Access control system for buildings with two-factor authentication

Abstract

Access control system (1) for buildings (2) with a stationary unit (20) and a mobile unit (10) that can be carried by a user (B), wherein the mobile unit (10) has a mobile transceiver (11) which is configured to wirelessly and encryptedly transmit signals (S) for authentication and authorization of the mobile unit (10) to the stationary unit (20) as a first authentication factor and for control of the stationary unit (20) by the mobile unit (10) to a stationary transceiver (21) of the stationary unit (20), wherein the stationary unit (20) and / or the mobile unit (10) has a detection device (23) which is configured to detect features (M) attributable to the user (B), and wherein the stationary unit (20) has a control device (22) which is connected to the detection device (23) and the stationary transceiver (21) via a signal connection, and which is designed to to authenticate the mobile unit (10) by means of the signals (S) as the first authentication factor, to authenticate the user (B) as the second authentication factor and from the signals (S) transmitted by the mobile transceiver (11) to the stationary transceiver (21) to determine a position of the mobile unit (10) relative to the stationary unit (20) and to control a function when a control command to trigger the function is generated by a mobile unit (10) authenticated and authorized by the stationary unit (20) as the first authentication factor and the user (B) is authenticated as the second authentication factor.

Description

[0001] The invention relates to an access control system for buildings with user authentication using two factors.

[0002] An access control system within the meaning of the invention is understood to be a system comprising a stationary or fixed unit and a mobile unit that can be carried by a user, in which these units communicate wirelessly with each other for the authentication and authorization of the mobile unit, and thus of the user, vis-à-vis the stationary unit. Based on this authentication and authorization, the stationary unit controls various functions and, in particular, releases, i.e., unlocks, the associated access point, for example, a door or gate. Beyond most conventional access systems, the access system according to the invention also provides position determination, as will be explained in more detail below.

[0003] Wireless access control systems are state of the art and are known, for example, from documents WO 2023 / 222462 A1 and DE 10 2020 114 403 A1.

[0004] However, such systems can be further optimized.

[0005] In the field of building access control systems, particularly wireless access solutions, there is a steadily growing need for increased security and protection against unauthorized access. This desire for enhanced security arises especially in situations where either the building itself, specific areas within the building requiring special protection (such as vaults, server rooms, or archives containing sensitive data), or individual users with heightened security needs (e.g., management, administrators, or security officers) are affected.

[0006] At the same time, the increased need for security clashes with the desire for maximum user-friendliness. Particularly with access systems designed for the most automated and interaction-free operation possible, additional effort required for manual input (such as PIN entry, fingerprint scanning, etc.) is perceived as disruptive and impractical. In practice, this often leads users to forgo implementing additional security measures to avoid compromising convenience, which in turn weakens access protection.

[0007] The invention is therefore based on the objective of overcoming the aforementioned disadvantages and providing an access control system with simultaneously improved security and increased comfort.

[0008] This problem is solved by the combination of features according to claim 1.

[0009] According to the invention, an access control system for buildings, or a building access control system, is proposed, which accordingly comprises a stationary unit (i.e., fixed in place and preferably permanently connected to the building) and a mobile unit (i.e., not fixed in place) that can be carried or transported by a user. The mobile unit is essentially an electronic key, which can, for example, be in the form of a smart fob or a smartphone. For the avoidance of doubt, it should be noted that the access control system can comprise a plurality of mobile units, each of which is distinguishable by a unique identifier specific to the mobile unit. The stationary unit can, for example, also be a unit that can be attached to a door lock or that replaces the door lock.Fundamentally, both the stationary and mobile units each have a transceiver, where a transceiver is understood to be a transmit-receive unit. The transceiver of the mobile unit, referred to as the mobile transceiver, preferably has at least one antenna and electronics for transmitting signals via that antenna and for processing the signals received via that antenna. The transceiver of the stationary unit, referred to as the stationary transceiver, preferably has at least two antennas and electronics for transmitting signals via at least one of the two antennas and for processing the signals received via both antennas.The mobile transceiver is designed to wirelessly transmit encrypted signals, particularly via radio, for authentication and authorization of the mobile unit to the stationary unit, and optionally for control of the stationary unit by the mobile unit to the transceiver of the stationary unit, referred to as the stationary transceiver.

