Lock Administration System with ASP Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electromechanical lock systems require factory programming by manufacturers, limiting user flexibility and security, as locks are often pre-configured with sensitive information, and lack user-friendly programming methods.
Innovation Solution
A lock administration system where the end user can program self-powered locks and keys using an ASP server and client modules, enabling flexible programming without dedicated wired connections, utilizing encrypted data transmission over public networks and cryptographic hash functions for secure authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If locks are factory programmed by manufacturers, then security information is pre-configured and reliable, but user flexibility is limited and programming cannot be performed by end users
Solution Approach 1:
The patent introduces an ASP server as an intermediary between the lock manufacturer and the end user. The ASP server hosts a web-based client that enables end users to program locks remotely without direct physical access to programming interfaces. This intermediary layer maintains security by keeping sensitive programming functions centralized while providing user-friendly access through standard web browsers, thus resolving the contradiction between user flexibility and security integrity.
Solution Approach 2:
The patent replaces traditional mechanical programming interfaces (physical connection required) with a web-based system accessible through standard browsers. This substitution eliminates the need for specialized programming hardware or physical access to the lock, allowing end users to perform programming operations remotely through intuitive graphical interfaces, thereby significantly improving user flexibility while maintaining security through centralized control.
2Ease of operation
If locks store security sensitive information, then authentication is enabled, but security risks increase if locks are delivered in initial state without configuration
Solution Approach 1:
The patent implements preliminary configuration actions through the web-based client system. Before locks are deployed to end users, all necessary security configurations, access rights, and authentication parameters are pre-programmed through the ASP server interface. This preliminary action ensures locks are delivered in a secure, ready-to-use state with appropriate security settings already in place, eliminating the risk of unconfigured locks while maintaining ease of deployment.
Solution Approach 2:
The system enables end users to perform self-service programming and configuration through the web-based client. Users can independently manage their own lock systems, add or remove access rights, and configure security parameters without requiring manufacturer intervention. This self-service capability allows locks to be delivered in an initial state that users can then customize securely, reducing security risks associated with improper configuration.
3Reliability
If dedicated wired connections are used for lock programming, then data transmission is secure, but installation complexity and cost increase
Solution Approach 1:
The patent makes the ASP server system universally accessible through standard web browsers, eliminating the need for dedicated programming hardware or specialized connections. The same web interface that provides secure programming functionality also serves as a user-friendly configuration interface. This multi-functionality allows secure data transmission over existing network infrastructure (including wireless connections) without requiring dedicated wired programming connections, thus reducing installation complexity while maintaining security through encrypted web protocols.
Data Source
Figure 1
Figure 2~5
Figure 3A
AI summary
A lock administration system for self-powered locks is provided. The system comprises an ASP (application service provider) server operationally connected to the Internet and configured to store lock system related information, at least one client module configured to control the generating of shared secrets for encrypting and decrypting, and the generating and the encrypting of lock access data packets using a token, transmit the data packets to the ASP server using public networks, receive an encrypted status packet from the ASP server using public networks, control the decrypting of the status packet and send information regarding the decrypt status packet to the ASP server using public networks and at least one lock configured to receive data packets from the ASP server via public networks, decrypt the data packets and send an encrypted status packet to the ASP server using public networks.