Performing a lockdown for locking a plurality of electronic locks

Abstract

It is provided a method for performing a lockdown for locking a plurality of electronic locks (3a-e) in a facility (8) using a wireless communication protocol. The method is performed by a lockdown controller (10). The method comprises: transmitting (42) a synchronised lockdown broadcast signal (20) comprising a lock command to the plurality of electronic locks (3a-e); and receiving (44) a plurality of unicast status signals (21a-b), wherein each unicast status signal confirms that a particular electronic lock of the plurality of electronic locks (3a-e) has been locked.

Description

PERFORMING A LOCKDOWN FOR LOCKING A PLURALITY OF ELECTRONIC LOCKSTECHNICAL FIELD

[0001] The present disclosure relates to the field of electronic locks and in particular to performing a lockdown for locking a plurality of electronic locks.BACKGROUND

[0002] In recent years, emergency situations such as school shootings have underscored the urgent need for fast and reliable lockdown systems. The ability to quickly secure all electronic locks in a building or facility is critical to ensuring the safety of occupants. However, implementing such a system over low-power wireless networks presents substantial challenges, particularly in terms of speed, reliability, and network stability.

[0003] One potential solution is the use of mesh networks. While mesh networks are advantageous in their ability to cover large areas and provide redundancy, they are not without limitations. In a lockdown scenario, where multiple electronic locks must be secured simultaneously, the network can easily become overloaded. For instance, when dozens of electronic locks need to be locked within a 1-2 second window, the volume of traffic generated can lead to network congestion and transmission conflicts. This situation increases the risk of delays or failed transmissions, which can compromise the effectiveness of the lockdown.

[0004] Another approach involves sending individual unicast messages to each electronic lock. In this method, a separate lockdown command is transmitted to each electronic lock, and each electronic lock responds with a confirmation once it has been secured. While this method enhances reliability by ensuring that the status of each electronic lock is individually verified, it is inherently resource intensive. In a facility with dozens of locks, the transmission and confirmation process can result in significant delays. Each unicast message occupies network transmission resources, and as the number of locks increases, so does the time required to complete the lockdown, potentially rendering the system too slow for real-time emergency response.

[0005] The need for a system that can overcome these challenges is clear. Such a system should balance the competing demands of speed, reliability, and network efficiency. Ideally, it would involve a method that can rapidly secure all locks in a facility without overloading the network or introducing significant delays.SUMMARY

[0006] It is an object to providing a lockdown function, for electronic locks of a facility, that is both quick and reliable.

[0007] According to a first aspect, it is provided a method for performing a lockdown for locking a plurality of electronic locks in a facility using a wireless communication protocol, the method being performed by a lockdown controller, the method comprises: transmitting a synchronised lockdown broadcast signal comprising a lock command to the plurality of electronic locks, wherein the synchronised lockdown broadcast signal is transmitted on a schedule that both the transmitter and the plurality of electronic locks are aware of; and receiving a plurality of unicast status signals, wherein each unicast status signal confirms that a particular electronic lock of the plurality of electronic locks has been locked.

[0008] The method may further comprise: allocating respective response slots for each one of the electronic locks for transmitting unicast signals to the lockdown controller.

[0009] The method may further comprise: receiving a plurality of acknowledgement signals, wherein each acknowledgement signal confirms that a particular electronic lock of the plurality of electronic locks has received the synchronised broadcast signal.

[0010] The method may further comprise: repeating the method, based on all electronic locks of a list of electronic locks of the facility not having confirmed that they are locked, until unicast status signals confirming locked status have been received from all electronic locks forming part of the list.[oon] The method may further comprise: receiving a unicast access request signal from an electronic lock; and transmitting a unicast access decision signal to the electronic lock that transmitted the access request.

[0012] The method may further comprise: transmitting in a synchronised unlock broadcast signal, a remote unlock command to unlock a particular electronic lock of the plurality of electronic locks.

[0013] The method may further comprise: broadcasting synchronisation information, to enable an electronic lock receiving the synchronisation information to subsequently receive the synchronised lockdown broadcast signal.

[0014] The wireless communication protocol may employs channel hopping.

[0015] The wireless communication protocol may be BLE PAwR, Bluetooth Low Energy Periodic Advertising with Responses as specified in Bluetooth Core Specification version 5.4 or later.

