A system and method for remotely controlling access to electronic locks

Abstract

The present invention discloses a system for remotely controlling access to a plurality of electronic locks each associated with a physical barrier, comprising an access code generator in data communication with a server, the access code generator configured to generate an access code for sending to an authorized user's mobile device, wherein the access code includes a payload comprising an access identity associated with the authorized user, one or more lock identifiers associated with one or more of the plurality of electronic locks, and a command identifier based on a predetermined usage and a predetermined time period. It also includes a remote access device configured to communicate wirelessly with the plurality of electronic locks, wherein the remote access device includes an image sensor configured to receive the access code from the authorized user's mobile device.

Description

A System and Method for remotely controlling access to Electronic LocksTechnical Field

[0001] The present disclosure generally relates to electronic lock systems. More particularly, the present disclosure relates to a system and method for remotely controlling access to a plurality of electronic locks.Background

[0002] The following discussion of the background to the invention is intended to facilitate an understanding of the present invention However, it should be appreciated that the discussion is not an acknowledgment or admission that any of the material referred to was published, known or part of the common general knowledge in any jurisdiction as at the priority date of the application.[ 00031 With the increasing popularity of smart devices and advanced mobile device verification using biometric recognition, such device verification techniques have similarly been applied to electronic lock systems including electronic padlocks or electronic door locks such as electromagnetic door locks, deadbolts, latches, rim, locks and mortise locks. Various identity verification services have proliferated offering diverse custom solutions for verifying access to various everyday services, for example, accessing a facility, office, vehicle, mailbox, or other smart device access and operation. Such verification enables users to quickly connect to a service, facility, or device without resorting to a username, password, date of birth, or other personally verifiable information.

[0004] Most electronic door lock systems provide biometric access for the convenience of the user. However, in a scenario where more than one electronic door lock systems are prevalent for accessing a dwelling, facility or office, it can be difficult for a user to accesseach electronic door lock in a sequential manner. Similarly, in an area where there is a high density of electronic locks, for example, electronic locks individually attached to mailboxes, it can be difficult for a user to determine which mailbox the user needs to open.

[0005] The present invention attempts to address or to overcome at least some of the aforementioned problems. Accordingly, it would be desirable to provide a remote access device for access to a plurality of electronic locks. Accordingly, it would be desirable to improve the efficiency and flexibility of building, residential and hospitality management operators managing an entry point secured by more than one electronic lock. Accordingly, it would be desirable to provide reassurance and increased security to individual owners of highly secured areas, residential or commercial units that their properties can only be accessed by authorized users.Summary of the Invention

[0006] The present invention attempts to address or to overcome at least some of the aforementioned problems. Accordingly, it would be desirable to provide a remote access device for access to a plurality of electronic locks. Accordingly, it would be desirable to improve the efficiency and flexibility of building, residential and hospitality management operators managing an entry point secured by more than one electronic lock. Accordingly, it would be desirable to provide reassurance and increased security to individual owners of highly secured areas, residential or commercial units that their properties can only be accessed by authorized users.

[0007] A first aspect of the present invention relates to a remote access device for remotely controlling access to a plurality of electronic locks each associated with a physical barrier. A remote access device may be understood as an electronic apparatus that facilitates the control of access to secure areas or resources from a distant location.lt may be provided that the remote access device comprises a housing including an image sensor for receiving a user input from a user configured to grant access to the plurality of electronic locks. An image sensor can be defined as a device that detects and conveys information used to make an image. This arrangement allows the remote access device to verify andauthenticate user inputs visually, ensuring that access is granted only to verified users. One advantage of using an image sensor is the enhancement of security measures by utilizing biometric data, which provides a higher level of accuracy in user authentication compared to traditional methods. This increases the safety of the controlled physical barriers while maintaining user convenience.

[0008] It is further provided that the remote access device includes a wireless communication unit configured to communicate wirelessly with the plurality of electronic locks and an access management system. A wireless communication unit refers to a module or system enabling the transmission and reception of data without the need for physical connections. The advantage of this arrangement is the flexibility and scalability it offers in managing multiple electronic locks over a network, potentially reducing installation and maintenance costs. Additionally, wireless communication allows for real-time updates and monitoring, ensuring that the system can promptly respond to any access requests or security breaches, thereby enhancing overall system responsiveness and reliability.

[0009] It is further provided that the remote access device comprises at least one processor in data communication with the image sensor and the wireless communication unit. A processor is an electronic circuit that performs operations on some external data source, typically in accordance with instructions stored in memory. The integration of a processor allows for efficient processing of user inputs and communication signals, optimizing the use of processing power to handle multiple tasks simultaneously. This leads to faster decision-making processes and enhances the user experience by minimizing delays in granting access.[0010| Furthermore, it is provided that the remote access device includes a memory communicatively connected to the at least one processor, the memory storing stored user inputs, which, when executed, cause the processor to compare the received user input with the stored user inputs, and grant access to the plurality of electronic locks when the received user input matches the stored user input. Memory in this context refers to the electronic component where data is stored and retrieved by the processor as needed. This arrangementensures that user authentication is conducted swiftly and securely by comparing real-time image data with pre-stored credentials, thus improving the use of storage capacity by maintaining only relevant user data. One advantage is the enhancement of security by ensuring that only recognized users can gain access, reducing the risk of unauthorized entry while also maximizing storage efficiency and processing speed.

[0011] According to various embodiments, the user input includes a facial profile of a user.

[0012] According to various embodiments, the user input includes an access code, wherein the access code includes a payload comprising an access identity associated with the authorized user, at least one lock identifier associated with the one or more of the plurality of electronic locks, and a command identifier for access based on a predetermined usage and a predetermined time period.

[0013] According to various embodiments, the access code is generated by an access code generator in data communication with a server and configured to generate an access code configured for sending to an authorized user’s mobile device.

[0014] According to various embodiments, the access code is generated by an access code generator in data communication with a server, and configured to generate an access code configured for sending to the remote access device for storage in the memory.

[0015] A second aspect of the present invention relates to a system for remotely controlling access to electronic locks. This system comprises an access code generator and a remote access device.

[0016] A system may be understood as a combination of components arranged in a specific manner to achieve a desired function. An "access code generator", in this context, refers to a component that generates unique codes for granting authorized users entry to secured areas or devices. Tt is connected to a server and configured to produce access codes incorporating an access identity, one or more lock identifiers, and a command identifier based on predetermined usage and time period. An access code can be considered as a set of data that enables authorized users to gain entry to specific locks by providing the correct code at the right moment. The pay load of this code includes an access identity linked to the user, one or more lock identifiers associated with various electronic locks, and a command identifier determined by predefined usage and time constraints.

[0017] It is provided that there exists an image sensor within the "remote access device". This component enables the device to receive access codes from authorized users' mobile devices for verification purposes. The remote access device is also capable of wirelessly communicating with multiple electronic locks.

[0018] One advantage of this arrangement lies in its flexibility and convenience. Authorized users can obtain unique access codes from anywhere, at any time, enabling them to gain entry to secured areas or devices remotely. This eliminates the need for physical keys or cards, reducing potential loss or misplacement issues. Moreover, it allows for more efficient management of access permissions by granting or revoking access on a case-by-case basis through the server.

[0019] It is provided that upon receiving an access code from the authorized user's mobile device, the remote access device verifies its authenticity by comparing it with a stored access code. If there is a successful match, the remote access device sends control signals to unlock the designated electronic locks and grant entry to the authorized user. This ensures secure access while maintaining flexibility and convenience for users.

[0020] In summary, this system provides a flexible and convenient solution for remotely controlling access to multiple electronic locks by generating unique access codes with associated lock identifiers and command identifiers, enabling verification of these codes through an image sensor within the remote access device, and unlocking designated locks upon successful code validation.

[0021] According to various embodiments, the stored access code is sent by the server associated with an access management system to the remote access device for storing within the remote access device via a communications network.

[0022] According to various embodiments, the access identity includes one or more user identifiers associated with the authorized user.

[0023] According to various embodiments, the one or more user identifiers associated with the authorized user include one of the following: a name, an email address, a mobile number.

[0024] According to various embodiments, the command identifier includes a revoke command configured to revoke the access code when the access code expires at the end of the predetermined time period.

