Electronic lock and method for operating an electronic lock

Abstract

There is provided an electronic lock and a method for operating an electronic lock. The method including: receiving an electronic key fob in a power receptacle of the electronic lock to power electrical components of the electronic lock from a stored power source on the electronic key fob; communicating an encrypted verification message to the electronic key fob from the electronic lock, the encrypted verification message is decrypted by the electronic key fob using a decryption key stored by the electronic key fob; receiving a response from the electronic key fob by the electronic lock, the response includes the decrypted verification message; verifying the response by the electronic lock to determine whether access is to be granted to the electronic lock; and granting access where the response is verified.

Description

ELECTRONIC LOCK AND METHOD FOR OPERATING AN ELECTRONIC LOCKTECHNICAL FIELD

[0001] The following generally relates to locks, and more particularly, to an electronic lock and method for operating an electronic lock.BACKGROUND

[0002] Electronic lock and key systems provide a seamless blend of traditional mechanical locking mechanisms, combined with smart technology to improve security and smooth operation. Such systems can replace conventional mechanical lock and key systems to enhance security and convenience. Users of such systems can easily gain access by presenting their electronic key to an electronic lock, which can verify their credentials and grant access.SUMMARY

[0003] In an aspect, there is provided a method for operating an electronic lock, the method comprising: receiving an electronic key fob in a power receptacle of the electronic lock to power electrical components of the electronic lock from a stored power source on the electronic key fob; communicating an encrypted verification message to the electronic key fob from the electronic lock, the encrypted verification message is decrypted by the electronic key fob using a decryption key stored by the electronic key fob; receiving a response from the electronic key fob by the electronic lock, the response comprising the decrypted verification message; verifying the response by the electronic lock to determine whether access is to be granted to the electronic lock; and granting access where the response is verified.

[0004] In a particular case of the method, the electronic key fob and electronic lock establish a session key for secure communication using the encrypted verification message.

[0005] In another case of the method, the encrypted verification message comprises a generated random number.

[0006] In yet another case of the method, the electronic lock logs each grating of access.

[0007] In yet another case of the method, the method further comprises receiving a configuration for the electronic lock from the electronic key fob.

[0008] In yet another case of the method, the configuration comprises granting, revoking, or changing access to the electronic lock.

[0009] In another aspect, there is provided an electronic lock, the electronic lock comprising: a power receptacle to receive an electronic key fob and provide power to the electronic lock from a stored power source on the electronic key fob; a locking actuator to engage and disengage the electronic lock; and a processing unit in communication with a data storage, the processing unit configurable to execute instructions to: communicate an encrypted verification message to the electronic key fob, the encrypted verification message is decrypted by the electronic key fob using a decryption key stored by the electronic key fob; receive a response from the electronic key fob, the response comprising the decrypted verification message; verify the response to determine whether access is to be granted and the electronic lock is to be disengaged; and instruct the locking actuator to disengage the electronic lock where the response is verified.

[0010] In a particular case of the electronic lock, the electronic key fob and electronic lock establish a session key for secure communication using the encrypted verification message.

[0011] In another case of the electronic lock, the encrypted verification message comprises a generated random number.

[0012] In yet another case of the electronic lock, the electronic lock logs each grating of access.

[0013] In yet another case of the electronic lock, the processing unit is further configurable to execute instructions to receive a configuration for the electronic lock from the electronic key fob.

[0014] In yet another case of the electronic lock, the configuration comprises granting, revoking, or changing access to the electronic lock.

[0015] In yet another case of the electronic lock, the processing unit is further configurable to execute instructions to disable all access to the electronic lock after a predefined number of failed attempts.

[0016] In yet another case of the electronic lock, the electronic key fob is configurable to also access other electronic locks.

[0017] In yet another case of the electronic lock, the power receptacle comprises physical electrical contacts to provide power to the electronic lock.

[0018] In yet another case of the electronic lock, the electronic lock is incorporated into a commercial coinbox.

[0019] In another aspect, there is provided a method for operating an electronic lock, the method comprising: receiving an electronic key fob in a power receptacle of the electronic lock to power electrical components of the electronic lock from a stored power source on the electronic key fob; receiving an encrypted message at the electronic lock from the electronic key fob; decrypting the received encrypted message by the electronic lock; verifying the decrypted message to determine whether access is to be granted to the electronic lock; and granting access where the response is verified.

[0020] In another case of the method, the electronic key fob and electronic lock establish a session key for secure communication using the encrypted message.

[0021] In yet another case of the method, the electronic lock logs each grating of access.

[0022] In yet another case of the method, the method further comprises receiving a configuration for the electronic lock from the electronic key fob as part of the encrypted message.BRIEF DESCRIPTION OF THE DRAWINGS

[0023] The features of the invention will become more apparent in the following detailed description in which reference is made to the appended drawings wherein:

[0024] FIG. 1 illustrates a schematic diagram of a digital lock and key system in accordance with an embodiment;

[0025] FIG. 2 illustrates a schematic diagram of a digital lock of the system of FIG. 1;

[0026] FIG. 3 illustrates a schematic diagram of a digital key fob of the system of FIG. 1 ;

[0027] FIG. 4 illustrates a schematic diagram of a computing device of the system of FIG. 1;

[0028] FIG. 5 illustrates a schematic diagram of a management server of the system of FIG. 1;

[0029] FIG. 6 illustrates a flowchart of a method for operating an electronic lock, in accordance with an embodiment;

[0030] FIG. 7 illustrates a front perspective view of a digital coinbox assembly, in accordance with an embodiment;

[0031] FIG. 8 illustrates a rear perspective view of the system of FIG. 7;

[0032] FIG. 9 illustrates a bottom perspective view of the system of FIG. 7;

[0033] FIG. 10 illustrates a front elevation view of a system of FIG. 7;

[0034] FIG. 11 illustrates a rear elevation view of a system of FIG. 7;

[0035] FIG. 12 illustrates a top elevation view of the system of FIG. 7;

[0036] FIG. 13 illustrates a bottom elevation view of the system of FIG. 7;

[0037] FIG. 14 illustrates an exploded view of a keying assembly of the system of FIG. 7;

