Communicating with an electronic lock by emulating a contactless smartcard

Abstract

It is provided a method for communicating with an electronic lock (4). The method comprises: establishing (40) a communication channel (10) with the electronic lock (4) based on inductive coupling, wherein the lock communication device (2) emulates a contactless smartcard; receiving (42) a read request (20) from the electronic lock over the communication channel; transmitting (44) a read response to the electronic lock over the communication channel, the read response comprising a command; and repeating (48), for at least one more iteration, the receiving (42) a read request and transmitting (44) a read response for a plurality of commands. In at least one of the iterations, the read response comprises an indicator that the electronic lock may write data back, upon which the at least one iteration also comprises: receiving (46) command response data over the communication channel, the command response data being based on the command of the read response.

Description

COMMUNICATING WITH AN ELECTRONIC LOCKTECHNICAL FIELD

[0001] The present disclosure relates to the field of electronic locks and in particular to a way of communicating with an electronic lock.BACKGROUND

[0002] Electronic locks have become a cornerstone in modern access control systems, being deployed across commercial, residential, and industrial environments. These locks provide enhanced security and convenience by replacing traditional mechanical keys with digital credentials and access rights. Traditionally, communication with electronic locks for purposes such as monitoring, configuration, or maintenance has been facilitated through either a separate configuration device or an online connection to a central server.

[0003] The separate configuration devices have been employed, designed specifically to interface with electronic locks via wired communication. These devices typically connect directly to the lock to read or write data, perform diagnostics, or update the data or software in the lock. This approach requires physical access to each lock by maintenance personnel, which can be labour-intensive and time-consuming, particularly in large-scale deployments.

[0004] Alternatively, electronic locks have been equipped with online capabilities, allowing them to communicate with a central server via a network connection. This online communication enables centralized control, where the server can remotely monitor, configure, and manage multiple locks across different locations. However, this solution relies on continuous network availability and robust cybersecurity measures to prevent unauthorized access or data breaches. Moreover, the infrastructure required to support online communication, such as network cabling and secure servers, can be costly and complex to implement, particularly in existing buildings not originally designed with such systems in mind.SUMMARY

[0005] One object is to improve how data is read and stored in electronic locks.

[0006] According to a first aspect, it is provided a method for communicating with an electronic lock, the method being performed in a lock communication device. The method comprises: establishing a communication channel with the electronic lock based on inductive coupling, wherein the lock communication device emulates, for the electronic lock, a contactless smartcard; receiving a read request from the electronic lock over the communication channel; transmitting a read response to the electronic lock over the communication channel, the read response comprising a command; and repeating, for at least one more iteration, the receiving a read request and transmitting a read response for a plurality of commands. In at least one of the iterations, the read response comprises an indicator that the electronic lock may write data back, upon which the at least one iteration also comprises: receiving command response data over the communication channel, the command response data being based on the command of the read response.

[0007] The method may further comprise: transmitting lock data to a server, the lock data being based on at least one command response data.

[0008] In the last iteration of a communication session between the lock communication device and the electronic lock, the command may indicate to the lock that the lock communication device intends to transmit no more commands.

[0009] At least one command may comprise a command to the electronic lock to exchange one or more cryptographic keys used by the electronic lock in access control.

[0010] The command to exchange one or more cryptographic keys may be preceded by a command to check what cryptographic keys the electronic lock employs, and wherein the command to exchange one or more cryptographic keys is transmitted based on the currently employed one or more cryptographic keys being outdated.

[0011] At least one command may comprise a command to the electronic lock to be in an unlocked state for a specified time period.

[0012] The method may further comprise: authenticating a user, prior to the establishing a communication channel.

[0013] The read request may comprises an identifier of the electronic lock. In this case, the method further comprises: obtain an access right from a server, wherein the access right for the user is applicable for the electronic lock; wherein at least one command is a command to unlock the electronic lock, based on the obtained access right.

[0014] In each iteration of the repeating, the lock communication device may emulate a contactless smartcard with the same identity, but with a different command.

[0015] The communication channel may comply with DESFire.

