 100.

[0081] In certain embodiments, the user presence detection system 110 detects the presence of a user using one of a set of user presence detection devices 112 of the user presence detection system 110, and preliminarily authenticates the detected user as one of a set of registered authorized users using one of a set of user preliminary authentication devices 114 of the user presence detection system 110. In certain embodiments, the biometric authentication system 120 further authenticates the detected authorized user using a set of biometric authentication devices after the authorized user is detected by the user presence detection devices 112 and preliminarily authenticated as one of the set of registered authorized users, the biometric authentication system 120 is powered on.

[0082] The user presence detection system 110 is continuously powered by the battery 136, and the rest of the multi-factor authentication electronic lock 100 including the biometric authentication system 120 and the multi-factor authentication electronic lock controller 130 is only powered during the operation of the multi-factor authentication electronic lock 100 when the user presence detection system 110 preliminarily determines that the user detected by the user presence detection system 110 is one of the set of registered authorized users. Once the operation of the multi-factor authentication electronic lock 100 is completed, the rest of the multi-factor authentication electronic lock 100 including the biometric authentication system 120 and the multi-factor authentication electronic lock controller 130 is powered off to save power and prolong the life of the battery 136.

[0083] In certain embodiments, when a user approaches the multi-factor authentication electronic lock 100, the user presence detection system 110 detects whether the detected user is one of the set of registered authorized users, once the user is determined to be one of the set of registered authorized users, the biometric authentication system 120 and the rest of the multi-factor authentication electronic lock 100 are powered on, the biometric authentication system 120 further authenticates the detected authorized user. Only when the detected authorized user is again confirmed by the biometric authentication system 120, the multi-factor authentication electronic lock 100 is operable.

[0084] In certain embodiments, as shown in FIG. 1, the user presence detection system 110 includes a set of user presence detection devices 112, and a set of user preliminary authentication devices 114. The set of user presence detection devices 112 includes a passive infrared motion detection device 1121, as shown in FIG. 2, a radio frequency Doppler motion detection device 1122, as shown in FIG. 3, and a video camera with human detection function 1123, as shown in FIG. 4. Figure 3 Figure 4 Figure 5 Figure 4 Figure 5 ​​​​The user presence detection device 112 detects the user's proximity and presence within a preset range of the multi-authentication electronic lock 100. The user preliminary verification device 114 includes a keypad 124 for entering a user identification number (UID), as shown in Figure 6 The user presence detection device 112 detects the user's proximity and presence within a preset range of the multi-authentication electronic lock 100. The user preliminary verification device 114 includes a keypad 124 for entering a user identification number (UID), as shown in Figures 4 to 6 The user presence detection device 112 detects the user's proximity and presence within a preset range of the multi-authentication electronic lock 100. The user preliminary verification device 114 includes a keypad 124 for entering a user identification number (UID), as shown in

[0085] In some embodiments, when the user does not carry a handheld mobile communication device 201 with a Bluetooth module, the user can enter his user identification number (UID) using the keypad 124 to pass the preliminary authentication of the presence detection system 110. Once the user is confirmed to be one of the registered authorized users, the biometric verification system is powered on and further verifies the detected authorized user.

[0086] In some embodiments, the biometric verification system 120 includes at least one or more of a fingerprint authentication sensor 121, as shown in Figure 5 a finger vein authentication sensor 122, as shown in Figure 4 a face recognition authentication sensor 123, as shown in Figures 4 to 6 and a keypad 124, as shown in Figure 6 The fingerprint authentication sensor 121 uses the fingerprint information stored in the authorized user information storage module 13445 to authenticate the detected authorized user. The finger vein authentication sensor 122 uses the finger vein information stored in the authorized user information storage module 13445 to authenticate the detected authorized user. The face recognition authentication sensor 123 uses the face recognition information stored in the authorized user information storage module 13445 to authenticate the detected authorized user.

[0087] In some embodiments, when the user does not carry the handheld mobile communication device 201 with the Bluetooth module, the keyboard 124 can be used by the user to input his / her personal identification password for secondary verification by the biometric authentication system 120. Once the user is determined to be one of the registered authorized users, the biometric authentication system 120 is powered on and further authenticates the detected authorized user. The keyboard 124 authenticates the detected authorized user using his / her user identification password corresponding to his / her user identification number stored in the authorized user information storage module 13445.

[0088] In some embodiments, when the detected user is determined to be one of the registered authorized users, the biometric authentication system 120 is powered on and further authenticates the detected authorized user. The multiple authentication electronic lock 100 is operable only when the detected authorized user is further authenticated by the biometric authentication system 120. This secondary authentication enhances the security of the multiple authentication electronic lock 100.

[0089] In some embodiments, the user information stored in the authorized user information storage module 13445 includes at least: the user's name, the user's contact phone number, the user's email address, the MAC address of the user's handheld mobile communication device for authenticating the detected user by the Bluetooth user authentication module 1142, the user identification number UID for verifying whether the user is one of the registered authorized users, the user identification password PIN for verifying that the detected authorized user has the corresponding user identification number, the user's fingerprint authentication data for verifying that the detected authorized user is one of the registered authorized users by the fingerprint authentication sensor 121, the user's finger vein authentication data for verifying that the detected authorized user is one of the registered authorized users by the finger vein authentication sensor 122, and the user's face recognition authentication data for verifying that the detected authorized user is one of the registered authorized users by the face recognition authentication sensor 123. Various combinations of the above data can also be included. All the user information of the registered authorized users stored in the authorized user information storage module 13445 is input during the registration process.

[0090] In some embodiments, the face recognition authentication sensor 123 further includes: a speaker 1233, and a multi-color light emitting diode (LED) 1232, as shown in Figure 4 and Figure 5The speaker 1233 is used to prompt the user to move the user's face to a predetermined position of the multi-authentication electronic lock 100 so that the face recognition authentication sensor 123 can acquire one or more images of the user's face within a preset range for face recognition, when the face recognition authentication sensor 123 does not include a display screen. The multi-color light-emitting diode 1232 lights up green when the user's face enters a preset range for face recognition. The multi-color light-emitting diode 1232 lights up red when the user's face moves out of the preset range for face recognition.

