Production Facility Access Tokens for Secure Mobile Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for securing access to production facilities lack robust authentication mechanisms, leading to potential unauthorized access and compromised security.

Innovation Solution

A cryptographic authentication system using a first and second key pair for encrypting, decrypting, signing, and verifying data, combined with time-stamped tokens, ensures secure access through a mobile app and backup card, enhancing security by dynamically encrypting and authenticating user identity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If traditional access control systems are used, then access can be controlled, but they require complex infrastructure including access control units, readers, and writers positioned at facility entrances, creating high device complexity and cost

Engineering Contradiction:
Improveaccess control infrastructureVSAvoidaccess control functionality
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent extracts the access control functionality from fixed infrastructure (access control units, readers, writers) and relocates it to mobile devices (smartphones, tablets, computers) carried by users. The access control unit is removed from the facility entrance and embedded in the user's personal device, eliminating the need for dedicated hardware at access points while maintaining secure access control through wireless communication protocols.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent replaces mechanical access control systems (physical readers, writers, and access control units) with wireless communication-based systems. Instead of using physical card readers and writers positioned at facility entrances, the system uses wireless transmission of identification data between mobile devices and the access control unit, eliminating mechanical infrastructure while maintaining access control functionality.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Adaptability or versatility

If multiple identification methods are supported, then versatility is improved, but device complexity and processing requirements increase

Engineering Contradiction:
Improveidentification methodsVSAvoidsystem processing
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements a universal identification system where a single mobile device can perform multiple identification functions (first identification for user authentication, second identification for device authentication) and support multiple access control scenarios (facility access, vehicle access, secure area access). The system handles diverse identification methods through a unified processing architecture that manages complexity centrally while maintaining versatility at the user level.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP4436111B1Method, apparatuses and system for accessing a production facility
Publication Date: 2026.05.20 BKS
  • EP4436111B1 patent drawingFigure 1
  • EP4436111B1 patent drawingFigure 2

AI summary

Computer-implemented methods, devices, and systems for accessing a production facility (109) with a user terminal device (105), comprising the steps of reading (201) data for identification by the terminal device (105) and from a user-specific passive or active transmitting device (104) on which this data is stored, generating (209) a time validity, generating (210) a token (FS) by the user terminal device (105), wherein the token (FS) includes data-based information for identification and information on time validity, receiving (212) the token (FS) by a first computing device (102) and from a second computing device (108), checking (214) whether a data record matching in the information for identification exists in a database (103) and whether the token is within its time validity or not, and allowing (215).that access to the production facility (109) is granted by the second computing facility (108) if the data record matching the identification information exists in the database (103) and the token is within its validity period, and otherwise deny access by the second computing facility (108).