[0038] FIG. 15 illustrates an exploded view of a locking bolt assembly of the system of FIG. 7;

[0039] FIG. 16 illustrates and exploded view of a locking actuator assembly of the system of FIG. 7;

[0040] FIG. 17 illustrates a rear view of the arrangement of components on a locking actuator PC BA of the system of FIG. 7;

[0041] FIGS. 18 and 19 illustrate a rear view of the arrangement of select components on a locking actuator assembly of the system of FIG. 7;

[0042] FIG. 20 illustrates an exploded view of the arrangement of select components of the system of FIG. 7;

[0043] FIG. 21 illustrates a rear perspective view of a key fob retaining assembly for the system of FIG. 7;

[0044] FIG. 22 illustrates a cross section view of select components of the assembly of FIG. 21 ;

[0045] FIG. 23 illustrates a front perspective view of select components of the assembly of FIG. 21;

[0046] FIG. 24 illustrates a front elevation view of a system of the assembly of FIG. 21 ;

[0047] FIG. 25 illustrates a rear perspective view of a digital key fob which can operate on the system of FIG. 7; and

[0048] FIG. 26 illustrates a flowchart of another method for operating an electronic lock, in accordance with an embodiment.DETAILED DESCRIPTION

[0049] Embodiments will now be described with reference to the figures. For simplicity and clarity of illustration, where considered appropriate, reference numerals may be repeated among the figures to indicate corresponding or analogous elements. In addition, numerous specific details are set forth in order to provide a thorough understanding of the embodiments described herein. However, it will be understood by those of ordinary skill in the art that the embodiments described herein may be practiced without these specific details. In other instances, well-known methods, procedures and components have not been described in detail so as not to obscure the embodiments described herein. Also, the description is not to be considered as limiting the scope of the embodiments described herein.

[0050] Various terms used throughout the present description may be read and understood as follows, unless the context indicates otherwise: “or” as used throughout is inclusive, as though written “and / or”; singular articles and pronouns as used throughout include their plural forms, and vice versa; similarly, gendered pronouns include their counterpart pronouns so that pronouns should not be understood as limiting anything described herein to use, implementation, performance, etc. by a single gender; “exemplary” should be understood as “illustrative” or “exemplifying” and not necessarily as “preferred” over other embodiments. Further definitions for terms may be set out herein; these may apply to prior and subsequent instances of those terms, as will be understood from a reading of the present description.

[0051] Any module, unit, component, server, computer, terminal, engine or device exemplified herein that executes instructions may include or otherwise have access to computer readable media such as storage media, computer storage media, or data storage devices (removable and / or non-removable). Computer storage media may include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information, such as computer readable instructions, data structures, program modules, or other data. Examples of computer storage media include RAM, ROM, EEPROM, flash memory or other memory technology, optical storage, magnetic cassettes, magnetic tape,magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by an application, module, or both. Any such computer storage media may be part of the device or accessible or connectable thereto. Further, unless the context clearly indicates otherwise, any processor or controller set out herein may be implemented as a singular processor or as a plurality of processors. The plurality of processors may be arrayed or distributed, and any processing function referred to herein may be carried out by one or by a plurality of processors, even though a single processor may be exemplified. Any method, application or module herein described may be implemented using computer readable / executable instructions that may be stored or otherwise held by such computer readable media and executed by the one or more processors.

[0052] The following generally relates to locks, and more particularly, to a digital lock and key system and a method for operating a digital lock and key system. It is understood that ‘digital lock’ and ‘electronic lock’ can be used interchangeably, and ‘digital key fob’ and ‘electronic key fob’ can likewise be used interchangeably.

[0053] Electronic lock and key systems, informally referred to as digital locks, are electronic devices that use a combination of mechanical components, digital components, and algorithmic techniques to secure access to a physical space or a device, with or without the need for a traditional physical lock and key pair. Digital locks generally use a form of encoded digital key which can be in various forms, such as a code or a digital credential stored in an electronic portable device.

[0054] Digital locks can accept various forms of keying mechanisms also known as digital keys. Some common types of keying mechanisms include but are not limited to: a. PIN numbers: Personal Identification Numbers which are typically entered on a digital lock using a digital keypad. b. Smart Cards: a magnetic or chip card is inserted or swiped on a digital lock. c. RFID or NFC tokens: Physical tokens such as cards, key fobs, or stickers are used to communicate with the lock using Radio Frequency IDentification or Near Field Communication technologies or the like. One of the well established types of key fobs in this category is Passive Keyless Entry (PKE) key fobs used in automotive industry.d. Smart Devices: Devices such as smart phones, smart watches, or other electronic devices communicate with a digital lock using various wired or wireless communication technologies. e. Biometric Data: A unique combination of physiological or behavioral characteristics of a user such as finger prints, iris patterns, voice signatures, or visual patterns of face are read by the digital lock.

[0055] Digital locks work by requiring users to use one or more of their designated keys to be granted access to the locked space or item. When the correct key or key combination is provided, a computing device associated with the lock sends a signal to the locking mechanism of the lock to disengage and grant the desired access.

[0056] A digital lock may use only one keying mechanism or a combination of keying mechanisms. In some cases, more than one key or keying mechanism may be required to unlock a digital lock.

[0057] Digital locks offer several advantages over traditional mechanical-only locks, including enhanced security, customization, and convenience. They can be programmed, for example, to allow multiple users with different access levels, time-based restrictions, and audit trails that log access events. In some cases, electronic components of digital locks allow for real-time, or near-real-time, configuration changes. Furthermore, if a digital key or access code is compromised, it can be changed or revoked without the need to replace the entire lock.

[0058] Some digital locks are connected to a wired or wireless network, allowing certain aspects of their operation like configuration, management, and collection of their activity logs to be performed remotely, such as from a single management point (e.g., a server in the network).

[0059] Systems utilizing digital locks can provide numerous advantages over traditional locking systems. For example, providing the ability to easily revoke or modify access privileges; which eliminates the need for physical key management and reduces the risk of unauthorized duplication. This can facilitate scaled operation of numerous locks and keys. The operation of a digital lock system can be further enhanced if the digital lock is connected to a network and a server on the network. Further advantageously, in some cases, digital lock systems can include encryption and authentication protocols, ensuring a relatively high level of security.