[0091] In some embodiments, as shown in FIG. 1 1, the face recognition authentication sensor 123 further includes a display screen 1231. The display screen 1231 can be used to help the user move the user's face to a predetermined position of the multi-authentication electronic lock 100 so that the face recognition authentication sensor 123 can acquire one or more images of the user's face within a preset range for face recognition. Figure 5 and Figure 6 In some embodiments, as shown in FIG. 1 1, the face recognition authentication sensor 123 further includes a display screen 1231. The display screen 1231 can be used to help the user move the user's face to a predetermined position of the multi-authentication electronic lock 100 so that the face recognition authentication sensor 123 can acquire one or more images of the user's face within a preset range for face recognition.

[0092] In some embodiments, as shown in FIG. 1 1, the face recognition authentication sensor 123 further includes a display screen 1231. The display screen 1231 can be used to help the user move the user's face to a predetermined position of the multi-authentication electronic lock 100 so that the face recognition authentication sensor 123 can acquire one or more images of the user's face within a preset range for face recognition. Figure 2 In some embodiments, as shown in FIG. 1 1, the multi-authentication electronic lock controller 130 includes a processor 132, a non-volatile memory 134 storing an operating system 1342 and computer-executable instructions 1344. The computer-executable instructions 1344 include a user detection module 13441, a communication module 13442, a user authentication module 13443, a power module 13444, an authorized user information storage module 13445, and an electronic lock control module 13446.

[0093] In some embodiments, when the computer-executable instructions 1344 are executed on the processor 132, the computer-executable instructions 1344 cause the processor 132 to perform one or more of the following functions:

[0094] Powering the user presence detection system 1 10 by the power module 13444 and the battery 136;

[0095] Detecting the user when the user enters the vicinity of the multi-authentication electronic lock 100 by the user presence detection device 1 12;

[0096] Identifying whether the detected user is one of the registered authorized users of the multi-authentication electronic lock 100 by the user preliminary authentication device 1 14;

[0097] Powering the remaining components of the multi-authentication electronic lock 100 by the power module 13444 and the battery 136 when the user preliminary authentication device 1 14 confirms that the detected user is one of the registered authorized users of the multi-authentication electronic lock 100.

[0098] The biometric verification system 120 verifies the detected authorized user by detecting whether the biometric information of the detected authorized user matches the registered authorized user's biometric information stored in the authorized user information storage module 13445.

[0099] The electronic lock control module 13446 operates the multi-factor authentication electronic lock 100 only when the biometric verification system 120 verifies again that the detected authorized user is indeed one of the registered authorized users.

[0100] In some embodiments, to enhance the security of the multi-factor authentication electronic lock 100, especially in the case where the user is forced by another person to open the multi-factor authentication electronic lock 100, the face recognition authentication sensor 123 is capable of determining whether there are multiple users approaching the multi-factor authentication electronic lock 100. When the multi-factor authentication electronic lock 100 is set to accept only one user to operate the multi-factor authentication electronic lock 100, the multi-factor authentication electronic lock 100 can shut down the multi-factor authentication electronic lock 100 when the face recognition authentication sensor 123 determines that more than one user is approaching the multi-factor authentication electronic lock 100.

[0101] In some embodiments, the computer executable instructions 1344 of the multi-factor authentication electronic lock controller 130 include a user detection module 13441, a communication module 13442, a user authentication module 13443, a power module 13444, an authorized user information storage module 13445, and an electronic lock control module 13446.

[0102] In some embodiments, the user detection module 13441 is connected to the user presence detection system 110 and confirms whether the detected user in front of the multi-factor authentication electronic lock 100 is one of the registered authorized users. The communication module 13442 includes at least one Bluetooth module that contacts the Bluetooth module of the detected authorized user's handheld mobile communication device 201 to verify the detected authorized user, and a wireless communication module that communicates with the server 12 of the multi-factor authentication electronic lock system. The user authentication module 13443 is connected to the biometric verification system 120, and when the detected authorized user carries the user handheld mobile communication device 201, the communication module 13442 is used to verify the detected authorized user, and when the detected authorized user does not carry the user handheld mobile communication device 201, the keyboard 124 and the user identification password of the detected authorized user are used to verify the detected authorized user.

[0103] In some embodiments, the power module 13444 continuously supplies power from the battery 136 to the user presentation detection system 110, and supplies power to the remaining components of the multi-factor authentication electronic lock 100 when the user presentation detection system 110 determines that the user detected before the multi-factor authentication electronic lock 100 is one of the registered authorized users. The authorized user information storage module 13445 stores user information for all registered authorized users, which is entered into the authorized user information storage module 13445 during the registration process. The electronic lock control module 13446 controls the locking and unlocking of the multi-factor authentication electronic lock 100 only when the detected user is initially verified by the user presentation detection system 110 and subsequently verified again by the biometric verification system 120 as one of the registered authorized users.

[0104] On the other hand, such as Figure 8 As shown, the present invention relates to a multi-factor authentication electronic lock system 10. In some embodiments, the multi-factor authentication electronic lock system 10 includes: a multi-factor authentication electronic lock system server 12, a communication network 14, and a group of multiple multi-factor authentication electronic locks 100. The multi-factor authentication electronic lock system server 12 includes a user information database 1201. In some embodiments, the group of multiple multi-factor authentication electronic locks 100 includes: a first multi-factor authentication electronic lock 1001, a second multi-factor authentication electronic lock 1002, a third multi-factor authentication electronic lock 1003, ... and an Nth multi-factor authentication electronic lock 100N. Each of the multiple multi-factor authentication electronic locks 100 includes a communication module 1143, such as... Figure 5 As shown, each of the multi-factor authentication electronic lock groups 100 is connected to the multi-factor authentication electronic lock system server 12 via a communication network 14. In some embodiments, the communication network 14 includes at least one of the following: Wi-Fi network, Bluetooth network, infrared network, Zigbee network, wireless local area network (WLAN), wireless metropolitan area network (WMAN), wireless wide area network (WWAN), cellular network, and mobile communication network.

