Remote Lock Unlock via Mobile Relay and Secure Credential Mediation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic locks with remote access control require expensive and complex online communication paths, which are costly and vulnerable to security risks.

Innovation Solution

A server-based method that enables remote unlock by authenticating users through a third-party service, establishing an end-to-end secure channel, and relaying access data via a mobile device, without storing credentials on the server, allowing locks to operate offline and reducing security vulnerabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If online locks with remote access control are used, then remote unlocking capability is achieved, but cost and device complexity increase significantly

Engineering Contradiction:
Improveremote unlocking capabilityVSAvoidonline communication path complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent introduces a server as an intermediary component that mediates between the mobile device and the lock. The server stores credential data and manages authentication, while the lock itself remains simple and can operate offline. This intermediary approach enables remote unlocking capability without requiring the lock to have complex online communication infrastructure, thus resolving the contradiction between remote access functionality and device complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If online locks with continuous connectivity are used, then remote access control is enabled, but security vulnerabilities increase

Engineering Contradiction:
Improveremote access controlVSAvoidsecurity vulnerability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent segments the system into three distinct components with separated functions: the mobile device for initiating access requests, the server for storing credentials and managing authentication logic, and the lock for executing unlocking actions. This segmentation allows the lock to operate offline with minimal attack surface, while the server handles security-sensitive operations. The credential data is stored on the server rather than the lock, reducing security vulnerabilities associated with continuous online connectivity at the lock level.

Inventive Principle:
Principle #1Segmentation

3Ease of operation

If credentials are stored on the server for remote access, then remote unlocking is enabled, but security risk of credential theft increases

Engineering Contradiction:
Improveremote unlocking functionalityVSAvoidcredential theft risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The server acts as a secure intermediary that stores credential data and manages authentication without requiring the lock to be continuously online. The system uses a challenge-response mechanism where the server verifies credentials and communicates only with the mobile device and lock through secure channels. This approach enables remote unlocking functionality while reducing credential theft risk by eliminating the need for the lock to maintain continuous internet connectivity and by implementing secure communication protocols between all components.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP4042385B1Enabling remote unlock of a lock
Publication Date: 2025.12.17 ASSA ABLOY AB
  • EP4042385B1 patent drawingFigure 1~2
  • EP4042385B1 patent drawingFigure 3~5

AI summary

It is provided a method for enabling remote unlock of a lock securing access to a physical space. The method is performed in a server and comprises the steps of: receiving, from a first mobile device, an access request to unlock a lock, wherein the request comprises an identifier of the lock and a user identifier associated with an access requester, being a user of the first mobile device; finding a remote credential device being associated with the lock; and transmitting an access request to the remote credential device, the access request comprising an identifier based on the user identifier.