[0060] The electronic components of the locking mechanism in a digital lock will require a power source to operate. The power source can be provided, for example, with a battery or wired connection. Regardless of the type of power source, the dependency on electrical power source is a substantial limitation in operation of digital locks; whereby any interruption in the power source can substantially interrupt the operation of the digital lock.

[0061] Several techniques can be generally implemented in digital lock systems to minimize the effect of power outages on continuous operation of the digital locks. Examples of such techniques include energy consumption optimization techniques, backup power sources, and uninterrupted power supply technologies. The implementation of such techniques, however, have only shifted maintenance requirements of digital locks from one domain to another; as a result of such techniques, digital locks have become more complicated, and the additional components, such as additional batteries, have introduced increased costs and substantially added to the requirements for smooth operation of the digital locks.

[0062] Advantageously, embodiments of the present disclosure provide a combination of a power source and a keying mechanism in a digital key fob as a single component; which can operate on a normally-offline digital lock. Particularly, the normally-offline digital lock does not require a power source because it receives power, and thus operates, only when the digital key fob is inserted into the lock. The electronic components of the digital lock receive their electrical power from the digital key fob, and as such, once the digital key fob is disconnected from the digital lock, the normally-offline digital lock will generally have no power source and will not operate. Advantageously, the digital lock system of the present disclosure eliminates the need for implementing any other form of power source in a digital lock.

[0063] Further, the digital lock system of the present disclosure advantageously allows for placement of some key electrical components of a digital lock into the key fob instead of in the digital lock itself, as is traditional. For example, network communication can now be performed on the digital key fob to allow communication with a network only when the digital lock is in communication with the key fob. In other examples, biometric readers or RFID readers can be only operated when the digital lock is in communication with the key fob.

[0064] Advantageously, the placement of electronic components on the digital key fob substantially simplifies the design of the digital locks and reduces their maintenance requirements. The system of the present disclosure is also substantially advantages wherethere are a large number of digital locks; and especially, where the ratio of digital key fobs to digital locks is small. This allows for using high-end components on the digital key fobs while reducing the overall cost of the total operation by using cheaper components on the digital locks themselves.

[0065] In some cases, the digital key fobs can be programmed to open one or more digital locks. Similarly, several key fobs can be programmed to open one or more digital locks. In some cases, both digital key fobs and digital locks can maintain records of access for each digital lock or digital key fob. In an example of a box with a digital lock restricting access, on each access to the box with a key fob, logs are generated storing the engaged key fob and the digital lock. In some cases, further metadata is also stored; for example, activity type, operator ID, and timestamp. In some cases, previous logs can be transferred to the key fob, the digital lock, or both, and retained for further use.

[0066] Referring now to FIG. 1, an exemplary operating environment 50 for a digital lock and key system 200, in accordance with an embodiment, is shown. In this exemplary operating environment 50 includes the digital lock and key system 100, which includes one or more digital locks 200 and one or more digital key fobs 300. The exemplary operating environment 50 further includes a first computing device 400 and a management server 500. The digital lock 200 and the digital key fob 300 communicate with each other using any suitable communication paradigm, for example, via a physical interface, such as electrical contacts or wired connection, or via a wireless interface, such as Bluetooth or RFID. In some cases, the system 100 can be in communication with the computing device 400, which can communicate with the management server 500 over a network 55 (for example, a wireless data network or the Internet). The computing devices can be any suitable device; for example, a desktop computer, a laptop computer, a smartphone, a tablet computer, a mobile device, a smartwatch, or the like. In further embodiments, aspects or functions of the system 100 can be run on further computing devices, such as a separate server. In some embodiments, the components of the computing device 400 and the management server 500 are each stored by and executed on a single computer system. In other embodiments, the components of the computing device 400 and the management server 500 are each distributed among two or more computer systems that may be locally or remotely distributed. In further cases, the functions of the computing device 400 can be performed by the digital lock 200, the digital key fob 300, or both.

[0067] FIG. 2 shows an embodiment of the digital lock 200 including various physical and logical components. As shown, the digital lock 200 has a number of physical and logical components, including a lock processor 210 (comprising one or more processors or other hardware for executing instructions) and a lock memory 204. In some cases, the digital lock further includes a lock input interface 206, and a lock output interface 208. The digital lock 200 can also include a local bus or circuitry 202 to enable interconnection of the components. The lock processor 210 executes instructions to perform the functions of various conceptual modules such as a lock communication module 214 and a lock encryption-decryption module 178; in some cases, in the context of an operating system. The instructions can be stored and retrieved from the lock memory 204. The lock input interface 106 enables a service operator to provide input via an input device, for example a programming module or a keyboard and mouse It can also receive input from various sensors on the digital lock 200. The lock output interface 108 outputs information to output devices, such as a programing module, actuators, lights, speakers, and / or a display. The lock communication module 174 permits communication with a connected digital key fob 300, a computing device 400, a management server 500, a programming module, or other computing devices and servers remotely located from the digital lock 200. The digital lock 200 can further include a power receptacle 220 to receive power from the digital key fob 300, as described herein.

[0068] FIG. 3 shows an embodiment of the digital key fob 300 including various physical and logical components. As shown, the digital key fob 300 has a number of physical and logical components, including a fob processor 310 (comprising one or more processors or other hardware for executing instructions) and a fob memory 304. In some cases, the digital key fob 300 includes a fob input interface 306, a fob output interface 308, and a fob network interface 316. The digital key fob 300 can also include can also include a local bus or circuitry 302 to enable interconnection of the components. The fob processor 310 executes instructions to perform the functions of various conceptual modules such as a fob communication module 314 and a fob encryption-decryption module 318; in some cases, in the context of an operating system. The instructions can be stored and retrieved from the fob memory 304. The fob input interface 306 enables a service operator to provide input via an input device, for example, a programming module or a keyboard and mouse. The fob input interface 306 can also receive input from various sensors on the digital key fob 300. The fob output interface 308 outputs information to output devices, such as a programing module, actuators, lights, speakers, and / or a display. The fob communication module 314 permits communication with the digital lock 200,the computing device 400, the management server 500, an external programming module, or other computing devices and servers remotely located from the system 300, such as for a typical cloud-based access model. The digital key fob 300 can further include a power source 320 to store power to power the other components of the digital key fob 300 and to provide power to the digital lock 200 via the power receptacle 220 to power the components of the digital lock, as described herein.

