Electronic lock and method for operating the electronic lock

Abstract

An electronic lock and a method for operating the electronic lock are provided. The method includes receiving an electronic key fob into the power receptacle of the electronic lock and supplying power to the electrical components of the electronic lock from a power source on the electronic key fob; communicating an encrypted verification message from the electronic lock to the electronic key fob, the encrypted verification message being decrypted by the electronic key fob using a decryption key stored by the electronic key fob; receiving a response from the electronic key fob by the electronic lock containing the decrypted verification message; verifying the response from the electronic lock to determine whether access should be permitted to the electronic lock; and, if the response is verified, granting access.

Description

Technical Field

[0001] The following generally relates to locks, and more specifically, to an electronic lock and a method for operating the electronic lock.

Background Art

[0002] Electronic locks and key systems provide a seamless integration of conventional mechanical locking mechanisms and, in combination with smart technologies, improve security and smooth operation. Such systems can replace conventional mechanical locks and key systems and enhance security and convenience. Users of such systems can easily access by presenting an electronic key to the electronic lock, and the electronic lock can verify the user's credential information and permit access.

Summary of the Invention

[0003] In one aspect, a method for operating an electronic lock is provided. The method includes receiving an electronic key fob at a power receptacle of the electronic lock to power electrical components of the electronic lock from a power storage source on the electronic key fob; communicating an encrypted verification message from the electronic lock to the electronic key fob, wherein the encrypted verification message is decrypted by the electronic key fob using a decryption key stored by the electronic key fob; receiving, by the electronic lock, a response from the electronic key fob including the decrypted verification message; verifying the response by the electronic lock to determine whether access to the electronic lock should be permitted; and permitting access if the response is verified.

[0004] In certain instances of the method, the electronic key fob and the electronic lock establish a session key for secure communication using the encrypted verification message.

[0005] [[ID=2,6]] In another method, the encrypted verification message includes a generated random number.

[0006] In yet another case of the method, the electronic lock records each grade of access.

[0007] In yet another case of the method, the method further includes receiving the configuration of an electronic lock from an electronic key fob.

[0008] In yet another case of the method, the configuration includes allowing, revoking, or modifying access to the electronic lock.

[0009] In another embodiment, an electronic lock is provided, the electronic lock comprising: a power receptacle for receiving an electronic key fob and supplying power to the electronic lock from a power source on the electronic key fob; a lock actuator for engaging and disengaging the electronic lock; and a processing unit for communicating with data storage, wherein the processing unit can be configured to execute commands to communicate an encrypted verification message to the electronic key fob, the encrypted verification message being decrypted by the electronic key fob using a decryption key stored by the electronic key fob; receiving a response from the electronic key fob containing the decrypted verification message; verifying the response to determine whether access should be permitted and whether the electronic lock should be disengaged; and, if the response has been verified, commanding the lock actuator to disengage the electronic lock.

[0010] In certain cases of electronic locks, the electronic key fob and the electronic lock establish a session key for secure communication using encrypted verification messages.

[0011] In another case of electronic locks, the encrypted verification message includes a generated random number.

[0012] In yet another case of electronic locks, the electronic lock records each grade of access.

[0013] In yet another case of the electronic lock, the processing unit can be further configured to execute commands to receive the configuration of the electronic lock from an electronic key fob.

[0014] In yet another case of an electronic lock, the configuration includes allowing, revoking, or modifying access to the electronic lock.

[0015] In yet another case of an electronic lock, the processing unit can be further configured to execute an instruction to disable all access to the electronic lock after a predefined number of failed attempts.

[0016] In yet another case of electronic locks, the electronic key fob can be configured to access other electronic locks as well.

[0017] In yet another case of an electronic lock, the power receptacle comprises physical electrical contacts for supplying power to the electronic lock.

[0018] In yet another case of electronic locks, they are incorporated into commercial coin boxes.

[0019] In another embodiment, a method is provided for operating an electronic lock, the method comprising: receiving an electronic key fob into a power receptacle of an electronic lock to supply power to the electrical components of the electronic lock from a power storage on the electronic key fob; receiving an encrypted message from the electronic key fob in the electronic lock; decrypting the received encrypted message by the electronic lock; verifying the decrypted message to determine whether access should be permitted to the electronic lock; and, if the response is verified, granting access.

[0020] In another case of the method, the electronic key fob and the electronic lock establish a session key for secure communication using an encrypted message.

[0021] In yet another case of the method, the electronic lock records each access grating.

[0022] In yet another case of the method, the method further includes receiving the configuration of the electronic lock from the electronic key fob as part of an encrypted message.

Brief Description of the Drawings

[0023] The features of the present invention will become more apparent in the following detailed description with reference to the accompanying drawings. [Figure 1] Illustrates a schematic diagram of a digital lock and key system according to one embodiment. [Figure 2] Illustrates a schematic diagram of the digital lock of the system of FIG. 1. [Figure 3] Illustrates a schematic diagram of the digital key fob of the system of FIG. 1. [Figure 4] Illustrates a schematic diagram of the computing device of the system of FIG. 1. [Figure 5] Illustrates a schematic diagram of the management server of the system of FIG. 1. [Figure 6] Illustrates a flowchart of a method for operating an electronic lock according to one embodiment. [Figure 7] Illustrates a front perspective view of a digital coin box assembly according to one embodiment. [Figure 8] Illustrates a rear perspective view of the system of FIG. 7. [Figure 9] Illustrates a bottom perspective view of the system of FIG. 7. [Figure 10] Illustrates a front elevation view of the system of FIG. 7. [Figure 11] Illustrates a rear elevation view of the system of FIG. 7. [Figure 12] Illustrates a top elevation view of the system of FIG. 7. [Figure 13] Let's illustrate with an example using the bottom elevation view of the system shown in Figure 7. [Figure 14] Figure 7 illustrates the exploded view of the keying assembly in the system shown. [Figure 15] Figure 7 illustrates the exploded view of the lock bolt assembly in the system shown. [Figure 16] Figure 7 illustrates the exploded view of the lock actuator assembly in the system shown. [Figure 17] Figure 7 illustrates the rear view of the component layout on the lock actuator PC BA of the system. [Figure 18] Figure 7 illustrates a rear view of the arrangement of selected components on the lock actuator assembly of the system. [Figure 19] Figure 7 illustrates a rear view of the arrangement of selected components on the lock actuator assembly of the system. [Figure 20] Figure 7 illustrates an exploded view of the selected components of the system. [Figure 21] Figure 7 illustrates the rear perspective view of the key fob holding assembly in the system shown. [Figure 22] Figure 21 illustrates this with a cross-sectional view of a selected component of the assembly. [Figure 23] Figure 21 illustrates this with a front perspective view of a selected component of the assembly. [Figure 24] Figure 21 illustrates the front elevation view of the assembly system. [Figure 25] Figure 7 illustrates a rear perspective view of a digital key fob that can operate with the system shown. [Figure 26] A flowchart illustrating another method for operating an electronic lock, according to one embodiment, is provided as an example. [Modes for carrying out the invention]