[0016] According to a second aspect, it is provided a lock communication device for communicating with an electronic lock. The lock communication device comprises: processing circuitry; and memory circuitry storing instructions that, when executed by the processing circuitry, cause the lock communication device to: establish a communication channel with the electronic lock based on inductive coupling, wherein the lock communication device emulates, for the electronic lock, a contactless smartcard; receive a read request from the electronic lock over the communication channel; transmit a read response to the electronic lock over the communication channel, the read response comprising a command; and repeat, for at least one more iteration, the receiving a read request and transmitting a read response for a plurality of commands. In at least one of the iterations, the read response comprises an indicator that the electronic lock may write data back, upon which for at least one iteration, the memory circuitry stores instructions that, when executed by the processing circuitry, cause the lock communication device to: receive command response data over the communication channel, the command response data being based on the command of the read response.

[0017] According to a third aspect, it is provided a computer program for communicating with an electronic lock, the computer program comprising computer program code which, when executed on a lock communication device, causes the userdevice to causes the lock communication device to: establish a communication channel with the electronic lock based on inductive coupling, wherein the lock communication device emulates, for the electronic lock, a contactless smartcard; receive a read request from the electronic lock over the communication channel; transmit a read response to the electronic lock over the communication channel, the read response comprising a command; and repeat, for at least one more iteration, the receiving a read request and transmitting a read response for a plurality of commands. In at least one of the iterations, the read response comprises an indicator that the electronic lock may write data back, upon which for at least one iteration, the computer program comprising computer program code which, when executed on the lock communication device, cause the user device to causes the lock communication device to: receive command response data over the communication channel, the command response data being based on the command of the read response.

[0018] According to a fourth aspect, it is provided a computer program product comprising a computer program according to the third aspect and a computer readable means comprising non-transitory memory in which the computer program is stored.

[0019] Generally, all terms used in the claims are to be interpreted according to their ordinary meaning in the technical field, unless explicitly defined otherwise herein. All references to "a / an / the element, apparatus, component, means, step, etc." are to be interpreted openly as referring to at least one instance of the element, apparatus, component, means, step, etc., unless explicitly stated otherwise. The steps of any method disclosed herein do not have to be performed in the exact order disclosed, unless explicitly stated.BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Aspects and embodiments are now described, by way of example, with reference to the accompanying drawings, in which:

[0021] Fig 1 is a schematic diagram showing an environment in which embodiments presented herein can be applied;

[0022] Fig 2 is a schematic diagram illustrating a communication channel between the lock communication device and the electronic lock of Fig 1;

[0023] Fig 3 is a swimlane diagram illustrating embodiments of methods for communicating with an electronic lock;

[0024] Fig 4 is a schematic diagram illustrating components of the lock communication device of Figs 1-2; and

[0025] Fig 5 shows one example of a computer program product comprising computer readable means.DETAILED DESCRIPTION

[0026] The aspects of the present disclosure will now be described more fully hereinafter with reference to the accompanying drawings, in which certain embodiments of the invention are shown. These aspects may, however, be embodied in many different forms and should not be construed as limiting; rather, these embodiments are provided by way of example so that this disclosure will be thorough and complete, and to fully convey the scope of all aspects of invention to those skilled in the art. Like numbers refer to like elements throughout the description.

[0027] According to embodiments presented herein, communication with an electronic lock is achieved by a lock communication device over a communication channel based on inductive coupling. In particular, the lock communication device emulates a contactless smart card (such as NFC or RFID). This enables the lock communication device to send commands to the electronic lock both to read and write data without requiring that the electronic lock supports Bluetooth, Wi-Fi, etc.; it is sufficient that the lock supports communication with contactless smartcards. This is beneficial since the prevalence of support for contactless smartcards is much greater in electronic locks than support for Bluetooth or Wi-Fi. Over the inductive coupling, a sequence of commands can be transmitted to enable a convenient way to perform several actions with the electronic lock in a smooth and quick way. In this way, the commands can be sent in conjunction with an conventional access request, when the lock communication device is implemented in a user device. This exploits theconventional communication of a user device to gain access, to also perform reads and writes to the electronic lock, e.g. for maintenance or monitoring purposes. These reads and writes are not noticeable for the user, who simply presents the user device in a conventional manner to gain access. Still, this procedure allows a system operator to conveniently both read and write data to the electronic lock.