[0105] In some embodiments, such as Figure 1 and Figure 2 As shown, each multi-factor authentication electronic lock 100 includes: a user presentation detection system 110, a biometric verification system 120, and a multi-factor authentication electronic lock controller 130. The multi-factor authentication electronic lock controller 130 contains a battery 136. The multi-factor authentication electronic lock controller 130 is used to register multiple authorized users, store information of these authorized users, and control the operation of the multi-factor authentication electronic lock 100.

[0106] In some embodiments, the user presence detection system 110 uses one of its set of user presence detection devices 112 to detect the presence of a user, and uses one of its set of user preliminary verification devices 114 to preliminarily verify that the detected user is one of the registered authorized users. In some embodiments, the biometric verification system 120 uses one of its set of biometric authentication devices to further verify the detected authorized user. The biometric verification system 120 is powered on only after the authorized user has been detected by the user presence detection device 112 and preliminarily authenticated as one of the registered authorized users.

[0107] The user presentation detection system 110 is continuously powered by the battery 136, and the rest of the multi-factor authentication lock 100, including the biometric verification system 120 and the multi-factor authentication lock controller 130, is powered only when the user presentation detection system 110 initially determines that the user detected by the user presentation detection system 110 is one of the registered authorized user groups, and during the completion of the operation of the multi-factor authentication lock 100. Once the multi-factor authentication lock 100 is complete, the rest of the multi-factor authentication lock 100, including the biometric verification system 120 and the multi-factor authentication lock controller 130, is powered off to conserve power and extend the life of the battery 136.

[0108] In some embodiments, when a user approaches the multi-factor authentication electronic lock 100, the user presentation detection system 110 detects whether the detected user is one of the registered authorized users. Once the user is determined to be one of the registered authorized users, the biometric verification system 120 and other components of the multi-factor authentication electronic lock 100 are powered on. The biometric verification system 120 further verifies the detected authorized user. The multi-factor authentication electronic lock 100 becomes operable only when the detected authorized user is again confirmed by the biometric verification system 120.

[0109] In some embodiments, such as Figure 3 As shown, the user presentation detection system 110 includes: a set of user presentation detection devices 112 and a set of user preliminary verification devices 114. The set of user presentation detection devices 112 includes: a passive infrared motion detection device 1121, such as... Figure 4 As shown, a radio frequency Doppler motion detection device 1122, such as Figure 5 As shown, a video camera 1123 with a person detection function, such as Figure 4 and Figure 5 As shown. The user presentation detection device 112 detects a user approaching and appearing within a preset range of the multi-factor authentication electronic lock 100. The user initial authentication device 114 includes: a keypad 124 for entering a user identification number (UID), as shown. Figure 6Bluetooth user authentication module 1142, as shown, in contact with the detected user's handheld mobile communication device 201, such as Figure 7 The handheld mobile communication devices 201 include, as shown, an iPhone 2011 based on iOS (Apple's operating system) and a smartphone 2012 based on Android operating system. These handheld mobile communication devices 201 all include Bluetooth modules, such as Bluetooth module 20111 in the iPhone 2011 based on iOS and Bluetooth module 20121 in the smartphone 2012 based on Android operating system. These Bluetooth modules 20111 and 20121 are used to preliminarily determine whether a user approaching the multi-factor authentication electronic lock 100 is one of the registered authorized user group.

[0110] In some embodiments, when a user does not carry a handheld mobile communication device 201 with a Bluetooth module, the user can use the keypad 124 to input his / her user identification number (UID) for the preliminary authentication by the presence detection system 110. Once the user is confirmed to be one of the registered authorized users, the biometric authentication system is powered on and further verifies the detected authorized user.

[0111] In some embodiments, the biometric authentication system 120 includes at least one or more of a fingerprint authentication sensor 121, as shown in Figure 5 a finger vein authentication sensor 122, as shown in Figure 4 a face recognition authentication sensor 123, as shown in Figures 4 to 6 and a keypad 124, as shown in Figure 6 The fingerprint authentication sensor 121 authenticates the detected authorized user with the fingerprint information stored in the authorized user information storage module 13445. The finger vein authentication sensor 122 authenticates the detected authorized user with the finger vein information stored in the authorized user information storage module 13445. The face recognition authentication sensor 123 authenticates the detected authorized user with the face recognition information stored in the authorized user information storage module 13445.

[0112] In some embodiments, when a user does not carry a handheld mobile communication device 201 with a Bluetooth module, the keypad 124 can be used by the user to input his / her personal identification password for the secondary authentication by the biometric authentication system 120. The keypad 124 authenticates the detected authorized user with his / her user identification number corresponding to his / her user identification number data stored in the authorized user information storage module 13445.

[0113] In some embodiments, when the detected user is determined to be one of the registered authorized users, the biometric authentication system 120 is powered on and further verifies the detected authorized user. Only when the detected authorized user is further verified by the biometric authentication system 120, the multi-factor authentication electronic lock 100 is operable. This secondary verification enhances the security of the multi-factor authentication electronic lock 100.

[0114] In some embodiments, the user information stored in the authorized user information storage module 13445 includes at least: the user's name, the user's contact phone number, the user's email address, the user's handheld mobile communication device's MAC address for authenticating the detected user by the Bluetooth user authentication module 1142, the user's identification number UID for verifying whether the user is one of the registered authorized users, the user's identification password PIN for verifying that the detected authorized user has the corresponding user identification number, the user's fingerprint authentication data used by the fingerprint authentication sensor 121 for verifying that the detected authorized user is one of the registered authorized users, the user's finger vein authentication data used by the finger vein authentication sensor 122 for verifying that the detected authorized user is one of the registered authorized users, and the user's face recognition authentication data used by the face recognition authentication sensor 123 for verifying that the detected authorized user is one of the registered authorized users. Various combinations of the above data can also be included. All the user information of the registered authorized users stored in the authorized user information storage module 13445 is inputted during the registration process. Each of the multi-factor authentication electronic lock groups 100 has user profiles, and the user profiles of the multi-factor authentication electronic lock groups 100 are stored in the authorized user information storage module 13445 of the corresponding multi-factor authentication electronic lock 100, and also stored in the user information database 1201 connected to the multi-factor authentication electronic lock system server 12.