[0024] Embodiments are described here with reference to the drawings. Reference numerals may be repeated between figures to indicate corresponding or similar elements, where appropriate, in order to simplify and clarify the examples. In addition, numerous specific details are provided to provide a complete understanding of the embodiments described herein. However, those skilled in the art will understand that the embodiments described herein can be carried out without these specific details. In other instances, well-known methods, procedures, and components are not described in detail so as not to obscure the embodiments described herein. Furthermore, this description should not be considered to limit the scope of the embodiments described herein.

[0025] The various terms used throughout this Specified Publication may be read and understood as follows, unless the context indicates otherwise: “or” is used comprehensively throughout, as it is used comprehensively throughout, as it is used comprehensively throughout, singular articles and pronouns used throughout, include their plural forms and vice versa, and similarly, gendered pronouns include their corresponding pronouns, so that pronouns should not be understood as limiting what is described herein to a single gender use, implementation, performance, etc.; “exemplary” should be understood as “illustrative” or “exemplifying,” and not necessarily as “preferred” over other embodiments. Further definitions of terms may be given herein, and these may apply to the preceding and following examples of those terms, as can be understood from reading this Specified Publication.

[0026] Any module, unit, component, server, computer, terminal, engine, or device that executes instructions as illustrated herein may include, or otherwise have access to, computer-readable media such as storage media, computer storage media, or data storage devices (removable and / or non-removable). Computer storage media may include volatile and non-volatile, removable and non-removable media implemented in any method or technique for storing information such as computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include RAM, ROM, EEPROM, flash memory or other memory technologies, optical storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other media that can be used to store desired information and can be accessed by applications, modules, or both. Any such computer storage media may be part of a device, or may be accessible or connectable to it. Furthermore, unless the context clearly indicates otherwise, any processor or controller described herein may be implemented as a single processor or as multiple processors. Multiple processors may be arranged in an array or distributed, and any processing function referred to herein may be performed by one processor or by multiple processors, although a single processor may be exemplified. Any method, application or module described herein may be implemented using computer-readable / executable instructions stored or otherwise held in such computer-readable media and executed by one or more processors.

[0027] The following generally pertains to locks, more specifically to digital locks and key systems, and methods for operating digital locks and key systems. It is understood that "digital locks" and "electronic locks" can be used interchangeably, and similarly, "digital key fobs" and "electronic key fobs" can be used interchangeably.

[0028] Electronic locks and key systems, commonly referred to as digital locks, are electronic devices that use a combination of mechanical components, digital components, and algorithmic techniques to secure access to a physical space or device, with or without the need for traditional physical locks and key pairs. Digital locks generally use the form of encoded digital keys, which can take various forms such as codes or digital credentials stored on an electronic portable device.

[0029] Digital locks can accept various forms of keying mechanisms, also known as digital keys. Some common types of keying mechanisms include, but are not limited to: a. PIN number: A personal identification number that is typically entered into a digital lock using a digital keypad. b. Smart card: A magnetic card or chip card is inserted into or swiped through the digital lock. c. RFID token or NFC token: A physical token such as a card, key fob, or sticker is used to communicate with the lock using radio frequency identification or near-field communication technology. One well-established type of key fob in this category is the passive keyless entry (PKE) key fob used in the automotive industry. d. Smart devices: Devices such as smartphones, smartwatches, or other electronic devices communicate with the digital lock using various wired or wireless communication technologies. e. Biometric data: A unique combination of the user's physiological or behavioral characteristics, such as fingerprints, iris patterns, voice signatures, or facial visual patterns, is read by the digital lock.

[0030] A digital lock works by requiring the user to use one or more of a specified keys to grant access to the locked space or item. Once the correct key or key combination is provided, the computing device associated with the lock sends a signal to the lock's mechanism to unlock it and grant the desired access.

[0031] A digital lock may use only one keying mechanism or a combination of keying mechanisms. In some cases, two or more keys or keying mechanisms may be required to unlock a digital lock.

[0032] Digital locks offer several advantages over traditional mechanical locks, including enhanced security, customization, and convenience. They can be programmed to allow, for example, different access levels for multiple users, time-based restrictions, and audit trails that record access events. In some cases, the electronic components of a digital lock allow for real-time or near-real-time configuration changes. Furthermore, if a digital key or access code is compromised, it can be modified or revoked without having to replace the entire lock.

[0033] Some digital locks are connected to wired or wireless networks, allowing certain aspects of their operation, such as configuring, managing, and collecting their activity logs, to be performed remotely from a single management point (e.g., a server on the network).

[0034] Systems utilizing digital locks can offer many advantages over traditional locking systems. For example, they provide the ability to easily revoke or modify access privileges, thereby eliminating the need for physical key management and reducing the risk of unauthenticated duplication. This facilitates the operation of a large number of locks and keys on a scale. The operation of digital lock systems can be further enhanced when digital locks are connected to networks and servers on those networks. Even more advantageously, in some cases, digital lock systems can include encryption and authentication protocols, ensuring a relatively high level of security.

