Mobile communication device and access control device and method for controlling space access

Abstract

A method of controlling access to a space (3) using an access control device (2) and a mobile communication device (1) of a user, in which the access control device (2) operates a Bluetooth communication circuit (21) and sends an advertisement packet comprising an identifier related to the space (3); wherein the mobile communication device (1) operates the Bluetooth communication circuit (11) and receives the advertisement packet; wherein the mobile communication device (1), using the identifier and access authority data stored in the mobile communication device (1), determines whether the access control device (2) is associated with the user; upon determining that the access control device (2) is associated with the user, the mobile communication device (1) establishes a connection with the access control device (2); wherein the mobile communication device (1) and the access control device (2) execute an access control protocol.

Description

Field of the Invention

[0001] The present application relates to a mobile communication device, an access control device, and a method for controlling access to a space. Specifically, the present application relates to a method for controlling access to a space using an access control device and a mobile communication device. The present application also relates to a mobile communication device, which includes a Bluetooth communication circuit and a processor for controlling access to a space, and an access control device, which includes a Bluetooth communication circuit and a processor for controlling access to a space, and to a computer program product, the computer program product including a non-transitory computer-readable medium having a computer program code stored thereon, the computer-readable medium being configured to direct the processor to control access to the space. Background of the Invention

[0003] Access systems are used in buildings such as hotels or office buildings in order to enable and restrict access to the building or specific areas of the building. The most basic access system is to provide users of the building with a physical key-lock system in order to access the building. In this case, the users of the building receive a physical key from the reception or an employee of the building. Another access system is to provide users of the building with a key card in order to access the building. In this case, the users of the building still receive a physical key card from the reception or an employee of the building in order to access the building. The key card includes a digital key that enables access to specific areas of the building, for example, to a room, a group of rooms or a specific floor. It is also conceivable that the elevator of the building can only be used after the user puts the key card on the key card reader.

[0004] In another case, a user of a building receives a digital key on a mobile device via a communication network. In this case, the user does not need to go to the reception desk or collect a physical key from an employee of the building. The electronic key can be sent directly to the mobile device without face-to-face interaction with an employee. For example, a specific electronic key can be used in an application of a mobile device. For example, the application of the mobile device displays all the rooms of the building with different access requirements. The user of the mobile device can select his specific room from all the rooms of the building. The mobile device is connected to the selected room, in particular, to the selected lock of the room, and if the key stored in the mobile device allows access to the specific room, the lock opens. If the key stored in the mobile device does not allow access to the selected room, the lock remains closed and the user of the mobile device can select a different room that can be accessed. Selecting the desired room requires the user to browse through all available rooms or areas of the building. If the building is a large hotel with hundreds of hotel rooms, searching and finding the right room may require complex room illustrations, grouping and selection processes, as well as complex user interfaces. Summary of the invention

[0005] The purpose of the present application is to provide a method, a mobile communication device and an access control device for controlling access to a space. In particular, the purpose of the present application is to provide a method, a mobile communication device and an access control device for controlling access to a space to overcome some shortcomings in the prior art.

[0006] According to the present application, these objects are solved by the features of the independent claims. Furthermore, advantageous embodiments are further listed in the dependent claims and in the description.

[0007] According to the present application, the above object is achieved in particular by a method for controlling access to a space using an access control device and a user's mobile communication device. The method comprises:

[0008] The access control device operates the Bluetooth communication circuit of the access control device in a peripheral role and transmits an advertising packet including an identifier associated with the space;

[0009] The mobile communication device operates the Bluetooth communication circuit of the mobile communication device in a central role and receives the advertising packet;

[0010] The mobile communication device uses the identifier received from the advertising packet and the access rights data stored in the mobile communication device to determine whether the access control device is associated with the user;

[0011] After determining that the access control device is associated with the user, the mobile communication device establishes a connection between a Bluetooth communication circuit of the mobile communication device and a Bluetooth communication circuit of the access control device; and

[0012] The mobile communication device and the access control device execute an access control protocol through the connection, wherein the execution of the access control protocol includes the mobile communication device sending access control data to the access control device, and the access control device checking the user's access rights to the space by verifying the access control data from the mobile communication device.

[0013] In one embodiment, the mobile communication device receives advertising packets from multiple access control devices; after determining that more than one access control device is associated with the user, the mobile communication device determines a selected access control device and establishes a connection with a Bluetooth communication circuit of the selected access control device.

[0014] In one embodiment, the mobile communication device determines the selected access control device using the received signal strength determined for the associated access control device.

[0015] In another embodiment, the mobile communication device further uses the transmit power levels received from the associated access control devices to determine the selected access control device.

[0016] In one embodiment, the mobile communication device determines the selected access control device using location or distance information determined by the mobile communication device for the associated access control device using an ultra wideband transceiver.

[0017] In another embodiment, the mobile communication device determines the selected access control device by displaying a list of related access control devices to the user on a display screen and receiving a selection of the selected access control device from the user.

[0018] In one embodiment, the access control protocol is executed only when the mobile communication device is within a predetermined distance from the associated or selected access control device. In other words, the access control protocol is executed only when the mobile communication device is close enough to the associated or selected access control device.

[0019] In one embodiment, the access control device generates a randomized identifier by applying randomization to an identifier associated with the space, and / or generates an encrypted identifier by encrypting the identifier associated with the space, and the access control device sends the randomized and / or encrypted identifier to a remote server.

[0020] In one embodiment, the access control device sends the randomized and / or encrypted identifier to the remote server via the mobile communication device. In a further embodiment, the mobile communication device sends the randomized and / or encrypted identifier to the remote server via a communication network, such as a mobile wireless communication network.

[0021] In one embodiment, the access control device intermittently functions as a beacon, operates the Bluetooth communication circuit of the access control device in the role of a broadcaster, and sends advertising packets without allowing a connection; and the mobile communication device displays a spatial arrangement of multiple access control devices functioning as beacons on a display screen.

[0022] In another aspect of the present application, a mobile communication device is provided. The mobile communication device includes a Bluetooth communication circuit and a processor connected to the Bluetooth communication circuit, and the processor is configured to perform the following steps:

[0023] operating a Bluetooth communication circuit in a central role and receiving an advertising packet from an access control device controlling access to the space;

[0024] extracting an identifier associated with the space from the advertising packet;

[0025] determining whether the access control device is associated with a user of the mobile communication device using the identifier and access rights data stored in the mobile communication device;

[0026] After determining that the access control device is associated with the user, instructing the Bluetooth communication circuit to establish a connection with the access control device;

[0027] An access control protocol is executed through the connection, and the execution of the access control protocol includes the processor instructing the Bluetooth communication circuit to send access control data to the access control device, so that the access control device can check the user's access rights to the space.

[0028] In one embodiment, the processor is configured to receive advertisement packets from a plurality of access control devices; determine a selected access control device upon determining that more than one access control device is associated with the user, and establish a connection with the selected access control device.