[0069] In some cases, the fob communication module 314 and / or the lock communication module 214 can include a Bluetooth interface. The fob communication module 314 and / or the lock communication module 214 can be used to communicate with the computing device 400, such as a mobile phone or tablet. The computing device 400 can run an application to communicate with the digital key fob 300, the digital lock 200, as well as the management server 500.

[0070] FIG. 4 shows an example embodiment of the computing device 400 including various physical and logical components. As shown, the computing device 400 has a number of physical and logical components, including a device central processing unit (“CPU”) 410 (comprising one or more processors), device random access memory (“RAM”) 404, a device input interface 406, a device output interface 408, a device communication module 414, a device non-volatile storage 412, a device encryption-decryption module 418 and a local bus 402 enabling CPU 410 to communicate with the other components. The device CPU 410 executes an operating system, and various modules, as described below in greater detail. The device RAM 404 provides relatively responsive volatile storage to the device CPU 410. The device input interface 406 enables a service operator to provide input via an input device, for example a keyboard and mouse. The device output interface 408 outputs information to output devices, such as a speaker and / or a display. The device communication module 414 permits communication with an associated digital lock 200, an external programming module, or other computing devices and servers remotely located from the computing device 400, such as for a typical cloud-based access model. The device network interface 416 permits communication with other systems over a wired or wireless connection, or over the network 55; such as for a typical cloud-based access model. The device non-volatile storage 412 stores the operating system and programs, including computer-executable instructions for implementing the operating system and modules, as well as any data used by these services. Additional stored data, as described herein, can be stored in one or more databases 420. During operation, the operating system, the modules, and the related data may be retrieved from the device non-volatile storage 412 and placed in the device RAM 404 to facilitate execution.

[0071] FIG. 5 shows an example embodiment of the management server 500 including various physical and logical components. As shown, the management server 500 has a number of physical and logical components, including a server central processing unit (“CPU”) 510 (comprising one or more processors), a server random access memory (“RAM”) 504, a server input interface 506, a server output interface 508, a server communication module 514, a server non-volatile storage 512, a server encryption-decryption module 518 and a local bus 502 enabling the server CPU 510 to communicate with the other components. The server CPU 510 executes an operating system, and various modules. The server RAM 504 provides relatively responsive volatile storage to CPU 510. The server input interface 506 enables a service operator to provide input via an input device, for example a programming module or a keyboard and mouse. The server output interface 508 outputs information to output devices, such as a speaker and / or a display. The server communication module 514 permits communication with a computing device 400, a programming module, or other computing devices and servers remotely located from the system 500, such as for a typical cloud-based access model. The server network interface 516 permits communication with other systems, such as the computing device 400, over the network 55; or with other computing devices and servers. Non-volatile storage 512 stores the operating system and programs, including computer-executable instructions for implementing the operating system and modules, as well as any data used by these services. Additional stored data can be stored in databases 520. During operation of the server 500, the operating system, the modules, and the related data may be retrieved from the server non-volatile storage 512 and placed in the server RAM 504 to facilitate execution. In an embodiment, the management server 500 further includes a number of conceptual modules, such as an encryption-decryption module 518.

[0072] FIG. 6 illustrates a method for operating a digital lock and key 600, in accordance with an embodiment. At block 602, the server encryption-decryption module 518 creates encryption and decryption key pairs. Each key pair can be stored, for example, in the databases 520. At block 604, each key pair is assigned by the server encryption-decryption module 518 to a group of one or more digital locks 200; which, for example, can belong to a customer or a specific location. In some cases, these key pairs can have an expiration date or valid use time value assigned to them.

[0073] At block 606, the server communication module 514 communicates the key pairs to thedevice communication module 414 of one or more computing devices 400 to store them in the device non-volatile storage 412 and / or device databases 420. At block 608, the device encryption-decryption module 418 communicates the encryption and decryption keys to the fob communication module 314 of one or more of the digital key fobs 300 that are to interface with the digital lock 200 associated with such key pairs; which can be stored in the fob memory 304.

[0074] In some cases, a scheduled date and time for the erasure of the key pairs is assigned to each encryption and decryption key pair by the management server 500 before they are sent to computing device 400. The scheduled erasing date and time is passed to and maintained by the digital key fob 300 inside the FOB memory 304. The digital key fob 300 uses its internal clock to delete the digital keys from its non-volatile storage 312 at the scheduled time. In some embodiments, the FOB memory 304 of the digital key fob 300 does not retain the key pairs when the battery of the digital key fob dies. In some other embodiments, the digital key fob 300 is equipped with tamper detection provisions which can erase all keys and / or logs if a tempering is detected.

[0075] The fob communication module 314 communicates encryption keys to the lock communication module 214 where the digital key fob 300 is engaged with a digital lock 200. The digital locks 200 can be distinguished from each other using a unique identifier (ID) for each digital lock 200.

[0076] Blocks 612 to 618 are directed to verifying and permitting access of the digital lock 200. At block 612, when the digital key fob 300 is inserted into, put in proximity to, or otherwise connected to the digital lock 200, the digital lock 200 powers up using the powers source located on the digital key fob 300. At block 614, the lock communication module 214 communicates with the fob communication module 314 by sending a ‘verification message’, which is encrypted by the lock encryption-decryption module 218 using the encryption key associated with that particular digital lock 200. The fob encryption-decryption module 318 has the decryption key pair of the encryption key of the digital lock in order to be able to decrypt the verification message. The verification message should include an encrypted piece of information, for example, a random number. At block 616, the fob encryption-decryption module 318 decrypts the verification message and the fob communication module 314 communicates the decrypted message back to the lock communication module 214. At block 618, the lock encryption-decryption module 218 validates the particular digital key fob 300 by comparing the received decrypted message to the original verification message. Where there is a match,authorization is confirmed and the lock output interface 208 permits accessed interaction with the digital lock 200.