[0035] The electronic components of the locking mechanism in a digital lock require power to operate. This power can be provided, for example, by a battery or a wired connection. Regardless of the type of power source, this dependence on power is a substantial limitation in the operation of the digital lock, meaning that any interruption of power can substantially interrupt its operation.

[0036] To minimize the impact of power outages on the continuous operation of digital locks, several techniques can be commonly implemented in digital lock systems. Examples of such techniques include energy consumption optimization techniques, backup power supplies, and uninterruptible power supply (UPS) techniques. However, the implementation of such techniques merely shifts the maintenance requirements of the digital lock from one domain to another. As a result of such techniques, the digital lock becomes more complex, additional components such as extra batteries lead to increased costs, and substantially add to the requirements for smooth operation of the digital lock.

[0037] Advantageously, embodiments of the present disclosure provide a combination of power supply and keying mechanism in a digital key fob as a single component, which can operate in a normally offline digital lock. In particular, a normally offline digital lock does not require a power supply because it receives power and therefore operates only when the digital key fob is inserted into the lock. The electronic components of the digital lock receive power from the digital key fob, and therefore, when the digital key fob is disconnected from the digital lock, the normally offline digital lock generally has no power supply and does not operate. Advantageously, the digital lock system of the present disclosure eliminates the need to implement other forms of power supply within the digital lock.

[0038] Furthermore, the digital lock system of this disclosure advantageously allows some of the key electrical components of the digital lock to be placed in the key fob, instead of being located within the digital lock itself as in conventional systems. For example, network communication can be performed on the digital key fob to enable communication with the network only when the digital lock is communicating with the key fob. In another example, a biometric reader or RFID reader can be operated only when the digital lock is communicating with the key fob.

[0039] Advantageously, by placing electronic components on the digital key fob, the design of the digital lock is substantially simplified and its maintenance requirements are reduced. The system of this disclosure is also substantially advantageous when there are many digital locks, especially when the ratio of digital key fobs to digital locks is small. This makes it possible to use high-end components in the digital key fob while reducing the overall cost of operation by using less expensive components in the digital lock itself.

[0040] In some cases, a digital key fob can be programmed to open one or more digital locks. Similarly, several key fobs can be programmed to open one or more digital locks. In some cases, both digital key fobs and digital locks can maintain a record of access to each digital lock or digital key fob. In the example of a box with digital locks that restrict access, a log is generated each time the box with key fobs is accessed, recording the key fobs and digital locks involved. In some cases, additional metadata, such as activity type, operator ID, and timestamp, is also recorded. In some cases, previous logs can be propagated to key fobs, digital locks, or both and retained for further use.

[0041] Referring here to Figure 1, an exemplary operating environment 50 for a digital lock and key system 200 according to one embodiment is shown. This exemplary operating environment 50 includes a digital lock and key system 100, which includes one or more digital locks 200 and one or more digital key fobs 300. The exemplary operating environment 50 further includes a first computing device 400 and a management server 500. The digital locks 200 and digital key fobs 300 communicate with each other using any preferred communication paradigm, for example, via a physical interface such as electrical contacts or wired connections, or via a wireless interface such as Bluetooth or RFID. In some cases, the system 100 can communicate with the computing device 400, which can communicate with the management server 500 via a network 55 (e.g., a wireless data network or the Internet). The computing device can be any preferred device, such as a desktop computer, laptop computer, smartphone, tablet computer, mobile device, smartwatch, etc. In further embodiments, aspects or functions of the system 100 can be run on a further computing device, such as a separate server. In some embodiments, the components of the computing device 400 and the management server 500 are each stored and executed by a single computer system. In other embodiments, the components of the computing device 400 and the management server 500 are each distributed across two or more computer systems, which may be distributed locally or remotely. In further cases, the functions of the computing device 400 can be performed by a digital lock 200, a digital key fob 300, or both.

[0042] Figure 2 shows an embodiment of the digital lock 200 including various physical and logical components. As shown, the digital lock 200 has several physical and logical components, including a lock processor 210 (including one or more processors or other hardware for executing instructions) and a lock memory 204. In some cases, the digital lock further includes a lock input interface 206 and a lock output interface 208. The digital lock 200 may also include a local bus or circuit 202 to enable interconnection between components. The lock processor 210, in some cases in the context of an operating system, executes instructions to implement the functions of various conceptual modules, such as a lock communication module 214 and a lock encryption-decryption module 178. Instructions can be stored in and retrieved from the lock memory 204. The lock input interface 106 allows a service operator to provide input via an input device, such as a programming module or a keyboard and mouse. The lock input interface can also receive input from various sensors on the digital lock 200. The lock output interface 108 outputs information to output devices such as a programming module, actuator, light, speaker, and / or display. The lock communication module 174 enables communication from the connected digital key fob 300, computing device 400, management server 500, programming module, or other computing devices and servers located remotely from the digital lock 200. The digital lock 200 may further include a power receptacle 220 for receiving power from the digital key fob 300, as described herein.

[0043] Figure 3 shows an embodiment of the digital key fob 300 including various physical and logical components. As shown, the digital key fob 300 has several physical and logical components, including a fob processor 310 (equipped with one or more processors or other hardware for executing instructions) and a fob memory 304. In some cases, the digital key fob 300 includes a fob input interface 306, a fob output interface 308, and a fob network interface 316. The digital key fob 300 may also include a local bus or circuit 302 for enabling interconnection between components. The fob processor 310, in some cases in the context of an operating system, executes instructions to perform the functions of various conceptual modules, such as a fob communication module 314 and a fob encryption-decryption module 318. Instructions can be stored in and retrieved from the fob memory 304. The fob input interface 306 allows a service operator to provide input via an input device, such as a programming module or a keyboard and mouse. The fob input interface 306 can also receive input from various sensors on the digital key fob 300. The fob output interface 308 outputs information to output devices such as a programming module, actuator, light, speaker, and / or display. The fob communication module 314 enables communication from the system 300 to other computing devices and servers located remotely, such as the digital lock 200, computing device 400, management server 500, external programming module, or a typical cloud-based access model. The digital key fob 300 may further include a power supply 320 for storing power to power other components of the digital key fob 300 and for supplying power to the digital lock 200 via a power receptacle 220 to power components of the digital lock, as described herein.