[0025] According to various embodiments, the access code generator is implemented as an application within an access management system.

[0026] According to various embodiments, the access code is sent to the authorized user in one of the following ways: a text message and an email to the authorized user’s mobile device.

[0027] A third aspect of the present invention relates to a method for remotely controlling access to a plurality of electronic locks. A method may be understood as a systematic procedure or series of actions conducted to achieve a particular result, in this case, controlling access to secure areas or resources via electronic means. It is provided that the method involves generating, by an access code generator, an access code for one or more of the plurality of electronic locks, wherein the access code includes a payload comprising an access identity associated with the authorized user, at least one lock identifier associated with the one or more of the plurality of electronic locks, and a command identifier including a predetermined usage and a predetermined time period.

[0028] An access code generator refers to a software application that creates unique codes that facilitate access control. The payload comprises data elements that are crucial for identifying the user and the specific locks involved, ensuring that access is granted appropriately and within defined parameters. One advantage of this arrangement is that it allows for highly secure, user-specific access control by embedding essential identification information directly into the access code. This enhances the system's security by ensuring that only authorized users can generate access codes that correspond to specific locks, thus minimizing the risk of unauthorized access.

[0029] It is provided that the method includes sending, by the access code generator, the access code to a mobile device of the authorized user. A mobile device can be defined as a portable computing device that allows users to receive and transmit data. This arrangement provides a convenient means for authorized users to receive their access codes promptly, facilitating quick and efficient access to secured areas. One advantage is the immediacy of access, as users can obtain their codes directly on their mobile devices, which streamlines the access process and enhances user experience. Moreover, utilizing mobiledevices as a delivery mechanism leverages existing technology, reducing the need for specialized hardware.[00301 It is provided that the method further comprises verifying, by a remote access device configured to be in wireless communication with the plurality of electronic locks, the access code by comparing the access code with a stored access code in the remote access device. A remote access device refers to an electronic device that facilitates the communication and control of electronic locks from a distance. This arrangement ensures that the access code generated and sent to the user can be authenticated against a previously stored code, thereby reinforcing the security framework of the system. One advantage is the ability to effectively manage access control in real-time, as the verification process enables immediate responses to access requests This minimizes the likelihood of unauthorized access, as only valid codes can unlock the designated electronic locks

[0031] It is provided that the method includes sending, by the remote access device, a control signal only to the electronic locks associated with the lock identifiers so as to unlock the said electronic locks when the access code matches the stored access code. A control signal can be understood as an electronic message sent to operate or influence the behavior of a device, in this case, to unlock specific electronic locks. This arrangement ensures that the control signal is directed solely to the appropriate locks linked to the verified access code, enhancing operational efficiency. One advantage of this method is that it optimizes the use of bandwidth and processing power by limiting the control signal transmission to only those locks that require action. This targeted communication reduces unnecessary network traffic and increases the overall efficiency of the access control system, ensuring a swift unlocking process while maintaining system integrity.

[0032] According to various embodiments, the stored access code is sent by the server associated with an access management system to the remote access device for storing within the remote access device via a communications network.

[0033] According to various embodiments, the access identity includes one or more user identifiers associated with the authorized user.

[0034] According to various embodiments, the one or more user identifiers associated with the authorized user include one of the following: a name, an email address, a mobile number.

[0035] According to various embodiments, the command identifier includes a revoke command configured to revoke the access code when the access code expires at the end of the predetermined time period.

[0036] According to various embodiments, the access code generator is implemented as an application within an access management system.

[0037] According to various embodiments, the access code is sent to the authorized user in one of the following ways: a text message and an email to the authorized user’s mobile device.

[0038] According to various embodiments, the command identifier is a non-reusable command that is based on the predetermined usage or the predetermined time period.

[0039] According to various embodiments, the non-reusable command is based on the predetermined time period.

[0040] According to various embodiments, the non-reusable command is based on a usage quantity.Brief Description of the Drawings

[0041] Tn the drawings, like reference characters generally refer to the same parts throughout the different views The drawings are not necessarily to scale, emphasis instead generally being placed upon illustrating the principles of the invention. The dimensions of the various features or elements may be arbitrarily expanded or reduced for clarity. In the following description, various embodiments of the invention are described with reference to the following drawings, in which:

[0042] FIG. 1 shows a perspective view of a remote access device and electronic door lock systems at the exterior of the dwelling according to various embodiments;

[0043] FIG. 2 shows a side view of a remote access device interacting with electronic door lock systems according to another embodiment;

[0044] FIG. 3 shows a high-level overview diagram of a remote access device configured for wireless communication with electronic locks according to various embodiments;

[0045] FIG. 4a illustrates a remote access device in wireless communication with two electronic locks according to various embodiments;

[0046] FIG. 4b illustrates a remote access device in wireless communication with multiple electronic lock systems at a delivery mailbox according to various embodiments;

[0047] FIG 5 shows a high-level overview diagram of an access management system in wireless communication with a remote access device according to various embodiments;

[0048] FIG. 6 shows a block diagram of another an access management system in wireless communication with a remote access device according to various embodiments; and

[0049] FIG. 7 shows a flow chart of a method for remotely controlling access to a plurality of electronic locks according to various embodiments;

[0050] FIG 8 shows a flow diagram of a revoke command of an access code for remotely accessing a plurality of electronic locks according to various embodiments; and

[0051] FIG. 9 shows a high-level block diagram of an electronic lock according to various embodiments.Detailed Description

[0052] The following detailed description refers to the accompanying drawings that show, by way of illustration, specific details and embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. Other embodiments may be utilized and structural, and logical changes may be made without departing from the scope of the invention. The various embodiments are not necessarily mutually exclusive, as some embodiments can be combined with one or more other embodiments to form new embodiments.

[0053] By way of example, an element, or any portion of an element, or any combination of elements may be implemented as a “processing system” that includes one or more processors. Examples of processors include microprocessors, microcontrollers, graphics processing units (GPUs), central processing units (CPUs), application processors, digital signal processors (DSPs), reduced instruction set computing (RISC) processors, systems on a chip (SoC), baseband processors, field programmable gate arrays (FPGAs),programmable logic devices (PLDs), state machines, gated logic, discrete hardware circuits, and other suitable hardware configured to perform the various functionality described throughout this disclosure. One or more processors in the processing system may execute software. Software shall be construed broadly to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software components, applications, software applications, software packages, routines, subroutines, objects, executables, threads of execution, procedures, functions, etc., whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise.

[0054] Accordingly, in one or more example embodiments, the functions described may be implemented in hardware, software, or any combination thereof If implemented in software, the functions may be stored on or encoded as one or more instructions or code on a computer-readable medium.

[0055] Tn the specification the term “comprising” shall be understood to have a broad meaning similar to the term “including” and will be understood to imply the inclusion of a stated integer or step or group of integers or steps but not the exclusion of any other integer or step or group of integers or steps. This definition also applies to variations on the term “comprising” such as “comprise” and “comprises”.

[0056] In order that the invention may be readily understood and put into practical effect, particular embodiments will now be described by way of examples and not limitations, and with reference to the figures. It will be understood that any property described herein for a specific system may also hold for any system described herein. It will be understood that any property described herein for a specific method may also hold for any method described herein. Furthermore, it will be understood that for any system or method described herein, not necessarily all the components or steps described must be enclosed in the system or method, but only some (but not all) components or steps may be enclosed.

[0057] The term “coupled” (or “connected”) herein may be understood as electrically coupled or as mechanically coupled, for example attached or fixed, or just in contact without any fixation, and it will be understood that both direct coupling or indirect coupling (in other words: coupling without direct contact) may be provided.

[0058] To achieve the stated features, advantages and objects, the present disclosure provides a remote access device for providing access to a plurality of electronic locks. The invention proposes to improve the security and efficiency of providing access to electronic lock systems. The present disclosure can be applied to electronic locks or electronic door locks with wireless communication capabilities such as bluetooth or wifi or multi-factor authentication capabilities. The present invention proposes to improve the user experience of accessing a group of electronic locks that are located together.