[0077] In some cases, the verification message can be used by the digital key fob 300 to generate a session key. The digital key fob 300 and the digital lock 200 can each independently calculate the session key, which can then be used in all subsequent communications between the digital key fob 300 and the digital lock 200. In this way, all messages between the digital key fob 300 and the digital lock 200 will have suitable framing to ensure that the messages are valid and recognized at both ends. In an example, the session key generation can be described by: Session Key=Encrypt(Session Random Number, Shared Private Key).

[0078] In some cases, the roles of the digital key fob 300 and the digital lock 200, in blocks 612 to 618, are switched. For example, instead of the digital lock 200, the digital key fob 300 can initiate the verification process. In such cases, instead of the lock communication module 214, the fob communication module 314 communicates with the lock communication module 214 by sending a ‘verification message’. In such cases, the digital lock 200 receives an encrypted verification message from the digital key fob 300, the encrypted verification message is decrypted by the digital lock 200 using a decryption key stored by the digital lock 200. The digital lock 200 transmits a verification response to the digital key fob 300 from the digital lock 200, the verification response comprises the decrypted verification message. The digital lock 200 receives an access response from the digital key fob 300 indicating the decrypted verification message is verified and access is to be granted to the digital lock 200.

[0079] In some cases, instead of sending a ‘verification message’ by the lock communication module 214 to the fob communication module 314, the fob communication module 314 sends a decryption key to the lock communication module 214 of the particular digital lock 200 which the digital key fob 300 is inserted into. In such cases, the lock encryption-decryption module 218 validates the particular digital key fob 300 by comparing the received decryption key against the encryption keys associated with that particular digital lock 200. Authorization is confirmed where a match is identified and the lock output interface 208 permits accessed interaction with the digital lock 200.

[0080] FIG. 26 illustrates another embodiment of a method of operating an electronic lock 2600. Similar in this embodiment, at block 2602, the digital key fob 300 provides power, by means of a power receptacle 220, to the digital lock 200 to power electrical components of the digital lock200 from a stored power source on the digital key fob 300. In this embodiment, at block 2604, the fob communication module 314 communicates an encrypted message to the lock communication module 214. At block 2606, the lock encryption / decryption module 218 decrypts the received encrypted message. At block 2608, the lock encryption / decryption module 218 verifies the decrypted message to determine whether access is to be granted to the digital lock 200. Such verification can comprise, for example, comparing a code that is part of the encrypted message to a received or stored list of acceptable codes. At block 2610, the digital lock 200 grants access where the response is verified.

[0081] An example of a verification message generated using a random number can be: 0x09FD9BB4390EFF64. An example of a session key random number in a verification message can be: 0xC4D422013A042177. In some cases, the verification message, and / or the decrypted response can have a date and time associated with it, for example: 2023-06-28-17:57:22GMT.

[0082] Once the session key is established between the digital key fob 300 and the digital lock 200 such that accessed interaction is permitted, the fob communication module 314 can initiate further messaging. Such messages can include commands to the digital lock 200; for example, lock commands, unlock commands, log retrievals, public key updates, and the like.

[0083] In some embodiments, a validity duration can be associated with the retention of key pairs instead of a scheduled expiry date and time.

[0084] While a particular encryption scheme is described herein, it is to be understood that any suitable encryption scheme can be used for communication between the digital key fob 300 and the digital lock 200.

[0085] While the present disclosure generally refers to digital key fobs 300, it is understood that any suitable portable communication hardware can be used; for example, smart cards. In some cases, the digital key fob 300 only provides electrical power through electrical contact with the digital lock and the communication between the digital lock 200 and the digital key fob 300 is performed using a suitable wireless protocol.

[0086] While the present disclosure generally refers to the management server 500 generating the key pairs and relaying such pairs to the digital key fobs 300 and digital locks 200 via the computing device 400, it is understood that other arrangements can be used; such as where the digital key fob 300 can communicate directly with the management server 500. Otherarrangements can be used where the management server 500 is not required; for example, where the digital locks 200 and digital key fobs300 are pre-installed with the key pairs.

[0087] In an exemplary environment of application, the system 100 can be used for commercial coinboxes. A coinbox is a sliding drawer assembly, which is commonly installed on coinoperated self-serve commercial devices such as laundry appliances, gambling and entertainment machines, carwash systems, vending machines, and the like. Coinboxes are positioned underneath coindrop modules that receive coins from consumers, validate and count the coins, and drop them into the coinboxes. Coinboxes are locked in a designated and secured drawer sliding space and can be opened by a service technician. Service technicians unlock each coinbox, slide them away and out from their drawer space, and collect their collected coins.

[0088] The traditional locks on the generally used commercial coinboxes operate with coded metallic keys. This means that collecting coins from several sites and coinboxes requires a service technician to carry many keys to be able to access all planned coinboxes for a day of operation. As the number of keys increase, logistics of key management become substantially problematic; such as picking right keys for a visit tour, taking time to find and match each key with a coinbox, and similar issues. Advantageously, a digital coinbox can be used to overcome such problems. In some cases, digital coinboxes, having digital locks 200 thereon, can replace traditional coinboxes and their locks without any need to modify existing coinbox setups; such as coinbox drawers or commercial appliances which use them. The digital key fob 300 can provide a power source to the digital lock 200 of a digital coinbox, eliminating the need for modifying existing electrical circuitry of the existing appliances to provide power to an electrical lock.

[0089] Referring to FIGS. 7 to 13, an example implementation of the digital lock 200 is provided. The example digital lock is installed on a coinbox.

[0090] The coinbox with a electronic lock, herein referred to as digital coinbox 700, has a front section 701, a middle section 702, and a rear section 703. The front section 701 is exposed out of the drawer sliding space. The middle section 702 encompasses the digital lock 200 and helps with sliding and alignment of the digital coinbox 700 into its designated secure drawer space. The rear section 703 is a solid box with a bottom surface and four walls vertical, and without a top surface.

