Offline Access Control Using Local Encrypted Credentials

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing access control systems require internet or long-distance connections and transmission of personal data to secure access, which can be vulnerable to data breaches and costly.

Innovation Solution

A method involving symmetric encryption key pairs and short-range communication between portable devices and access controllers, enabling secure access control without internet or long-distance connections, using a computer server to initialize devices with private and shared encryption keys, unique identifiers, and access rights stored locally on devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If internet or long-distance connection is used for access control, then centralized management and data transmission are enabled, but security vulnerabilities and data breach risks increase

Engineering Contradiction:

Improveaccess control securityVSAvoiddata breach vulnerability

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system divides the access control functionality into distributed access controllers operating independently without requiring centralized server communication. Each controller maintains local authentication capabilities, segmenting the system to eliminate single points of failure and reduce security risks associated with centralized data storage and transmission.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Authentication credentials and encryption keys are pre-configured in both the access controller and the portable device before the access event occurs. This preliminary configuration enables immediate local authentication without requiring real-time network communication, thereby maintaining security while enabling offline operation.

Inventive Principle:

Principle #10Preliminary action

2Ease of operation

If personal data is transmitted to access controllers, then user identification and access authorization are enabled, but privacy risks and data exposure increase

Engineering Contradiction:

Improveaccess authorizationVSAvoidpersonal data privacy

Core Design Contradiction:

Ease of operationVSLoss of information

Solution Approach 1:

The system extracts and processes only essential authentication information locally at the access controller without requiring transmission of complete personal data. The portable device contains encrypted credentials that are verified locally, extracting only the necessary authentication proof while leaving sensitive personal information stored securely in the user's device.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

Encrypted authentication credentials serve as an intermediary between the user's personal data and the access controller. Instead of transmitting personal data directly, the system uses encrypted tokens that mediate the authentication process, allowing verification without exposing underlying personal information.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Adaptability or versatility

If remote access control centers are used, then centralized monitoring and management are achieved, but system cost and complexity increase

Engineering Contradiction:

Improvecentralized management capabilityVSAvoidsystem architecture complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

Access controllers are designed to operate autonomously with self-contained authentication capabilities. Each controller maintains local databases of authorized credentials and can independently verify access requests without requiring communication with a central management system, enabling the system to serve itself without complex centralized infrastructure.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The access controllers are designed as universal, standalone units that can operate independently or be integrated into a larger networked system. This multi-functionality allows the same hardware to serve both as an offline standalone controller and as part of a networked system with centralized management capabilities when needed.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentEP4445555B1Method for controlling access to an area to be secured, and associated initialisation method

Publication Date: 2025.12.31 AKIDAIA

Figure 1
Figure 2
Figure 3

AI summary

The invention relates to the field of systems and methods for controlling access to an area of a site by a user. It also relates to a method for initialising said access control method. It has a particularly advantageous application in securing access to an area of a site by a user, potentially in a fully automatic manner, including when the user's portable communication device is in offline mode and every access controller lacks any communication means other than those necessary for short-range communication with the portable communication device.