[0016] According to a second aspect, it is provided a lockdown controller for performing a lockdown for locking a plurality of electronic locks in a facility using a wireless communication protocol. The lockdown controller comprises: processing circuitry; and memory circuitry storing instructions that, when executed by the processing circuitry, cause the lockdown controller to: transmit a synchronised lockdown broadcast signal comprising a lock command to the plurality of electronic locks, wherein the synchronised lockdown broadcast signal is transmitted on a schedule that both the transmitter and the plurality of electronic locks are aware of; and receive a plurality of unicast status signals, wherein each unicast status signal confirms that a particular electronic lock of the plurality of electronic locks has been locked.

[0017] According to a third aspect, it is provided a computer program for performing a lockdown for locking a plurality of electronic locks in a facility using a wireless communication protocol. The computer program comprises computer program code which, when executed on a lockdown controller causes the lockdown controller to: transmit a synchronised lockdown broadcast signal comprising a lock command to the plurality of electronic locks, wherein the synchronised lockdown broadcast signal istransmitted on a schedule that both the transmitter and the plurality of electronic locks are aware of; and receive a plurality of unicast status signals, wherein each unicast status signal confirms that a particular electronic lock of the plurality of electronic locks has been locked.

[0018] According to a fourth aspect, it is provided a computer program product (64, 90) comprising a computer program according to the third aspect and a computer readable means comprising non-transitory memory in which the computer program is stored.

[0019] Generally, all terms used in the claims are to be interpreted according to their ordinary meaning in the technical field, unless explicitly defined otherwise herein. All references to "a / an / the element, apparatus, component, means, step, etc." are to be interpreted openly as referring to at least one instance of the element, apparatus, component, means, step, etc., unless explicitly stated otherwise. The steps of any method disclosed herein do not have to be performed in the exact order disclosed, unless explicitly stated.BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Aspects and embodiments are now described, by way of example, with reference to the accompanying drawings, in which:

[0021] Figs 1A-B are schematic diagrams illustrating environments in which embodiments presented herein can be applied;

[0022] Figs 2A-C are schematic diagrams illustrating embodiments of where the lockdown controller can be implemented;

[0023] Figs 3A-D are schematic communication diagrams illustrating various scenarios of communication applied in the environment of Figs 1A-B;

[0024] Figs 4A-C are flow charts illustrating methods that can be performed by the lockdown controller 10 of Figs 2A-C;

[0025] Fig 5 is a schematic diagram illustrating components of the lockdown controller 10 of Figs 2A-C; and

[0026] Fig 6 shows one example of a computer program product 90 comprising computer readable means.DETAILED DESCRIPTION

[0027] The aspects of the present disclosure will now be described more fully hereinafter with reference to the accompanying drawings, in which certain embodiments of the invention are shown. These aspects may, however, be embodied in many different forms and should not be construed as limiting; rather, these embodiments are provided by way of example so that this disclosure will be thorough and complete, and to fully convey the scope of all aspects of invention to those skilled in the art. Like numbers refer to like elements throughout the description.

[0028] According to embodiments presented herein, a rapid and reliable lockdown of multiple electronic locks within a facility is achieved using a wireless communication protocol. The method is executed by a lockdown controller, which transmits a synchronised lockdown broadcast signal containing a lock command to all of the electronic locks in the facility. Each lock, upon receiving the command, sends back a unicast status signal to the lockdown controller, confirming that it has been successfully locked. By combining the broadcast signal with the lock command to the electronic locks with the unicast signal for the confirmation, this approach ensures that all locks are secured quickly and that their status is reliably confirmed, making it suitable for critical security scenarios.

[0029] Figs 1A-B are schematic diagrams illustrating environments in which embodiments presented herein can be applied.

[0030] A facility 8 (such as a school, office, apartment building, etc.) is provided with an electronic access control system 8. The access control system 9 contains a plurality of electronic locks 3a-i. Each electronic lock 3a-i secures access to a respective physical space i6a-i. Locking and / or unlocking of each electronic lock 3a-i can be based on communication with a portable key device 2 of a user 5. The portable key device 2 isimplemented using any suitable device that is portable by the user 5, and that can communicate with the electronic lock to enable evaluation of whether to grant access or not. For instance, the portable key device 2 can be implemented as a smartphone, wearable device, key fob, key card, etc. The electronic lock 3a-i is able to communicate with the portable key device 2 over a communication channel which may be a short- range wireless interface or a contact-based communication channel. Optionally, the electronic lock 3a-i comprises a separate unit, also known as an access control reader, for communicating with the portable key device 2 and evaluating access. Some or all of the electronic locks 3a-i can be battery-powered, which greatly simplifies installation of the electronic locks 3a-i.