[0044] In some cases, the fob communication module 314 and / or the lock communication module 214 may include a Bluetooth interface. The fob communication module 314 and / or the lock communication module 214 can be used to communicate with a computing device 400, such as a mobile phone or tablet. The computing device 400 can run applications to communicate with the digital key fob 300, the digital lock 200, and the management server 500.

[0045] Figure 4 shows an exemplary embodiment of a computing device 400 including various physical and logical components. As shown, the computing device 400 has several physical and logical components, including a device central processing unit ("CPU") 410 (including one or more processors), device random access memory ("RAM") 404, a device input interface 406, a device output interface 408, a device communication module 414, device non-volatile storage 412, a device encryption-decryption module 418, and a local bus 402 that allows the CPU 410 to communicate with other components. The device CPU 410 runs an operating system and various modules, as will be described in more detail below. The device RAM 404 provides volatile storage that is relatively responsive to the device CPU 410. The device input interface 406 allows a service operator to provide input via an input device, such as a keyboard and mouse. The device output interface 408 outputs information to an output device such as a speaker and / or display. The device communication module 414 enables communication from the computing device 400 with other computing devices and servers located remotely, such as for associated digital locks 200, external programming modules, or typical cloud-based access models. The device network interface 416 enables communication with other systems via wired or wireless connections, or via a network 55, such as for typical cloud-based access models. The device non-volatile storage 412 stores the operating system and programs, including computer executable instructions for implementing the operating system and modules, as well as any data used by these services. Additional stored data may be stored in one or more databases 420, as described herein.During operation, the operating system, modules, and associated data may be retrieved from the device's non-volatile storage 412 and placed in the device's RAM 404 to facilitate execution.

[0046] Figure 5 shows an exemplary embodiment of a management server 500 including various physical and logical components. As shown, the management server 500 has several physical and logical components, including a server central processing unit ("CPU") 510 (including one or more processors), server random access memory ("RAM") 504, server input interface 506, server output interface 508, server communication module 514, server non-volatile storage 512, server encryption-decryption module 518, and a local bus 502 that allows the server CPU 510 to communicate with other components. The server CPU 510 runs the operating system and various modules. The server RAM 504 provides volatile storage that is relatively responsive to the CPU 510. The server input interface 506 allows a service operator to provide input via an input device, such as a programming module or a keyboard and mouse. The server output interface 508 outputs information to output devices such as a speaker and / or display. The server communication module 514 enables communication from system 500 to other computing devices and servers located remotely, such as computing device 400, programming modules, or typical cloud-based access models. The server network interface 516 enables communication with other systems, such as computing device 400, via network 55 or using other computing devices and servers. Non-volatile storage 512 stores the operating system and programs, including computer executable instructions for implementing the operating system and modules, as well as any data used by these services. Additional storage data can be stored in database 520. While server 500 is operating, the operating system, modules, and associated data may be retrieved from server non-volatile storage 512 and placed in server RAM 504 to facilitate execution.In one embodiment, the management server 500 further includes several conceptual modules, such as an encryption-decryption module 518.

[0047] Figure 6 illustrates a method for operating a digital lock and key 600 according to one embodiment. In block 602, the server encryption-decryption module 518 creates encryption key and decryption key pairs. Each key pair can be stored, for example, in a database 520. In block 604, each key pair is assigned by the server encryption-decryption module 518 to a group of one or more digital locks 200, which may belong, for example, to a customer or a specific location. In some cases, these key pairs may have an expiration date or effective usage time value assigned to them.

[0048] In block 606, the server communication module 514 communicates the key pair to the device communication module 414 of one or more computing devices 400 and stores them in the device non-volatile storage 412 and / or device database 420. In block 608, the device encryption-decryption module 418 communicates the encryption key and decryption key to one or more fob communication modules 314 of digital key fobs 300 that interface with the digital lock 200 associated with such key pair, which can be stored in the fob memory 304.

[0049] In some cases, a scheduled date and time for erasing key pairs is assigned to each encryption and decryption key pair by the management server 500 before they are sent to the computing device 400. The scheduled erasure date and time are passed to and maintained by the digital key fob 300 in the fob memory 304. The digital key fob 300 uses its internal clock to delete the digital key from its non-volatile storage 312 at the scheduled time. In some embodiments, the fob memory 304 of the digital key fob 300 does not retain key pairs when the digital key fob's battery runs out. In some other embodiments, the digital key fob 300 includes a tamper detection provision that can erase all keys and / or logs if tampering is detected.

[0050] The fob communication module 314 communicates the encryption key to the lock communication module 214, which is engaged with the digital lock 200 via the digital key fob 300. The digital locks 200 can be distinguished from one another using a unique identifier (ID) for each digital lock 200.

[0051] Blocks 612-618 concern verifying and granting access to the digital lock 200. In block 612, when the digital key fob 300 is inserted into, placed near, or otherwise connected to the digital lock 200, the digital lock 200 is powered on using the power supply located on the digital key fob 300. In block 614, the lock communication module 214 communicates with the fob communication module 314 by sending a "verification message," which is encrypted by the lock encryption-decryption module 218 using the encryption key associated with that particular digital lock 200. The fob encryption-decryption module 318 has a decryption key pair of the digital lock's encryption key so that it can decrypt the verification message. The verification message should contain encrypted information, such as a random number. In block 616, the fob encryption-decryption module 318 decrypts the verification message, and the fob communication module 314 communicates the decrypted message back to the lock communication module 214. In block 618, the lock encryption-decryption module 218 verifies a specific digital key fob 300 by comparing the received decrypted message with the original verification message. If a match is found, authentication is confirmed, and the lock output interface 208 grants access to interact with the digital lock 200.

[0052] In some cases, the verification message can be used by the digital key fob 300 to generate a session key. The digital key fob 300 and the digital lock 200 can each independently calculate the session key, which can then be used in all subsequent communications between the digital key fob 300 and the digital lock 200. In this way, all messages between the digital key fob 300 and the digital lock 200 have a suitable framework to ensure that the messages are valid and recognized at both ends. In one example, session key generation can be described by session key = encryption (session random number, shared secret key).