[0029] In another embodiment, the processor is configured to determine the selected access control device using received signal strength indications determined for associated access control devices.

[0030] In one embodiment, the processor is configured to further use transmit power levels received from associated access control devices to determine the selected access control device.

[0031] In another embodiment, the mobile communication device includes an ultra-wideband transceiver, and the processor is configured to determine location information or distance information of relevant access control devices using the ultra-wideband transceiver, and use the location information or distance information to determine the selected access control device.

[0032] In one embodiment, the processor is configured to determine the selected access control device by displaying a list of relevant access control devices to a user on a display screen and receiving a selection of the selected access control device from the user.

[0033] In another embodiment, the processor is configured to receive a randomized and / or encrypted identifier associated with the space from the access control device and securely send the randomized and / or encrypted identifier to the remote server via the mobile wireless communication network.

[0034] In another aspect of the present application, a computer program product is provided, comprising a non-transitory computer readable medium having a computer program code stored thereon. The computer program code is configured to instruct a processor of a mobile communication device to perform the following steps:

[0035] operating a Bluetooth communication circuit of a mobile communication device in a central role and receiving an advertising packet from an access control device that controls access to the space;

[0036] extracting an identifier associated with the space from the advertising packet;

[0037] using the identifier and access rights data stored in the mobile communication device to determine whether the access control device is associated with a user of the mobile communication device;

[0038] upon determining that the access control device is relevant to the user, instructing the Bluetooth communication circuit to establish a connection with the access control device; and

[0039] An access control protocol is executed through the connection. The execution of the access control protocol includes the processor instructing the Bluetooth communication circuit to send access control data to the access control device, so that the access control device can check the user's access rights to the space.

[0040] In one embodiment, the computer program code is further configured to instruct the processor to receive advertising packets from multiple access control devices; after determining that more than one access control device is associated with the user, determine a selected access control device and establish a connection with the selected access control device.

[0041] In another embodiment, the computer program code is further configured to instruct the processor to determine the selected access control device using the received signal strength indication determined for the associated access control device.

[0042] In a further embodiment, the computer program code is further configured to further use the transmit power levels received from the associated access control devices to instruct the processor to determine the selected access control device.

[0043] In one embodiment, the computer program code is further configured to instruct the processor to determine location or distance information for the associated access control device using an ultra-wideband transceiver of the mobile communication device, and to use the location or distance information to determine the selected access control device.

[0044] In another embodiment, the computer program code is further configured to instruct the processor to determine the selected access control device by displaying a list of related access control devices to the user on a display screen and receiving a selection of the selected access control device from the user.

[0045] In one embodiment, the computer program code is further configured to instruct the processor to receive a randomized and / or encrypted identifier associated with the space from the access control device and securely send the randomized and / or encrypted identifier to the remote server via the mobile wireless communication network.

[0046] In another aspect of the present application, an access control device for controlling access to a space is specified. The access control device includes a Bluetooth communication circuit and a processor connected to the Bluetooth communication circuit, the processor being configured to perform the following steps:

[0047] operating the Bluetooth communication circuit in a peripheral role and transmitting an advertising packet, the advertising packet including an identifier associated with the space, the identifier enabling a mobile communication device receiving the advertising packet to determine whether the access control device is associated with a user of the mobile communication device;

[0048] After determining that the access control device is associated with the user, receiving a connection request from the mobile communication device at the Bluetooth communication circuit and instructing the Bluetooth communication circuit to establish a connection with the mobile communication device;

[0049] An access control protocol with the mobile communication device is executed through the connection, wherein executing the access control protocol includes receiving access control data from the mobile communication device and checking the user's access rights to the space by verifying the access control data.

[0050] In one embodiment, the processor is further configured to generate a randomized identifier by applying randomization to an identifier associated with the space, and / or to generate an encrypted identifier by encrypting the identifier associated with the space, and to send the randomized and / or encrypted identifier to a remote server.

[0051] In another embodiment, the processor is further configured to instruct the Bluetooth communication circuit to intermittently operate in the role of a broadcaster, causing the access control device to function as a beacon to send the advertising packet without allowing a connection.

[0052] In one embodiment, the advertising packet also includes operation information related to the access control device sending the advertising packet. The operation information includes, for example, power mode status data of the access control device, battery status data of the access control device, status information of a lock or space related to the access control device, usage information of the access control device, and / or other information of the access control device.

[0053] In one embodiment, the mobile communication device receiving the advertising packet is configured to further use the operational information received in the advertising packet to determine whether the access control device is associated with the user. The operational information may include information used by the mobile communication device to determine whether the access control device is associated with the user. For example, the operational information may be used to prioritize the received identifiers, thereby respectively ranking the access control devices. For example, an access control device in a sleep mode or a low power mode may be prioritized relative to an access control device that is not in a sleep mode or a low power mode.

[0054] In one embodiment, the mobile communication device receiving the advertising packet is configured to further use the received operation information to establish a connection between the Bluetooth communication circuit of the mobile communication device and the Bluetooth communication circuit of the access control device. For example, the properties for establishing the Bluetooth connection, such as timeout parameters, are set according to the received operation information. If the received operation information includes corresponding information indicating that the access control device is, for example, in a sleep mode or a low power mode, the timeout parameters of the connection can be automatically adjusted / extended due to the operation information. Such adjusted timeout parameters can improve the establishment of the connection, for example, by giving the access control device enough time to wake up and respond. In addition, the number of cycles for attempting to establish a connection can also be set according to the operation information of the corresponding access control device.

[0055] In one embodiment, the mobile communication device receiving the advertising packet is configured to display at least a portion of the received operation information to the user. For example, the mobile communication device may display that the relevant access control device is in sleep mode, has a low battery, or has been used (by other users) before (within a predetermined time range). In addition, the received operation information may include information whether the access control device is locked or open, which information may be displayed to the user by the mobile communication device. In addition, the received operation information may include information about one or more previous users of the access control device, which information may be displayed to the user by the mobile communication device, preferably if the user has the corresponding authority to view such information, especially if privacy requirements require that such usage information be restricted.

[0056] In one embodiment, the operational information is included in a separate data segment of the advertising packet, for example, adjacent to the identifier. In another embodiment, the operational information is included in the advertising packet within the identifier. In one embodiment, the operational information is extracted by the mobile communication device, in particular by a processor of the mobile communication device.

[0057] In one embodiment, the operational information may be accessed and adjusted using specific access rights data associated with the operational information. Likewise, the identifier may be accessed and adjusted using specific identifier access rights data. Preferably, the access rights data associated with the operational information is different from the identifier access rights data, such that, for example, one entity may adjust the operational information while another entity may adjust the identifier.

[0058] In another aspect of the present application, there is provided a method for controlling access to a space using an access control device and a mobile communication device of a user, the method comprising:

[0059] The access control device operates the Bluetooth communication circuit of the access control device in a peripheral role and sends an advertising packet, wherein the advertising packet includes operation information related to the access control device sending the advertising packet;

[0060] The mobile communication device operates the Bluetooth communication circuit of the mobile communication device in a central role and receives the advertising packet;

[0061] The mobile communication device displays at least a portion of the operation information received in the advertising packet to the user and / or the mobile communication device sends at least a portion of the operation information received in the advertising packet to a remote server, preferably sending randomized and / or encrypted operation information.