[0031] The interface between the portable key device 2 and the electronic lock 3a-i can be a short-range radio frequency wireless interface and could e.g. employ Bluetooth Low Energy (BLE), Bluetooth, Radio Frequency Identification (RFID), Near-Field Communication (NFC), UHF, ZigBee, any of the IEEE 802.11 standards (commonly referred to as Wi-Fi), any of the IEEE 802.15 standards, DECT NR+ (Digital Enhanced Cordless Telecommunications New Radio Plus) etc. Alternatively or additionally, the interface between the portable key device 2 and the electronic lock 3a-i is a contactbased interface, e.g. based on galvanic contact with a smartcard, by reading a magnetic strip on a card, Universal Serial Bus (USB), a proprietary interface, etc. Using communication between the electronic lock and the portable key device 2, the identity of the portable key device 2 can be obtained and access control can be performed by the electronic lock 3a-i itself or in communication with a server 6.

[0032] The server 6 can be used to keep track of access rights for credentials and to keep track of the electronic locks 3a-i of the facility 8. For instance, the server 6 can keep a list of electronic locks of the facility 8 that should be locked if a lockdown situation occurs. In order to provide communication capabilities to the electronic locks 3a-i, one or more communication hubs 1 are provided. In the example illustrated in Fig 1A, a single communication hub 1 is provided.

[0033] The communication between the communication hub 1 and the electronic lock 3a-i can be based on a low-power communication protocol, e.g. BLE, etc. The communication channel 11 between the communication hub(s) 1 and the server 6 can bebased on any suitable communication protocol. In particular, when the communication hub i is hard-powered (i.e. connected by wire to a power source such as a mains network), the communication channel n between the communication hub 1 and the server 6 can be one that is more directed to performance (e.g. capacity and speed), rather than low power consumption. For instance, the communication channel n between the communication hub i and the server 6 can be based on Wi-Fi, Ethernet, cellular networks, such as 4G (fourth generation), 5G (fifth generation), and / or 6G (sixth generation), etc.

[0034] The server 6 can perform several functions. One function is to enact a lockdown in an emergency situation. In this case, all of the electronic locks 3a-i should be locked, and a confirmation of the locked status should be provided to the server 6. The lockdown can be initiated by pressing a physical emergency lockdown button, from an app of a user, or even by using gunshot sensors. The lockdown function is further illustrated in Figs 3A-B and Fig 4A, and is explained in more detail below.

[0035] Another function is to perform centralised access control. In this case, the user 5 presents the portable key device 2 to the electronic lock in question (the second electronic lock 3b in the example illustrated in Fig 1A). The electronic lock 3b transmits an access request based on the identity of the portable key device 2 to the communication hub 1, which the communication hub 1 forwards to the server 6. The server makes an access decision and transmits this to the communication hub 1 for transmission to the electronic lock 3b. The electronic lock 3b then acts in accordance with the access decision and unlocks (only) if access is granted. The centralised access control function is further illustrated in Fig 3C and Fig 4B, and is explained in more detail below.

[0036] Another function is to perform a remote unlock. For instance, if a service technician needs access to the facility 8 off hours, e.g. on a weekend, an authorised user can interact with the server 6 (e.g. via an application on a smartphone or a web-based interface) to remotely unlock one or more of the electronic locks 3a-i. In this case, the server 6 transmits a remote unlock command to the communication hub 1 for further transmission to the electronic lock(s) in question. The unlocked state can be confirmed by the electronic lock(s) to the communication hub 1, which communicates this to theserver 6. The remote unlock function is further illustrated in Fig 3D and Fig 4C, and is explained in more detail below.

[0037] Turning now to Fig 1B, this illustrates an embodiment where multiple communication hubs la-b (two in this example) are provided in the access control system 8.

[0038] Figs 2A-C are schematic diagrams illustrating embodiments of where the lockdown controller 10 can be implemented.

[0039] In Fig 2A, the lockdown controller 10 shown as implemented in the server 6. The server 6 is thus the host device for the lockdown controller 10 in this implementation. In this case, the communication hub 1 logically acts as an intermediate point between the server 6 and the electronic locks, and the communication hub 1 does not need to interpret any of the communication between the server 6 and the electronic locks. No encryption or decryption is then needed to be implemented in the communication hub 1.