[0091] The outer surface of the front section 701 of the digital coinbox 700 is covered with a front cover 705 which acts as a front face for the digital coinbox. The front cover 705 includes a cylindrical extension 706, having an axis perpendicular to the surface of the front cover. In some cases, a cone frustum can be used instead of the cylindrical extension 706. The outer end of the cylindrical extension 706 of the front cover 705 is covered with an outer surface 707. The outer surface 707 has a rectangular keying receptacle 708 in the center. The outer surface 705, cylindrical extension 706, and outer surface 707 can be made from a unified solid material.

[0092] The digital key fob 300 can be inserted inside the keying receptacle 708 to rotate and operate the digital locking assembly of the digital coinbox 700 while protecting it from exposure to external users. In alternative cases, the keying receptacle 708 can receive other forms of keying mechanisms.

[0093] The outer surface 705 can be fastened to the coinbox 700 using four screws 709 on the corners of the front cover 705. When the digital coinbox 700 is fully pushed inside a drawer sliding space, the front cover 705 is exposed to the unsecured space outside the drawer sliding space, allowing access to the keying receptacle while protecting physical access to the other components behind the front cover 705.

[0094] The four screws 706 can extend through the front cover 705, the middle section 702, and the rear section 703 where the rear section 703 is fastened to each one of the four screws 706 using a bolt 770 on the end of each screw 709.

[0095] The middle section 702 includes a keying assembly 1400, a locking bolt assembly 1500 also referred to as a locking latch assembly, a locking actuator assembly 1700, and a side cover 704. The side cover 704 acts as a protective cover for internal components and also a guide- and-alignment component which positions the digital coinbox 700 inside the drawer sliding space when the box is locked in place and when it is taken out or placed back into the sliding space.

[0096] Referring to FIG. 14, an example of the components of the keying assembly 1400 are illustrated. The keying assembly 1400 includes a frame cap 1401, a connector port sleeve 1402, a connector board PCBA (Printer Circuit Board Assembly) 1403, and a keying assembly center shaft 1404. The frame cap 1401 is positioned inside the cylindrical extension 706 of the front cover 705. The connector port sleeve 1402 is installed inside the frame cap 1401 to provide alignment and mechanical support to the key fob when the key fob is inserted into the lockingassembly. The connector PCBA 1403 is installed behind the connector port sleeve 1402. The connector PCBA includes a female connector receptacle. In the example embodiment displayed in FIG. 14, the connector receptacle is an HDMI port, however any other form of connector port with at least two electrical connectors can be used, such as a LISB-C or a LISB-A port. When a key fob is inserted into a digital coinbox, they connector PCBA provides electrical connection between the digital key fob and the electronical components of the digital coinbox. The keying shaft assembly 1404 is installed at the rear end of the keying assembly 1400. The entire keying assembly 1400 can freely rotate inside the middle section 702 using a key fob, transferring the rotational movement to the rear end of the middle section 702.

[0097] Referring to FIG. 15, the components of the locking bolt assembly 1500 are demonstrated. The locking bolt assembly includes a front support panel 1501, two box bolt plates 1502 also referred to as box latch plates, a locking bolt spacer 1503, a locking bolt cam 1504, and a rear support panel 1505. The four corners of the front support panel 1501 and rear support panel 1505 have holes 1506. The four screws 709 as demonstrated in FIGS. 7 to 13, extend through holes 1506 and perform three functions in the locking bolt assembly: they secure the front support panel 1501 on the rear support panel 1505; they align the remaining components of the locking assembly between the front support panel 1501 and the rear support panel 1505; and they act as alignment guides for diagonal movement of the two box bolt plates 1502.

[0098] The two box bolt plates 1502 have an overall shape of two isosceles right triangles with their side chords facing each other. When positioned next to each other, the two box plates form an overall shape of a square. The side chords on each box bolt plate 1502 include four matching protrusions and indentations 1507 which can slide on each other and allow diagonal movement of each box bolt in relation to each other and along a line, perpendicular to their chord line. The middle of the chord side of each box bolt plate includes a semicircle indentation 1509. When the two box bolt 1502 are placed adjacent to each other, with all protrusions and indentations 1507 placed on each other, the semicircles 1509 form a circular void 1510. Each box bolt 1502 include a spiral cam follower indentation 1511. The spiral cam follower indentation 1511 is positioned so that one end of the follower is closer to the circular void 1510 than its opposite end.

[0099] The locking bolt cam 1504 can have a cylindrical form with an outward rim on the front end and an inward rim on the rear end. The rear rim has an actuator engagement vane pin 1512positioned perpendicular to the surface of the rim, and parallel with the center axis of the locking bolt cam 1504. The vane pin 1512 can engage with the components of the locking actuator assembly 1700 to rotate the bolt cam 1504 around its axis. The front rim of the cam 1504 has two cam pins 1513 on its front face, perpendicular to the axis of the front rim.

[0100] In an assembled locking bolt assembly 1500, the front rim of the cam 1504 is placed inside a protruded rim 1513 positioned on center of the rear support panel 1505.Spacers such as two washer plates 1503 are places between the cam 1504 and box bolt plates 1502. The cam pins 1513 of the locking bolt cam 1504 are positioned inside the cam follower indentations 1509 of the two box bolt plates 1502. Clockwise and counterclockwise rotations of the locking bolt cam 1504, moves the cam pins 1513 inside the cam follower indentations 1509 and extends or retracts the two box bolts 1509 diagonally. Four indentations 1508 on the corners of the two box plates 1502, provide passage for the four screws 706 that extend from the front cover 705. The four indentation 1508 also support the box bolt plates 1502 when they extend or retract. When extended, the box bolt plates 1502 extend beyond the circumference of all other components, which locks the digital coinbox 700 inside a secured drawer sliding space.

[0101] The assembled components of the locking bolt assembly 1500 include a hole in the center, allowing for positioning, alignment, passage, and rotation of the keying shaft assembly 1404 of the keying assembly 1400 in relation to the locking bolt assembly 1500.

[0102] Referring to FIG. 16, an exploded view of the locking actuator assembly 1600 is illustrated. A circular mounting support 1601 is positioned inside a circular recess 1606 on the mounting guide 1602. The rear end of the circular recess 1606 has an inward rim which prevents the circular mounting support 1601 from moving out from the rear end of the recess 1606 on the mounting guide 1602. The mounting guide 1602 is assembled on the rear face of the rear support panel 1505 on the locking bolt assembly 1500.