[0062] In another aspect of the present application, a mobile communication device is provided, which includes a Bluetooth communication circuit and a processor connected to the Bluetooth communication circuit, wherein the processor is configured to perform the following steps:

[0063] operating a Bluetooth communication circuit in a central role and receiving an advertising packet from an access control device controlling access to the space;

[0064] extracting, from the advertising packet, operation information associated with the access control device that sent the advertising packet;

[0065] At least a portion of the operating information received in the advertising packet is displayed to a user of the mobile communication device and / or sent to a remote server, preferably randomized and / or encrypted.

[0066] In another aspect of the present application, a computer program product is provided, comprising a non-transitory computer readable medium having computer program code stored thereon, the program code being configured to direct a processor of a mobile communication device to perform the following steps:

[0067] operating a Bluetooth communication circuit in a central role and receiving an advertising packet from an access control device controlling access to the space;

[0068] extracting, from the advertising packet, operational information associated with the access control device that sent the advertising packet; and

[0069] At least a portion of the operating information received in the advertising packet is displayed to a user of the mobile communication device and / or sent to a remote server, preferably randomized and / or encrypted.

[0070] In another aspect of the present application, an access control device for controlling access to a space is provided, the access control device comprising a Bluetooth communication circuit and a processor connected to the Bluetooth communication circuit, the processor being configured to operate the Bluetooth communication circuit in a peripheral role, generate an advertising packet comprising operation information related to the access control device, send the advertising packet together with the operation information, and enable a mobile communication device receiving the advertising packet to display at least a portion of the operation information included in the advertising packet to a user of the mobile communication device.

[0071] The operational information associated with the access control device indicates at least one of the following: an operational state of the access control device, an operational state of a component of the access control device, an operational parameter of the access control device, an operational parameter of a component of the access control device, or operational data recorded by the access control device. For example, in addition to the Bluetooth communication circuit and the processor, the components of the access control device may also include a lock and a battery. Therefore, the operational state of the access control device or a component of the access control device may include a battery charge (e.g., a charging percentage), a lock state (e.g., open or closed), a processor state (e.g., standby or activated). The operational parameters of the access control device or a component of the access control device may include a timeout parameter (e.g., a communication timeout parameter), a time period or frequency (e.g., a polling or advertising frequency), a threshold level (e.g., a minimum battery threshold level). Furthermore, the recorded operational data may include the number and / or time of lock opening / closing operations, the number and / or time of battery charging, the duration of an operational state or mode, and the number of successful and / or failed connection attempts. BRIEF DESCRIPTION OF THE DRAWINGS

[0072] The present application will be described in more detail by way of example with reference to the accompanying drawings, in which:

[0073] Figure 1 : A schematic diagram schematically shows a mobile communication device and an access control device associated with a space;

[0074] Figure 2 : schematically illustrates a mobile communication device and a plurality of access control devices, each access control device being associated with a specific space;

[0075] Figure 3 : shows a flow chart according to an exemplary embodiment, schematically describing a plurality of steps performed by a mobile communication device and an access control device for controlling access to a space;

[0076] Figure 4 : Shows Figure 3 A first exemplary embodiment of selecting an access control device;

[0077] Figure 5 : Shows Figure 3 A second exemplary embodiment of selecting an access control device;

[0078] Figure 6 : Shows Figure 3 A third exemplary embodiment of selecting an access control device;

[0079] Figure 7 : Shows Figure 3 A fourth exemplary embodiment of selecting an access control device;

[0080] Figure 8 : shows a flow chart according to an exemplary embodiment, schematically describing a plurality of steps performed by a mobile communication device, an access control device and a remote server for storing a randomized and / or encrypted identifier;

[0081] Fig. 9 : shows a flow chart according to an exemplary embodiment, schematically describing a plurality of steps for randomization of a synchronization identifier performed by an access control device and a remote server;

[0082] Fig.10 : shows a flow chart according to an exemplary embodiment, schematically describing a plurality of steps for randomizing an identifier performed by a mobile communication device, an access control device, and a remote server;

[0083] Fig.11 : shows a possible structure of an advertising packet according to an exemplary embodiment. DETAILED DESCRIPTION

[0084] Figure 1 A mobile communication device 1, an access control device 2, and a space 3 are schematically shown. The mobile communication device 1 (e.g., a smartphone, a handheld device, or a wearable device) includes a display screen 10, which is configured to display data and / or information to a user of the mobile communication device. The mobile communication device 1 also includes a Bluetooth communication circuit 11, which is configured to send data to other devices and is configured to receive data from other devices. In one embodiment, the mobile communication device 1 also includes an ultra-wideband (UWB) transceiver 14, which is configured to determine location or distance information based on signal data received from the UWB transceiver 23. The mobile communication device 1 also includes a processor 12, which is configured to execute computer program code to control the mobile communication device 1. The mobile communication device 1 also includes a non-transitory computer readable medium 13, on which is stored computer program code configured to direct the processor 12 of the mobile communication device.

[0085] The access control device 2 includes a Bluetooth communication circuit 21 and a processor 22. In one embodiment, the access control device 2 also includes a UWB transceiver 23. The Bluetooth communication circuit 21 is configured to send data to other devices and is configured to receive data from other devices. The Bluetooth communication circuit 11 of the mobile communication device 1 is configured to establish Bluetooth communication with the Bluetooth communication circuit 21 of the access control device 2. In one embodiment, the Bluetooth communication circuit 21 of the access control device 2 is also configured to serve as a beacon function, operating the Bluetooth communication circuit 21 in the role of a broadcaster to send data without allowing the connection. The processor 22 of the access control device 2 is configured to execute computer program code to control the access control device 2 to control the Bluetooth communication circuit 21 or control access to the space 3.

[0086] The processor 12 of the mobile communication device 1 and the processor 22 of the access control device 2 may include a central processing unit (CPU) for executing a computer program code stored in a non-transitory computer-readable medium. The processor 12 of the mobile communication device 1 and / or the processor 22 of the access control device 2 may also include a more specific processing unit, such as an application-specific integrated circuit (ASICs), a reprogrammable processing unit, such as a field programmable gate array (FPGAs), or a processing unit specifically configured to accelerate a specific application, such as an encryption accelerator for accelerating encryption functions.

[0087] The processor 12 of the mobile communication device 1 and the processor 22 of the access control device 2 are configured to control the data flow between the Bluetooth communication circuit 11 of the mobile communication device 1 and the Bluetooth communication circuit 21 of the access control device 2. The processor 12 of the mobile communication device 1 and the processor 22 of the access control device 2 are also configured to process received data and control the mobile communication device 1 and the access control device 2 accordingly.