[0040] In Fig 2B, the lockdown controller 10 shown as implemented in the communication hub 1. The communication hub 1 is thus the host device for the lockdown controller 10 in this implementation.

[0041] In Fig 2C, the lockdown controller 10 is shown as implemented as a standalone device. The lockdown controller 10 thus does not have a host device in this implementation.

[0042] Figs 3A-D are schematic communication diagrams illustrating various scenarios of communication applied in the environment of Figs 1A-B. Time flows from left to right. The horizontal lines correspond to communication to or from the entity on the left of the line, i.e. the lockdown controller 10, a first electronic lock 3a and a second electronic lock 3b, in these examples. Only two electronic locks 3a-b are shown in Figs 3A-D for reasons of conciseness; however, the principles illustrated and described can be expanded to an arbitrary number of electronic locks. All illustrated communication occurs in accordance with a wireless communication protocol that supports synchronised broadcast signals from the lockdown controller 10, in predefined timeslots, as well as unicast signals (to or from the lockdown controller 10) in response slots allocated to the transmitter of the unicast signal. It is to be noted that channel hopping can be applied, e.g. such that each time slot uses a new channel frequency.

[0043] Looking first to Fig 3A, this illustrates a lockdown scenario. The lockdown controller 10 first transmits a synchronised lockdown broadcast signal 20, e.g. in the form of a periodic advertising signal. The lockdown broadcast signal 20 comprises a lock command to the plurality of electronic locks 3a-b. The term synchronised implies that the synchronised lockdown broadcast signal 20 is transmitted on a schedule that both the transmitter (the lockdown controller 10) and the receivers (the electronic locks 3a-b) are aware of. In other words, the lockdown controller 10 transmits synchronised broadcast signals at particular time slots, in line with the schedule. In this way, the electronic locks 3a-b can be in a low-power state between the time slots when the lockdown controller 10 could transmit a synchronised broadcast signal (unless they want to transmit their own unicast signals). It is to be noted that the lockdown controller 10 does not need to include any commands in a synchronised broadcast signal in every time slot the schedule permits; the lockdown controller 10 only transmits commands in the synchronised broadcast signal when there is a reason for this.

[0044] In this example, the synchronised lockdown broadcast signal is transmitted at time slot to. According to this schedule, each period comprises one synchronised broadcast signal from the lockdown controller 10 and zero or more scheduled unicast signals in either direction between the lockdown controller 10 and one or more of the electronic locks 3a-b.

[0045] Both the electronic locks 3a-b are within range to receive the synchronised lockdown broadcast signal 20, comprising the lock command. When receiving the lock command, the electronic locks 3a-b act accordingly and perform a lock operation to assume a locked state. Optionally, this includes closing a door that is controlled by the electronic lock. Once locked, each electronic lock 3a-b will transmit a status signal for the lock, confirming that the electronic lock 3a-b in question is locked. Optionally, each electronic lock 3a-b also first transmits an acknowledgement signal, indicating that the lockdown broadcast signal 20 has been received.

[0046] According to embodiments presented herein, the communication from each electronic lock to the lockdown controller 10 is performed using unicast signals according to a schedule. Each electronic lock has at least one assigned response slot during which it can transmit unicast messages. In one embodiment, each electronic lock has at least one assigned response slot in each time slot (i.e. between two synchronised broadcast signals). In this example, the second electronic lock 3b transmits a unicast status signal 21a at response slot roi. The unicast status signal 21a confirms that the second electronic lock 3b has been locked. Additionally, the first electronic lock 3a transmits a unicast status signal 21b at response slot ro2, indicating that the first electronic lock 3a has been locked. It is to be noted that, optionally, the unicast status signals 2ia-b can be transmitted whenever there is a change in state in the electronic lock or connected device, e.g. unlocked, locked, door open, door closed, etc.

[0047] Once the lockdown controller 10 has received unicast status signals from all electronic locks indicating that all electronic locks are locked, the lockdown is complete and confirmed.

[0048] By using broadcast for the lockdown command, all electronic locks within range will receive the lockdown command quickly and essentially at the same time. Using the schedule for transmitting unicast status signals, all electronic locks can confirm that they have entered a locked state without risking transmission conflicts, ensuring reliable confirmation of the lock state.