[0028] Fig 1 is a schematic diagram showing an environment in which embodiments presented herein can be applied. Access to a physical space 6 is restricted by a physical door 15. The door 15 is selectively controllable to be in a locked state or an unlocked state. The door 15 is to be interpreted widely as any openable barrier, and could be in the form of a window, gate, hatch, cabinet door, drawer, etc. The door 15 is provided in a surrounding structure 8 (being a wall, fence, ceiling, floor, etc.) and is provided between the restricted physical space 6 and an accessible physical space 7. It is to be noted that the accessible physical space 7 can be a restricted physical space in itself, but in relation to this door 15, the accessible physical space 7 is accessible.

[0029] In order to unlock the door 15, an electronic lock 4 is provided. It is to be noted that the lock 4 can be provided in the door 15 (as shown) or in the surrounding structure 8 (not shown).

[0030] A user 5 is in the vicinity of the electronic lock 4. The user 5 carries a portable lock communication device 2. The lock communication device 2 is implemented using any suitable device which is portable by a user, and which can be used to communicate with the electronic lock 4 based on inductive coupling. The lock communication device 2 can optionally be used by the electronic lock 4 to evaluate whether to grant access or not. For instance, the lock communication device 2 can be implemented as a smartphone, wearable device, etc.

[0031] The lock communication device 2 optionally comprises communication capabilities to connect via a communication network 9 to a server 3 of an electronic access control system. The communication network 9 can be a wide area network, such as the Internet, to which the electronic lock 4 and / or the lock communication device 2 can connect e.g. via Wi-Fi (e.g. any of the IEEE 802. nx standards) or a cellular network,e.g. next generation mobile networks (fifth generation, 5G), sixth generation networks (6G), LTE (Long Term Evolution), etc.

[0032] The server 3 can be used to manage one or more access rights for one or more electronic locks 4. The server 3 can also keep track of the electronic locks 4, in terms of their state, the cryptographic keys that they use, access logs, battery state, etc.

[0033] In the prior art, separate configuration devices have been used to read and write data in the electronic locks 4. Such devices have communicated with the electronic locks 4 using wire-based communication, which is inconvenient and unreliable.Alternatively, the electronic locks 4 have been online locks, where the server 3 can read and write data directly to the electronic locks 4, but that requires a much more elaborate and complicated infrastructure than locks that do not have ability to connect to the communication network 9.

[0034] In contrast, according to embodiments presented herein, the lock communication device 2 and the electronic lock 4 communicate over a communication channel based on inductive coupling. The lock communication device 2 emulates a contactless smartcard to enable the lock communication device 2 to transmit a sequence of commands to the electronic lock 4.

[0035] Fig 2 is a schematic diagram illustrating a communication channel between the lock communication device 2 and the electronic lock 4 of Fig 1.

[0036] The lock communication device 2 communicates with the electronic lock 4 over a communication channel 10 which is based on inductive coupling. For instance, the communication channel 10 can be based on near-field communication (NFC) or radio frequency identification (RFID). The lock communication device 2 emulates, as seen from the perspective of the electronic lock 4, a contactless smartcard. In this way, the electronic lock 4 does not need to implement any radio-based interfaces (such as Bluetooth or Wi-Fi) nor any wired interfaces for the lock communication device 2 to able to read and write data to the electronic lock 4.

[0037] Fig 3 is a swimlane diagram illustrating embodiments of methods for communicating with an electronic lock. The swimlane diagram can be considered tocomprise a flow chart for methods by the lock communication device 2 on the left and a flow chart for methods by the electronic lock 4 on the right. Communication (that occurs over the communication channel 10) between the lock communication device 2 and the electronic lock 4 is also shown. The read and write signals between the electronic lock 4 and the lock communication device 2 can comply with the ISO-7816 standard.

[0038] In an optional “authenticate” step 38, the lock communication device 2 authenticates a user 5. When performed, this authentication can occur prior to establishing a communication channel between the lock communication device 2 and the electronic lock 4. The authentication can occur using any suitable method, e.g. using a passcode or biometrics, such as face scanning or fingerprint scanning. The authentication ensures that the user of the lock communication device 2 is known, when communicating with the electronic lock 4.