[0088] Figure 1 The access control device 2 is shown to be associated with a space 3. The space 3 includes a door 30, which is configured to allow or prevent access to the space 3. The space 3 is, for example, a specific room in a building, such as a specific hotel room or a specific floor in a building. The access control device 2 is configured to interact with the door 30 to allow or prevent access through the door 30. For example, the access control device 2 is interconnected with a lock of the door 30, wherein the access control device 2 is configured to open the lock of the door 30, thereby allowing access to the space 3.

[0089] Figure 1A remote server 4 is further schematically shown. In one embodiment, the remote server 4 is a cloud server. In one embodiment, the mobile communication device 1 is configured to receive access permission data from the remote server 4. For example, the access permission data includes one or more identifiers of rooms to which the user has authorized access permissions. In this case, the remote server 4 sends the access permission data to the mobile communication device 1 via a communication network. In this embodiment, the remote server 4 is used as a database for access permission data. The communication network uses a mobile data network, such as a Global System for Mobile Communications (GSM), a Code Division Multiple Access (CDMA) or a Long Term Evolution (LTE) network, and / or uses a Wi-Fi network (WLAN), Bluetooth and / or other wireless network types and standard short-range wireless communication interfaces.

[0090] Figure 2 Schematically, a plurality of spaces 3 and a mobile communication device 1 are shown. Each space 3 comprises a door 30 and a specific access control device 2, which is configured to allow or prohibit access to the space 3 through the door 30. Figure 2 As shown, mobile communication devices 1 are arranged in a common floor area or a common floor, which leads to different doors 30 for entering a space 3. The mobile communication devices 1 are configured to interact with different access control devices 2 to control access to the space 3. For example, Figure 2 The scene shown is a building including a plurality of spaces 3. The building is, for example, a hotel, and the spaces 3 are, for example, hotel rooms.

[0091] Figure 3 A flow chart is shown, describing a series of steps for controlling access to space 3, for example, Figure 1 In the following paragraphs, reference will be made to Figure 3 A possible sequence of steps performed by the mobile communication device 1 and / or the access control device 2 for controlling access to the space 3 is described.

[0092] In step S0, the mobile communication device 1 operates the Bluetooth communication circuit 11 of the mobile communication device 1 in a central role. In other words, the Bluetooth communication circuit 11 of the mobile communication device 1 is in an activated state and is ready to receive and / or send data through the Bluetooth communication circuit 11 in a central role.

[0093] In step S1, the access control device 2 or its processor 22 respectively operates the Bluetooth communication circuit 21 of the access control device 2 in a peripheral role. In other words, the Bluetooth communication circuit 21 of the access control device 2 is in an activated state and is ready to receive and / or send data through the Bluetooth communication circuit 21 in a peripheral role.

[0094] A device that performs the central role in Bluetooth communications performs many common tasks, such as discovering and connecting to available peripheral devices, and exploring and interacting with data from peripheral devices. Devices that perform the peripheral role also perform many common but different tasks, such as publishing and advertising services, and responding to read, write, and subscribe requests from connected devices in the central role. The terms "central role" and "peripheral role" are used in the Bluetooth Low Energy standard (BLE).

[0095] In step S2, the access control device 2 or its processor 22 respectively generates an advertising packet. The advertising packet includes an identifier associated with a specific space 3. In other words, each available space 3 has its own associated identifier, which uniquely identifies each space 3. Therefore, the identifier is a unique identifier for each space 3. The identifier 2 can change over time, but is still associated with a specific space 3 and is able to uniquely identify the space 3. The advertising packet may include operational information related to the access control device 2 that sends the advertising packet. The operational information may be included in the advertising packet in a specific data packet or data segment, in particular adjacent to the identifier, or included in the advertising packet within the identifier itself. The operational information is associated with the access control device 2 and includes information about the access control device 2. This information may include power mode information of the access control device 2, battery status information of the access control device 2, status information of a lock or room associated with the access control device 2, usage information of the access control device 2, and / or further information related to the access control device 2 or the associated space 3.

[0096] In step S3, the access control device 2 or its processor 22 respectively sends an advertising packet to the mobile communication device 1. The advertising packet including the identifier related to the space 3 and / or related to the access control device 2 is sent to the mobile communication device 1 through the Bluetooth communication circuit 21 of the access control device 2. In this step, the Bluetooth communication circuit 21 of the access control device 2 operates in a peripheral role, and the Bluetooth communication circuit 11 of the mobile communication device 1 operates in a central role.

[0097] In step S4, the mobile communication device 1 or its processor 12 extracts the identifier and / or the operation information from the advertising packet received from the access control device 2 in step S3, respectively. For example, the identifier is encrypted and / or randomly stored in the advertising packet, and / or the operation information is encrypted and / or randomly stored in the advertising packet. The processor 12 of the mobile communication device 1, the mobile communication device 1 or an application running on the mobile communication device 1 is configured to extract and, if necessary, decrypt the identifier and / or the operation information in the advertising packet. The advertising packet, in particular the identifier and / or the operation information, is, for example, symmetrically or asymmetrically encrypted.

[0098] In step S5, the mobile communication device 1 or its processor 12 respectively uses the identifier and the access rights data stored in the mobile communication device 1 to determine whether the access control device 2 is associated with the user of the mobile communication device 1. In other words, the mobile communication device 1, in particular the processor 12 of the mobile communication device 1, determines whether the access control device 2 is associated with the user by, for example, comparing the identifier with the stored access rights data. For example, the access rights data stored on the mobile communication device 1 of the user enables the user to access a specific room 3. The processor 12 of the mobile communication device 1 compares the identifier received from the access control device 2 with the stored access rights data to determine whether the access control device 2 associated with the specific room 3 is associated with the user of the mobile communication device 1. The access rights data is, for example, received by the mobile communication device 1 from a remote server 4 via a communication network. In step S5, the mobile communication device 1 or its processor 12 respectively may further use the operation information extracted from the received advertising packet to determine whether the access control device 2 is associated with the user of the mobile communication device. For example, the received operation information of different access control devices 2 may be used to determine the order or sequence in which the received identifiers are compared with the access rights data. In other words, information on the operation of different access control devices may be used to determine the priority for comparing received identifiers with access rights data.

[0099] like Figure 3As shown in step S6, when the mobile communication device 1 or its processor 12 respectively determines that the access control device 2 is relevant to the user of the mobile communication device 1, the processing continues to step S8. Otherwise, if the access control device 2 is not relevant to the user of the mobile communication device 1, the processing continues to step S7, and the specific access control device 2 is ignored. In one embodiment, the user of the mobile communication device 1 does not even notice that these steps are performed on his mobile communication device 1, and in particular does not notice that the specific access control device 2 is ignored by the mobile communication device 1. This helps to avoid any unnecessary interference caused by the mobile communication device 1 to the user. In another embodiment, if the specific access control device 2 is relevant, the mobile communication device 1 will display relevant information to the user. In this case, the user can receive valuable information about the relevant access control device 2. The mobile communication device 1 can be configured to display the specific relevant access control device 2 to the user using the received operation information. For example, the relevant access control device 2 is in sleep mode, which will be included in the received operation information. For example, this can be displayed to the user through a corresponding icon or text to inform the user that the corresponding identified relevant access control device 2 is in sleep mode or low battery state. Other operational information, such as the last access time of the relevant access control device 2, can also be displayed to the user separately. The displayed information can be different depending on the access permission data stored on the user's mobile communication device. For example, one user has access permission data that enables access to the corresponding space, while another user has access permission data that enables not only access to the corresponding space, but also enables display of specific operational information to the user.

