Mobile Access Credentials for Secure Offline Wireless Entry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems require active physical interaction with a credential and reader device for access, limiting convenience and efficiency.
Innovation Solution
A wireless access credential system using asymmetric and symmetric cryptographic keys enables secure, wireless authentication and access control through a mobile device, allowing multiple simultaneous connections and offline access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If physical interaction with credential and reader device is required for access control, then security is maintained through active user action, but convenience and efficiency are reduced
Solution Approach 1:
The patent replaces the mechanical physical interaction system (swiping, tapping, or pressing credentials against readers) with a wireless electromagnetic field-based authentication system. Mobile devices use wireless communication protocols to transmit authentication credentials to access control readers, eliminating the need for physical contact while maintaining security through cryptographic verification methods.
Solution Approach 2:
The patent introduces wireless communication signals as an intermediary between the user's mobile device and the access control system. Instead of direct physical interaction, the authentication process is mediated through wireless transmission of encrypted credential data, allowing users to gain access by simply presenting their mobile device near the reader without physical manipulation.
2Ease of operation
If wireless authentication is implemented without cryptographic security measures, then convenience is improved, but security is compromised
Solution Approach 1:
The patent employs asymmetric (public-private key) cryptography to create an asymmetric security model where the mobile device holds a private key for signing authentication requests, while the access control system holds the corresponding public key for verification. This asymmetric approach enables secure wireless authentication without requiring the system to know or store the user's private credentials, maintaining both convenience and security.
Solution Approach 2:
The patent implements preliminary cryptographic key pair generation and credential provisioning before the actual authentication process. Users undergo a setup phase where cryptographic key pairs are generated and securely stored in their mobile devices, and their public keys are registered with the access control system. This preliminary action ensures that subsequent wireless authentication transactions can proceed securely without real-time cryptographic computation during the actual access request.
3Productivity
If multiple simultaneous connections are supported, then productivity and efficiency are improved, but device complexity increases
Solution Approach 1:
The patent segments the authentication process into independent, stateless transaction units. Each wireless authentication request from a mobile device is processed as an independent cryptographic verification operation, allowing the access control system to handle multiple simultaneous connections from different users without maintaining complex session states. This segmentation enables parallel processing of authentication requests, improving throughput while keeping individual transaction logic simple.
Data Source
AI summary
An access control system and methods according to at least one embodiment leverage wireless access credentials to allow a user to securely gain access to a secured area using his or her mobile device. As such, a credentialed mobile device may permit access to the secured area without requiring a real-time connection to a credential management system and/or an administrative system.