[0053] In some cases, the roles of the digital key fob 300 and the digital lock 200 in blocks 612-618 can be switched. For example, the digital key fob 300 can initiate the verification process instead of the digital lock 200. In such a case, the fob communication module 314 communicates with the lock communication module 214 by sending a "verification message" instead of the lock communication module 214. In such a case, the digital lock 200 receives an encrypted verification message from the digital key fob 300, and the encrypted verification message is decrypted by the digital lock 200 using the decryption key stored by the digital lock 200. The digital lock 200 transmits a verification response from the digital key fob 300, which contains the decrypted verification message. The digital lock 200 receives an access response from the digital key fob 300 indicating that the decrypted verification message has been verified and that access to the digital lock 200 is permitted.

[0054] In some cases, instead of the lock communication module 214 sending a "verification message" to the fob communication module 314, the fob communication module 314 sends a decryption key to the lock communication module 214 of the specific digital lock 200 into which the digital key fob 300 is inserted. In such cases, the lock encryption-decryption module 218 verifies the specific digital key fob 200 by comparing the received decryption key with the encryption key associated with that particular digital lock 300. Authentication is confirmed if a match is identified and the lock output interface 208 allows access to interact with the digital lock 200.

[0055] Figure 26 illustrates another embodiment of how the electronic lock 2600 operates. Similar to this embodiment, in block 2602, the digital key fob 300 is powered by the power receptacle 220 to supply power to the electrical components of the digital lock 200 from a power storage on the digital key fob 300. In this embodiment, in block 2604, the fob communication module 314 communicates an encrypted message to the lock communication module 214. In block 2606, the lock encryption / decryption module 218 decrypts the received encrypted message. In block 2608, the lock encryption / decryption module 218 verifies the decrypted message to determine whether access to the digital lock 200 should be permitted. Such verification may include, for example, comparing a code that is part of the encrypted message with a list of accepted codes that have been received or stored. In block 2610, the digital lock 200 grants access if the response has been verified.

[0056] An example of a verification message generated using random numbers may be 0x09FD9BB4390EFF64. An example of a session key random number in a verification message may be 0xC4D422013A042177. In some cases, the verification message and / or the decoded response may have an associated date and time, e.g., 2023-06-28-17:57:22 GMT.

[0057] Once a session key is established between the digital key fob 300 and the digital lock 200 so that the accessed interaction is permitted, the fob communication module 314 can initiate further messaging. Such messages may include commands to the digital lock 200, such as lock commands, unlock commands, log searches, and public key updates.

[0058] In some embodiments, the expiration date can be associated with the retention of the key pair, instead of a scheduled expiration date and time.

[0059] While specific encryption methods are described herein, please understand that any suitable encryption method may be used for communication between the digital key fob 300 and the digital lock 200.

[0060] This disclosure generally refers to a digital key fob 300, but it is understood that any suitable portable communication hardware, such as a smart card, may be used. In some cases, the digital key fob 300 is powered only via electrical contacts with the digital lock, and communication between the digital lock 200 and the digital key fob 300 is carried out using a suitable wireless protocol.

[0061] This disclosure generally refers to a management server 500 generating key pairs and relaying such pairs to the digital key fob 300 and digital lock 200 via a computing device 400, but it is understood that other arrangements can be used, such as when the digital key fob 300 can communicate directly with the management server 500. Other arrangements can be used when the management server 500 is not required, for example, when the digital lock 200 and digital key fob 300 are pre-installed with the key pairs.

[0062] In an exemplary application environment, system 100 can be used for commercial coin boxes. A coin box is a sliding drawer assembly and is typically installed in coin-operated self-service commercial devices such as washing machines, gambling and amusement machines, car wash systems, and vending machines. The coin box is located below a coin insertion module that receives coins from consumers, verifies and counts them, and deposits them into the coin box. The coin box is locked into a designated secure drawer sliding space and can be opened by a service technician. The service technician unlocks each coin box, slides the coin box out of the drawer space, and collects the collected coins.

[0063] Conventional locks on commercially available coin boxes in general use operate with coded metal keys. This means that to collect coins from several locations and coin boxes, service technicians need to carry many keys to access all coin boxes planned for a day's operation. As the number of keys increases, the logistics of key management become practically problematic, for example, selecting the correct key for a site visit, the time it takes to find each key and match it with the coin box, and similar issues. Advantageously, these problems can be overcome by using digital coin boxes. In some cases, digital coin boxes with digital locks 200 can replace conventional coin boxes and their locks without the need to change any existing coin box configurations, such as the coin box drawers or commercial fixtures that use them. The digital key fob 300 can power the digital lock 200 of the digital coin box, eliminating the need to modify existing electrical circuits of existing equipment to provide power to the electric lock.

[0064] Referring to Figures 7 to 13, exemplary implementations of the digital lock 200 are provided. The exemplary digital lock is attached to a coin box.

[0065] A coin box with an electronic lock is referred to herein as a digital coin box 700 and has a front section 701, a middle section 702, and a rear section 703. The front section 701 is exposed outside the drawer slide space. The middle section 702 contains the digital lock 200 and helps to slide and align the digital coin box 700 into its designated secure drawer space. The rear section 703 is a solid box having a bottom and four vertical walls, but no top.

[0066] The outer surface of the front portion 701 of the digital coin box 700 is covered by a front cover 705 which functions as the front of the digital coin box. The front cover 705 includes a cylindrical extension 706 having an axis perpendicular to the surface of the front cover. In some cases, a frustocone can be used instead of the cylindrical extension 706. The outer end of the cylindrical extension 706 of the front cover 705 is covered by an outer surface 707. The outer surface 707 has a rectangular keying receptacle 708 in the center. The outer surface 705, the cylindrical extension 706, and the outer surface 707 can be made from a single solid material.

[0067] The digital key fob 300 can be inserted inside the keying receptacle 708 to rotate and operate the digital lock assembly of the digital coin box 700, while protecting the digital lock assembly from exposure to external users. In an alternative case, the keying receptacle 708 can accommodate other forms of keying mechanisms.

