Secure Real-Time Clock Update in Access Control Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Access control systems face issues when real-time clocks on devices reset, leading to errors in time-based credential authentication, as existing solutions require device updates or factory resets, which are cumbersome and insecure.
Innovation Solution
An access control method that involves communicating a clock status via wireless advertisements, establishing a connection, and using a clock update token, which includes caveats and cryptographic hashes, to securely update the real-time clock of access control devices without requiring local storage of access control lists or physical updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the real-time clock is reset due to battery replacement or hardware malfunction, then the device can operate with new power supply, but time-based credential authentication fails and requires device update or factory reset
Solution Approach 1:
The patent separates the clock update function from the main device update process. The real-time clock can be independently updated via wireless communication without requiring a full device update or factory reset. This segmentation allows the clock to be maintained separately from other device components, resolving the contradiction by enabling reliable time authentication without cumbersome device-wide updates.
Solution Approach 2:
The patent introduces an intermediary authentication mechanism using cryptographic tokens and session random values. Instead of requiring direct device updates, the system uses a secure token-based intermediary process to update the clock. This intermediary layer enables clock updates while maintaining security and avoiding the need for factory resets or complex device updates.
2Adaptability or versatility
If the access control database is stored on the access control device, then access control functions can operate offline, but updating credentials requires device update or factory reset
Solution Approach 1:
The patent segments the credential update process from the access control database storage. The device maintains offline access control capabilities with locally stored credentials, while clock updates are handled separately through wireless communication. This segmentation allows the device to remain adaptable for offline operation without requiring complex device updates for credential or clock maintenance.
Solution Approach 2:
The access control device performs self-service for clock updates by receiving and processing clock update tokens locally. The device can authenticate and update its own clock without requiring external device updates or factory resets, maintaining offline operational capability while simplifying the update process through automated self-service mechanisms.
3Ease of operation
If standard wireless communication is used for clock updates, then the process is simple, but the system is vulnerable to replay attacks and unauthorized modifications
Solution Approach 1:
The patent implements preliminary authentication actions before clock updates. The system generates session random values and cryptographic tokens in advance, establishing a secure authentication framework before the actual clock update occurs. This preliminary action ensures that simple wireless communication remains easy to operate while preventing replay attacks through pre-established cryptographic verification.
Solution Approach 2:
The patent changes the parameters of wireless communication by incorporating cryptographic elements such as session random values, cryptographic tokens, and HMAC verification. These parameter changes transform standard vulnerable wireless communication into a secure process that remains operationally simple, protecting against replay attacks while maintaining ease of use through automated cryptographic verification.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method according to one embodiment includes communicating a wireless advertisement that identifies a clock status of a real-time clock of the access control device, wherein the clock status includes a clock status value indicating that the real-time clock has not been set, establishing a wireless communication connection with a computing device in response to the wireless advertisement, transmitting a session random value to the computing device, receiving a clock update token from the computing device, wherein the clock update token is indicative of an authority of the computing device to update the real-time clock of the access control device, authenticating the clock update token based on at least the session random value, and updating the real-time clock based on a received update time in response to successful authentication of the clock update token.