[0010] Fundamentally, authentication and authorization of the mobile unit are understood as the verification of whether the mobile unit, or rather its identity, is known to the stationary unit, in particular whether a unique identifier of the mobile unit is stored in the stationary unit, and whether the authenticated mobile unit has access authorization for the access controlled by the access control system. Authentication and authorization can be performed integrally or separately.

[0011] Furthermore, the mobile transceiver may be configured to include a first mobile module for communication via a first radio standard, in particular Bluetooth Low Energy (BLE), and a second mobile module for communication via a second radio standard, in particular Ultra-Wide-Band (UWB). Similarly, the stationary transceiver may be configured to include a first stationary module for communication via the first radio standard and a second stationary module for communication via the second radio standard. The aforementioned electronics of the transceiver, as well as the antennas, may be provided for each module individually or jointly for each pair of modules.

[0012] The essential aspect of the invention is that the signals transmitted wirelessly and in encrypted form from the mobile unit to the stationary unit serve as the first authentication factor for the authentication and authorization of the mobile unit vis-à-vis the stationary unit. The stationary unit and / or the mobile unit has a detection device configured to capture user-attributable characteristics, thereby authenticating the user as the second authentication factor. Furthermore, the access control system includes a control device that is connected via signal transmission to both the detection device and the stationary transceiver. If the detection device is located in the mobile unit, the signal transmission is established via the radio link provided by the transceiver.The control device is configured to authenticate the mobile unit using the transmitted signals as the first authentication factor and to authenticate the user as the second authentication factor. Furthermore, the control device is configured to determine the position of the mobile unit relative to the stationary unit from the signals transmitted by the mobile transceiver to the stationary transceiver and to trigger a function when a control command to initiate the function is generated by a mobile unit that has been authenticated and authorized by the stationary unit as the first authentication factor, and the user has been authenticated as the second authentication factor.

[0013] The combination of two authentication factors and the location tracking of the mobile unit achieves a high level of security and flexibility in access control. Wireless and encrypted communication between the mobile and stationary units enables convenient and secure operation.

[0014] Assuming that the first radio connection uses BLE signal transmission and the second uses UWB signal transmission, it can be implemented that, after successful authorization via BLE communication, UWB communication is initiated as the first authentication factor between the mobile and stationary units. This allows the stationary unit to locate the mobile unit, i.e., determine its position. The localization of the mobile unit can be used, in particular, to determine a user's access request from the movement pattern (also referred to as a movement path), for example, the tracked route. This enables a particularly convenient, largely automated access solution that recognizes the access request contextually and initiates the access process without requiring explicit user interaction.Once the access request has been recognized, authorization can then be carried out via the second authentication factor, so that - as soon as a release signal generated in this way is available - a corresponding control command to control the function, e.g. unlocking the access, can be generated.

[0015] According to further training, it may be provided that the recording device is designed to capture the user's biometric characteristics, in particular without contact, and to transmit the captured biometric characteristics or key data generated therefrom, such as a string of numbers or characters, to the control device, which is designed to compare the biometric characteristics transmitted by the recording device or the key data generated therefrom with biometric characteristics stored for the user of the mobile unit or a corresponding stored key data, and, if they match, to generate a release signal or to authenticate the user.

[0016] The use of biometric features as a second authentication factor significantly increases system security, as it makes manipulation or disclosure of access data more difficult. Contactless data capture also improves user-friendliness and hygiene.

[0017] One variant provides that the recording device has a microphone or is a microphone and is designed to record a voice profile of the user and to compare the recorded voice profile with a voice profile stored, for example, in the recording device or the control device.

[0018] Using a voice profile as a biometric feature provides an additional authentication method that is difficult to forge and increases the flexibility of the system with regard to the biometric methods used.

[0019] According to a further development, the detection device can have a camera or be a camera and be designed to capture an image of the user's face and / or iris and / or retina and to compare the captured image with an image stored, for example, in the detection device or the control device.