[0115] In some embodiments, the face recognition authentication sensor 123 further includes a speaker 1233 and a multi-color light-emitting diode (LED) 1232, as shown in Figure 4 and Figure 5 When the face recognition authentication sensor 123 does not include a display screen, the speaker 1233 is used to prompt the user to move the user's face to a predetermined position of the multi-factor authentication electronic lock 100 so that the face recognition authentication sensor 123 can obtain one or more images of the user's face within a preset range for face recognition. When the user's face enters a preset range for face recognition, the multi-color light-emitting diode 1232 turns green. When the user's face moves out of the preset range for face recognition, the multi-color light-emitting diode 1232 turns red.

[0116] In some embodiments, as shown in Figure 5and Figure 6 As shown, the facial recognition authentication sensor 123 also includes a display screen 1231. The display screen 1231 can be used to help the user move the user's face to a predetermined position of the multi-factor authentication electronic lock 100 so that the facial recognition authentication sensor 123 can acquire one or more images of the user's face within a predetermined range for facial recognition.

[0117] In some embodiments, as shown in FIG. 1, the multi-factor authentication electronic lock 100 includes a multi-factor authentication electronic lock controller 130. The multi-factor authentication electronic lock controller 130 includes a processor 132 and a non-volatile memory 134 storing an operating system 1342 and computer executable instructions 1344. The computer executable instructions 1344 include a user detection module 13441, a communication module 13442, a user authentication module 13443, a power module 13444, an authorized user information storage module 13445, and an electronic lock control module 13446. Figure 2

[0118] In some embodiments, when the computer executable instructions 1344 are executed on the processor 132, the computer executable instructions 1344 cause the processor 132 to perform one or more of the following functions:

[0119] powering the user presence detection system 110 by the power module 13444 and the battery 136;

[0120] detecting the user when the user enters the vicinity of the multi-factor authentication electronic lock 100 by the user presence detection device 112;

[0121] identifying whether the detected user is one of the registered authorized users of the multi-factor authentication electronic lock 100 by the user preliminary authentication device 114;

[0122] powering the remaining components of the multi-factor authentication electronic lock 100 by the power module 13444 and the battery 136 when the user preliminary authentication device 114 confirms that the detected user is one of the registered authorized users of the multi-factor authentication electronic lock 100;

[0123] authenticating the detected authorized user by the biometric authentication system 120 by comparing the detected biometric information of the authorized user with the biometric information of the authorized user stored in the authorized user information storage module 13445; and

[0124] operating the multi-factor authentication electronic lock 100 by the electronic lock control module 13446 only when the biometric authentication system 120 again verifies that the detected authorized user is indeed one of the registered authorized users by the biometric authentication system of the multi-factor authentication electronic lock.

[0125] ​In some embodiments, to enhance the security of the multi-factor authentication electronic lock 100, especially in the case where the user is forced by another person to open the multi-factor authentication electronic lock 100, the face recognition authentication sensor 123 is capable of determining whether more than one user is approaching the multi-factor authentication electronic lock 100. When the multi-factor authentication electronic lock 100 is set to accept only one user to operate the multi-factor authentication electronic lock 100, the multi-factor authentication electronic lock 100 can be closed when the face recognition authentication sensor 123 determines that more than one user is approaching the multi-factor authentication electronic lock 100.

[0126] In some embodiments, the computer executable instructions 1344 of the multi-factor authentication electronic lock controller 130 include a user detection module 13441, a communication module 13442, a user authentication module 13443, a power module 13444, an authorized user information storage module 13445, and an electronic lock control module 13446.

[0127] In some embodiments, the user detection module 13441 is connected to the user presence detection system 110 and confirms whether the user detected in front of the multi-factor authentication electronic lock 100 is one of the registered authorized users. The communication module 13442 includes at least one Bluetooth module that contacts the detected authorized user's handheld mobile communication device 201 to verify the detected authorized user and a wireless communication module that communicates with the server 12 of the multi-factor authentication electronic lock system. The user authentication module 13443 is connected to the biometric authentication system 120 and uses the communication module 13442 to authenticate the detected authorized user when the detected authorized user carries the user's handheld mobile communication device 201 and uses the keyboard 124 and the user identification password of the detected authorized user to authenticate the detected authorized user when the detected authorized user does not carry the user's handheld mobile communication device 201.

[0128] In some embodiments, the power module 13444 always provides power from the battery 136 to the user presence detection system 110 and provides power to the remaining components of the multi-factor authentication electronic lock 100 when the user presence detection system 110 determines that the user detected in front of the multi-factor authentication electronic lock 100 is one of the registered authorized users. The authorized user information storage module 13445 stores the user information of all registered authorized users, where the user information of all registered authorized users is input into the authorized user information storage module 13445 during the registration process. The electronic lock control module 13446 controls the locking and unlocking of the multi-factor authentication electronic lock 100 only when the detected user is first authenticated by the user presence detection system 110 and then authenticated by the biometric authentication system 120 as one of the registered authorized users.

[0129] In yet another aspect, the present application relates to a method of using a multiple authentication electronic lock system 10. In certain embodiments, the method of using a multiple authentication electronic lock system 10 comprises:

[0130] installing a set of multiple authentication electronic lock system 10 by a system administrator, registering all authorized users of a set of multiple authentication electronic locks 100 using at least a Bluetooth-enabled handheld mobile communication device 201, and inputting user information of all registered authorized users, wherein the multiple authentication electronic lock system 10 comprises a multiple authentication electronic lock system server 12 with a user information database 1201, a communication network 14, and the set of multiple authentication electronic locks 100;

[0131] for each multiple authentication electronic lock 100, powering a user presence detection system 110 and detecting any person approaching the multiple authentication electronic lock 100 by a battery 136 of the multiple authentication electronic lock 100;

[0132] detecting any person approaching the multiple authentication electronic lock 100 by one of the user presence detection devices 112 of the user presence detection system 110, and upon detecting a user within a pre-set range of the multiple authentication electronic lock, verifying whether the detected user is one of the registered authorized users by one of the user preliminary verification devices 114 of the user presence detection system 110;

[0133] when the detected user is one of the registered authorized users, powering the remaining components of the multiple authentication electronic lock 100 by the battery 136 of the multiple authentication electronic lock 100, and conducting identity verification using one of the biometric user verification means of the biometric verification system 120; and

[0134] operating the multiple authentication electronic lock 100 by the electronic locking mechanism 138 of the multiple authentication electronic lock 100 only when the detected authorized user is again verified by the biometric verification system of the multiple authentication electronic lock that the detected authorized user is one of the registered authorized users.