[0100] like Figure 3 As shown in step S8, when the mobile communication device 1 or its processor 12 respectively determines that multiple access control devices 2 are associated with the user, the processing continues to step S9; otherwise, the processing of a related access control device 2 is continued in step S10. For example, the mobile communication device 1 receives advertising packets from multiple access control devices 2, each advertising packet including an identifier associated with a specific room 3 and / or each advertising packet including operation information related to the access control device 2. When the mobile communication device 1 is located at Figure 2This may occur when the user accesses the hotel floor shown. In this case, all access control devices 2 send their advertising packets, which include unique identifiers associated with the respective spaces 3 and / or operating information associated with the access control devices 2. A hotel guest who has booked multiple rooms / spaces 3 has access rights data on his mobile communication device 1 and is able to access multiple booked rooms. The relevance check performed in step S5 on the extracted identifiers received from more than one access control device 2 is positive, i.e. it is determined that multiple access control devices 2 are associated with the user. The mobile communication device 1 can be configured to use the received operating information of the multiple associated access control devices to display specific multiple associated access control devices 2 to the user. For example, multiple associated access control devices 2 may be in sleep mode, which is included in the received operating information. This can be displayed to the user by corresponding icons or texts, informing the user that the corresponding identified multiple associated access control devices 2 are in sleep mode or low battery state. Other operating information, such as the last access time of the relevant identified access control devices 2, can also be displayed to the user separately, preferably only if the user's mobile communication device has stored the corresponding permissions.

[0101] In another case, the hotel guest has only booked one room and has only one access rights data stored on his mobile communication device 1, which allows him to access only the room he has booked. The correlation check performed in step S5 on the multiple identifiers received from the multiple access control devices 2 will only be positive for the identifiers associated with the booked room, i.e., only the identifier in the access control device 2 of the booked room is associated with the user.

[0102] In step S9, the selected access control device 2 is determined from the plurality of relevant access control devices 2 as determined in steps S6 and S8. In other words, the mobile communication device 1 and / or the user of the mobile communication device 1 selects from the different relevant access control devices 2, as will be described later with reference to FIG. Figure 4 , 5 , 6 and 7. In step S9, the operation information may be used to determine the selected access control device 2 from a plurality of relevant access control devices 2. For example, the operation information may be used to sort and / or prioritize the relevant determined access control devices 2, which are displayed in a corresponding (priority) order.

[0103] In step S10, the mobile communication device 1 and the (selected) relevant access control device 2 establish a connection between the Bluetooth communication circuit 11 of the mobile communication device 1 and the Bluetooth communication circuit 21 of the access control device 2. The established Bluetooth connection allows data to be exchanged between the mobile communication device 1 and the access control device 2. In step S10, the mobile communication device 1 and the (selected) relevant access control device 2 can further use the operation information received from each (selected) relevant access control device 2 to establish a connection between the Bluetooth communication circuit 11 of the mobile communication device 1 and the Bluetooth communication circuit 21 of the access control device 2. For example, the corresponding (selected) relevant access control device 2 is in a sleep mode, which is sent to the mobile communication device 1 through the operation information. This information is used by the mobile communication device 1, in particular its processor, to set the parameters of the connection. For example, a timeout parameter or the number of connection attempts is set according to the respective received operation information. If the corresponding access control device 2 is in a sleep mode, the timeout parameter for establishing the Bluetooth connection is extended.

[0104] In step S11, the mobile communication device 1 and the access control device 2 execute the access control protocol through the connection established in step S10. Executing the access control protocol includes the mobile communication device 1 sending access control data to the access control device 2, and the access control device 2 checking the user's access rights to the space 3 by verifying the access control data from the mobile communication device 1. Those skilled in the art will understand that different types of access control protocols can be implemented and executed through the established connection. For example, the access control data includes one or more access keys, access rights, access times, etc., which are required for a specific access control protocol. In step S11, the mobile communication device 1 and the access control device 2 can use the sent operation information to execute the access control protocol through the connection established in step S10.

[0105] If the relevance check as described with reference to step S5 determines that a particular access control device 2 is associated with the user, the access control protocol according to the present application is only executed. In other words, the access control protocol is only executed once, rather than all the time, when one or more access control devices 2 are within the communication range of the Bluetooth communication circuit 11 of the mobile communication device 1. Different access control devices 2 are filtered using different advertising packets with included identifiers sent from the access control device 2 to the mobile communication device 1 and the access rights data stored in the mobile communication device 1. In the case where more than one access control device 2 is associated, the mobile communication device 1 itself or the user of the mobile communication device 1 preferably uses the corresponding operation information to make a selection, thereby determining the selected access control device 2, establishing a connection with it, and executing the access control protocol. Therefore, compared with conventional systems of different access control devices 2 that are not filtered, the execution time of the access control protocol is much less. This saves time and energy compared to conventional systems. In addition, according to the present application, the mobile communication device 1 does not need to establish a Bluetooth connection with all possible access control devices 2 within the (communication) range of the Bluetooth communication circuit 11 of the mobile communication device 1, which also saves energy and time. Furthermore, the user does not need to interact with the mobile communication device 1 to access the correct space 3, which significantly improves usability, especially for the elderly and children. For example, the user of the mobile communication device 1 only needs to stand in front of the door 30 associated with the space 3 to which he has access rights, and the door 30 (especially the access control device 2) will automatically allow entry without any interaction.

[0106] Figure 4 Shows Figure 3 An exemplary embodiment of step S9 in FIG. 1 is used to select an access control device 2 .

[0107] like Figure 4 As shown, the selected access control device 2 is determined by the mobile communication device 1 or its processor 12, respectively, using a received signal strength indication (RSSI) of the associated access control device 2. The RSSI determines the strength of the received signal.

[0108] In step S91, the mobile communication device 1 determines RSSIs for a plurality of access control devices 2 that are determined to be associated with the user of the mobile communication device 1. Typically, the closer the associated access control device 2 is to the mobile communication device 1, the higher the score of the access control device 2.

[0109] In step S92, the mobile communication device 1 determines the selected access control device 2 having the highest RSSI. In other words, the relevant access control device 2 closest to the mobile communication device 1 that may have the highest RSSI is determined as the selected access control device 2.