[0020] Integrating a camera to capture facial or eye features further diversifies biometric authentication, increasing the security and adaptability of the system to different requirements.

[0021] Furthermore, the camera and microphone can also be combined.

[0022] In addition, alternative recording devices for capturing alternative biometric characteristics are conceivable. If the recording device is provided in the mobile unit, for example, it can be designed as a fingerprint reader, so that the user's fingerprint can be captured on or by the mobile unit, which may be a smartphone, for example.

[0023] In particular, the detection device or mobile unit can also be designed to wirelessly capture and use the user's behavioral biometric characteristics for authentication. Behavioral biometric characteristics include characteristic patterns in movement or interaction behavior typical of the respective user, such as individual gait, posture, mode of locomotion, or characteristic movements when carrying or holding the mobile unit. Similarly, specific patterns in the operation of touchscreens, buttons, or the use of sensors (e.g., gyroscope, accelerometer) can be analyzed as behavioral biometric characteristics. The wireless capture and evaluation of such characteristics enables continuous and context-sensitive authentication without requiring the user to actively provide biometric data.

[0024] For example, the mobile unit can also function as an integral data acquisition device and be wirelessly connected to the control unit. Thus, the mobile unit—especially if it is a smartphone—can have sensors capable of capturing behavioral biometrics, particularly gait or movement patterns. This behavior can then be transmitted wirelessly to the control unit of the stationary unit and compared with a stored behavior pattern assigned to the user or the mobile unit.

[0025] This adds another component to the authentication process that is difficult to manipulate and user-friendly, offering additional advantages, especially in security-critical or hygienically sensitive application areas.

[0026] It is also advantageous if the control device has a user-accessible learning mode in which a biometric characteristic of the user and / or key data generated therefrom are captured by the detection device and stored in a way that can be assigned to the user's mobile unit, so that it is a unique identifier specific to the respective mobile unit.

[0027] The learning mode enables a simple and secure assignment of biometric characteristics to a specific mobile unit and a user assigned to the mobile unit, thereby improving the usability and customizability of the system.

[0028] Further training stipulates that the control device is trained to control the recording device for capturing user-attributable characteristics as or for the second authentication factor, after a control command to trigger the function has been generated by a mobile unit authenticated and authorized by the stationary unit as the first authentication factor.

[0029] This control logic ensures that biometric authentication only takes place after successful authentication of the mobile unit, further increasing the security of the system and preventing unauthorized access.

[0030] Another variant provides that the control command to trigger the function is transmitted from the mobile unit to the stationary unit and / or the control command is generated by the stationary unit when the position of the mobile unit is within a predetermined and user-modifiable access area and / or successively determined positions of the mobile unit correspond to a predetermined movement path.

[0031] The ability to trigger the control command depending on the position of the mobile unit or a specific movement path increases the flexibility and security of the system, as this allows access only to authorized movement patterns or areas of presence.

[0032] The features disclosed above can be combined in any way, provided that this is technically possible and that they do not contradict each other.

[0033] Reference is also made to earlier German utility model applications, published as DE 20 2025 102 409 U1, DE 20 2025 102 410 U1, DE 202025102413 U1, DE 20 2025 102 412 U1, DE 20 2025 102 414 U1, DE 202025102415 U1, DE 20 2025 102 416 U1, DE 20 2025 102 417 U1 and DE 20 2025 102 418 U1, which also further develop an access control system according to the invention. Reference is hereby made to the aforementioned disclosures, so that their content is incorporated into the disclosure and teaching of the present application.

[0034] Other advantageous embodiments of the invention are characterized in the dependent claims or are described in more detail below together with the description of the preferred embodiment of the invention with reference to the figures. The figures show: Fig. 1. an access control system; Fig. 2. Systematic presentation of two-factor authentication; Fig. 3 Flowchart for two-factor authentication.

[0035] The figures are schematic examples. Identical reference symbols in the figures indicate identical functional and / or structural features.

[0036] In Fig. Figure 1 shows the essential components of an access control system 1 at a building 2 according to the invention.