[0049] When the lockdown controller 10 is implemented in the server 6, the server 6 commands the communication hub 1 to transmit the lockdown signal. The lockdown controller 10 in the server 6 keeps track of the status signal against a list of electronic locks in the facility that should confirm locked state in lockdown scenario.

[0050] Turning now to Fig 3B, this also illustrates a lockdown scenario, but where the second electronic lock 3b fails to receive the first synchronised lockdown broadcast signal 20. The failed reception by the second electronic lock 3b is indicated by a cross in Fig 3B. The failed reception can e.g. be due to interference, temporary blocking object etc. The first period po is indicated in Fig 3B.

[0051] Since the lockdown controller 10 has not successfully received any unicast status signal from the second electronic lock 3b during the first period po, a new instance of the synchronised lockdown broadcast signal 20 is transmitted in a second period pi, at time slot ti. Now, the second electronic lock 3b does receive the broadcast, performs a lock operation, and transmits a unicast status signal 21a at its scheduled response slot for unicast transmissions in the second period pi, at response slot rn.

[0052] Turning now to Fig 3C, this illustrates an online access request scenario. A broadcast signal 20 is optionally sent. However, in this scenario, the broadcast signal 20 is not a lockdown signal, but can be of another purpose.

[0053] When a portable key device 2 is presented to the first electronic lock 3a, the first electronic lock 3a transmits a unicast access request signal 22 to the lockdown controller 10, which can then be implemented in the server 6, for performing access control. The unicast access request signal 22 is based on communication with the portable key device 2. For instance, the unicast access request signal 22 can comprise an identity of the portable key device 2.

[0054] The lockdown controller 10 obtains an access decision, e.g. by sending a corresponding access request signal to the server 6 and receiving an access decision, or by the lockdown controller 10 itself making an access decision based on the access request signal, e.g. when the lockdown controller 10 is implemented in the server 6..

[0055] Once the access decision is obtained, the lockdown controller 10 transmits a unicast access decision signal 23 to the electronic lock that transmitted the access request. The unicast access decision signal 23 comprises the access decision. Optionally, the electronic lock increases how often it listens for the unicast access decision signal 23 after transmitting the unicast access request signal 22. This enables the access control to occur faster.

[0056] Turning now to Fig 3D, this illustrates a scenario of remote locking.

[0057] In this scenario, the synchronised broadcast signal 20’ contains a remote unlock command that is addressed to a particular electronic lock, in this example, the second electronic lock 3b. This can be achieved by the synchronised broadcast signal 20’being structured to contain a section with a specified recipient. Nevertheless, this section is contained in the synchronised broadcast signal 20’ and is not a pure unicast signal. In this way, the remote unlock command can be used to unlock a particular electronic lock of the plurality of electronic locks.

[0058] The second electronic lock 3b receives the remote unlock command addressed to it, and unlocks itself. Since the unlocking results in a state change, the second electronic lock 3b transmits a unicast status signal 26, indicating that the unlocking has been performed. The unicast unlock confirmation signal 26 is transmitted in a response slot that is allocated to the second electronic lock 3b for transmitting unicast signals. In this way, the lockdown controller 10 is informed of the successful unlock operation.

[0059] Figs 4A-C are flow charts illustrating methods that can be performed by the lockdown controller 10 of Figs 2A-C. The embodiments of the methods correspond to the communication of the scenarios illustrated in Figs 3A-D. It is to be noted that each flow chart illustrates embodiments of methods that can be performed independently or in combination with embodiments of methods of any one or more of the other flow charts. All of these embodiments are based on using a synchronised wireless communication protocol that supports synchronised broadcast signals from the lockdown controller 10 and unicast signals at least from the electronic lock to the lockdown controller 10. Optionally, the wireless communication protocol employs channel hopping. In one embodiment, the wireless communication protocol is BLE PAwR, (Periodic Advertising with Responses) as specified in Bluetooth Core Specification version 5.4 or later. In one embodiment, the wireless communication protocol is based on COAP (Constrained Application Protocol) over a wireless channel or TCP (Transmission Control Protocol).

[0060] Looking first to Fig 4A, this flow chart illustrates embodiments of methods for performing a lockdown for locking a plurality of electronic locks 3a-e in a facility 8 using the wireless communication protocol. The method is performed by a lockdown controller 10. This corresponds to the communication of Figs 3A-B, described above.