[0103] The circular mounting support 1601 has at least two mounting pins 1605 on its rear surface. The mounting pins 1605 can receive screws on their rear end, which are used to install a PCBA protection ring 1603 and a locking actuator PCBA 1604.

[0104] The assembled components of the locking actuator assembly 1600 include a hole in their center, allowing for positioning, alignment, passage, and rotation of the locking bolt cam 1504 of the locking bolt assembly 1500 and likewise, the keying shaft assembly 1404 of the keying assembly 1400, in relation to the locking actuator assembly 1600.

[0105] Referring to FIG. 17, the arrangement of components 1700 on the rear side of the locking actuator assembly 1600 is illustrated. A geared motor 1701 is installed on the locking actuator PCBA 1604. A spur gear 1702 is extended on one end of the geared motor and is engaged with a linear gear teeth on a linear latch 1704. A linear movement guide 1703 is installed on the geared motor to provide lateral support for linear movement of the linear latch1704. A sensor pick 1705 is installed on the linear latch 1704 and can engage with sensors 1706 and 1707. The sensors 1706 and 1707 are installed on the locking actuator PCBA 1604 to detect the movement of linear latch 1704 and control the geared motor 1701. The rear end of cam 1504 and the actuator engagement vane pin 1512 are exposed in the center of the locking actuator PCBA 1604 and can rotate in their space. An engagement hook 1708 is installed on the linear latch 1704 which includes a guide tooth 1709; when the linear actuator 1704 is extended towards the center of the locking actuator PCBA 1604, it locks the engagement hook 1708 on the actuator engagement vane pin 1512. FIG. 18 shows another view 1800 of the engagement hook 1708, vane pin 1512, and the locking bolt cam 1504.

[0106] FIG. 19 shows the arrangement 1900 of the linear actuator 1604, the sensor pick1705, the locking bolt cam 1504, and the keying assembly center shaft 1404. The linear gear teeth 1901 of the linear latch 1704 are demonstrated. The linear latch 1704 is engaged with the keying assembly center shaft 1404 and passed through a recess 1902 on the shaft 1404. A hole-and-pin assembly 1904 secures the linear latch 1704 using a linear cut 1905 on the latch 1704.

[0107] The mechanical and electrical assembly illustrated in FIGS. 17 to 19 keep the keying assembly 1400 and the locking actuator assembly 1700 engaged; a rotation of the keying assembly 1400 simultaneously rotates the locking actuator assembly 1700 at all times. With the linear latch 1704 extended towards the keying assembly center shaft 1404, the locking bolt cam 1504 gets engaged with the keying assembly and will rotate with it. The rotation of the locking bolt cam 1504, the rotates the cam pins 1513 and spiral cam follower indentation 1511, and depending on the direction of the rotation, the rotation extends or retracts the box bolt plates 1502. When the linear latch 1704 is retracted, the rotation of the keying assembly 1400 will only rotate the locking actuator assembly 1700 and will not move either of the locking bolt cam 1504 or the two box bolt plates 1502.

[0108] Now referring to FIG. 20, an exploded view of select components of the digital coinbox 700 as referenced in FIGS. 7 to 19 is shown. A skilled reader will appreciate thatadditional components, a plurality of the above components, or other alternatives with similar capabilities are also possible.

[0109] In some cases, a key fob retaining assembly can be installed under the frame cap 1401 of the keying assembly 1400, over or instead of the connector port sleeve 1402. FIG. 21 shows an example of the key fob retaining assembly 2100. The key fob retaining assembly 2100, includes a front support plate 2200, a rear support plate 2300, and three spacer nuts 2400. The front support plate 2200 is installed on the spacer nuts 2400, which are installed on the rear support plate 2300. Similar to the connector port sleeve 1402, an alignment sleeve 2500 provides alignment and mechanical support to the key fob when the key fob is inserted into the keying assembly 1400. Two guide strips 255 on the interior side walls of the alignment sleeve 2500 facilitate the alignment of the key fob when it is inserted or removed. A key retainer support frame 2106 is installed on the rear support plate 2300, under the alignment sleeve 2500. FIG. 21 also shows a micro switch 2107.

[0110] FIG. 22 shows a cross-section view 2200 of the key fob retaining assembly 2100. The cross-section view shows the front support plate 2200, the rear support plate 2300, the alignment sleeve 2500, one of the two guide strips 255 and the key retainer support frame 2106. A key retainer latch 2201 is positioned inside the key retainer support frame 2106, and can move linearly up and down to engage and disengage an extended key retainer bolt 2202 of the latch 2201 with a key fob and retain or release the key fob inside the alignment sleeve 2500. The latch 2201 includes two alignment pin holes 2203. A protrusion 2204 on the side edge of the key retainer latch 2201, engages with an extended end 2205 of a swing arm 2206 to convert a rotational movement of the swing arm 2206 to the linear movement of the key retainer latch 2201. The swing arm is installed on shaft 2207 of a servo motor.

[0111] FIG. 23 shows a view of select components 2300 of the key fob retaining assembly 2100. The view shows the key retainer support frame 2106, the microswitch 2107, the extended key retainer bolt 2202 of the key retainer latch 2201 , and the shaft 2207 of the servo motor 2301. Two alignment pins 2302 are installed in the alignment pin holes 2203 of the key retainer latch 2201 and extended through two linear slots 2303 on the wall of the key retainer support frame 2106. The combination of the swing arm 2206, the key retainer latch 2201, the alignment pins 2302, and the linear slots 2303, form a cam-and-follower mechanism which converts linear movement of the actuator 2301 to linear movement of the key retainer latch2201. The pins 2302 also engage with the microswitch 2107 to detect the location of the key retainer latch 2201.

[0112] FIG. 24 shows a front view 2400 of the key fob retaining assembly 2100 inside the frame cap 1401 of the keying assembly 1400. The view shows the frame cap 1401 , the alignment sleeve 2500, the two guide strips 255, and the extended key retainer bolt 2202 of the key retaining latch 2201.