[0037] Such an access control system 1 basically comprises a stationary unit 20 and a mobile unit 10, wherein the stationary unit 20 is fixed in place or connected to the building 2 and is designed to control the access point 3, for example, a door, of the building 2 and, in particular, to lock or unlock the access point 3 or the door 3 depending on the position of the mobile unit 10, wherein the stationary unit 20 receives signals S from the mobile unit 10 to determine its position and to authenticate and authorize it. The mobile unit 10 has a mobile transceiver 11, which has a first mobile module for communication via a first radio standard, specifically a BLE module for communication via BLE, and a second mobile module for communication via a second radio standard, specifically a UWB module for communication via UWB.This enables the mobile transceiver 11 to wirelessly and encryptedly transmit signals S for authentication and authorization of the mobile unit 10 to the stationary unit 20 and, if necessary, for control of the stationary unit 20 by the mobile unit 10 to a stationary transceiver 21 of the stationary unit 20.

[0038] The stationary transceiver 21 has a first stationary module for communication via the first radio standard, specifically a BLE module for communication via BLE, and a second stationary module for communication via the second radio standard, specifically a UWB module for communication via UWB.

[0039] In general, identification and authentication, especially regarding the first authentication factor, preferably take place via BLE, whereas localization and position determination preferably take place via cryptographically secured communication over UWB.

[0040] It is essential that the control of the stationary unit 20 should not be based, or preferably at least not exclusively, on control commands received from the mobile unit 10, but rather that the position of the mobile unit 10 relative to the stationary unit 20, or a movement pattern determined by a successive sequence of positions recorded over time, should be evaluated. Regarding the position, for example, an access request can be assumed if the position of the mobile unit is within a predetermined access area 30.

[0041] Accordingly, the stationary unit 20 can have a control device 22 which is configured to determine a position of the mobile unit 10 relative to the stationary unit 20 from the signals S transmitted by the mobile transceiver 11 to the stationary transceiver 21 and to automatically control a function when the position of the mobile unit 10 is within a predetermined access area 30.

[0042] For example, the control device 22 can determine, from the signals S transmitted by the mobile transceiver 11 to the stationary transceiver 21, an angle Φ from which the signals S were received and a distance r from which the signals S were received, so that the respective position of the mobile unit 10 can be specified as polar coordinates of a polar coordinate system. It follows that the stationary transceiver 21 is located at the origin of this two-dimensional polar coordinate system.

[0043] In Fig. 2 is an access control system according to Fig. Figure 1 shows the mobile unit 10 being carried by a user B. The illustration makes it clear that the signals S, which are exchanged wirelessly and preferably via BLE between the mobile transceiver 11 and the stationary transceiver 21, serve as the first authentication factor, and the user characteristics M, detected by the detection device 23, serve as the second authentication factor. Both the detection device 23 and the stationary transceiver 21 are connected to the control device 22, which evaluates and processes the transmitted data.

[0044] According to the procedure based on a flowchart Fig. 3. The control device 22 is suitable or designed to carry out the following process steps: Step A The control device 22 authenticates the mobile unit 10 by means of the signals S transmitted by the mobile transceiver 11 of the mobile unit 10 to the stationary transceiver 21 of the stationary unit 20 as the first authentication factor. Step B: Was the authentication of mobile unit 10 successful? If no, then return to step A. If yes, then proceed to step C. Step C The control device 22 determines a position of the mobile unit 10 relative to the stationary unit 20 from the signals S transmitted by the mobile transceiver 11 to the stationary transceiver 21. Step D: Based on the position of mobile unit 10 and / or a sequence of successively determined positions of mobile unit 10, it is determined whether the user intends to access the building (access request). Alternatively, the access request can also be detected by transmitting or generating a control command. Step E: Is there a request for access? If no, return to step C. If yes, proceed to step F. Step F The control device 22 controls the detection device 23 to detect a feature M of the user B, wherein in this case is a biometric feature M and specifically the detection device 23 is a microphone and the feature M is a voice image of the user B. Step G The feature M (voice image) captured by the recording device 23 is compared by the control device 22 with a feature M of the user B, which is stored in particular for the mobile unit 10. Step H: Does the detected feature M of user B match the feature M of user B stored in the control device 22 within a predetermined tolerance? If no, return to step A. If yes, proceed to step J. Step J The control device 22 generates a control command to unlock access 3. Reference symbol list: 1 Access control system 2 buildings 3 Access / Door 10 mobile units 11 mobile transceivers 12 Application 20 stationary units 21 stationary transceivers 22 Control device 23 Detection device 30 Access area B Users M (biometric) characteristics of the user S Signal(s) r distance Φ angle (polar coordinates) QUOTES INCLUDED IN THE DESCRIPTION