[0110] According to this embodiment, without any user interaction, the associated access control device 2 with the highest RSSI value is automatically determined as the selected access control device 2. For example, a user of a mobile communication device 1 has access permission data stored for two spaces 3. The second of the two spaces 3 is located within the first space 3, for example, the first access permission data enables access to a specific floor of a building, and the second access permission data enables access to a specific room located on a specific floor. Users close to the floor and the room may have received advertising packets from the floor and the room. In this case, it is helpful to determine the selected access control device 2 from the associated access control devices 2 using the highest RSSI value. The access control device 2 and the mobile communication device 1 associated with the floor execute the access control protocol before the access control device 2 and the mobile communication device 1 associated with the room execute the access control protocol. The room will remain closed until the user enters the floor. According to this embodiment, the possibility of executing the access control protocol with a non-target access control device 2 can be reduced.

[0111] Figure 5 Shows Figure 3 The second exemplary embodiment of step S9 in FIG. 1 is used to select the access control device 2 .

[0112] like Figure 5 As shown, the selected access control device 2 is determined by the mobile communication device 1 or its processor 12, respectively, and further uses the transmission power of the relevant access control device 2. In step S93, the mobile communication device 1 or its processor 12 determines the transmission power level of the relevant access control device 2. The transmission power level, also known as TX power, determines the transmission strength of the signal. The transmission power level is proportional to the effective range of the signal. The transmission power level affects the RSSI of the received signal. For example, two signal sources can have different transmission power levels, one with a high transmission power level and the other with a low transmission power level.

[0113] In step S94, the mobile communication device 1 or its processor 12 uses the determined RSSI and the determined transmission power level, respectively, to determine the nearest access control device 2 among the different related access control devices 2. By taking into account the transmission power level of the signal source, the accuracy of determining the nearest access control device 2 to the mobile communication device 1 can be advantageously improved.

[0114] Figure 6 The method for selecting the access control device 2 is shown as follows Figure 3 The third exemplary embodiment shown in step S9 in FIG. Figure 6 As shown, the mobile communication device 1 or its processor 12 uses the location or distance data of the associated access control devices 2 , respectively, to determine the selected access control device 2 .

[0115] In step S95, the mobile communication device 1 uses an ultra-wideband (UWB) transceiver 14 to determine the location of the relevant access control device 2 or the distance between the relevant access control device 2 and the mobile communication device 1. UWB technology is used to track the real-time location between the mobile communication device 1 and the relevant access control device 2. The precision and low power consumption of UWB technology make UWB technology very suitable for use in radio frequency sensitive environments, such as hospitals. Different signals from the UWB transceivers 23 of different relevant access control devices 2, for example, will be received and analyzed by the processor 12 of the mobile communication device 1 using the UWB transceiver 14. In addition, the different relevant access control devices 2 are sorted (ranked) according to the distance from the mobile communication device 1. Therefore, a sorted list of relevant access control devices 2 can be created based on the location of the access control device 2 relative to the mobile communication device 1 or the distance between the access control device 2 and the mobile communication device 1.

[0116] In step S96 , as described above, the mobile communication device 1 determines the nearest access control device 2 as the selected access control device 2 using the position or distance information determined in step S95 .

[0117] Using UWB technology can advantageously improve the accuracy of determining the closest relevant access control device 2 and provide additional possibilities for determining the nearest relevant access control device 2. Combinations of RSSI technology, transmission power technology and UWB technology are also conceivable.

[0118] Figure 7 Shows Figure 3 The fourth exemplary embodiment of step S9 in FIG. 1 is used to select an access control device 2. Figure 7 As shown, the selected access control device 2 is determined by the mobile communication device 1 or its processor 12 , respectively, using feedback from the user of the mobile communication device 1 .

[0119] In step S97 , the mobile communication device 1 or its processor 12 respectively displays the determined list of relevant access control devices 2 on its display 10 .

[0120] In step S98, the mobile communication device 1 receives the user's selection of the selected access control device 2. In other words, the user selects the selected access control device 2 from the displayed list of related access control devices 2 on the display 10 of the mobile communication device 1 using, for example, a touch screen or keyboard user interface. The mobile communication device 1, in particular the processor 12 of the mobile communication device 1, receives the user's selection. The displayed list may be sorted / ranked / prioritized based on the distance information determined between each access control device 2 and the mobile communication device 1, for example, the closest related access control device 2 will be displayed first in the list.

[0121] In one embodiment, the access control protocol is only executed if the mobile communication device 1 is within a predetermined distance of the selected access control device 2. In other words, the access control protocol is executed only when the mobile communication device 1 is located close enough to the selected access control device 2. According to this embodiment, the user carrying the mobile communication device 1 must be within a predetermined distance of the selected access control device 2 to execute the access control protocol. The predetermined distance between the mobile communication device 1 and the selected access control device 2 is, for example, equal to or less than five meters, preferably equal to or less than three meters, and more preferably equal to or less than one meter. In one embodiment, RSSI, transmission power and / or UWB technology are used to determine the distance. According to this embodiment, it can be effectively ensured that the door will only open when the user approaches the door 30.

[0122] In one embodiment, a user of a mobile communication device 1 may have access rights data for a plurality of rooms, for example in a hotel or a business building. The selection of the individual access control devices 2 may also be performed using operation information including information of different access control devices 2. Access control devices 2 associated with floor doors may be given priority over access control devices 2 associated with rooms within a floor. The access control devices 2 of a floor and the access control devices 2 of a room may also be displayed to the user, for example, so that the user may advantageously first select the access control device 2 of the floor for connection and then in a second step select the access control device 2 of the room to establish a Bluetooth connection.

[0123] In a further embodiment, the received operation information of the access control device 2 can be used to select the relevant access control device 2 from a plurality of relevant access control devices 2, and the operation information includes the occupancy status information of each access control device 2. The occupancy status information is, for example, information about whether a room is occupied by, for example, a hotel guest. The presence of the hotel guest is, for example, determined manually by the guest himself, for example, by pressing a relevant button on the access control device 2, or automatically determined, for example, by detecting the presence of the guest or any mobile phone in the corresponding room. Other occupancy detection methods are also conceivable. This changing occupancy status information is sent to the corresponding mobile communication device in the operation information in the advertising package. In addition, this occupancy information is, for example, displayed to the user of the mobile communication device. For example, the cleaning staff of the hotel can further use this information to select the access control device 2. The Bluetooth connection can be established only with unoccupied rooms. It is also conceivable that the operation information can prevent the establishment of a connection. For example, even if the mobile communication device includes permission data that can allow access (when the room is unoccupied), it cannot establish a connection with an occupied room. In another embodiment, the maintenance personnel of the hotel or building may further use the operation information to perform the selection of the access control device 2, where the operation information indicates that the relevant access control device 2 needs maintenance, such as a battery switch.

[0124] Figure 8 A flow chart is shown schematically illustrating a number of steps performed by the mobile communication device 1 , the access control device 2 and the remote server 4 for generating and storing a randomized and / or encrypted identifier according to an exemplary embodiment.