[0068] The outer surface 705 can be fastened to the coin box 700 using four screws 709 located at the corners of the front cover 705. When the digital coin box 700 is fully pushed inward into the drawer slide space, the front cover 705 is exposed to the insecure space outside the drawer slide space, allowing access to the key insertion receptacle while protecting physical access to other components behind the front cover 705.

[0069] The four screws 706 can extend through the front cover 705, the middle section 702, and the rear section 703, which is fastened to each of the four screws 706 using bolts 770 at the ends of each screw 709.

[0070] The intermediate section 702 includes a keying assembly 1400, a lock bolt assembly 1500 (also referred to as a lock latch assembly), a lock actuator assembly 1700, and a side cover 704. The side cover 704 functions as a protective cover for the internal components and also functions as a guide and alignment component that positions the digital coin box 700 inside the pull-out slide space when the box is locked in place, and when the box is removed from or returned to the slide space.

[0071] Referring to Figure 14, an example of the components of the keying assembly 1400 is illustrated. The keying assembly 1400 includes a frame cap 1401, a connector port sleeve 1402, a connector board PCBA (Printer Circuit Board Assembly) 1403, and a keying assembly central shaft 1404. The frame cap 1401 is positioned inside the cylindrical extension 706 of the front cover 705. The connector port sleeve 1402 is mounted inside the frame cap 1401 and provides alignment and mechanical support to the key fob when the key fob is inserted into the locking assembly. The connector PCBA 1403 is mounted behind the connector port sleeve 1402. The connector PCBA includes a female connector receptacle. In the exemplary embodiment shown in Figure 14, the connector receptacle is an HDMI port, but any other form of connector port having at least two electrical connectors, such as a USB-C or USB-A port, can be used. When the key fob is inserted into the digital coin box, the PCBA connector provides an electrical connection between the digital key fob and the electronic components of the digital coin box. The keying shaft assembly 1404 is attached to the rear end of the keying assembly 1400. The entire keying assembly 1400 can rotate freely inside the intermediate section 702 using the key fob, transmitting the rotational motion to the rear end of the intermediate section 702.

[0072] Referring to Figure 15, the components of the lock bolt assembly 1500 are illustrated. The lock bolt assembly includes a front support panel 1501, two box bolt plates 1502, also referred to as box latch plates, a lock bolt spacer 1503, a lock bolt cam 1504, and a rear support panel 1505. The four corners of the front support panel 1501 and the rear support panel 1505 have holes 1506. As illustrated in Figures 7 to 13, four screws 709 extend through the holes 1506 and perform three functions in the lock bolt assembly: they fix the front support panel 1501 onto the rear support panel 1505, align the remaining components of the lock assembly between the front support panel 1501 and the rear support panel 1505, and act as alignment guides for the diagonal movement of the two box bolt plates 1502.

[0073] The two box bolt plates 1502 have an overall shape of two right-angled isosceles triangles, with their side chords facing each other. When positioned adjacent to each other, the two box plates form an overall square shape. The side chords on each box bolt plate 1502 include four matching projections and recesses 1507 that can slide relative to each other, allowing for oblique movement of each box bolt along lines perpendicular to their chords. The center of the chord side of each box bolt plate includes a semicircular recess 1509. When the two box bolts 1502 are positioned adjacent to each other and all projections and recesses 1507 are aligned with each other, the semicircles 1509 form a circular gap 1510. Each box bolt 1502 includes a helical cam follower recess 1511. The helical cam follower recess 1511 is positioned such that one end of the follower is closer to the circular gap 1510 than its opposite end.

[0074] The lock bolt cam 1504 may have a cylindrical shape with an outer rim at its front end and an inner rim at its rear end. The rear rim has an actuator engagement vane pin 1512 positioned perpendicular to the surface of the rim and parallel to the central axis of the lock bolt cam 1504. The vane pin 1512 engages with a component of the lock actuator assembly 1700 to rotate the bolt cam 1504 around its axis. The front rim of the cam 1504 has two cam pins 1513 on its front surface, perpendicular to the axis of the front rim.

[0075] In the assembled lock bolt assembly 1500, the front rim of the cam 1504 is positioned inside the protruding rim 1513, which is located in the center of the rear support panel 1505.

[0076] Spacers, such as two washer plates 1503, are positioned between the cam 1504 and the box bolt plate 1502. The cam pin 1513 of the lock bolt cam 1504 is positioned inside the cam follower recess 1509 of the two box bolt plates 1502. Clockwise and counterclockwise rotation of the lock bolt cam 1504 moves the cam pin 1513 inside the cam follower recess 1509, causing the two box bolts 1509 to extend or retract diagonally. Four recesses 1508 at the corners of the two box plates 1502 provide passages for four screws 706 extending from the front cover 705. The four recesses 1508 also support the box bolt plate 1502 when it extends or retracts. When extended, the box bolt plate 1502 extends beyond the perimeter of all other components, thereby locking the digital coin box 700 inside the fixed drawer slide space.

[0077] The assembled components of the lock bolt assembly 1500 include a hole in the center, allowing the keying shaft assembly 1404 of the keying assembly 1400 to be positioned, aligned, passed through, and rotated relative to the lock bolt assembly 1500.

[0078] Referring to Figure 16, an exploded view of the lock actuator assembly 1600 is illustrated. The circular mounting support 1601 is positioned inside the circular recess 1606 on the mounting guide 1602. The rear end of the circular recess 1606 has an inward-facing rim that prevents the circular mounting support 1601 from moving away from the rear end of the recess 1606 on the mounting guide 1602. The mounting guide 1602 is assembled to the rear surface of the rear support panel 1505 on the lock bolt assembly 1500.

[0079] The circular mounting support 1601 has at least two mounting pins 1605 on its back. The mounting pins 1605 can receive screws at their rear ends, which are used to mount the PCBA protective ring 1603 and the locking actuator PCBA 1604.

