Web Bluetooth Mobile Access Control Without Dedicated Apps
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems require users to install specific apps on their mobile devices for BLE communication, causing inconvenience and security/privacy concerns.
Innovation Solution
Utilizing a web Bluetooth API to enable mobile access control through a web browser, eliminating the need for additional apps by generating a visitor-specific URL that includes executable code to perform BLE functions and transmit valid credentials directly to a reader.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a specific access control app is installed on mobile device, then BLE communication functionality is achieved, but device complexity and user convenience deteriorate
Solution Approach 1:
The patent introduces a web server as an intermediary that hosts the access control functionality. Instead of requiring the mobile device to have a dedicated access control app, the system uses a web browser (which is already present on most devices) to communicate with the web server via BLE. The web server acts as a mediator that provides the access control functions through web pages, eliminating the need for additional native applications on mobile devices.
Solution Approach 2:
The patent makes the web browser universal by enabling it to perform access control functions that traditionally required dedicated apps. The web browser, which is a standard component on most mobile devices, is enhanced to handle BLE communication and access control operations through JavaScript code embedded in web pages. This multi-functional approach allows a single universal application (the web browser) to replace multiple specialized applications.
2Reliability
If a specific access control app is installed on mobile device, then access control functionality is achieved, but ease of operation deteriorates
Solution Approach 1:
The web server serves as an intermediary that delivers access control functionality through web pages. Users interact with the access control system through a standard web browser interface rather than a specialized app, making the system accessible to anyone with a web browser already installed on their device. This eliminates the need for users to download, install, and learn a new application interface.
Solution Approach 2:
The system leverages the web browser that users already have installed on their devices as a self-service solution. Instead of requiring the system to provide a dedicated app, the users' existing web browsers are utilized to perform access control functions. The web pages contain JavaScript code that automatically handles BLE communication and access control operations when the user visits the web server's URL.
3Ease of operation
If web Bluetooth API is used, then ease of operation improves, but security concerns may arise
Solution Approach 1:
The patent uses temporary, disposable credentials generated through the web interface rather than permanent access control apps. Each interaction with the access control system can use ephemeral authentication data that is generated on-demand through the web browser, reducing the security risk of having persistent credentials stored on the device. The web-based approach allows for single-use or time-limited access tokens.
Solution Approach 2:
The system implements feedback mechanisms through the web interface that provide users with information about the security status and authentication process. The web server can communicate security-related information back to the user's browser, allowing users to verify the legitimacy of the access control system before granting access. This transparency helps users make informed decisions about security.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enables secure access control across multiple platforms and browsers without app installation, addressing user concerns and ensuring AES-128 encryption for BLE connections.
Implementation Method 1
receiving, from the mobile device of the visitor, the credential via a Bluetooth Low Energy (BLE) communication
Data Source
AI summary
Disclosed herein are systems and methods for using a web/Bluetooth API for mobile access control. In an embodiment, a computing system receives an endpoint identifier associated with a visitor. The system generates a URL associated with the endpoint identifier, and transmits the URL to an endpoint associated with the endpoint identifier. The system receives, from a mobile device associated with the visitor, a request for a web/Bluetooth Low Energy (BLE) webpage corresponding to the URL. The system generates the requested webpage, and transmits the webpage to the mobile device. The webpage contains a valid credential for access to a secured resource, and also contains executable code for calling at least one function of a web/BLE API. The system transmits the webpage to the mobile device, and thereafter receives the credential from the mobile device via a BLE communication, verifies the credential, and accordingly grants access to the secured resource.