[0039] Optionally, the user interacts with the lock communication device 2 to select what action to perform. For instance, the user can select to obtain logs and firmware version from the electronic lock. Alternatively, there is no user interaction, and the sequence of commands is determined by a server.

[0040] In an “establish communication channel” step 40, the lock communication device 2 establishes a communication channel 10 with the electronic lock 4. As mentioned above, the communication channel 10 is based on inductive coupling. On the communication channel 10, the lock communication device 2 emulates, for the electronic lock 4, a contactless smartcard. On the electronic lock 4 side, there is a corresponding “establish communication channel” step 140. Optionally, the communication channel 10 complies with DESFire, providing a security framework, including encryption, for the communication between the lock communication device 2 and the electronic lock 4. Anti-collision and authentication can occur according to the ISO 14443 standard.

[0041] Once the communication channel 10 is established, the electronic lock 4 generates and transmits a read request 20 in the “transmit read request” step 142 to the lock communication device 2. The read request 20 is what is traditionally used by areader (such as the electronic lock 4) to obtain the identity of a contactless smartcard, and is thus is in line with the contactless smartcard interface.

[0042] In a “receive read request” step 42, the lock communication device 2 receives the read request 20 from the electronic lock 2 over the communication channel 10. The read request 20 may comprise an identifier of the electronic lock.

[0043] In an optional “receive access right(s)” step 47, the lock communication device 2 receives (one or more) access rights from a server 3. The access rights for the user are applicable for the electronic lock 4, and can be based on the lock communication device 2 transmitting a request for access rights over the communication network 9 to the server, wherein the request comprises the identifier of the electronic lock 4. In other words, when this step is performed, the lock communication device 2 might not have access rights for the electronic lock 4 until it obtains the identity of the electronic lock 4 in the read request 20. The access right(s) are thus received on demand from the server, which reduces the risk of e.g. preloaded access rights, falling into the hands of an attacker that wishes to gain access to the restricted space 6 secured by the electronic lock 4. Optionally, the access right(s) are only provided by the server based on the user being authenticated with the lock communication device 2, as described with reference to the “authenticate” step above.

[0044] In a transmit “read response” step 44, the lock communication device 2 transmits a read response to the electronic lock over the communication channel. The read response comprises a command. It is this command that allows the lock communication device 2 to read data from the electronic lock 4 or to write data to the electronic lock 4. It is to be noted that each command can be a composite command, comprising a plurality of individual commands, e.g. expressed as a macro that the electronic lock can interpret. However, there is a limit to how many individual commands can form part of a composite command, especially due to how much data that can be written back from the electronic lock 4 to the lock communication device 2 (in the command response data described below) using the interface for the contactless smartcard.

[0045] The command can be used for a wide range of functions, such as status monitoring of the electronic lock 4, key management, access control, and status monitoring. This method eliminates the need for wired connections, thereby enhancing reliability, simplifying installation, and providing a more convenient user experience.

[0046] In one embodiment, at least one command (i.e. in at least one iteration of a sequence of commands) is a command to the electronic lock 4 to exchange one or more cryptographic keys used by the electronic lock 4 in access control. Optionally, the command to exchange one or more cryptographic keys is preceded (e.g. in a preceding iteration) by a command to check what cryptographic keys the electronic lock employs, and wherein the command to exchange one or more cryptographic keys is transmitted based on the currently employed one or more cryptographic keys being outdated. In this way, the one or more cryptographic keys are only exchanged when needed.

[0047] In one embodiment, at least one command is a command to the electronic lock 4 to be in an unlocked state for a specified time period. Consider for instance a conference room, that may need to stay unlocked during a time period between 9 a.m. and 17 p.m. to allow participants to freely enter the conference room during this time period.

[0048] In one embodiment, when the “receive access right(s)” step 47 is performed, the at least one command is a command to unlock the electronic lock, based on the obtained access right. In this way, a form of online access control can be achieved based on the inductive coupling of the communication channel 10, even though the electronic lock 4 might not have any other communication capabilities. It is to be noted that the command to unlock the electronic lock 4 does not need to be included in the read response 22 in the same iteration as when the access right(s) are received, as long as the access right(s) have been received at some point prior to the command to unlock being included in the read response 22.