[0125] In step S12, after executing the access control protocol in step S11, as combined with Figure 3 As described, the access control device 2 randomizes and / or encrypts the identifier. Randomization and / or encryption may be necessary, otherwise a third party may use the identifier to determine which user used which space 3 in which time period, which may violate data protection compliance rules. Randomization includes modifying the identifier or at least part of the identifier so that sensitive information about the user's location and movement is no longer obtained from the identifier. In one embodiment, the processor 22 of the access control device 2 randomizes the identifier. Encryption is used to protect sensitive information contained in the identifier from unnecessary third-party access. Sensitive information includes, for example, information about which identifier is associated with which space 3.

[0126] In step S13, the randomized and / or encrypted identifier is sent from the access control device 2 to the remote server 4. In one embodiment, the mobile communication device 1 is used to send the randomized and / or encrypted identifier to the remote server 4. In particular, the processor 12 of the mobile communication device 1 is configured to receive the randomized and / or encrypted identifier associated with the space 3 from the access control device 2, and to securely send the randomized and / or encrypted identifier to the remote server 4 via the communication network. In step S13, the operation information can be sent from the access control device 2 to the remote server 4, in particular randomized and / or encrypted. The mobile communication device 1 can also be used to securely send to the remote server 4 via the communication network.

[0127] In step S14, the remote server 4 stores the randomized and / or encrypted identifier received from the access control device 2. In this embodiment, the remote server 4 is used as a database of different identifiers associated with different spaces 3. For example, the identifier needs to be modified after a predetermined period of time or after a predetermined number of uses. In this case, the access control device 2 randomizes and / or encrypts the new identifier. The identifier is sent to the remote server 4 via the mobile communication device 1. In the remote server 4, the identifier is stored and sent to the new mobile communication device 1 as access permission data. In step S14, the remote server 4 can store the operating information received from the access control device 2. The remote server 4 for the identifier may be different from the remote server 4 for the operating information. Different entities can control different remote servers. For example, the operator of the building / space 3 can control the system of identifiers, while the operator or manufacturer of the access control device 2 can control the system of operating information.

[0128] If the old identifier is stored in the remote server 4, the newly received randomized and / or encrypted identifier will replace the old identifier.

[0129] Fig. 9 A flow chart according to an exemplary embodiment is shown schematically illustrating synchronous randomization of identifiers between the access control device 2 and the remote server 4. With synchronous randomization, identifiers are randomized in the same manner, for example, using the same randomization algorithm, at synchronized points in time, so that both the access control device 2 and the remote server 4 are provided with and use the same randomized identifiers at the same time, without requiring communication of the randomized identifiers between the access control device 2 and the remote server 4.

[0130] In step S15 , synchronously with step S17 , the access control device 2 or its processor 22 respectively randomizes the identifier stored in the access control device 2 .

[0131] In step S17 , in synchronization with step S15 , the remote server 4 randomizes the identifier stored in the remote server 4 .

[0132] like Fig. 9 As schematically shown by the dashed arrows in , the randomization of the access control device 2 and the randomization of the remote server 4 are synchronized. For example, based on synchronized clocks, the randomization occurs simultaneously.

[0133] Randomized synchronization can be achieved, for example, by randomizing after a predetermined time period, such as after a predefined usage period of the associated space 3, after a predetermined number of uses, or according to other predetermined mechanisms, such as triggered by an external synchronization signal.

[0134] Fig.10 A flow chart schematically illustrating the randomization of identifiers stored on the access control device 2 and the remote server 4 is shown. Fig.10 Indicates Fig. 9 A possible embodiment of identifier randomization synchronization is shown. Fig.10 Steps S15 and S17 correspond to Fig. 9 Steps S15 and S17 in .

[0135] like Fig.10 As shown, in step S16, an updated identifier instruction is sent from the access control device 2 to the remote server 4. The instruction triggers randomization of the identifier stored in the remote server 4. In one embodiment, the instruction is sent via the mobile communication device 1.

[0136] For example, after executing the access control protocol in step S11, randomization of the identifier associated with the specific space 3 stored in the access control device 2 is performed. Fig.10 This triggers the sending of an updated identifier command to the remote server 4. After receiving the update instruction, the remote server 4 randomizes the identifier associated with the specific space 3 in step S17. Fig. 9 As described above, both the access control device 2 and the remote server 4 are provided with and use the same randomized identifier, and there is no need to communicate the randomized identifier between the access control device 2 and the remote server 4 .

[0137] Fig.11 Different possible structures of advertising packets are shown. Fig.11 The top portion of shows an advertising packet according to the first embodiment, including an identifier. According to this embodiment, the identifier may additionally include operational information. Fig.11 The middle portion of FIG. 1 shows an advertising packet of the second embodiment, which includes an identifier and operation information as independent data segments in the advertising packet. Fig.11 The bottom portion of shows an advertising packet according to a further aspect, the advertising packet including operational information within the advertising packet.

[0138] It should be noted that in the description, the order of steps is presented in a specific order, but those skilled in the art will understand that the order of at least some steps may be changed without departing from the scope of the present disclosure.

Claims

1. A method of controlling access to a space (3) using an access control device (2) and a user's mobile communication device (1), the method comprising: The access control device (2) operates (S1) a Bluetooth communication circuit (21) of the access control device (2) in a peripheral role and sends (S3) an advertising packet, wherein the advertising packet includes an identifier associated with the space (3); The mobile communication device (1) operates (S0) a Bluetooth communication circuit (11) of the mobile communication device (1) in a central role and receives an advertising packet; The mobile communication device (1) determines (S5) whether the access control device (2) is associated with the user using the identifier received from the advertising packet and the access rights data stored in the mobile communication device (1); After determining that the access control device (2) is associated with the user, the mobile communication device (1) establishes (S10) a connection between a Bluetooth communication circuit (11) of the mobile communication device (1) and a Bluetooth communication circuit (21) of the access control device (2); and The mobile communication device (1) and the access control device (2) execute (S11) an access control protocol via the connection, wherein the execution (S11) of the access control protocol includes the mobile communication device (1) sending access control data to the access control device (2), and the access control device (2) checking the user's access rights to the space (3) by verifying the access control data from the mobile communication device (1).

2. The method according to claim 1, wherein: A mobile communication device (1) receives advertising packets from a plurality of access control devices (2); after determining (S8) that more than one access control device (2) is associated with a user, the mobile communication device (1) determines (S9) a selected access control device (2) and establishes (S10) a connection with a Bluetooth communication circuit (21) of the selected access control device (2).

3. The method according to claim 2, wherein: The mobile communication device (1) determines (S9) a selected access control device (2) using the received signal strength indication determined for the associated access control device (2).

4. The method according to any one of claims 2 or 3, wherein: The mobile communication device (1) determines (S9) a selected access control device (2) using position or distance information determined by the mobile communication device (1) using an ultra-wideband transceiver (14) for the associated access control device (2).