[0061] In an optional broadcast synchronisation information step 40, the lockdown controller 10 broadcasts synchronisation information, to enable an electronic lock receiving the synchronisation information to subsequently receive the synchronised lockdown broadcast signal 20. In one embodiment, the synchronisation is based on Periodic Advertisement Sync Transfer (PAST), which is part of the Bluetooth standard.

[0062] In an optional allocate unicast response slots step 41, the lockdown controller 10 allocates respective response slots for each one of the electronic locks 3a-e for transmitting unicast signals to the lockdown controller 10. The allocation can occur such that each electronic lock can transmit a unicast message to the lockdown controller 10 at least once in each period (between two successive synchronised broadcast signals). It is to be noted that also other devices can be allocated response slots for transmission, e.g. for sensors. Also, slots can be allocated for unicast transmissions from the lockdown controller 10 to an electronic lock. Optionally, unicast transmissions from the electronic lock can be separated between different purposes, such as for status signals, access request, etc. The proportion of response slots allocated to different device types and / or purposes is flexible and can be tailored to reflect varying need for responsiveness. For instance, sensors can be configured to use a smaller proportion of the available response slots since sensor data is typically not as time critical as other functions described herein.

[0063] In a transmit lockdown broadcast signal step 42, the lockdown controller 10 transmits a synchronised lockdown broadcast signal 20 comprising a lock command to the plurality of electronic locks 3a-e. As described above, the synchronized lockdown broadcast signal 20 can form part of a periodic advertisement transmission. The synchronised lockdown broadcast signal is transmitted on a schedule that both the transmitter and the plurality of electronic locks are aware of.

[0064] In an optional receive acknowledgement step 43, the lockdown controller 10 receives a plurality of acknowledgement signals, wherein each acknowledgement signal confirms that a particular electronic lock of the plurality of electronic locks 3a-e has received the synchronised broadcast signal 20.

[0065] In a receive unicast status signal(s) step 44, the lockdown controller 10 receives a plurality of unicast status signals 2ia-b. For the lockdown scenario, each unicast status signal confirms that a particular electronic lock of the plurality of electronic locks 3a-e has been locked.

[0066] The unicast signal provides an opportunity for the electronic lock to send signals whenever necessary. In other words, using this structure, the electronic lock can be an initiator of the uplink unicast signal.

[0067] In one embodiment, the electronic lock sent a status event in an uplink status unicast signal, whenever there is a state change in the electronic lock or connected device. For instance, such state change can include that the lock is locked, the lock is unlocked, the door is opened, the door is closed, latch on the lock is inserted into the striking plate, a latch on the lock is extracted from the striking plate.

[0068] Since there are allocated uplink unicast response slots for each electronic lock, there is a reliable and predictable way for each electronic lock to provide such status signals.

[0069] When both acknowledgement signals and status signals are received from the electronic locks, the lockdown controller 10 can keep track of which electronic locks have received the lockdown signal, and, of those, which electronic locks have entered the locked state. This allows the lockdown controller 10 to identify e.g. if communication is functioning but the mechanical part of the lock might be jammed, preventing the electronic lock to control the locked state

[0070] In a conditional all confirmed step 45, the lockdown controller 10 determines whether unicast status signals 2ia-b indicating locked status have been received from all electronic locks 3a-e forming part of a list of electronic locks of the facility, indicating that each electronic lock has been locked. When not all electronic locks in the list have confirmed the lock operation, the method returns to the transmit lockdown broadcast signal step 42. Otherwise, the method ends. Optionally, a timeout is used if not all electronic lock confirm the locked state, e.g. due to a faulty electronic lock.

[0071] Using the broadcast signal is very efficient for quickly providing the lockdown command to all electronic locks within range of the lockdown controller 10. At the same time, the reliably scheduled and allocated unicast transmissions are used by the electronic lock to provide confirmation of the lock operation. In other words, this achieves a balance between speed and reliability for the lockdown function.

[0072] Turning now to Fig 4B, this flow chart illustrates embodiments of methods for online access control. The method is performed by a lockdown controller 10. This corresponds to the communication illustrated in Fig 3C, described above.

[0073] In an optional receive unicast access request signal step 46, the lockdown controller 10 receives a unicast access request signal 22 from an electronic lock 3a-e. The access request signal is based on a portable key device 2 requesting access to the electronic lock.