[0059] FIG. 1 shows a perspective view of a remote access device and electronic door lock systems at an exterior of a dwelling according to various embodiments. FIG. 2 shows a side view of a remote access device 100 and electronic door lock systems at an exterior of a dwelling according to various embodiments. With reference to FIG. 1 and FIG. 2, in some residential compounds, the entrance to a dwelling comprises a front gate 310 and a door assembly 210. A resident who wishes to access the interior of the dwelling will have to open the front gate 310 before opening the door assembly 210 in order to enter the interior of the dwelling. Typically, an owner of the dwelling will install an electronic lock on the front gate 310 and the door assembly 210 so that it is convenient for a resident to access the interior of the dwelling without the use of any physical keys. It is also common that the electronic lock system 300 for the front gate 310 contains less features than the electronic lock system 200 installed on the door assembly 210. For example, the electronic lock system 200 on the door assembly 210 may contain advanced biometric recognition features such as facial recognition technology which may not be on the electronic lock system 300 on the front gate 310. In such cases, it is common for a resident to sequentially open the electronic lock system 300 on the front gate 310 using a number password or a biometric fingerprint to unlock the front gate and an advanced biometric recognition technology to unlock the electronic lock system 200 on the main door assembly 210.

[0060] The present invention intends to address this problem by providing a remote access device 100 that is configured to communicate wirelessly with the electronic locks on the front gate and the door assembly respectively so that a single authentication process can unlock both the electronic locks on the front gate and the door assembly simultaneously. The remote access device 100 is attached to an adjacent wall next to the access point at the exterior of the dwelling. In some embodiments, the remote access device 100 is attached to the first entry point or the front gate 310 at the exterior of the dwelling. In one embodiment, the remote access device 100 is wirelessly communicative or wirelessly coupled to the plurality of electronic locks. The remote access device 100 is powered by an energy source, for example, batteries, and has the performance and endurance necessary to ensure that a dwelling user, is properly secured. The remote access device 100 includes a biometric recognition processor that enables a dwelling user to access the dwelling via a biometric input, for example, a facial profile input from an authorized user, that upon successful authentication of the biometric input, to simultaneously open the plurality of electronic locks for the dwelling user to access the interior of the dwelling.

[0061] FIG 3 shows a high-level overview diagram of a remote access device for electronic locks according to various embodiments The remote access device 100 is configured for wireless communication with a plurality of electronic locks 200, 300 via a communications network 400. The remote access device 100 is installed at an entry point of a dwelling or facility, for example, on an adjacent wall, and includes components that are retained within a housing (not shown). The housing includes an aperture for an image sensor 110 to be shown on the front of the housing. The image sensor 110 includes a lens aligned with the front face of the housing for capturing facial profile input or information of a user. The remote access device 100 includes a controller 130 in data communication with a wireless communication unit 140 and a memory 150 and a power source 160. The controller 130 is in data communication with the image sensor 110, a biometric recognition processor 120 and a barcode recognition processor 160. In some embodiments, the remote access device 100 includes an input device (not shown) such as a touch screen or a virtual keypad for entering an input or a biometric input. In some embodiments, the remote accessdevice 100 includes a biometric sensor for capturing biometric data such as a fingerprint sensor for capturing fingerprint information.

[0062] Tn an embodiment, the remote access device 100 includes a wireless communication unit 140 for wireless communication with a plurality of electronic locks. In some embodiments, the wireless communication unit 140 can communicate wirelessly with the electronic locks via the network 400. In some embodiments, the wireless communication unit 140 is configured to communicate wirelessly with an access management system, details of which will be explained later. The wireless communication unit 140 includes communications hardware (e g., Bluetooth components, Bluetooth Low Energy components, radiofrequency components, near field communication (NFC) components, ZigBee components, radio frequency identification (RFID) components, WiFi components, Cat-IM components, etc.) for wireless communication with one or more devices, for example, a plurality of electronic lock systems (or other devices, user devices, server, etc.), or the access management system. The wireless communication unit 140 may be configured to communicate using various communication protocols (e.g., Wi-Fi, Cat- IM, radiofrequency, RFID, Wi-Fi, Bluetooth, Bluetooth Low Energy, ZigBee, NFC, etc ). In some embodiments, the wireless communication unit 140 is configured to communicate using two or more communication protocols. For example, the wireless communication unit 140 may include both a Bluetooth transceiver and a cellular transceiver configured to establish a Bluetooth-based connection and a cellular connection respectively with the server and / or with the plurality of electronic locks.

[0063] In an embodiment, the remote access device 100 further includes a biometric input interface 170. The biometric input interface 170 is configured to receive a biometric characteristic or biometric input from a user that serves as an identifier that is unique to the user. Accordingly, the remote access device 100 may be configured to use biometric input to identify the user. The biometric input interface 170 may include various types of hardware (eg. the image sensor or a fingerprint sensor) configured to receive various types of biometric inputs. By way of example, the biometric input interface 170 can include fingerprint scanners, cameras, microphones, or other interfaces, and the biometric inputscan include images of fingerprints, faces, or retinas, vocal recordings, or other inputs. In some embodiments, the biometric input received is processed by a biometric recognition processor 120 capable of detecting biometric input data received, for example, fingerprint images, facial images, voice recordings based on the biometric input captured by the image sensor, microphone or fingerprint sensor. In various embodiments, the biometric input, for example, image of a user’s facial profile can be captured on a remote device such as a mobile device. The remote access device 100 is configured to receive the biometric input from the remote device through the access management system via the network and stored as a unique user profile in the remote access device 100. In other embodiments, the unique user profile together with the biometric input can be stored on the access management system on a remote server and / or a memory 150 of the remote access device can access the unique user profile on the access management system via the network. Details of provisioning access rights to a user profile is explained hereinafter.[00641 In an embodiment, the remote access device 100 further includes a barcode recognition processor 160. The image sensor 110 is configured to receive a matrix barcode from a mobile device that serves as an identifier that is unique to the user. For example, the matrix barcode is a barcode or QR code, or a matrix barcode encoded into an image. Accordingly, the barcode recognition processor 160 may be configured to read the matrix barcode to identify the user. The image sensor 110 is configured to receive various types of matrix barcodes. In various embodiments, the matrix barcode is configurable to provide for a secure communication between the remote access device and the plurality of electronic locks using a two key authentication method. For example, a symmetric encryption technique can be used. For example, a matrix barcode can be encrypted with a user profile of the user who has authorized access to the dwelling. In an embodiment, each of the electronic locks include a lock key that is known or stored on the electronic lock, and a device key that is known or stored on the remote access device 100 or the access management system. The remote access device 100 may receive an encrypted matrix barcode from the user attempting to access the dwelling with a plurality of electronic locks. The remote access device 100 is configured to decrypt the encrypted matrix barcode using a device key stored on the remote access device 100. Once decrypted, a control signal isencrypted with the device key and the encrypted control signal is sent to the plurality of electronic locks which then receives the encrypted control signal and decrypts the encrypted control signal using the unique lock key stored on each electronic lock. If successful, the electronic locks is configured to initiate an action specified by the decrypted control signal (eg.unlock the electronic lock).Intent detection and Gesture Recognition

[0065] In various embodiments, the remote access device 100 is configurable to recognize intent and gestures of a user. The remote access device 100 includes the image sensor 110 configured to determine a user intent and / or a user gesture through a gesture recognition processor (not shown). This feature provides the advantage of allowing the remote access device to provide an enhanced user experience and improved access control protocols When a user approaches the entry of the dwelling where the remote access device is located, the remote access device 100 is capable of recognizing predetermined gestures or movements of a user. For example, the image sensor 110 will recognize an intention to interact with the remote access device through a wave of the user’s hand at the remote access device. On recognition of the predetermined gesture, the remote access device 100 will proceed to determine if the user is an authorized user with access rights to the plurality of electronic locks. The remote access device 100 can determine this by performing an authentication process to verify if the user is one who has access rights to the plurality of electronic locks. For example, the authentication process can include determining if the captured real-time image of the user matches with a user profile in the remote access device or access management system. In a non-limiting example, the authentication process includes requesting the user to provide an encrypted matrix barcode on his mobile device for presenting to the remote access device for verification. As described above, the encrypted matrix barcode can be decrypted by the remote access device upon successful verification, and an encrypted control signal is transmitted to the plurality of electronic locks for decryption using the stored lock keys and the electronic locks is configured to initiate an action specified by the decrypted control signal (eg.unlock the electronic lock).