[0049] When the method is repeated, in the last iteration of a communication session between the lock communication device 2 and the electronic lock 4, the command indicates to the lock that the lock communication device 2 intends to transmit no more commands.

[0050] In at least one of the iterations, the read response 22 comprises an indicator that the electronic lock may write data back. This is set when the lock communication device 2 requests data from the electronic lock 4.

[0051] In an “act on command” step 145, the electronic lock 4 performs an action based on the command in the read response 22.

[0052] For instance, if the command is related to reading data from the electronic lock 4, the read response 22 comprises the indication that the electronic lock 4 may write data back, i.e. the command requests data in some form. The data requested can e.g. be a voltage level of a battery or a percentage charge (derived from the voltage level), indicating a charge level of the battery in the ssq. In one embodiment, the data requested can be the last n entries of an access log of the electronic lock 4, where n is an integer number. In one embodiment, the data requested can be a version indicator of firmware that is installed in the electronic lock 4. In one embodiment, the data requested is an indication of what cryptographic keys the electronic lock 4 employs.

[0053] When the command indicates to the lock that the lock communication device 2 intends to transmit no more commands, the electronic lock 4 can tear down the communication channel 10, after which a new communication channel needs to be established if the lock communication device 2 wants to communicate with the electronic lock 4.

[0054] Once the action is performed based on the command in the read response 22, the electronic lock optionally prepares a command response 24. In one embodiment, the command response is only prepared if the read response 22 indicated that the electronic lock 4 may write data back. For instance, in order to communicate requested data to the lock communication device 2, the electronic lock 4 includes the requested data in the command response 24. Optionally, even when no explicit data is requested by the command, the electronic lock 4 can write a result of the action requested by the command in the command response 24. For instance, the result can be that the actions of the command were performed successfully, or that this resulted in an error code.

[0055] Once generated, the electronic lock 4 transmits the command response 24 in a “transmit command response” step 146.

[0056] In a “receive command response data” step 46, the lock communication device 2 receives the command response 24 comprising the command response data over the communication channel. As explained above, the command response data is based on the command of the read response. For instance, the command response data can contain the requested data. There can be an indication from the electronic lock 4 of how much data will be written by the electronic lock 4 to the emulated smartcard, i.e. to the lock communication device 2. Once all data has been written, the method can proceed to the conditional “repeat” step 48.

[0057] In a conditional “repeat” step 48, the lock communication device 2 determines whether to perform another iteration of communication between the lock communication device 2 and the electronic lock 4 in the same communication session, i.e. over the communication channel 10 that was established in the “establish communication channel” step 40. For instance, the lock communication device 2 can be configured to perform a sequence of commands, and as long as all of the commands in the sequence of commands have not been transmitted to the electronic lock 4, another iteration occurs for a new command in the sequence of commands. Additionally, after the sequence of commands have been processed, a last iteration can occur to send a final command to the electronic lock 4, informing the electronic lock 4 that no more commands will be transmitted from the lock communication device 2 to the electronic lock 4. In each iteration of the repeating, the lock communication device can emulate a contactless smartcard with the same identity, but with a different command.

[0058] If the lock communication device 2 determines to perform another iteration, the method returns to the “receive read request” step 42. Otherwise, the method proceeds to an optional “transmit lock data to server” step 50, or, when this step is not performed, the method ends.

[0059] In a conditional “repeat” step 148, the electronic lock 4 determines whether to perform another iteration of communication between the electronic lock 4 and the lock communication device 2 in the same communication session. In one embodiment,the electronic lock 4 determines to repeat when the command response 24 (transmitted in the “transmit command response” step 146) is a write command. Whether the command response 24 is a write command or read command can be controlled by the lock communication device 2 in the read response 22. If the electronic lock 4 determines to repeat, the method returns to the “transmit read request” step 142. Otherwise, the method ends.

[0060] In the optional “transmit lock data to server” step 50, the lock communication device 2 transmits lock data to a server 3, the lock data being based on at least one command response data. For instance the requested data received from the electronic lock 4 based on the sequence of commands can be forwarded to the server 3.