[0000] This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited patent literature

[0000] WO 2023 / 222462 A1

[0003] DE 10 2020 114 403 A1

[0003] DE 20 2025 102 409 U1

[0033] DE 20 2025 102 410 U1

[0033] DE 202025102413 U1

[0033] DE 20 2025 102 412 U1

[0033] DE 20 2025 102 414 U1

[0033] DE 202025102415 U1

[0033] DE 20 2025 102 416 U1

[0033] DE 20 2025 102 417 U1

[0033] DE 20 2025 102 418 U1

[0033]

Claims

[1] Access control system (1) for buildings (2) with a stationary unit (20) and a mobile unit (10) that can be carried by a user (B), wherein the mobile unit (10) has a mobile transceiver (11) which is configured to wirelessly and encryptedly transmit signals (S) for authentication and authorization of the mobile unit (10) to the stationary unit (20) as a first authentication factor and for control of the stationary unit (20) by the mobile unit (10) to a stationary transceiver (21) of the stationary unit (20), wherein the stationary unit (20) and / or the mobile unit (10) has a detection device (23) which is configured to detect features (M) attributable to the user (B), and wherein the stationary unit (20) has a control device (22) which is connected to the detection device (23) and the stationary transceiver (21) via a signal connection, and which is designed to to authenticate the mobile unit (10) by means of the signals (S) as the first authentication factor, to authenticate the user (B) as the second authentication factor and from the signals (S) transmitted by the mobile transceiver (11) to the stationary transceiver (21) to determine a position of the mobile unit (10) relative to the stationary unit (20) and to control a function when a control command to trigger the function is generated by a mobile unit (10) authenticated and authorized by the stationary unit (20) as the first authentication factor and the user (B) is authenticated as the second authentication factor. [2] Access control system according to claim 1, wherein the detection device (23) is configured to detect biometric features (M) of the user (B) and to transmit the detected biometric features (M) to the control device (22), which is configured to compare the biometric features (M) with biometric features (M) of the user (B) stored for the mobile unit and to authenticate the user (B) if they match. [3] Access control system according to claim 2, wherein the detection device (23) has a microphone and is configured to detect a voice profile of the user (B) and to compare the detected voice profile with a stored voice profile. [4] Access control system according to claim 2 or 3, wherein the detection device (23) has a camera and is configured to capture an image of the face and / or iris and / or retina of the user (B) and to compare the captured image with a stored image. [5] Access control system according to one of claims 2 to 4, wherein the control device (22) has a learning mode that can be called up by the user (B), in which a biometric feature of the user (B) and / or key data generated therefrom are captured by the capture device (23) and stored in a manner assignable to the mobile unit (10) of the user (B). [6] Access control system according to one of the preceding claims, wherein the control device (22) is configured to control the detection device (23) for the detection of features (M) attributable to the user (B) as a second authentication factor, after a control command to trigger the function has been generated by a mobile unit (10) authenticated and authorized by the stationary unit (20) as a first authentication factor. [7] Access control system according to one of the preceding claims, wherein the control command to trigger the function is transmitted from the mobile unit (10) to the stationary unit (20) and / or the control command is generated by the stationary unit (20) when the position of the mobile unit (10) is within a predetermined access area (30) that can be changed by the user (B) and / or successively determined positions of the mobile unit (10) correspond to a predetermined movement path.

Images