[0135] In some embodiments, the user presence detection system 110 comprises a set of user presence detection devices 112 and a set of user preliminary authentication devices 114. The set of user presence detection devices 112 comprises a passive infrared motion detection device 1121, a radio frequency Doppler motion detection device 1122, and a video camera with human detection function 1123. The user presence detection devices 112 detect the presence of a user within a pre-set range of the multi-factor authentication electronic lock 100. The user preliminary authentication devices 114 comprises a keypad 124 for inputting a user identification number (UID) and a Bluetooth user authentication module 1142 for contacting a detected user's handheld mobile communication device 201. The user preliminary authentication devices 114 verify whether the user detected by the user presence detection devices 112 is one of the registered authorized users. After the user is confirmed to be one of the registered authorized users, the biometric authentication system 120 is powered on and further verifies the detected authorized user.

[0136] In some embodiments, the biometric authentication system 120 comprises at least one or more of a fingerprint authentication sensor 121, a finger vein authentication sensor 122, a face recognition authentication sensor 123, and a keypad 124. The fingerprint authentication sensor 121 authenticates the detected authorized user using the fingerprint information stored in the authorized user information storage module 13445. The finger vein authentication sensor 122 authenticates the detected authorized user using the finger vein information stored in the authorized user information storage module 13445. The face recognition authentication sensor 123 authenticates the detected authorized user using the face recognition information stored in the authorized user information storage module 13445. The keypad 124 is used for the user to input a personal identification password. The keypad 124 authenticates the detected authorized user using the personal identification password corresponding to the user's identity data stored in the authorized user information storage module 13445. After the user is confirmed to be one of the registered authorized users, the biometric authentication system 120 is powered on and further verifies the detected authorized user. The multi-factor authentication electronic lock is operable only when the detected authorized user is further verified by the biometric authentication system.

[0137] Figure 9 According to some embodiments of the present application, a flow chart of a method 900 of using a set of multi-factor authentication electronic lock systems 10 is shown.

[0138] At block 902, a system administrator installs a multiple authentication electronic lock system 10, registers all authorized users of a set of multiple authentication electronic locks 100 using at least a Bluetooth-enabled handheld mobile communication device 201, and enters user information of all registered authorized users. The multiple authentication electronic lock system 10 includes a multiple authentication electronic lock system server 12 with a user information database 1201, a communication network 14, and the set of multiple authentication electronic locks 100.

[0139] At block 904, for each multiple authentication electronic lock 100, a battery 136 of the multiple authentication electronic lock 100 powers a user presence detection system 110 and detects any person approaching the multiple authentication electronic lock 100.

[0140] At block 906, any person approaching the multiple authentication electronic lock 100 is detected by one of the user presence detection devices 112 of the user presence detection system 110, and upon detecting a user within a predetermined range of the multiple authentication electronic lock 100, the detected user is verified by one of the user preliminary verification devices 114 of the user presence detection system 110 as being one of the registered authorized users.

[0141] At inquiry block 908, the detected user is verified by one of the user preliminary verification devices 114 of the user presence detection system 110 as being one of the registered authorized users. If the detected user is verified by one of the user preliminary verification devices 114 of the user presence detection system 110 as being one of the registered authorized users, the method proceeds to block 910. If the detected user is not verified by one of the user preliminary verification devices 114 of the user presence detection system 110 as being one of the registered authorized users, the method returns to block 906.

[0142] At block 910, upon verification by one of the user preliminary verification devices 114 of the user presence detection system 110 that the detected user is one of the registered authorized users, the remaining components of the multiple authentication electronic lock 100, including the biometric verification system 120 and the multiple authentication electronic lock controller 130, are powered by the battery 136 of the multiple authentication electronic lock 100, and the detected authorized user is further verified using the biometric verification system 120.

[0143] At inquiry block 912, the biometric verification system 120 again authenticates the detected authorized user to determine whether the biometric data of the detected authorized user matches the biometric data of one of the registered groups of authorized users. When the biometric verification system 120 determines that the biometric data of the detected authorized user matches the biometric data of one of the registered groups of authorized users, the method proceeds to block 914. Otherwise, the method returns to block 906.

[0144] At block 914, when the biometric verification system 120 determines that the biometric data of the detected authorized user matches the biometric data of one of the registered groups of authorized users, the multi-factor authentication electronic lock 100 can be operated by the electronic locking mechanism 138 of the multi-factor authentication electronic lock 100 only when the detected authorized user is again authenticated by the biometric verification system 120 of the multi-factor authentication electronic lock 100.

[0145] This method reduces the power consumption of the multi-factor authentication electronic lock 100, extends the life of the battery used to power the multi-factor authentication electronic lock 100, and enhances the security of the multi-factor authentication electronic lock 100 by performing multi-factor authentication.

[0146] The embodiments were chosen and described in order to explain the principles of the application and its practical application and to enable others skilled in the art to utilize the application and various embodiments and with various modifications as are suited to the particular use contemplated. Alternative embodiments will be apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. Therefore, the scope of the application should be determined not with reference to the above description nor the exemplary embodiments described therein, but should be given to the appended claims by reference to the full scope of equivalents to which they qualify.