[0066] In other embodiments, if the remote access device 100 determines that the user is not an authorized user when there is no match with the authorized user profile in its database, the remote access device is configured to trigger an associated action which does not include unlocking the electronic locks. The associated action can include sensing an alert or notification to the mobile device of the dwelling owner, or activating a connected doorbell to inform the dwelling owner of the presence of someone at the door.

[0067] Tn various embodiments, the remote access device 100 can be positioned on the ingress and / or the egress sides of the door. When the remote access device 100 is positioned on the egress side of the door, the remote access device 100 is configured to detect the user’s intent as they approach the door from the inside. The remote access device 100 is configured to similarly determine user gestures through the gesture recognition processor — those intending to exit the dwelling and those intending to solely survey the outside environment, for example, a user who wants to view the outside environment via the door viewfinder.

[0068] In various embodiments, the remote access device 100 is configured to incorporate advanced computer vision techniques, for example, by leveraging the images captured by its image sensor to enhance its capabilities and facilitate intelligent decisionmaking. These techniques empower the remote access device 100 to perform a range of context-aware actions, further optimizing the access control process.

[0069] In an embodiment, the remote access device 100 may also include other interface devices, for example, a user input devices, that facilitate interaction of a user with the remote access device. The user input device may be a physical or digital device. For example, the user input device may include one or more dials, combination lock interfaces, keyholes, buttons, keypads, touch screens, touch sensitive areas, displays, speakers, keyboards, stylus inputs, mice, track pads, etc. The user input device may additionally be configured to provide information to the user (e g., through selectively illuminating one or more lights, through a graphical user interface, etc ). In one embodiment, the user inputdevice include touch detection devices and / or proximity detection devices configured to detect the presence of a user (e.g., based on a user’s touch, based on motion of a user, etc ).

[0070] Tn an embodiment, the remote access device 100 includes a controller 130 containing the software configured to interact with the plurality of electronic locks 200, 300 or with modules to implement the techniques disclosed herein. For example, the controller 130 is configured to pair or communicate wirelessly with the plurality of electronic locks 200, 300 so as to provide a control signal to the plurality of electronic locks from the controller 130 via the wireless communication unit 140. In another example, the controller 130 may request an access module to access a user profile and to request to determine an action to be taken. Based on the permission levels of the user profile and the request, the controller 130 determines whether or not to accept a request action. For example, the controller 130 may generate a control signal necessary to control the electromechanical functions of the plurality of electronic locks in response to an unlock request on a successful authentication of the user. In various embodiments, the control signal can be an unlock action or any other action that controls the functions of the electronic lock. In a non-limiting example, the control signal can be configured to include a predetermined duration of time for the control signal to be activated and for the control signal to lapse. For example, the control signal can be configured to determine a start time and an end time for the control signal to be activated. In another non-limiting example, the control signal can be configured to determine only specific users or grantees who have access to the plurality of electronic locks. In another non-limiting example, the control signal can be configured to determine only specific users or grantors capable of assigning grantee or specific users access rights to the plurality of electronic locks.

[0071] In various embodiments, the remote access device 100 is configured to provide a secure communication between the remote access device 100 and the plurality of electronic locks 200, 300 using a two key authentication method. In some embodiments, a symmetric encryption technique can be used. In an embodiment, each of the electronic locks include a lock key that is known or stored on the electronic lock, and a device key that is known or stored on the remote access device 100 or the access management system.Each of the lock keys are unique to the electronic locks and the device key is unique to the remote access device. In some embodiments, the access management system is configured to encrypt each user or grantee profile with the device key of the remote access device 100 that the user profile is associated with When a user wises to access the plurality of electronic locks, the remote access device 100 receives a unique lock identifier from each of the electronic locks and compares it to a list of lock identifiers associated with the encrypted user profiles on the remote access device. The lock identifiers can be stored in the memory 150. If a match is found, the remote access device 100 transmits the associated encrypted user profile with the device key to the electronic locks. The electronic locks will proceed to decrypt the encrypted user profile to obtain the device key. The remote access device then generates and transmits an encrypted control signal that is encrypted using the device key to the electronic locks. The electronic locks will then decrypt the encrypted control signal using the device key and initiate the action specified by the decrypted control signal (eg. unlock the electronic locks).

[0072] In various embodiments, the remote access device 100 is configured to detect abnormal events. In a non-limiting example, the image sensor 110 is configured to detect one or more third parties who have not been granted access to the dwelling, and to send a notification to the dwelling owner. In such cases, the image sensor 110 includes a motion sensor configured to detect motion at the entry point of the dwelling so that any motion attributed to a third party or an object can be detected. The image sensor 110 is also configured to detect the number of third parties at the dwelling. The image sensor 110 proceeds to capture an image of the third party or the object and compares it to any of the images of user profiles that are stored on the database of the access management system connected to the remote access device or on the remote access device itself. If there is no match to any of the images on the database, the remote access device is activated to send a notification to the dwelling owner with the event and number of third parties.Object Recognition

[0073] In another non-limiting example, the remote access device 100 is configured to recognize predetermined objects through an object recognition processor (not shown). The object recognition processor includes object recognition algorithms and computer vision algorithms that are trained to identify objects and / or specific entities associated with objects. For example, the remote access device 100 is configured to recognize a delivery personnel delivering one or more packages or other items from delivery companies, or household items including groceries and the like. In such cases, the image sensor 110 is configured to identify delivery personnel based on certain attributes, such as uniform or logos of delivery companies. In other embodiments, the object recognition processor is trained to detect objects of interest, such as boxes, packages, envelopes, plastic bags with contents therein, etc Upon successful identification of such entities and / or objects of interest, the remote access device will activate and send a signal to the dwelling owner through the access management system. For example, a notification or alert can be sent to the dwelling owner that there is a delivery at the dwelling. In various embodiments, the image sensor 110 includes an object recognition processor that can be trained using AI / ML models to improve the accuracy of object identification. This feature provides the advantage of streamlining delivery processes while maintaining a heightened level of security and accountability.

[0074] In various embodiments, the remote access device 100 is configured to detect predetermined prohibited items to ensure compliance with premises regulations. Through continuous monitoring, the device can identify items such as pets or restricted objects, such as firearms, within its field of view. In scenarios where a prohibited item is detected which is in contravention of the established guidelines, the remote access device 100 responds accordingly. Depending on the configuration, the remote access device 100 may deny access or withhold the performance of associated actions, such as door unlocking. Alternately, it can notify the appropriate authorities, such as administrators of the access management system or premise administrators, to initiate corrective actions.People Counting for Occupancy Control

[0075] In various embodiments, the remote access device 100 is configured to count the number of people accessing the dwelling or facility. This addresses situations that require precise occupancy management, for example to comply with fire safety regulations. The remote access device 100 utilizes its visual data to monitor the number of individuals within the monitored area. If the detected people count surpasses the predetermined threshold established by the access management system, the remote access device 100 will trigger an associated enforcement action. Depending on the configuration, the remote access device 100 may prevent access or abstain from performing associated actions, such as opening the door to subsequent users. Simultaneously, it can alert administrators to the occupancy breach, facilitating prompt resolution and adherence to safety protocols.

[0076] In an embodiment, the controller 130 also maintains an activity log of all entries and exit of users and transfers the information to the access management system via the wireless communication unit 140 for storage in the access management system. Alternatively or in addition to, the activity log can be stored in the memory 150 of the remote access unit. Whenever a user accesses an entry point via the remote access device 100, the controller 130 logs the unlocking and locking of the electronic locks as events. These events are saved on the memory 150 and are sent via the network 400 to the access management system 100 and can be accessible by the access right owner or administrator. In some embodiments, unsuccessful attempts at entry or an unauthorized entry can be logged and transmitted to the access right owner or administrators for them to be notified via their user devices immediately.

[0077] In an embodiment, the remote access device 100 includes a power source 180 or a source of electrical energy. The power source 180 may include one or more batteries, capacitors, external power sources (e.g., connections to a power grid, etc.), or other sources of electrical energy. The power source 180 is configured to provide electrical energy to power the various high current loads (e.g. command signals to electronic locks, etc.) and low current loads (e.g., the controller 130, biometric recognition processor 120, barcode recognition processor 160, etc.) of the remote access device 100. In one embodiment, thepower source 180 includes a battery for powering the high current load and a capacitor in parallel with the low current load.

