Universal Mobile Credential Tokens for Contactless Lock Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current access control systems require active physical interaction with credentials, such as swiping or tapping, which can be inconvenient and may not be suitable for emergency situations.
Innovation Solution
A universal credential system using CBOR web tokens, generated by a cloud system, that includes group tags and cryptographic signatures, allowing secure access to electronic locks without physical interaction, with options for group-based or unique token access, and supporting backward compatibility.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If physical credential interaction (swiping, tapping) is required for access control, then security verification is ensured, but user convenience is reduced and emergency access is hindered
Solution Approach 1:
The patent replaces the mechanical credential interaction system (swiping, tapping physical cards or tokens) with a contactless wireless communication system. The mobile device communicates with the electronic lock through wireless signals, eliminating the need for physical contact while maintaining security verification through cryptographic authentication protocols.
Solution Approach 2:
The patent introduces a cloud-based access control system as an intermediary between the credential (mobile device) and the electronic lock. The cloud system issues digital tokens that contain cryptographic signatures, acting as a mediator that enables secure verification without requiring direct physical interaction between the user and the lock mechanism.
2Productivity
If physical credentials are used for access control, then authentication is achieved, but access time is increased due to manual presentation requirements
Solution Approach 1:
The patent implements preliminary action by pre-configuring the mobile device with digital access tokens before the user needs to access the secured area. The cloud system issues these tokens in advance, and the mobile device stores them ready for immediate use, eliminating the time required for manual credential presentation and verification during the access process.
Solution Approach 2:
The patent replaces the time-consuming mechanical process of presenting and reading physical credentials with instantaneous wireless communication. The mobile device can transmit its cryptographic token to the electronic lock remotely and immediately, significantly reducing the access time compared to manual credential handling.
3Adaptability or versatility
If traditional access control systems are implemented, then basic security is provided, but system complexity increases due to multiple credential types and manual management
Solution Approach 1:
The patent implements universality by creating a unified digital token system that can serve multiple access control functions through a single mobile device. The cryptographic tokens can be configured for different access levels, time restrictions, and location-based controls, replacing the need for multiple specialized physical credentials (key cards, tokens, biometric devices) with one versatile digital solution.
Solution Approach 2:
The cloud-based access control system acts as a central intermediary that manages all credential issuance, validation, and revocation. This centralized management simplifies the overall system architecture by consolidating credential management functions, reducing the complexity of distributing and managing multiple types of physical credentials across different locations and users.
Data Source
AI summary
A method for leveraging a universal credential in an access control system according to one embodiment includes generating, by a cloud system, a CBOR web token for user access to at least one electronic lock, wherein the CBOR web token includes a group tag associated with a set of access rights for a group of users and a cryptographic signature, transmitting the CBOR web token to a user mobile device, receiving, by a first electronic lock, the CBOR web token from the user mobile device for access to a passageway secured by the first electronic lock, verifying an authenticity of the cryptographic signature of the CBOR web token and that the group tag of the CBOR web token is associated with a group authorized to access the passageway secured by the first electronic lock, and unlocking a lock mechanism in response to the verifications.