[0074] In an optional obtain access decision step 47, the lockdown controller 10 obtains an access decision based on the identity of the portable key device 2 that has communicated with the electronic lock to request access. As explained above, the access decision can be made by the lockdown controller 10 itself or by consulting the server 6. Such communication between the lockdown controller 10 and the server 6 is internal, when the lockdown controller 10 forms part of the server 6, or external, when the lockdown controller 10 is not part of the server 6.

[0075] In an optional transmit unicast access decision signal step 48, the lockdown controller 10 transmits a unicast access decision signal 23 to the electronic lock that transmitted the access request.

[0076] Using the scheduled unicast response slots for the access signal from the electronic lock and the unicast access decision signal from the lockdown controller 10, enables a fast response for the access request. Notably, since the response slot for the unicast access request signal only needs to be utilised when needed, the electronic lock can remain in a low-power mode until needed, thereby saving significant amounts of power while still enabling fast response for the access request when needed.

[0077] It is to be noted, that after the access decision has been received by the electronic lock that transmitted the access request, this electronic lock may provide status updates in uplink unicast status signals, in accordance with what is described above, e.g. to signal when the electronic lock is unlocked, when the door is opened, when the door is closed and when the electronic lock is locked again, etc.

[0078] Turning now to Fig 4C, this flow chart illustrates embodiments of methods for remote unlocking. The method is performed by a lockdown controller 10. This corresponds to the communication of Fig 3D, described above.

[0079] In an optional transmit unlock command in broadcast signal step 50, the lockdown controller 10 transmits in a synchronised unlock broadcast signal 20’, a remote unlock command to unlock a particular electronic lock 3a-e of the plurality of electronic locks.

[0080] In the receive unicast status signal(s) step 52, the lockdown controller 10 receives a status signal from the particular electronic lock, indicating that the particular electronic lock is unlocked. This confirms an unlocking operation by the particular electronic lock specified in the remote unlock command.

[0081] By using the broadcast signal for the unlock command, the transmission of the unlock command can be addressed as needed to one or more electronic locks. This provides an efficient manner to communicate the remote unlock to the electronic locks when needed.

[0082] Fig 5 is a schematic diagram illustrating components of the lockdown controller 10 of Figs 2A-C. It is to be noted that when the lockdown controller 10 is implemented in a host device, one or more of the mentioned components can be shared with the host device. Processing circuitry 60 is provided using any combination of one or more of a suitable central processing unit (CPU), graphics processing unit (GPU), multiprocessor, neural processing unit (NPU), microcontroller, digital signal processor (DSP), etc., capable of executing software instructions 67 stored in memory circuitry 64, which can thus be a computer program product. The processing circuitry 60 could alternatively be implemented using an application specific integrated circuit (ASIC),field programmable gate array (FPGA), etc. The processing circuitry 60 can be configured to execute the method described with reference to Figs 4A-C above.

[0083] The memory circuitry 64 can be any combination of random-access memory (RAM) and / or read-only memory (ROM). The memory circuitry 64 also comprises non- transitory persistent storage, which, for example, can be any single one or combination of magnetic memory, optical memory, solid-state memory or even remotely mounted memory.

[0084] A data memory 66 is also provided for reading and / or storing data during execution of software instructions in the processing circuitry 60. The data memory 66 can be any combination of RAM and / or ROM.

[0085] The lockdown controller 10 further comprises an I / O interface 62 for communicating with external and / or internal entities. The I / O interface 62 can e.g. comprise a BLE transceiver for communication with one or more electronic locks. Additionally, the lockdown controller 10 comprises a transceiver for communicating with the server 6.

[0086] Other components of the lockdown controller 10 are omitted in order not to obscure the concepts presented herein.

[0087] Fig 6 shows one example of a computer program product 90 comprising computer readable means. On this computer readable means, a computer program 91 can be stored in a non-transitory memory. The computer program can cause processing circuitry to execute a method according to embodiments described herein. In this example, the computer program product 90 is in the form of a removable solid-state memory, e.g. a Universal Serial Bus (USB) drive. As explained above, the computer program product could also be embodied in a memory of a device, such as the computer program product 64 of Fig 5. While the computer program 91 is here schematically shown as a section of the removable solid-state memory, the computer program can be stored in any way which is suitable for the computer program product, such as another type of removable solid-state memory, or an optical disc, such as a CD (compact disc), a DVD (digital versatile disc) or a Blu-Ray disc.