[0113] FIG. 25 shows an example implementation 2500 of the digital key fob 300. The key fob 2500 has a key blade 2501 , an electrical connector port 2502 on one side of the key blade 2501, and a pair of casings 2503 on the other side of it. The casings 2503 contain and protect a digital key fob PCBA which is electrically connected to the electrical connector port 2502 and is capable to connect to a digital coinbox through the connector port 2502. The casings 2503 are also function as a handle for users of the key and can transfer movements and lateral and rotational forces to the key blade 2501. The key blade 2501 includes two guide grooves 2505 on opposite sides of it to align the movement of key blade inside the keying assembly 1400 of a digital coinbox. The edges of the digital key fob 2500 on the electrical connector port side of it are slanted 2506 to facilitate insertion and alignment of the key fob into the keying assembly 1400. A retainer slot 2507 underneath the key blade can engage with the extended key retainer bolt 2202 of the keying assembly 1400 to retain or release the digital key fob 2500. The sides of the key blade 2501 on the rear end of it are recessed 2508. When the key fob is inserted in the keying receptacle of the digital coinbox 700, the recessed edges 2508 allow rotational movement of the key blade without being limited by the edges of the rectangular keying receptacle 708 on the front cover 705 of the digital coinbox 700.

[0114] In an example, after inserting the digital key fob 2500 into the digital lock, the electrical connector port 2502 of the key fob 2500 will be inserted into the connector board PCBA 1402 which establishes a connection between the key fob 2500 and the locking actuator PCBA 1604. The connection power up the locking actuator PCBA 1604. The locking actuator PCBA 1604 then activates the servo motor 2301 to extend the key retainer bolt 2202. With the key retainer bolt extended, the key fob cannot be moved out from the lock. The locking actuator PCBA 1604 also establishes a data connection and negotiates a session with the key fob. If a connection cannot be established or if the locking actuator PCBA fails to negotiate a session, the key retainer bolt 2202 will be retracted and the key can be removed by a user. Once the session is established successfully, if the key fob is authorized to unlock the digital lock asdescribed herein, the locking actuator PCBA engages the hook 1708 of the linear latch 1704 on the locking actuator assembly 1600 with the actuator engagement vane pin 1512 of the locking bolt assembly 1500. The digital lock then communicates the engagement of the hook 1708 and the vane pin 1512 to the key fob. The key fob then signals the user of the status change using an illuminated light or screen. The user then can rotate the key fob manually to rotate the locking bolt assembly 1500 and lock or unlock the box. After the engagement of the hook 1708 and the vane pin 1512, a timer starts to measure how much time has passed. Once a preconfigured time has passed, the digital key can inform the user that a timeout is about to be triggered. After a second pre-configured time, the key will disengage the hook 1708 and the vane pin 1512 and retract the key retainer bolt 2202. From this point, the key fob can be rotated and removed from the lock, however, the locking bolt assembly 1500 will not be moved anymore.

[0115] Although the invention has been described with reference to certain specific embodiments, various modifications thereof will be apparent to those skilled in the art without departing from the spirit and scope of the invention as outlined in the claims appended hereto.

Claims

CLAIMS1. A method for operating an electronic lock, the method comprising: receiving an electronic key fob in a power receptacle of the electronic lock to power electrical components of the electronic lock from a stored power source on the electronic key fob; communicating an encrypted verification message to the electronic key fob from the electronic lock, the encrypted verification message is decrypted by the electronic key fob using a decryption key stored by the electronic key fob; receiving a response from the electronic key fob by the electronic lock, the response comprises the decrypted verification message; verifying the response by the electronic lock to determine whether access is to be granted to the electronic lock; and granting access where the response is verified.

2. The method of claim 1 , wherein the electronic key fob and electronic lock establish a session key for secure communication using the encrypted verification message.

3. The method of claim 1 , wherein the encrypted verification message comprises a generated random number.

4. The method of claim 1 , wherein the electronic lock logs each grating of access.

5. The method of claim 1 , further comprising receiving a configuration for the electronic lock from the electronic key fob.

6. The method of claim 55, wherein the configuration comprises granting, revoking, or changing access to the electronic lock.

7. An electronic lock, the electronic lock comprising: a power receptacle to receive an electronic key fob and provide power to the electronic lock from a stored power source on the electronic key fob;a locking actuator to engage and disengage the electronic lock; and a processing unit in communication with a data storage, the processing unit configurable to execute instructions to: communicate an encrypted verification message to the electronic key fob, the encrypted verification message is decrypted by the electronic key fob using a decryption key stored by the electronic key fob; receive a response from the electronic key fob, the response comprising the decrypted verification message; verify the response to determine whether access is to be granted and the electronic lock is to be disengaged; and instruct the locking actuator to disengage the electronic lock where the response is verified.

8. The system of claim 7, wherein the electronic key fob and electronic lock establish a session key for secure communication using the encrypted verification message.

9. The system of claim 7, wherein the encrypted verification message comprises a generated random number.

10. The system of claim 7, wherein the electronic lock logs each grating of access.

11. The system of claim 7, the processing unit further configurable to execute instructions to receive a configuration for the electronic lock from the electronic key fob.

12. The system of claim 115, wherein the configuration comprises granting, revoking, or changing access to the electronic lock.

13. The system of claim 7, the processing unit further configurable to execute instructions to disable all access to the electronic lock after a predefined number of failed attempts.

14. The system of claim 7, wherein the electronic key fob is configurable to also access other electronic locks.

15. The system of claim 7, wherein the power receptacle comprises physical electrical contactsto provide power to the electronic lock.

16. The system of claim 7, wherein the electronic lock is incorporated into a commercial coinbox.

17. A method for operating an electronic lock, the method comprising: receiving an electronic key fob in a power receptacle of the electronic lock to power electrical components of the electronic lock from a stored power source on the electronic key fob; receiving an encrypted message at the electronic lock from the electronic key fob; decrypting the received encrypted message by the electronic lock; verifying the decrypted message to determine whether access is to be granted to the electronic lock; and granting access where the response is verified.

18. The method of claim 17, wherein the electronic key fob and electronic lock establish a session key for secure communication using the encrypted message.

19. The method of claim 17, wherein the electronic lock logs each grating of access.

20. The method of claim 17, further comprising receiving a configuration for the electronic lock from the electronic key fob as part of the encrypted message.

Images