[0078] As a non-limiting example, the remote access device 100 can be configured to sense key fobs / key cards, mobile devices, microchips, biometrics including but not limited to fingerprint, face or voice recognition. In one embodiment, the remote access device 100 includes a motion detection module. As non-limiting examples, motion detection module can include an optical, microwave, or acoustic sensor, and a transmitter for illumination. In one embodiment a passive sensor can be used. In one embodiment, remote access device can detect up to distances of at least 5 meters

[0079] As non-limiting examples, the image sensor 120 can include a passive infrared (PIR), micro wave which detects motion through the principle of Doppler radar, and the like, ultrasonic and the like, tomographic motion detector, video camera software, and the like.

[0080] In some embodiments, the remote access device 100 includes a tamper detection module. The tamper detection module includes sensors that detect when abnormal shocks are applied to the remote access device 100 for security concerns. In some embodiments, the sensors include an accelerometer or motion sensors that detect abnormal shocks to the electronic lock. For example, the accelerometer or motion sensor can detect an acceleration that is more than a predetermined amount or above a maximum rate of acceleration observed during a period. This can indicate that a person may be trying to attempt to damage the remote access device. In the aforesaid instances of unauthorized tampering, the controller 130 sends a tamper alarm event to the access management system and the administrator and access right owner can be notified through their user devices.Configurable Access Code

[0081] The present invention provides a remote access device 100 through an access management system that includes improvements over current access control systems, suchas those provided by electronic lock systems, turnstile systems, facility control systems, building management systems, concert and stadium management systems, by enabling access managers to distribute configurable access codes for such aforesaid systems. These configurable access codes provide the following capabilities:• Ability to revoke the access granted to a user;• Ability to configure a predetermined time period;• Ability to prevent reusing or sharing of access; and• Ability to expand from one-time-use functionality to multiple uses.

[0082] In other words, the access code can be configured with a payload that includes an access identity, at least one lock identifier associated with respective electronic locks, and a command identifier. The access identity includes one or more user identifiers associated with a grantee or an authorized user. For example, the user identifiers can include, but not limited to, a name, an address, an email address or a mobile number Once the access identity of a grantee is created, the grantor configures an access code for the grantee for accessing one or more secured access points in a facility.

[0083] The command identifier for an access code can be configured by a grantor based on a limited use: for a predetermined usage or a predetermined time period, or a combination thereof. Once the access code is configured according to its use, it is generated by the grantor. The grantor ensures the access management system distributes the access code to a user’s mobile device 800. The access code can be distributed to the grantee in a number of ways, for example, through a text, message or email to a user’s mobile device or in printed form. The access code is also sent to an external server or a database 120 associated with the access management system for updating the remote access device 100 associated with the newly generated access code via the network 200. Tn some embodiments, the payload for the access code also includes a revoke command that revokes the access code at the end of the predetermined duration.

[0084] The present invention proposes to provide a frictionless experience for users by minimizing the steps for a user to access a secured access point. The present inventionproposes to prevent unauthorized access while allowing only legitimate users to access a secured access point. The present invention also proposes to accommodate a predetermined number of temporary guests and uses at a secured access point. The present disclosure can be applied to electronic locks with wireless communication capabilities such as bluetooth or wifi or multi-factor authentication capabilites, electronic locks that have both offline and online access, access control systems utilized at secured access points such as turnstiles at office and residential buildings, concert and stadium facilities, elevators in residential buildings, shared facilities within a residential complex, meeting and function rooms in offices.

[0085] FIG 4a illustrates a remote access device in communication with two electronic locks according to various embodiments. As mentioned above, the embodiment is described above, and includes a remote access device in wireless communication with two electronic locks installed at an entry point: one electronic lock installed on a front gate and a subsequent electronic lock installed on the door assembly. FIG. 4b illustrates a remote access device in communication with multiple electronic locks according to various embodiments. In this embodiment, the remote access device 100 is in wireless communication via a network with multiple electronic locks in one area, for example, a delivery mailbox for a residential or office facility where users can pick up parcels or mail from a central location within the residential or office facility. To collect a parcel or mail, a user would receive an access code with a specific pay load on the user’s mobile device, for example, a matrix barcode on an authorized mobile device from a service provider, for example, a delivery service provider or an ecommerce retailer, upon delivery of the parcel and mail. In order to pick up the parcel or mail from the delivery mailbox, the user would have to scan the access code on the remote access device 100 The access code includes an access identity of the purchaser, a lock identifier associated with the electronic lock on the mailbox, a command identifier including a predetermined usage and predetermined duration of time to pick up the parcel, and a revoke command where the access code expires and can no longer be used. The remote access device 100 includes an image sensor for capturing the access code, and the matrix barcode is processed by the barcode recognition processor and if successfully authenticated, the controller 130 will send a control signal tothe electronic lock on the correct mailbox to be opened. This provides the advantageous effect of the user having to locate the right mailbox to be opened.Integrated Reservation Management System

[0086] In various embodiments, the remote access device 100 is configurable to be integrated with a reservation management system. In some embodiments, the reservation management system is configured as an add on application to the access management system, details of which will be provided hereinafter. The use cases for the said remote access device extends beyond traditional hotel settings to encompass various short-term reservations, such as tennis courts or meeting rooms. Tn a non-limiting example, when a guest books a reservation for a property or facility through the reservation management system, the administrator may capture the guest's biometric data through a dedicated biometric input interface or extract biometric data from the guest's personal identification documents, such as passport or driver's license. Subsequently, the access management system may be employed to provision access rights and generate an access code with a payload that includes an access identity of the guest, one or more lock identifiers associated with respective entry points in the property or facility, a command identifier that includes a predetermined usage and predetermined time duration, and a revoke command upon which the access code can no longer be used. This allows the access code to be used for a specific duration of time for the registered guest on the reserved property for the duration of the reservation to the remote access device.

[0087] In various embodiments, the remote access device is configured to facilitate a self-check in process for guests. This feature ensures personal privacy and guest autonomy. Once a guest confirms their reservation via the reservation management system, they are prompted to provide their own biometric input data. The biometric input data, which can be a facial image captured through the guest's mobile phone camera, is configured remotely to the corresponding remote access device 100 associated with the reserved property. Upon arrival at the property, the guest's biometric input data is matched with the saved biometric input data, positively identifying the guest. The remote access device, upon verification,triggers the associated action — such as unlocking the door — resulting in the successful completion of the self-check-in process.

[0088] Tn another non-limiting example, the reservation management system is configured to issue an access code that is unique to the guest upon reservation confirmation. The access code includes an access identity of the guest, at least a lock identifier associated with the respective electronic locks on the premises, for example, the main door at the lobby, access to the lifts, and access to a specific unit within the property. The access code also includes a command identifier that includes the predetermined usage and predetermined time duration, for example, the start and end date and time, or the check in time and check out time. The details of the implementation of the access code will be explained hereinafter. When the guest arrives at the property, they present the access code to the remote access device 100. The remote access device 100 verifies the access code's content, ensuring its validity and authenticity. Once positively verified, the remote access device 100 initiates the associated action, be it unlocking the door or granting access, tailored to the specific property reservation. This access code-based self check-in mechanism provides a simple and secure approach to seamless property access. The reservation management system may incorporate computer vision techniques. In an embodiment of the invention, an occupancy limit may be imposed on the property of the reservation. The remote access device 100 may implement a people counting algorithm to monitor the number of individuals within the reserved property to access management system. Should the cumulative count surpass the preconfigured occupancy limit, access restrictions are implemented. In such cases, access is denied, ensuring that the premises' occupancy remains within regulated parameters. Additionally, administrators are alerted to the occupancy limit breach, enabling timely intervention.

