Access control system
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current access control systems for parcel boxes lack a satisfactory solution for offline operation while ensuring secure and flexible authorization management for both deliverers and users, particularly in scenarios without a network connection.
Innovation Solution
A method and system where an access control device, powered independently and without a permanent network connection, uses wireless communication (RFID, NFC, Bluetooth) to receive access authorization information from a verification device, enabling secure access control through cryptographic operations with a key pair, allowing for offline operation and reduced power consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Use of energy by stationary object
If the access control device operates offline without network connection, then power consumption is reduced and security is enhanced, but the system loses the ability to perform real-time authorization updates and centralized key management
Solution Approach 1:
The system divides the access control functionality into two independent parts: the access authorization generation device that maintains centralized control and the access control device that operates autonomously offline. Each device has its own cryptographic key pair, allowing the access control device to verify authorizations locally without needing continuous network connection, thus reducing power consumption while maintaining authorization management capability through periodic updates when online.
Solution Approach 2:
The access authorization information is generated and verified in advance using cryptographic operations. The access control device receives authorization information that includes cryptographic verification data, allowing it to independently verify authorizations offline without real-time network connection, enabling preliminary authorization that reduces ongoing power consumption while maintaining security.
2Reliability
If the access control device uses cryptographic operations with key pairs, then security is enhanced, but device complexity increases
Solution Approach 1:
The system extracts the complex cryptographic key generation and management functions to a separate access authorization generation device, while the access control device only needs to store its own key pair and perform verification operations. This separation reduces the cryptographic processing complexity at the access control device while maintaining high security through robust cryptographic operations at the authorization generation device.
Solution Approach 2:
The access control device stores a copy of its public key and verification data locally, eliminating the need for complex real-time cryptographic communication with the authorization server. This local copying of verification data simplifies the device complexity while maintaining security through offline verification capability.
3Ease of operation
If the system uses wireless communication for authorization transfer, then ease of operation is improved, but security risks increase due to potential interception
Solution Approach 1:
The system changes the nature of the transmitted data from sensitive cryptographic keys to already-verified authorization information that includes cryptographic signatures. The wireless communication transfers authorization tokens rather than secret keys, maintaining ease of operation while reducing security risks since the transmitted data cannot be used to compromise the cryptographic system even if intercepted.
Solution Approach 2:
The system accepts that wireless transmission may be intercepted but converts this potential harm into a benefit by designing the authorization information to be useless to interceptors. The cryptographic signatures and verification mechanisms ensure that even if authorization data is captured during wireless transmission, it cannot be forged or misused without the corresponding private keys, thus maintaining security while enabling convenient wireless operation.
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
The disclosure relates, inter alia, to a method for access control, performed by an access control apparatus (4). The method comprises obtaining access authorisation information (B, V) that is communicated to the access control apparatus (4) and that comprises at least one or more access authorisation parameters (B) and first check information (V); using at least the communicated access authorisation parameters (B), the communicated first check information (V) and a second key (S, ST) from a symmetric or asymmetric key pair, which second key is stored in the access control apparatus (4), to perform a first check on whether the communicated first check information (V) has been produced by performing cryptographic operations by means of access authorisation parameters (B) corresponding to the communicated access authorisation parameters (B) using at least one first key (S, ST) from the key pair, and deciding whether access can be granted, necessary conditions for granting access being that the first check delivers a positive result and it is established that at least one predefined set of the communicated access authorisation parameters (B) respectively provides access authorisation with regard to respective reference information that is available in the access control apparatus (4) at least at the time of the first check. The disclosure additionally relates to corresponding methods using an access authorisation generation apparatus (2) and an access authorisation verification apparatus (3), computer programs associated with the methods and a system (1) that comprises these apparatuses.