Claims

1. A multiple authentication electronic lock, comprising: a multiple authentication electronic lock controller, wherein the multiple authentication electronic lock controller contains a battery, for registering a plurality of authorized users, storing information of the registered authorized users, and controlling the operation of the multiple authentication electronic lock; a user presence detection system, wherein the user presence detection system is always powered by the battery, the user presence detection system detects the presence of a user by a user presence detection device of the user presence detection system, and preliminarily verifies whether the detected user is one of the registered authorized users by a user preliminary verification device of the user presence detection system; and a biometric verification system, wherein the biometric verification system further verifies the detected authorized user by a biometric verification device thereof, the biometric verification system and other components of the multiple authentication electronic lock are powered only after the user preliminary verification device preliminarily verifies that the detected user is one of the registered authorized users, when a user approaches the multiple authentication electronic lock, the user presence detection system detects whether the user is one of the registered authorized users, once the user is confirmed to be one of the registered authorized users, the biometric verification system and other components of the multiple authentication electronic lock are powered, and further verify the detected authorized user, the multiple authentication electronic lock can be operated only after the detected authorized user is further verified by the biometric verification system.

2. The multiple authentication electronic lock of claim 1, wherein the user presence detection system comprises: a set of user presence detection devices, wherein the set of user presence detection devices contains: a passive infrared motion detection device, a radio frequency Doppler motion detection device, and a video camera with human detection function, the user presence detection devices detect whether a user approaches and appears within a preset range of the multiple authentication electronic lock; and a set of user preliminary verification devices, wherein the user preliminary verification devices contain: a keyboard for inputting a user identification number (UID), and a Bluetooth user verification module for contacting a handheld mobile communication device of the detected user, the user preliminary verification devices verify whether the user detected by the user presence detection devices is one of the registered authorized users, after the user is determined to be one of the registered authorized users, the biometric verification system is powered and further verifies the detected authorized user.

3. The multiple authentication electronic lock of claim 2, wherein the biometric verification system contains at least one or more of: a fingerprint verification sensor, wherein the fingerprint verification sensor verifies the detected authorized user by using fingerprint information stored in an authorized user information storage module; a finger vein verification sensor, wherein the finger vein verification sensor verifies the detected authorized user by using finger vein information stored in the authorized user information storage module; a face recognition verification sensor, wherein the face recognition verification sensor verifies the detected authorized user by using face recognition information stored in the authorized user information storage module; and a voice recognition verification sensor, wherein the voice recognition verification sensor verifies the detected authorized user by using voice recognition information stored in the authorized user information storage module. ​ A keypad for a user to input a personal identification number (PIN), wherein the keypad uses the personal identification number stored in the authorized user information storage module corresponding to the detected authorized user's identity data to authenticate the detected authorized user, Upon the detected user being determined to be one of the registered authorized users, the biometric authentication system is powered on and further authenticates the detected authorized user, and the multi-factor authentication electronic lock is operable only when the detected authorized user is again authenticated by the biometric authentication system.

4. The multi-factor authentication electronic lock of claim 3, wherein the user information stored in the authorized user information storage module of the multi-factor authentication electronic lock controller comprises at least one of the following: a user's name; a user's contact phone number; a user's email address; a user's handheld mobile communication device's MAC address, which is used by the Bluetooth user authentication module to authenticate the detected user; a user identification number (UID), which is used to verify whether the detected user is one of the registered authorized users; a user identification password (PIN), which is used to verify that the detected user has the corresponding user identification number (UID); user's fingerprint authentication data, which is used by the fingerprint authentication sensor to verify whether the detected authorized user is one of the registered authorized users; user's finger vein authentication data, which is used by the finger vein authentication sensor to verify whether the detected authorized user is one of the registered authorized users; user's facial recognition authentication data, which is used by the facial recognition authentication sensor to verify whether the detected authorized user is one of the registered authorized users; and various combinations of the above.

5. The multi-factor authentication electronic lock of claim 4, wherein the facial recognition authentication sensor further comprises: a speaker, which is used to prompt the user to move the user's face to a predetermined position so that the facial recognition authentication sensor can capture one or more images of the user's face within a predetermined range for facial recognition; and a multi-color light emitting diode (LED), which is green when the user's face is within a predetermined range for facial recognition and red when the user's face is outside the predetermined range for facial recognition.

6. The multi-factor authentication electronic lock of claim 5, wherein the facial recognition authentication sensor further comprises a display screen, which is used to help the user move the user's face to a predetermined position so that the facial recognition authentication sensor can capture one or more images of the user's face within a predetermined range for facial recognition.

7. The multi-factor authentication electronic lock of claim 6, wherein the multi-factor authentication electronic lock controller comprises: a processor, a non-volatile memory storing an operating system and computer executable instructions, wherein the computer executable instructions comprise a user presence detection module, a communication module, a user authentication module, a power module, an authorized user information storage module, and an electronic lock control module, which when executed on the processor, cause the processor to perform one or more of the following functions: powering the user presence detection system from the power module and the battery; detecting the user by the user presence detection device when the user enters the vicinity of the multi-authentication electronic lock; identifying whether the detected user is one of the registered authorized users of the multi-authentication electronic lock by the user preliminary authentication device; powering the remaining components of the multi-authentication electronic lock from the power module and the battery when the detected user is confirmed to be one of the registered authorized users of the multi-authentication electronic lock by the user preliminary authentication device; authenticating the detected authorized user by the biometric authentication system by detecting whether the biometric information of the detected authorized user matches the biometric information of the authorized user stored in the authorized user information storage module; and operating the multi-authentication electronic lock by the electronic lock control module only when the detected authorized user is again authenticated by the biometric authentication system of the multi-authentication electronic lock to be one of the registered authorized users.

8. The multi-authentication electronic lock of claim 7, wherein the multi-authentication electronic lock controller comprises: a facial recognition authentication sensor to determine whether more than one user is approaching the multi-authentication electronic lock, and the multi-authentication electronic lock can be closed when the multi-authentication electronic lock is configured to accept only one user to operate the multi-authentication electronic lock.