[0089] In another non-limiting example, the remote access system is configured to implement a banned object rule that is associated with specific properties via the access management system. For example, the access management system becomes equipped to enforce restrictions on incoming guests. In instances where a guest brings a prohibited object, such as pets, onto the reserved property, the remote access device employs a bannedobject detection algorithm. This algorithm identifies the presence of restricted items, and based on predefined rules, prevents access to the property. Simultaneously, administrators are notified, enabling swift corrective actions for compliance.Integrated Delivery Management System

[0090] In various embodiments, the remote access device is configurable to be integrated with a delivery management system. In some embodiments, the delivery management system is configured to be an add-on application to the access management system, details of which will be explained hereinafter. In order to streamline delivery procedures, an authorized delivery personnel's biometric input data is provisioned into the delivery management system which in turn is accessible by the access management system. When a scheduled delivery is imminent, the access management system configures the authorized biometric input data of the delivery personnel to the corresponding remote access device 100 associated with the delivery location. This instant provisioning facilitates seamless and secure access to the premises solely for the purpose of the scheduled delivery. Alternatively, the authorized delivery personnel may receive an access code from the delivery management system to facilitate access to the designated premises. This access code, issued in accordance with disclosed techniques, grants the delivery personnel access exclusively for the duration of the delivery process.

[0091] The delivery management system may employ computer vision techniques to elevate the customer delivery experience. Object detection algorithms are implemented on the remote access device to identify crucial elements of the delivery process. The system recognizes distinct attributes such as the delivery personnel's uniform, company logo, and parcels being delivered. Upon successful identification, the system updates both the delivery and access management systems, signaling the completion of the delivery. The customer is promptly notified of the successful delivery, maintaining a high level of communication and customer satisfaction. Additionally, images or videos of the delivery process may be captured by the remote access device, providing visual evidence for verification and transparency. Once a delivery is successfully completed, the accessmanagement system revokes the access granted to the delivery personnel, and the remote access device is consequentially configured.Access Management System

[0092] FIG. 5 shows a high-level overview diagram of an access management system for access to a secured access point and an environment in which aspects of the present invention may be implemented. The system 500 includes an access code generator 510 that is accessible by a computing device 530. The access code generator 510 is connectable to a server or a database 520 that can be part of an access management system 500 on the computing device 530 that generates access codes for use by users, guests or visitors. In some embodiments, the access code generator 510 is implemented as an application or module within the access management system, or it can be implemented as a third party application for integration with the access management system.

[0093] In various embodiments, a grantor or an administrator of the access management system will first generate an access identity associated with a grantee. Typically, depending on where the remote access device is installed, this can be a homeowner of a residential premise, a condominium manager, a building manager, an office manager, an AirBNB home owner, or a hotel manager. The access identity comprises one or more user identifiers of the grantee. For example, the user identifiers can include, but not limited to, a name, an address, an email address or a mobile number. Once the access identity of a grantee is created, the grantor configures an access code for the grantee for accessing one or more secured access points in a facility.[ 00941 The access code for a specific secured access point can be configured by a grantor for one or more electronic locks located adjacent or in proximity to the remote access device. Each electronic lock is associated with a lock identifier and the access code is configurable to include the one or more lock identifiers associated with the electronic locks. The access code is also configured based on a limited use: for a predetermined usage or a predetermined time period, or a combination thereof. Once the access code is configuredaccording to its use, it is generated by the grantor. The grantor ensures the access management system distributes the access code to a user’s mobile device 800. The access code can be distributed to the grantee in a number of ways, for example, through a text, message or email to a user’s mobile device or in printed form The access code is also sent to an external server or a database 120 associated with the access management system for updating the remote access device 100 associated with the newly generated access code via the network 200.

[0095] When the user wishes to enter a secured access point, the user provides the mobile device 800 containing the access code for verification by the remote access device 100 at the secured access point. The remote access device 100 includes an image sensor for verifying the access code with the access codes stored within the remote access device 100. In some embodiments, the remote access device 100 is a device located remotely from the plurality of electronic locks at the secured access point. Upon a successful verification of the access code, the remote access device 100 proceeds to unlock the one or more of the plurality of electronic locks and to allow entry to the user

[0096] Figure 6 shows a high-level overview of an access management system 500 configured to communicate wirelessly with a remote access device 100 according to various embodiments of the invention. For example, the access management system 500 may be a platform for providing lock management services to one or more users for the management of one or more lock groups of electronic locks for a dwelling or an office facility. The access management system 500 is configured to be in wireless communication via a network with a remote access device 100 that is also configured to be in wireless communication with one or more electronic locks. The access management system 500 is configured to allow the user to configure one or more lock groups of electronic locks via one or more networks according to various embodiments. A processor 570 may be configured to process information and / or data relating to the management of electronic locks for a property.

[0097] The access management system 500 may include several modules including an access code generator 510, an access code configurator 530, a command module 520, a grantee management module 540, a lock management module 550, and a dashboard module 560. The system 500 may include an application server (not shown) in communication with a computing device (not shown) over a network. Although the singular is used to describe the application server, an application server as described herein may operate as a single computing device, a set of computing devices, or a distributed computing cluster. Similarly, a computing device may be one or more programming devices capable of running a web application or native application to communicate with the application server. The application server and / or computing device may have one or more processors configured to execute instructions retained in the database or memory Tn some embodiments, application server and / or computing device may include servers, computers, laptops, notebooks, portable handheld computers, mobile communication devices, smart phones, personal digital assistants, tablets, wearable devices, Internet of Things (ToT) devices, or any other communication devices capable of sending and receiving data over the network.

[0098] Tn various embodiments, the access management system 500 can be implemented as an application that is accessible by users via an application installed on a computing device or a mobile device for configuration and assignment of lock groups for a plurality of electronic locks for a single entry point or multiple entry points. A mobile or a web application can be a mobile or a web application that runs and be executed on, for example, computing device.

[0099] The access management application 500 also includes a grantee management module 540 that creates and defines roles for different types of people who may be permanent or temporary visitors to the physical space. The authorisation may comprise assigning and / or creating roles and customizing permission levels for the assigned or created roles with different access rights to a lock group. Roles may be pre-configured or certain roles could be created by the administrator with different permission levels for the different modules in the access management application Tn some embodiments, theadministrator or the access right owner can assign roles to visitors who may only have temporary access to the entry points for a predetermined duration of time or predetermined time slot on a regular interval. For example, a cleaner who cleans an apartment at a regular scheduled day a week for a specific duration of time Tn each of these cases, the administrator or access right owners can assign a role for each of these cases and to authorize each role with temporary access rights to the associated lock groups via the grantee amangement module 540.

[0100] Additionally, the grantee management module 540 is configured to manage, provision and grant access to specific access right grantees with assigned roles to a specific electronic lock or a to a group of electronic locks. The access granted may be one-time or over a specific duration or interval. Multiple users may be granted access to multiple locks. For example, the administrator or access right owner may grant a real estate agent temporary access rights to the physical space to show to potential buyers or tenants during a defined period of time.

[0101] The administrator can configure how each electronic lock is to be accessed or authenticated. For example, the electronic lock can be configured to be accessed by a unique passcode, a bluetooth key or secret key, a biometric signature, or a matrix barcode. When an electronic lock is provisioned to the owner or access right owners, additional useful information including geolocation, grouping and informative tags may be captured. For example, the electronic locks may be configured to receive a secret key from the access management system that is in wireless communication with a lock group or an individual electronic lock. For example, the electronic lock may include a wireless transceiver and processor that are configured to wirelessly receive a secret key from the access management system without requiring any manual input in the electronic lock. The secret key, which involves the use of secret key cryptography using symmetric-key algorithms, are algorithms for cryptography that uses the same cryptographic keys for both encryption of plaintext and decryption of ciphertext and are well-known in the art.

[0102] In some embodiments, the processor 570 may process information and / or data relating to the lock management services configured to perform one or more functions described in the present disclosure. For example, the processor 570 may process data relating to assigning or controlling one or more lock groups comprising more than one electronic locks via the access management application 500. In some embodiments, the processor 570 may include one or more processing engines (e.g., single-core processing engine (s) or multi-core processor (s)). Merely by way of example, the processor may be one or more hardware processors, such as a central processing unit (CPU) , an applicationspecific integrated circuit (ASIC) , an application-specific instruction-set processor (ASIP) , a graphics processing unit (GPU) , a physics processing unit (PPU) , a digital signal processor (DSP) , a field programmable gate array (FPGA) , a programmable logic device (PUD) , a controller, a microcontroller unit, a reduced instruction-set computer (RISC) , a microprocessor, or the like, or any combination thereof.