[0080] The assembled components of the lock actuator assembly 1600 include holes in their centers, allowing the lock bolt cam 1504 of the lock bolt assembly 1500, and similarly the keying shaft assembly 1404 of the keying assembly 1400, to be positioned, aligned, passed through, and rotated relative to the lock actuator assembly 1600.

[0081] Referring to Figure 17, the arrangement of the rear components 1700 of the lock actuator assembly 1600 is illustrated. A geared motor 1701 is mounted on the lock actuator PCBA 1604. A spur gear 1702 extends over one end of the geared motor and engages with the teeth of the linear gear on the linear latch 1704. A linear movement guide 1703 is mounted on the geared motor to provide lateral support for the linear movement of the linear latch 1704.

[0082] A sensor pick 1705 is mounted on a linear latch 1704 and can engage with sensors 1706 and 1707. Sensors 1706 and 1707 are mounted on a locking actuator PCBA 1604 to detect the movement of the linear latch 1704 and control a geared motor 1701. The rear end of a cam 1504 and an actuator engagement vane pin 1512 are exposed at the center of the locking actuator PCBA 1604 and can rotate within their space. An engagement hook 1708 is mounted on the linear latch 1704, and the engagement hook 1708 includes guide teeth 1709, and when the linear actuator 1704 is extended toward the center of the locking actuator PCBA 1604, the linear actuator locks the engagement hook 1708 on the actuator engagement vane pin 1512. Figure 18 shows another Figure 1800 of the engagement hook 1708, vane pin 1512, and locking bolt cam 1504.

[0083] Figure 19 shows the arrangement 1900 of the linear actuator 1604, the sensor pick 1705, the lock bolt cam 1504, and the keying assembly central shaft 1404. The linear gear teeth 1901 of the linear latch 1704 are illustrated. The linear latch 1704 engages with the keying assembly central shaft 1404 and passes through a recess 1902 on the shaft 1404. The hole and pin assembly 1904 secures the linear latch 1704 using a linear cut 1905 on the latch 1704.

[0084] The mechanical and electrical assemblies illustrated in Figures 17-19 keep the keying assembly 1400 and the locking actuator assembly 1700 engaged, so that rotation of the keying assembly 1400 always rotates the locking actuator assembly 1700 simultaneously. When the linear latch 1704 extends toward the keying assembly central shaft 1404, the locking bolt cam 1504 engages with the keying assembly and rotates with it. The rotation of the locking bolt cam 1504 rotates the cam pin 1513 and the helical cam follower recess 1511, and depending on the direction of rotation, the rotation extends or retracts the box bolt plate 1502. When the linear latch 1704 is retracted, rotation of the keying assembly 1400 rotates only the locking actuator assembly 1700 and does not move either the locking bolt cam 1504 or the two box bolt plates 1502.

[0085] Referring now to Figure 20, an exploded view of the selected components of the digital coin box 700 referenced in Figures 7 to 19 is shown. Those skilled in the art will understand that additional components, multiple of the above components, or other substitutes with similar functions are also possible.

[0086] In some cases, the key fob retaining assembly may be mounted above the connector port sleeve 1402 or, instead, below the frame cap 1401 of the keying assembly 1400. Figure 21 shows an example of a key fob retaining assembly 2100. The key fob retaining assembly 2100 includes a front support plate 2200, a rear support plate 2300, and three spacer nuts 2400. The front support plate 2200 is mounted on the spacer nuts 2400 which are attached to the rear support plate 2300. Similar to the connector port sleeve 1402, the alignment sleeve 2500 provides alignment and mechanical support to the key fob when it is inserted into the keying assembly 1400. Two guide strips 255 on the inner sidewall of the alignment sleeve 2500 facilitate the alignment of the key fob when it is inserted or removed. The key retainer support frame 2106 is mounted below the alignment sleeve 2500 and on the rear support plate 2300. Figure 21 also shows the microswitch 2107.

[0087] Figure 22 shows a cross-sectional view 2200 of the key fob retaining assembly 2100. This cross-sectional view shows the front support plate 2200, the rear support plate 2300, the alignment sleeve 2500, one of two guide strips 255, and the key retainer support frame 2106. The key retainer latch 2201 is positioned inside the key retainer support frame 2106 and moves linearly up and down to engage and disengage the extended key retainer bolt 2202 of the latch 2201 with the key fob, thereby retaining or releasing the key fob inside the alignment sleeve 2500. The latch 2201 includes two alignment pin holes 2203. A projection 2204 on the side edge of the key retainer latch 2201 engages with the extended end 2205 of the swing arm 2206 to convert the rotational motion of the swing arm 2206 into the linear motion of the key retainer latch 2201. The swing arm is attached to the servo motor shaft 2207.

[0088] Figure 23 shows a diagram of the selected component 2300 of the key fob retainer assembly 2100. This diagram shows the key retainer support frame 2106, the microswitch 2107, the extended key retainer bolt 2202 of the key retainer latch 2201, and the shaft 2207 of the servo motor 2301. Two alignment pins 2302 are mounted in the alignment pin holes 2203 of the key retainer latch 2201 and extend through two linear slots 2303 on the wall of the key retainer support frame 2106. The combination of the swing arm 2206, the key retainer latch 2201, the alignment pins 2302, and the linear slots 2303 forms a cam follower mechanism that translates the linear motion of the actuator 2301 into the linear motion of the key retainer latch 2201. The pins 2302 also engage with the microswitch 2107 to detect the position of the key retainer latch 2201.

[0089] Figure 24 shows a front view of the key fob retaining assembly 2100 inside the frame cap 1401 of the keying assembly 1400. This figure shows the frame cap 1401, the alignment sleeve 2500, the two guide strips 255, and the extended key retainer bolt 2202 of the key retaining latch 2201.