9. The multi-authentication electronic lock of claim 6, wherein the computer executable instructions of the multi-authentication electronic lock controller comprise: a user presence detection module, wherein the user presence detection module is connected to the user presence detection system and confirms whether the detected user in front of the multi-authentication electronic lock is one of the registered authorized users; a communication module, wherein the communication module comprises at least a Bluetooth module to contact the detected authorized user to authenticate the detected authorized user using the user handheld mobile communication device carried by the detected authorized user, and a keypad and a user identification password PIN of the detected authorized user when the detected authorized user does not carry the user handheld mobile communication device; a user authentication module, wherein the user authentication module is connected to the biometric authentication system to authenticate the detected authorized user using the communication module when the detected authorized user carries the user handheld mobile communication device, and using the keypad and the user identification password PIN of the detected authorized user when the detected authorized user does not carry the user handheld mobile communication device; a power module, wherein the power module provides power to the user presence detection system from the battery at all times, and provides power to the remaining components of the multi-authentication electronic lock when the user presence detection system determines that the detected user in front of the multi-authentication electronic lock is one of the registered authorized users. ​ an authorized user information storage module, wherein the authorized user information storage module stores user information of all registered authorized users, and wherein the user information of all registered authorized users is inputted into the authorized user information storage module during a registration process; and an electronic lock control module, which controls locking and unlocking of the multiple authentication electronic lock only when the detected user is one of the registered authorized users, first verified by the user presence detection system and second verified by the biometric authentication system.

10. A multiple authentication electronic lock system, comprising: a multiple authentication electronic lock system server, wherein the multiple authentication electronic lock system server further comprises a user information database; a communication network; and a set of multiple authentication electronic locks, wherein each of the multiple authentication electronic locks comprises: a multiple authentication electronic lock controller, wherein the multiple authentication electronic lock controller comprises a battery, which is used to store information of registered authorized users and control operation of the multiple authentication electronic lock for the registered authorized users; a user presence detection system, wherein the user presence detection system is always powered by the battery, the user presence detection system detects presence of a user by a user presence detection device of the user presence detection system, and the user presence detection system preliminarily verifies whether the detected user is one of the registered authorized users by a user preliminary verification device of the user presence detection system; and a biometric authentication system, wherein the biometric authentication system further verifies the detected authorized user by a biometric authentication device of the biometric authentication system, the biometric authentication system is powered only after the authorized user is detected by the user presence detection device and preliminarily determined to be one of the registered authorized users, when a user approaches the multiple authentication electronic lock, the user presence detection system detects whether the user is one of the registered authorized users, once the user is confirmed to be one of the registered authorized users, the biometric authentication system is powered and further verifies the detected authorized user, the multiple authentication electronic lock can be operated only when the detected authorized user is further verified by the biometric authentication system.

11. The multiple authentication electronic lock system of claim 10, wherein the user presence detection system comprises: a set of user presence detection devices, wherein the set of user presence detection devices comprises a passive infrared motion detection device, a radio frequency Doppler motion detection device, and a video camera with human detection function, the user presence detection devices detect that the user approaches and appears within a preset range of the multiple authentication electronic lock; and a set of user preliminary verification devices, wherein the user preliminary verification devices comprise a keyboard for inputting a user identification number (UID), and a Bluetooth user authentication module for contacting a handheld mobile communication device of the detected user, the user preliminary verification devices verify whether the user detected by the user presence detection devices is one of the registered authorized users, once the user is determined to be one of the registered authorized users, the biometric authentication system is powered and further verifies the detected authorized user. ​ 12. The multiple authentication electronic lock system of claim 11, wherein the biometric authentication system comprises at least one or more of: a fingerprint authentication sensor, wherein the fingerprint authentication sensor authenticates the detected authorized user using fingerprint information stored in the authorized user information storage module; a finger vein authentication sensor, wherein the finger vein authentication sensor authenticates the detected authorized user using finger vein information stored in the authorized user information storage module; a facial recognition authentication sensor, wherein the facial recognition authentication sensor authenticates the detected authorized user using facial recognition information stored in the authorized user information storage module; and a keypad for user to input a personal identification number (PIN), wherein the keypad authenticates the detected authorized user using a personal identification number corresponding to the user identification data stored in the authorized user information storage module, wherein the biometric authentication system is powered on and further authenticates the detected authorized user after the detected user is determined to be one of the registered authorized users, and the multiple authentication electronic lock is operable only when the detected authorized user is again passed by the biometric authentication system.

13. The multiple authentication electronic lock system of claim 12, wherein the user information of the registered authorized users stored in the authorized user information storage module comprises at least: a user name; a user contact number; a user email address; a MAC address of the user's handheld mobile communication device, the MAC address of the handheld mobile communication device being used to authenticate the detected user via the Bluetooth user authentication module; a user identification number (UID), the user identification number (UID) being used to verify whether the user is one of the registered authorized users; a user identification password (PIN), the user identification password (PIN) being used to verify that the detected authorized user has the corresponding user identification number (UID); user fingerprint authentication data, the user fingerprint authentication data being used by the fingerprint authentication sensor to verify that the detected authorized user is one of the registered authorized users; user finger vein authentication data, the user finger vein authentication data being used by the finger vein authentication sensor to verify that the detected authorized user is one of the registered authorized users; user facial recognition authentication data, the user facial recognition authentication data being used by the facial recognition authentication sensor to verify that the detected authorized user is one of the registered authorized users; and various combinations of the above data, wherein the user information of all the registered authorized users of the multiple authentication electronic lock system is transmitted to the user information database of the multiple authentication electronic lock system server via the communication network when the communication network is available.

14. The multiple authentication electronic lock system of claim 13, wherein the facial recognition authentication sensor further comprises: a speaker, the speaker being used to prompt the user to move the user's face to a predetermined position so that the facial recognition authentication sensor can acquire one or more images of the user's face within a predetermined range for facial recognition; and a camera, the camera being used to acquire one or more images of the user's face within a predetermined range for facial recognition. ​ A multi-color light emitting diode (LED) that turns green when a user's face enters a pre-determined range for face recognition and turns red when the user's face moves out of the pre-determined range for face recognition.