[0103] The network may facilitate exchange of information and / or data between the remote access device 100 and the server 400. In some embodiments, the remote access device 100 is in wireless communication with access management system 500 through the network. As used herein, the term ‘network’ refers to a Local Area Network (LAN), a Metropolitan Area Network (MAN), a Wide Area Network (WAN), a proprietary network, and / or Internet Protocol (IP) network such as the Internet, an Intranet or an extranet. Each device, module or component within the system may be connected over a network or may be directly connected. A person skilled in the art will recognize that the terms ‘network’, ‘computer network’ and ‘online’ may be used interchangeably and do not imply a particular network embodiment In general, any type of network may be used to implement the online or computer networked embodiment of the present invention The network may be maintained by a server or a combination of servers or the network may be serverless. Additionally, any type of protocol (for example, HTTP, FTP, ICMP, UDP, WAP, SIP, H.323, NDMP, TCP / IP) may be used to communicate across the network. The devices as described herein may communicate via one or more such communication networks.

[0104] FIG. 7 shows a flow diagram of a method for remotely controlling access to a plurality of electronic locks according to various embodiments. At step 710, the access code generator provides an efficient way for a grantor to configure, generate and send access codes to grantees. The grantor generates an access code for one or more electronic locks. Each access code includes a payload that includes an access identity associated with an authorized user, at least one lock identifier where the lock identifier is associated with an electronic lock and a command identifier that includes a predetermined usage and a predetermined time period. The access identity comprises one or more user identifiers of the grantee. For example, the user identifiers can include, but not limited to, a name, an address, an email address or a mobile number. Once the access identity of a grantee is created, the grantor configures an access code for the grantee for accessing one or more secured access points in a facility.1001051 Each lock identifier may be associated with a lock identification number for each electronic lock at a secured access point. The secured access point includes a remote access device 100 configured to be in wireless communication with the plurality of electronic locks and the access code generator. The command identifier includes one or more of the following: a duration command, a use command and a revoke command. Depending on the profile of the grantee, the grantor configures the command identifier based on the predetermined usage, predetermined duration and revoke command. For a short-term stay tenant, the predetermined usage includes a use command for multiple entries subject to the duration command, and the predetermined time period includes a duration command for a start date and time to an end date and time, and a revoke command that revokes the command identifier at the end of the duration. For a concert ticket holder, the command identifier includes a predetermined usage for a one-time use and a predetermined time period for a start date and time to an end date and time.1001061 In various embodiments, the predetermined usage or the use command includes a resuable command and a non-reusable command. The reusable command allows the grantee unlimited number of entries subject to a duration command, if any. In some embodiments, the non-reusable command includes a non-reusable command that is time-based and a non-reusable command that is use-based. A time-based non-reusable command is configured for the purpose of security and prevent external users from hacking the access code. The time-based non-reusable command unlocks the lock at the secured access point provided the access code with the time-based non-reusable command is validated within a predetermined time from a timestamp at the access code reader. The use-based non- reusable command unlocks the lock at the secured access point provided the access code with the use-based non-reusable command has a use quantity of more than the last used quantity stored on the access code reader.[001071 At step 720, once the access code is generated with one or more lock identifiers and the command identifier, the access code is sent to a grantee’s mobile device by the access code generator. The access code generator, or the access management system, sends the access code to an external server or a database associated with the access management system. The server will update one or more remote access devices 100 associated with the respective one or more lock identifiers associated with the electronic locks on the access code via the network. In some embodiments, the access code is a static access code or a dynamic access code. The access code is sent to the grantee in a soft copy format. The access code can be sent to the grantee in a number of ways, for example, through a text or a message sent to a grantee’s mobile device, or an email sent to the grantee. The access code can also be printed in hard copy format by the grantor to be given to the grantee, or printed by the grantee from the grantee’s mobile device. In a non-limiting example, the grantor creates an unique resource locator (URL) on the access management system and sends the URL via one or more means, such as text messaging, email, or other distribution methods. In a non-limiting example, the URL is associated to an application that is associated with the access code issued to the grantee. The URL may be stored by the access management system on an external server or database connected to the access management system. In other embodiments, the URL is in the form of a short uniform resource locator hyperlink embedded in the access request, a matrix barcode for example barcode or a QR code, or encoded into an image for easy distribution. The URL contains, but not limited to, the access code that is associated with the access identity of the grantee, the one or more lock identifiers and the command identifier. Typically, the URL is protected fromunauthorized access via cryptographic means, rate limiting and other techniques commonly used in the art.

[0108] At step 730, the grantee with the mobile device and the access code contained therein approaches a remote access device 100 at a secured access point and verifies the access code with the image sensor on the remote access device 100. In some embodiments, the remote access device is a device that is separate from the secured access point, for example, a common door, a gymnasium, a pool. The remote access device is configured to be in wireless communication with the associated electronic locks via a wireless network protocols. In some embodiments, the remote access device is integrated with the electronic lock at the secured access point, for example, at a door of a residence or a turnstile of an office building. The remote access device 100 is capable of reading a graphical image or optical data comprising machine-readable optical identifier. The remote access device 100 decodes the access code provided by the grantee and verifies the decoded access code with a stored access code stored on the remote access device. In some embodiments, the access code including the access identity, the lock identifier and the command identifier are verified with the access identity, the lock identifier and the command identifier stored within the access code reader

[0109] At step 740, once the remote access device successfully verifies the access code, the remote access device sends a control signal to electronic locks associated with the lock identifiers to unlock the electronic locks for the grantee to enter the secured access point. In the event of an unsuccessful verification where the access identity, the lock identifier and the command identifier does not match with the access identity, the lock identifier and the command identifier stored on the remote access device, the grantee will receive an unsuccessful notification, and the remote access device will deny entry to the grantee. Tn some embodiments, the remote access device is configured to decrypt the access code by wirelessly receiving a secret key from the grantee’s mobile device. The secret key, which involves the use of secret key cryptography using symmetric-key algorithms, are algorithms for cryptography that uses the same cryptographic keys for both encryption of plaintext and decryption of ciphertext and are well-known in the art. In some embodiments,the access code reader is in communication with multiple secured access points. For example, the remote access device is in communication with multiple lockboxes or mailboxes. In this case, on successful verification by the remote access device, only the one or more lockboxes associated with the lock identifiers associated with the access code will be opened.

[0110] Once the grantee gains access to the secured access point, an activity log of the successful entry will be logged by the access code reader and sent to the server for storage in the database. In the event of an unsuccessful verification, an activity log of the unsuccessful entry will be logged and sent to the server. This allows the grantor to have a record of the activities at each of the lock identifiers at the secured access point. The activity log includes an entry timestamp, access identity, lock identifier or command identifier.[001111 FIG. 8 shows a flow diagram of a revoke command of a secured access point according to various embodiments. An access management system 500 includes an access code generator 510 that issues access codes to grantees to secured access points. In one embodiment, a grantor configures an access code for one or more lock identifiers associated with a secured access point based on a predetermined usage and predetermined duration for a grantee. Each electronic lock at a secured access point is identified by a lock identifier which may, for example, be associated with a lock serial number. The secured access point includes remote access device 100 configured to be in wireless communication with the electronic locks or the access control system 500 controlling the electronic lock. The grantor configures each access code with one or more lock identifiers and a command identifier. The command identifier can include one or more of the following: a duration command, a use command and a revoke command. The revoke command on the access code is capable of revoking the access code upon expiry of the access code subject to the duration command or the predetermined time period assigned. Alternatively, the revoke command on the access code is also capable of revoking any previously issued access codes to other grantees who may not have any revoke commands tied to the access codes. In this case, the new access code with the revoke command will be sent to the server for update to the respective remote access device associated with the lock identifier. The revokecommand instructs the remote access device 100 to reject any previously issued access codes to the remote access device and to only accept the new access code with the revoke command.

[0112] Figure 9 illustrates a high-level block diagram showing the internal components of an electronic lock 900 configured for wireless communication with a remote access device 100 and / or the access management system 500 according to various embodiments. The electronic lock 900 is installed on an entry point of a residential property, office facility or mailboxes. The entry point may include a door, such as a door of a building, a door in a residential or commercial unit, a door of a mailbox, a door of a safe, door of a key installation, etc . The electronic lock 900 comprises a lock controller 950 in data communication with a memory 970 and a wireless transceiver 960, a power source 920 and a mechanical motor 940 coupled to a physical lock 910. In some embodiments, the electronic lock 900 includes an input device such as a touch screen or virtual keypad for entering an input. In some embodiments, the electronic lock 900 includes a biometric sensor for capturing biometric data such as a fingerprint sensor for capturing fingerprint information or an image capturing sensor for capturing facial profile information of users.