[0061] A scenario will now be described to illustrate the usefulness of embodiments presented herein. Consider the case of a hotel having a number of guest rooms. Housekeepers continuously traverse the hotel and the guest rooms. In order to gain access to the guest rooms, the housekeepers have a smartphone, corresponding to the lock communication device 2 described above. The smartphone is configured to not only communicate with the electronic locks of the guest rooms to gain access, but also to monitor the state of the electronic locks. From the perspective of the housekeeper, it is a simple matter of presenting the smartphone in close proximity to the electronic locks to gain access to the room, as done in the prior art. However, according to embodiments presented herein, when this occurs, data from the lock is requested and obtained. The data can contain information about the battery charge, the firmware version, the last few entries of the access log, etc. Once all of the commands have been processed and the data has been received from the electronic lock, the smartphone sends all of this data to a central server. When the same process is performed by all housekeepers in the hotel, a full picture of the status of the electronic logs is achieved. Similarly, the movement of the housekeepers into all of the guest rooms can be used to update data in the electronic locks of the hotel. In this way, an up-to-date picture of the state of all of the electronic locks in the hotel is achieved even though each lock might not have the ability to communicate directly with the server. Furthermore, this is all achieved over a contactless interface, which practically all electronic locks support. This greatly reducesthe need for specific maintenance personnel to read and write data in the electronic locks, saving significant costs for the hotel.

[0062] Fig 4 is a schematic diagram illustrating components of the lock communication device 2 of Figs 1-2. Processing circuitry 60 is provided using any combination of one or more of a suitable central processing unit (CPU), graphics processing unit (GPU), multiprocessor, neural processing unit (NPU), microcontroller, digital signal processor (DSP), etc., capable of executing software instructions 67 stored in memory circuitry 64, which can thus be a computer program product. The processing circuitry 60 could alternatively be implemented using an application specific integrated circuit (ASIC), field programmable gate array (FPGA), etc. The processing circuitry 60 can be configured to execute the method described with reference to Fig 3 above.

[0063] The memory circuitry 64 can be any combination of random-access memory (RAM) and / or read-only memory (ROM). The memory circuitry 64 also comprises non- transitory persistent storage, which, for example, can be any single one or combination of magnetic memory, optical memory, solid-state memory or even remotely mounted memory.

[0064] A data memory 66 is also provided for reading and / or storing data during execution of software instructions in the processing circuitry 60. The data memory 66 can be any combination of RAM and / or ROM.

[0065] An I / O interface 62 is provided for communicating over the communication network 9 with other entities using wireless or wired communication. Examples of wireless communication are Wi-Fi, Bluetooth, Bluetooth Low Energy, and / or a cellular network, complying with any one or a combination of sixth generation (6G) mobile networks, next generation mobile networks (fifth generation, 5G), LTE (Long Term Evolution), or any other current or future wireless network, as long as the principles described hereinafter are applicable. Examples of wired communication are e.g. Ethernet, optical fibres, etc. Furthermore, the I / O interface 62 supports communication with the electronic lock 4 based on inductive coupling, e.g. NFC and / or RFID.

[0066] Other components of the lock communication device 2 are omitted in order not to obscure the concepts presented herein.

[0067] Fig 5 shows one example of a computer program product 90 comprising computer readable means. On this computer readable means, a computer program 91 can be stored in a non-transitory memory. The computer program can cause processing circuitry to execute a method according to embodiments described herein. In this example, the computer program product 90 is in the form of a removable solid-state memory, e.g. a Universal Serial Bus (USB) drive. As explained above, the computer program product could also be embodied in a memory of a device, such as the computer program product 64 of Fig 4. While the computer program 91 is here schematically shown as a section of the removable solid-state memory, the computer program can be stored in any way which is suitable for the computer program product, such as another type of removable solid-state memory, or an optical disc, such as a CD (compact disc), a DVD (digital versatile disc) or a Blu-Ray disc.

[0068] The aspects of the present disclosure have mainly been described above with reference to a few embodiments. However, as is readily appreciated by a person skilled in the art, other embodiments than the ones disclosed above are equally possible within the scope of the invention, as defined by the appended patent claims. Thus, while various aspects and embodiments have been disclosed herein, other aspects and embodiments will be apparent to those skilled in the art. The various aspects and embodiments disclosed herein are for purposes of illustration and are not intended to be limiting, with the true scope being indicated by the following claims.