[0088] The aspects of the present disclosure have mainly been described above with reference to a few embodiments. However, as is readily appreciated by a person skilled in the art, other embodiments than the ones disclosed above are equally possible within the scope of the invention, as defined by the appended patent claims. Thus, while various aspects and embodiments have been disclosed herein, other aspects and embodiments will be apparent to those skilled in the art. The various aspects and embodiments disclosed herein are for purposes of illustration and are not intended to be limiting, with the true scope being indicated by the following claims.

Claims

CLAIMS1. A method for performing a lockdown for locking a plurality of electronic locks (3a- e) in a facility (8) using a wireless communication protocol, the method being performed by a lockdown controller (10), the method comprising: transmitting (42) a synchronised lockdown broadcast signal (20) comprising a lock command to the plurality of electronic locks (3a-e), wherein the synchronised lockdown broadcast signal is transmitted on a schedule that both the transmitter and the plurality of electronic locks are aware of; and receiving (44) a plurality of unicast status signals (2ia-b), wherein each unicast status signal confirms that a particular electronic lock of the plurality of electronic locks (3a-e) has been locked.

2. The method according to claim 1, further comprising: allocating (41) respective response slots for each one of the electronic locks (3a-e) for transmitting unicast signals to the lockdown controller (10).

3. The method according to claim 1 or 2, further comprising: receiving (43) a plurality of acknowledgement signals, wherein each acknowledgement signal confirms that a particular electronic lock of the plurality of electronic locks (3a-e) has received the synchronised broadcast signal (20).

4. The method according to any one of the preceding claims, further comprising: repeating the method, based on all electronic locks of a list of electronic locks of the facility not having confirmed that they are locked, until unicast status signals (2ia-b) confirming locked status have been received from all electronic locks (3a-e) forming part of the list.

5. The method according to any one of the preceding claims, further comprising: receiving (46) a unicast access request signal (22) from an electronic lock (3a-e); and transmitting (48) a unicast access decision signal (23) to the electronic lock that transmitted the access request.

6. The method according to any one of the preceding claims, further comprising: transmitting (50) in a synchronised unlock broadcast signal (20’), a remote unlock command to unlock a particular electronic lock (3a-e) of the plurality of electronic locks.

7. The method according to any one of the preceding claims, further comprising: broadcasting (40) synchronisation information, to enable an electronic lock receiving the synchronisation information to subsequently receive the synchronised lockdown broadcast signal (20).

8. The method according to any one of the preceding claims, wherein the wireless communication protocol employs channel hopping.

9. The method according to any one of the preceding claims, wherein the wireless communication protocol is BLE PAwR, Bluetooth Low Energy Periodic Advertising with Responses as specified in Bluetooth Core Specification version 5.4 or later.

10. A lockdown controller (10) for performing a lockdown for locking a plurality of electronic locks (3a-e) in a facility (8) using a wireless communication protocol, the lockdown controller (10) comprising: processing circuitry (60); and memory circuitry (64) storing instructions (67) that, when executed by the processing circuitry, cause the lockdown controller (10) to: transmit a synchronised lockdown broadcast signal (20) comprising a lock command to the plurality of electronic locks (3a-e), wherein the synchronised lockdown broadcast signal is transmitted on a schedule that both the transmitter and the plurality of electronic locks are aware of; and receive a plurality of unicast status signals (2ia-b), wherein each unicast status signal confirms that a particular electronic lock of the plurality of electronic locks (3a-e) has been locked.

11. A computer program (67, 91) for performing a lockdown for locking a plurality of electronic locks (3a-e) in a facility (8) using a wireless communication protocol, the computer program comprising computer program code which, when executed on a lockdown controller (10) causes the lockdown controller (10) to: transmit a synchronised lockdown broadcast signal (20) comprising a lock command to the plurality of electronic locks (3a-e), wherein the synchronised lockdownbroadcast signal is transmitted on a schedule that both the transmitter and the plurality of electronic locks are aware of; and receive a plurality of unicast status signals (2ia-b), wherein each unicast status signal confirms that a particular electronic lock of the plurality of electronic locks (3a-e) has been locked.

12. A computer program product (64, 90) comprising a computer program according to claim 11 and a computer readable means comprising non-transitory memory in which the computer program is stored.

Images