[0113] The electronic lock 900 includes a wireless transceiver 960 for wireless communication with a plurality of electronic locks through a network. In some embodiments, the wireless transceiver 960 can communicate wirelessly with a mobile device or through the access management system 500 via the network. In various embodiments, the wireless transceiver 960 can communicate via any of various technologies already mentioned above, such as a short-range wireless network, a wireless local area network (WLAN), a low-power Wide Area Network (LP-WAN), etc. The cellular network can be any of various types, such as code division multiple access (CDMA), time division multiple access (TDMA), global system for mobile communication (GSM), long term evolution (LTE), 3G, 4G, 5G, etc.. The short-range wireless network can also be any of various types, such as Bluetooth, Bluetooth Low Energy (BLE), near field communication (NFC) etc..

[0114] The electronic lock 900 includes a lock controller 950. For example, the lock controller 950 maintains an activity log of all entries and exit of users and transfers the information to the application server via wireless communication facilitated by the wireless transceiver 960 for storage in the lock user database. Whenever a user accesses an entry point via the electronic lock 900, the lock controller 950 logs the unlocking and locking of the electronic locks as events. These events are saved on the memory 970 of the electronic lock 900 and are sent via the network to the access management system 500 and can be accessible by the access right owner or administrator. In some embodiments, unsuccessful attempts at entry or an unauthorized entry can be logged and transmitted to the access right owner or administrators for them to be notified via their user devices immediately.

[0115] The electronic lock 900 includes the standard structure of conventional door locks with moving parts to lock or to unlock the physical lock. The lock controller 288 controls a mechanical motor 940 which causes the mechanical motor 940 to open or close the physical lock 910. The mechanical motor 940 can have associated gears in order to generate the torque required to move the physical lock 910. The physical lock 910 may take many form factors including padlocks, deadbolts, mortises, rim locks, latches and electro-magnetic door locks.

[0116] The lock controller 950 includes a memory 970 capable of storing access codes, first factor authentication data and associated roles and permission levels of access right owners and access right grantees, biometric data, access details, logs of user interactions or associated timestamps and a record of the access right owner or administrator data. The memory 970 may be a volatile memory, for example a DRAM (Dynamic Random Access Memory) or a non-volatile memory, for example a PROM (Programmable Read Only Memory), an EPROM (Erasable PROM), EEPROM (Electrically Erasable PROM), or a flash memory, e g., a floating gate memory, a charge trapping memory, an MRAM (Magneto resistive Random Access Memory) or a PCR AM (Phase Change Random Access Memory).

[0117] As used herein, the term ‘ controller’ broadly refers to and is not limited to single or multi-core general purpose processor, a special purpose processor, a conventional processor, a graphical processing unit, a digital signal processor (DSP), a plurality of microprocessors, one or more microprocessors in association with a DSP core, a controller, a microcontroller, one or more Application Specific Integrated Circuits (ASICs), one or more Field Programmable Gate Array (FPGA) circuits, any other type of integrated circuit, a system on a chip (SOC), and / or a state machine.

[0118] The electronic lock 900 includes a power source 920 that provides power supply to the electronic lock 900. The power source can be a battery energy source, for example, a rechargeable battery.

[0119] While the invention has been particularly shown and described with reference to specific embodiments, it should be understood by those skilled in the art that various changes in form and detail may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. The scope of the invention is thus indicated by the appended claims and all changes which come within the meaning and range of equivalency of the claims are therefore intended to be embrace.

Claims

CLAIMS1. A remote access device for remotely controlling access to a plurality of electronic locks each associated with a physical barrier, comprising: a housing including; an image sensor for receiving a user input from a user configured to grant access to the plurality of electronic locks; a wireless communication unit configured to communicate wirelessly with the plurality of electronic locks and an access management system, at least one processor in data communication with the image sensor and the wireless communication unit; a memory communicatively connected to the at least one processor, the memory storing stored user inputs, which when executed, cause the processor to compare the received user input with the stored user inputs, and grant access to the plurality of electronic locks when the received user input matches the stored user input.

2. The remote access device according to claim 1, wherein the user input includes a facial profile of a user.3 The remote access device according to claim 1 , wherein the user input includes an access code, wherein the access code includes a payload comprising an access identity associated with the authorized user, at least one lock identifier associated with the one or more of the plurality of electronic locks, and a command identifier for access based on a predetermined usage and a predetermined time period4. The remote access device according to claim 3, wherein the access code is generated by an access code generator in data communication with a server and configured to generate an access code configured for sending to an authorized user’s mobile device.

5. The remote access device according to claim 3, wherein the access code is generated by an access code generator in data communication with a server, and configured to generate an access code configured for sending to the remote access device for storage in the memory.

6. A system for remotely controlling access to a plurality of electronic locks each associated with a physical barrier, comprising: an access code generator in data communication with a server, the access code generator configured to generate an access code for sending to an authorized user’s mobile device, wherein the access code includes a payload comprising an access identity associated with the authorized user, one or more lock identifiers associated with one ormore of the plurality of electronic locks, and a command identifier based on a predetermined usage and a predetermined time period; a remote access device configured to communicate wirelessly with the plurality of electronic locks, wherein the remote access device includes an image sensor configured to receive the access code from the authorized user’s mobile device; wherein the remote access device verifies the access code provided by the mobile device locks by comparing the access code with a stored access code in the remote access device such that upon a successful match, the remote access device sends a control signal to the one or more of the plurality electronic locks to unlock said electronic locks and allow entry to the authorized user.

7. The system according to claim 6, wherein the stored access code is sent by the server associated with an access management system to the remote access device for storing within the remote access device via a communications network.

8. The system according to claim 6, wherein the access identity includes one or more user identifiers associated with the authorized user.

9. The system according to claim 6, wherein the one or more user identifiers associated with the authorized user include one of the following: a name, an email address, a mobile number10. The system according to claim 6, wherein the command identifier includes a revoke command configured to revoke the access code when the access code expires at the end of the predetermined time period.

11. The system according to claim 6, wherein the access code generator is implemented as an application within an access management system.

12. The system according to claim 6, wherein the access code is sent to the authorized user in one of the following ways: a text message and an email to the authorized user’s mobile device.

13. A method for remotely controlling access to a plurality of electronic locks comprising the steps of: generating, by an access code generator, an access code for one or more of the plurality of electronic locks, wherein the access code includes a payload comprising an access identity associated with the authorized user, at least one lock identifier associated with the one or more of the plurality of electronic locks, and a command identifier including a predetermined usage and a predetermined time period;sending, by the access code generator, the access code to a mobile device of the authorized user; verifying, by a remote access device configued to be in wireless communciation with the plurality of electronic locks, the access code by comparing the access code with a stored access code in the remote access device; and sending, by the remote access device, a control signal only to the electronic locks associated with the lock identifiers so as to unlock the said electronic locks when the access code matches the stored access code.

14. The method according to claim 13, wherein the stored access code is sent by the server associated with an access management system to the remote access device for storing within the remote access device via a communications network.

15. The method according to claim 13, wherein the access identity includes one or more user identifiers associated with the authorized user.16 The method according to claim 13, wherein the one or more user identifiers associated with the authorized user include one of the following: a name, an email address, a mobile number.

17. The method according to claim 13, wherein the command identifier includes a revoke command configured to revoke the access code when the access code expires at the end of the predetermined time period.18 The method according to claim 13, wherein the access code generator is implemented as an application within an access management system.

19. The method according to claim 13, wherein the access code is sent to the authorized user in one of the following ways: a text message and an email to the authorized user’s mobile device.

20. The method according to claim 13, wherein the command identifier is a non- reusable command that is based on the predetermined usage or the predetermined time period.

21. The method according to claim 20, wherein the non-reusable command is based on the predetermined time period.

22. The method according to claim 20, wherein the non-reusable command is based on a usage quantity.

Images