Claims

CLAIMS1. A method for communicating with an electronic lock (4), the method being performed in a lock communication device (2), the method comprising: establishing (40) a communication channel (10) with the electronic lock (4) based on inductive coupling, wherein the lock communication device (2) emulates, for the electronic lock (4), a contactless smartcard; receiving (42) a read request (20) from the electronic lock over the communication channel; transmitting (44) a read response to the electronic lock over the communication channel, the read response comprising a command; and repeating (48), for at least one more iteration, the receiving (42) a read request and transmitting (44) a read response for a plurality of commands; wherein, in at least one of the iterations, the read response comprises an indicator that the electronic lock may write data back, upon which the at least one iteration also comprises: receiving (46) command response data over the communication channel, the command response data being based on the command of the read response.

2. The method according to claim 1, further comprising: transmitting (50) lock data to a server (3), the lock data being based on at least one command response data.

3. The method according to claim 1 or 2, wherein in the last iteration of a communication session between the lock communication device (2) and the electronic lock (4), the command indicates to the lock that the lock communication device (2) intends to transmit no more commands.

4. The method according to any one of the preceding claims, wherein at least one command comprises a command to the electronic lock (4) to exchange one or more cryptographic keys used by the electronic lock (4) in access control.

5. The method according to claim 4, wherein the command to exchange one or more cryptographic keys is preceded by a command to check what cryptographic keys the electronic lock employs, and wherein the command to exchange one or morecryptographic keys is transmitted based on the currently employed one or more cryptographic keys being outdated.

6. The method according to any one of the preceding claims, wherein at least one command comprises a command to the electronic lock (4) to be in an unlocked state for a specified time period.

7. The method according to any one of the preceding claims, further comprising: authenticating (38) a user (5), prior to the establishing (40) a communication channel.

8. The method according to any one of the preceding claims, wherein the read request (20) comprises an identifier of the electronic lock, and wherein the method further comprises: obtain (47) an access right from a server (3), wherein the access right for the user is applicable for the electronic lock (4); wherein at least one command comprises a command to unlock the electronic lock, based on the obtained access right.

9. The method according to any one of the preceding claims, wherein in each iteration of the repeating, the lock communication device emulates a contactless smartcard with the same identity, but with a different command.

10. The method according to any one of the preceding claims, wherein the communication channel (10) complies with DESFire.

11. A lock communication device (2) for communicating with an electronic lock (4), the lock communication device (2) comprising: processing circuitry (60); and memory circuitry (64) storing instructions (67) that, when executed by the processing circuitry, cause the lock communication device (2) to: establish a communication channel (10) with the electronic lock (4) based on inductive coupling, wherein the lock communication device (2) emulates, for the electronic lock (4), a contactless smartcard; receive a read request (20) from the electronic lock over the communication channel; transmit a read response to the electronic lock over the communication channel,the read response comprising a command; and repeat, for at least one more iteration, the receiving (42) a read request and transmitting (44) a read response for a plurality of commands; wherein, in at least one of the iterations, the read response comprises an indicator that the electronic lock may write data back, upon which for at least one iteration, the memory circuitry (64) stores instructions (67) that, when executed by the processing circuitry, cause the lock communication device (2) to: receive command response data over the communication channel, the command response data being based on the command of the read response.

12. A computer program (67, 91) for communicating with an electronic lock (4), the computer program comprising computer program code which, when executed on a lock communication device, cause the user device (2) to causes the lock communication device (2) to: establish a communication channel (10) with the electronic lock (4) based on inductive coupling, wherein the lock communication device (2) emulates, for the electronic lock (4), a contactless smartcard; receive a read request (20) from the electronic lock over the communication channel; transmit a read response to the electronic lock over the communication channel, the read response comprising a command; and repeat, for at least one more iteration, the receiving (42) a read request and transmitting (44) a read response for a plurality of commands; wherein, in at least one of the iterations, the read response comprises an indicator that the electronic lock may write data back, upon which for at least one iteration, the computer program comprising computer program code which, when executed on the lock communication device, cause the user device (2) to causes the lock communication device (2) to: receive command response data over the communication channel, the command response data being based on the command of the read response.

13. A computer program product (64, 90) comprising a computer program according to claim 12 and a computer readable means comprising non-transitory memory in which the computer program is stored.

Images