Electronic Key Cryptographic Protection for Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems for locations secured by lock mechanisms face challenges in convenience, security, and cost, particularly due to the need for specialized user mobile devices and the risk of unauthorized key usage or tampering.
Innovation Solution
A method and system that uses an access control management system to generate and manage electronic keys, which are cryptographically protected and communicated between the system and lock control units via user mobile units, allowing secure and flexible access control without requiring strict control over user mobile devices, utilizing standard wireless communication protocols like Bluetooth.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If specialized user mobile devices are used for access control, then security is improved, but device complexity and cost increase
Solution Approach 1:
The patent enables standard mobile devices to perform access control functions through a application rather than requiring specialized hardware. The mobile device's existing capabilities (processor, memory, communication interfaces) are utilized for cryptographic operations and key management, making the system universal and compatible with common devices while maintaining security through software-based cryptographic protection.
Solution Approach 2:
The patent uses cryptographic copies (electronic keys) instead of physical keys or specialized hardware tokens. The electronic key is a data structure that can be stored and transmitted digitally, allowing multiple instances to be distributed securely to authorized users without the risks associated with physical key duplication or loss.
2Ease of operation
If electronic keys are transmitted via user mobile units, then convenience is improved, but risk of unauthorized key usage or tampering increases
Solution Approach 1:
The patent applies cryptographic protection (encryption and digital signatures) to electronic keys before transmission and storage. This preliminary protective measure prevents unauthorized access, tampering, or misuse of the keys during transmission via mobile units, countering potential harmful actions before they can occur.
Solution Approach 2:
The patent introduces cryptographic protocols and authentication mechanisms as intermediaries between the mobile device and the lock control unit. These intermediaries verify the authenticity and integrity of electronic keys, ensuring that only authorized keys are accepted while allowing convenient wireless transmission through the mobile device.
3Reliability
If cryptographic protection is applied to electronic keys, then security is improved, but processing time and computational requirements increase
Solution Approach 1:
The patent performs cryptographic key generation, encryption, and authentication setup in advance during system initialization and key distribution phases. This preliminary cryptographic preparation ensures that during actual access control operations, the computational overhead is minimized, reducing processing time at the moment of door access while maintaining strong security through pre-established cryptographic protections.
Data Source
AI summary
A method of controlling access to a location secured by a lock mechanism. An access control management system (ACMS) administrates electronic keys for multiple locations and users carrying mobile units. A lock mechanism controls the lock mechanism at the location. Each of data records associated with lock control units includes key generation data for generating an electronic key for a corresponding lock control unit. A generated key is communicated from the ACMS to the user mobile unit. The key indicates an access right to the location and has an associated lock control unit identifier. The key is communicated from the user mobile unit to the lock control unit at the location, which authenticates the key and, subject to successful authentication of the key, operates the lock mechanism. The key includes a data item cryptographically protected between the ACMS and the lock control unit using a cryptographic key unknown to the user mobile unit.