[0090] Figure 25 shows an exemplary implementation configuration 2500 of the digital key fob 300. The key fob 2500 comprises a key blade 2501, an electrical connector port 2502 on one side of the key blade 2501, and a pair of casings 2503 on the other side. The casings 2503 house and protect the digital key fob PCBA, which is electrically connected to the electrical connector port 2502 and can be connected to the digital coin box via the connector port 2502. The casings 2503 also function as a handle for the key user and can transmit movement, lateral force, and rotational force to the key blade 2501. The key blade 2501 includes two guide grooves 2505 on both sides thereof to align the movement of the key blade inside the keying assembly 1400 of the digital coin box. The edge of the digital key fob 2500 on the side with the electrical connector port is inclined (2506) to facilitate insertion and alignment of the key fob into the keying assembly 1400. A retainer slot 2507 beneath the key blade engages with an extended key retainer bolt 2202 of the keying assembly 1400 to hold or release the digital key fob 2500. The rear end side of the key blade 2501 has a recess 2508. When the key fob is inserted into the key in receptacle of the digital coin box 700, the edge 2508 of the recess allows the rotational movement of the key blade without being restricted by the edge of the rectangular key in receptacle 708 on the front cover 705 of the digital coin box 700.

[0091] In one example, after inserting the digital key fob 2500 into the digital lock, the electrical connector port 2502 of the key fob 2500 is inserted into the connector board PCBA 1402, which establishes a connection between the key fob 2500 and the lock actuator PCBA 1604. The connection powers the lock actuator PCBA 1604. The lock actuator PCBA 1604 then operates a servo motor 2301 to extend the key retainer bolt 2202. With the key retainer bolt extended, the key fob cannot move from the lock. The lock actuator PCBA 1604 also establishes a data connection and negotiates a session with the key fob. If a connection cannot be established, or if the lock actuator PCBA cannot negotiate a session, the key retainer bolt 2202 retracts, and the key can be removed by the user. Once a session is successfully established, and the key fob is authorized to unlock the digital lock as described herein, the lock actuator PCBA engages the hook 1708 of the linear latch 1704 on the lock actuator assembly 1600 with the actuator engaging vane pin 1512 of the lock bolt assembly 1500. The digital lock then communicates the engagement of the hook 1708 and the vane pin 1512 to the key fob. The key fob then sends a signal of the state change to the user using an illuminated light or screen. The user can then manually rotate the key fob to rotate the lock bolt assembly 1500 and lock or unlock the box. After the engagement of the hook 1708 and the vane pin 1512, a timer is activated to measure the elapsed time. Once the pre-configured time has elapsed, the digital key may notify the user that a timeout will soon be triggered. After a second pre-configured time, the key disengages the hook 1708 and vane pin 1512, retracting the key retainer bolt 2202. From this point onward, the key fob can be rotated and removed from the lock, but the lock bolt assembly 1500 will no longer move.

[0092] Although the present invention has been described with reference to certain specific embodiments, various modifications thereto will be obvious to those skilled in the art without departing from the spirit and scope of the invention as outlined in the claims appended herein.

Claims

1. A method for activating an electronic lock, The electronic key fob is received by the power receptacle of the electronic lock, and power is supplied from the power source on the electronic key fob to the electrical components of the electronic lock. Communicating an encrypted verification message from the electronic lock to the electronic key fob, wherein the encrypted verification message is decrypted by the electronic key fob using a decryption key stored by the electronic key fob. The electronic lock receives a response from the electronic key fob that includes the decrypted verification message, In order to determine whether access should be permitted to the electronic lock, the response from the electronic lock is verified, If the above response is verified, grant access, Methods that include...

2. The method according to claim 1, wherein the electronic key fob and the electronic lock establish a session key for secure communication using the encrypted verification message.

3. The method according to claim 1, wherein the encrypted verification message includes a generated random number.

4. The method according to claim 1, wherein the electronic lock records each access grade.

5. The method according to claim 1, further comprising receiving the configuration of the electronic lock from the electronic key fob.

6. The method according to claim 55, wherein the configuration includes allowing, revoking, or modifying access to the electronic lock.

7. It is an electronic lock, A power receptacle for receiving an electronic key fob and supplying power to the electronic lock from a power source on the electronic key fob, A lock actuator for engaging and disengaging the electronic lock, It comprises a processing unit that communicates with data storage, The aforementioned processing unit is Communicating an encrypted verification message to the electronic key fob, wherein the encrypted verification message is decrypted by the electronic key fob using a decryption key stored by the electronic key fob. Receiving a response from the electronic key fob that includes the decoded verification message, Verify the response in order to determine whether access should be permitted and whether the electronic lock should be disengaged, If the response is verified, the lock actuator is instructed to disengage the electronic lock, An electronic lock that can be configured to execute commands to perform a specific action.

8. The system according to claim 7, wherein the electronic key fob and the electronic lock establish a session key for secure communication using the encrypted verification message.

9. The system according to claim 7, wherein the encrypted verification message includes a generated random number.

10. The system according to claim 7, wherein the electronic lock records each grade of access.

11. The system according to claim 7, wherein the processing unit can be further configured to execute commands to receive the configuration of the electronic lock from the electronic key fob.

12. The system according to claim 115, wherein the configuration includes allowing, revoking, or modifying access to the electronic lock.

13. The system according to claim 7, wherein the processing unit can be further configured to execute an instruction to disable all access to the electronic lock after the attempt has failed a predefined number of times.

14. The system according to claim 7, wherein the electronic key fob can be configured to access other electronic locks.

15. The system according to claim 7, wherein the power receptacle comprises physical electrical contacts for supplying power to the electronic lock.

16. The system according to claim 7, wherein the electronic lock is incorporated into a commercial coin box.

17. A method for activating an electronic lock, To supply power to the electrical components of the electronic lock from the power storage on the electronic key fob, the electronic key fob is received by the power receptacle of the electronic lock, In the aforementioned electronic lock, an encrypted message is received from the electronic key fob, The electronic lock decrypts the received encrypted message, In order to determine whether to grant access to the electronic lock, the decrypted message is verified, If the response is validated, grant access, Methods that include...

18. The method according to claim 17, wherein the electronic key fob and the electronic lock establish a session key for secure communication using the encrypted message.

19. The method according to claim 17, wherein the electronic lock records each access grade.

20. The method according to claim 17, further comprising receiving the configuration of the electronic lock from the electronic key fob as part of the encrypted message.

Images