5. The method according to any one of claims 2 to 4, wherein: The mobile communication device (1) determines (S9) the selected access control device (2) by displaying (S97) a list of relevant access control devices (2) to the user on a display screen and receiving (S98) a selection of the selected access control device (2) from the user.

6. The method according to any one of claims 1 to 5 further includes the access control device (2) generating (S12) at least one of the following: generating a randomized identifier by applying randomization to an identifier associated with the space (3), or generating an encrypted identifier by encrypting the identifier associated with the space (3), and sending (S13) the randomized and / or encrypted identifier to a remote server (4).

7. The method according to claim 6, wherein: The access control device (2) sends (S13) the randomized and / or encrypted identifier to the remote server (4) via the mobile communication device (1).

8. The method according to any one of claims 1 to 7, wherein: The access control device (2) intermittently acts as a beacon, operates the Bluetooth communication circuit (21) of the access control device (2) in the role of a broadcaster, and sends an advertising packet without allowing a connection; and the mobile communication device (1) displays the spatial arrangement of multiple access control devices (2) acting as beacons on a display.

9. A mobile communication device (1), comprising a Bluetooth communication circuit (11) and a processor (12) connected to the Bluetooth communication circuit (11), the processor (12) being configured to perform the following steps: operating (S0) a Bluetooth communication circuit (11) in a central role and receiving an advertising packet from an access control device (2) controlling access to a space (3); extracting (S4) an identifier associated with the space (3) from the advertising packet; using the identifier and the access rights data stored in the mobile communication device (1), determining (S5) whether the access control device (2) is associated with a user of the mobile communication device (1); After determining that the access control device (2) is associated with the user, instructing the Bluetooth communication circuit (11) to establish (S10) a connection with the access control device (2); and An access control protocol is executed (S11) through the connection. The execution (S11) of the access control protocol includes the processor instructing the Bluetooth communication circuit to send access control data to the access control device (2), so that the access control device (2) can check the user's access rights to the space (3).

10. The mobile communication device (1) according to claim 9, wherein: The processor (12) is configured to receive advertising packets from a plurality of access control devices (2); after determining (S8) that more than one access control device (2) is associated with a user, determine (S9) a selected access control device (2) and establish (S10) a connection with the selected access control device (2).

11. The mobile communication device (1) according to claim 10, wherein: The processor (12) is configured to determine (S9) a selected access control device (2) using the received signal strength indication determined for the associated access control device (2).

12. The mobile communication device (1) according to any one of claims 10 or 11, wherein: The mobile communication device (1) comprises an ultra-wideband transceiver (14), and the processor (12) is configured to determine the location information or distance information of the relevant access control device (2) using the ultra-wideband transceiver (14), and to determine (S9) the selected access control device (2) using the location information or distance information.

13. The mobile communication device (1) according to any one of claims 10 to 12, wherein: The processor (12) is configured to determine (S9) a selected access control device (2) by displaying (S97) a list of relevant access control devices (2) to a user on a display and receiving (S98) a selection of the selected access control device (2) from the user.

14. The mobile communication device (1) according to any one of claims 9 to 13, wherein: The processor (12) is configured to receive a randomized and / or encrypted identifier associated with the space (3) from the access control device (2) and to securely send the randomized and / or encrypted identifier to the remote server (4) via a mobile wireless communication network.

15. A computer program product comprising a non-transitory computer readable medium (13) having computer program code stored thereon, the computer program code being configured to instruct a processor (12) of a mobile communication device (1) to perform the following steps: operating (S0) a Bluetooth communication circuit (11) of a mobile communication device (1) in a central role and receiving an advertisement packet from an access control device (2) that controls access to a space (3); extracting (S4) an identifier associated with the space (3) from the advertising packet; using the identifier and the access rights data stored in the mobile communication device (1) to determine (S6) whether the access control device (2) is associated with a user of the mobile communication device (1); After determining that the access control device (2) is associated with the user, instructing the Bluetooth communication circuit (11) to establish (S10) a connection with the access control device (2); and An access control protocol is executed (S11) through the connection. The execution (S11) of the access control protocol includes the processor (12) instructing the Bluetooth communication circuit (11) to send access control data to the access control device (2), so that the access control device (2) can check the user's access rights to the space (3).

16. The computer program product of claim 15, wherein: The computer program code is further configured to instruct the processor (12) to receive advertising packets from a plurality of access control devices (2); after determining that more than one access control device (2) is associated with the user, determine a selected access control device (2) and establish a connection with the selected access control device (2).

17. The computer program product of claim 16, wherein: The computer program code is further configured to instruct the processor (12) to determine the selected access control device (2) using the received signal strength indication determined for the associated access control device (2).

18. A computer program product according to any one of claims 16 or 17, wherein: The computer program code is further configured to instruct the processor (12) to determine position or distance information for the relevant access control device (2) using the ultra-wideband transceiver (14) of the mobile communication device (1), and to determine (S9) the selected access control device (2) using the position or distance information.

19. The computer program product according to any one of claims 16 to 18, wherein: The computer program code is further configured to instruct the processor (12) to determine (S9) the selected access control device (2) by displaying (S97) a list of relevant access control devices (2) to the user on a display and receiving (S98) a selection of the selected access control device (2) from the user.

20. A computer program product according to any one of claims 15 to 19, wherein: The computer program code is further configured to instruct the processor (12) to receive a randomized and / or encrypted identifier associated with the space (3) from the access control device (2) and to securely send the randomized and / or encrypted identifier to a remote server (4) via a mobile wireless communication network.

21. An access control device (2) for controlling access to a space (3), the access control device (2) comprising a Bluetooth communication circuit (21) and a processor (22) connected to the Bluetooth communication circuit (21), the processor (22) being configured to perform the following steps: operating (S1) a Bluetooth communication circuit (21) in a peripheral role and transmitting (S3) an advertising packet, the advertising packet including an identifier associated with the space (3), the identifier enabling a mobile communication device (1) receiving the advertising packet to determine (S6) whether the access control device (2) is associated with a user of the mobile communication device (1); After determining that the access control device (2) is associated with the user, receiving a connection request from the mobile communication device (1) at the Bluetooth communication circuit (21), and instructing the Bluetooth communication circuit (21) to establish (S10) a connection with the mobile communication device (1); and An access control protocol with the mobile communication device (1) is executed (S11) via the connection, wherein executing (S11) the access control protocol includes receiving access control data from the mobile communication device (1) and checking the user's access rights to the space (3) by verifying the access control data.

22. The access control device (2) according to claim 21, wherein: The processor (22) is further configured to generate (S12) at least one of: generating a randomized identifier by applying randomization to an identifier associated with the space (3), or generating an encrypted identifier by encrypting the identifier associated with the space (3), and sending (S13) the randomized and / or encrypted identifier to a remote server.

23. The access control device (2) according to any one of claims 21 to 22, wherein: The processor (22) is further configured to instruct the Bluetooth communication circuit (21) to intermittently operate in a broadcaster role, so that the access control device (2) acts as a beacon and sends advertising packets without allowing a connection.

Images