15. The multi-factor authentication electronic lock system of claim 14, wherein the face recognition authentication sensor further comprises a display screen, wherein the display screen is used to help the user move the user's face to a pre-determined position so that the face recognition authentication sensor can capture one or more images of the user's face within a pre-determined range for face recognition.

16. The multi-factor authentication electronic lock system of claim 15, wherein the multi-factor authentication electronic lock controller comprises: a processor, a non-volatile memory storing an operating system and computer executable instructions, wherein the computer executable instructions comprise a user presence detection module, a communication module, a user authentication module, a power module, an authorized user information storage module, and an electronic lock control module, which when executed on the processor, cause the processor to perform one or more of the following functions: powering the user presence detection system from the power module and the battery; detecting the user by the user presence detection device when the user enters the vicinity of the multi-factor authentication electronic lock; identifying whether the detected user is one of the registered authorized users of the multi-factor authentication electronic lock by the user preliminary authentication device; powering the remaining components of the multi-factor authentication electronic lock from the power module and the battery when the user preliminary authentication device confirms that the detected user is one of the registered authorized users of the multi-factor authentication electronic lock; authenticating the detected authorized user by the biometric authentication system by detecting whether the biometric information of the detected authorized user matches the biometric information of the authorized user stored in the authorized user information storage module; and operating the electronic lock by the electronic lock control module only when the detected authorized user is again authenticated by the biometric authentication system of the multi-factor authentication electronic lock as one of the registered authorized users.

17. The multi-factor authentication electronic lock system of claim 16, wherein the face recognition authentication sensor can determine whether more than one user is approaching the multi-factor authentication electronic lock, and the multi-factor authentication electronic lock can be disabled when the multi-factor authentication electronic lock is configured to accept only one user to operate the multi-factor authentication electronic lock.

18. The multi-factor authentication electronic lock system of claim 16, wherein the computer executable instructions of the multi-factor authentication electronic lock controller comprise: a user presence detection module, wherein the user presence detection module is connected to the user presence detection system and confirms whether the detected user in front of the multi-factor authentication electronic lock is one of the registered authorized users of the multi-factor authentication electronic lock; ​ a communication module, wherein the communication module comprises at least a Bluetooth module that communicates with a detected authorized user's handheld mobile communication device, verifies the detected authorized user, and communicates with the server of the multiple identity verification electronic lock system via a wireless communication module; a user identity verification module, wherein the user identity verification module is connected to a biometric verification system to verify the detected authorized user, and when the detected authorized user carries the user's handheld mobile communication device, the communication module is used, and when the detected authorized user does not carry the user's handheld mobile communication device, a keyboard and the user's identification password PIN of the detected authorized user are used; a power module, wherein the power module always provides power to the user presentation detection system from a battery, and when the user presentation detection system determines that the detected user in front of the multiple identity verification electronic lock is one of the registered authorized users, the power module provides power to the remaining components of the multiple identity verification electronic lock; an authorized user information storage module, wherein the authorized user information storage module stores the user information of all registered authorized users, and here the user information of all registered authorized users is input to the authorized user information storage module during the registration process; and an electronic lock control module that controls the locking and unlocking of the multiple identity verification electronic lock only when the detected user is verified by the user presentation detection system and then verified by the biometric verification system as one of the registered authorized users.

19. A method of using a multiple identity verification electronic lock system, comprising: installing a set of multiple identity verification electronic lock systems by a system administrator, registering all authorized users of a set of multiple identity verification electronic locks using at least a handheld mobile communication device with Bluetooth function, and inputting the user information of all registered authorized users, wherein the multiple identity verification electronic lock system comprises: a multiple identity verification electronic lock system server with a user information database, a communication network, and the set of multiple identity verification electronic locks; for each multiple identity verification electronic lock, providing power to a user presentation detection system by a battery of the multiple identity verification electronic lock, and detecting any person approaching the multiple identity verification electronic lock; detecting any person approaching the multiple identity verification electronic lock by one of the user presentation detection devices of the user presentation detection system, and verifying whether the detected user is one of the registered authorized users by one of the user preliminary verification devices of the user presentation detection system once a user is detected within a preset range of the multiple identity electronic lock; when the detected user is one of the registered authorized users, the battery of the multiple identity verification electronic lock provides power to the remaining components of the multiple identity verification electronic lock, and identity verification is performed using one of the biometric user verification devices of the biometric verification system; and only when the detected authorized user is verified by the biometric verification system of the multiple identity verification electronic lock as one of the registered authorized users, the multiple identity verification electronic lock is operated by the electronic locking mechanism of the multiple identity verification electronic lock.

20. The method of claim 19, wherein the user presentation detection system comprises: ​ A set of user presence detection devices, wherein the set of user presence detection devices comprises: a passive infrared motion detection device, a radio frequency Doppler motion detection device, and a video camera with human detection function, said user presence detection devices detect the approach and presence of a user within a pre-set range of the multi-factor authentication electronic lock; and A set of user preliminary authentication devices, wherein the user preliminary authentication devices comprises: a keypad for inputting a user identification number (UID), and a Bluetooth user authentication module for contacting a detected user's handheld mobile communication device, said user preliminary authentication devices verify whether the user detected by the user presence detection devices is one of the registered authorized users, upon the user being determined as one of the registered authorized users, the biometric authentication system is powered on and further verifies the detected authorized user; and The biometric authentication system comprises one or more of: a fingerprint authentication sensor, wherein the fingerprint authentication sensor authenticates the detected authorized user using fingerprint information stored in the authorized user information storage module; a finger vein authentication sensor, wherein the finger vein authentication sensor authenticates the detected authorized user using finger vein information stored in the authorized user information storage module; a face recognition authentication sensor, wherein the face recognition authentication sensor authenticates the detected authorized user using face recognition information stored in the authorized user information storage module; and a keypad for user input of a personal identification number (PIN), wherein the keypad authenticates the detected authorized user using a personal identification number corresponding to the user's identity data stored in the authorized user information storage module, Upon the detected user being determined as one of the registered authorized users, the biometric authentication system is powered on and further verifies the detected authorized user, the multi-factor authentication electronic lock is operable only when the detected authorized user passes the biometric authentication system verification again. ​

Images