Bidirectional Wiegand Controller with Dynamic Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems using the Wiegand protocol suffer from unidirectional data communication between controllers and card readers, requiring specialty programming cards for maintenance, and face challenges with encryption methods that are either insecure or computationally infeasible due to limited processing power in access control system controllers.
Innovation Solution
Implementing a bi-directional data communication protocol within the Wiegand framework, allowing standard Wiegand 2601 cards to function as 'Master Add' or 'Master Delete' cards, and using a pseudo private/public seed system for dynamic cryptographic key generation to secure communication between controllers and PCs via USB.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the Wiegand protocol is used for communication between controller and card reader, then backward compatibility and interoperability are achieved, but bi-directional data communication and device identification are not possible
Solution Approach 1:
The patent merges the traditional unidirectional Wiegand protocol with bidirectional communication capabilities by combining the existing DATA0 and DATA1 lines with a new bidirectional protocol layer. This allows the system to maintain compatibility with legacy Wiegand devices while enabling new features like device identification and authentication through the same physical interface.
Solution Approach 2:
The patent makes the card reader perform multiple functions by enabling it to both send data to the controller (traditional Wiegand function) and receive commands from the controller (new bidirectional function). The same hardware interface supports both unidirectional and bidirectional communication modes, allowing a single device to serve multiple purposes.
2Reliability
If specialty programming cards are used for controller maintenance, then secure programming is achieved, but system complexity and dependency on manufacturer increase
Solution Approach 1:
The patent enables the controller to perform self-programming and self-maintenance operations by allowing any standard Wiegand card to be programmed as a programming card through bidirectional communication. The controller can autonomously enter programming modes, authenticate programming cards, and manage credentials without requiring external manufacturer-specific tools or cards.
Solution Approach 2:
Instead of requiring special manufacturer-provided cards to program the controller, the patent inverts the approach by allowing the controller to be programmed with standard cards that can then be used for programming. The system transitions from card-to-controller programming to controller-to-card programming, eliminating the need for specialty programming cards.
3Reliability
If traditional encryption methods are used in access control systems, then security is improved, but computational feasibility deteriorates due to limited processing power
Solution Approach 1:
The patent changes the cryptographic parameters by using lightweight encryption algorithms specifically designed for resource-constrained devices. Instead of implementing computationally intensive encryption methods, the system uses simplified cryptographic functions that provide adequate security while consuming minimal processing power and energy on the controller and card.
Data Source
AI summary
An access control system including bi-directional communication between a controller and peripheral authentication devices utilized for selectively accessing a locked door is provided. The access control system provides components and circuitry to enable a user to securely assign and designate any card reader compatible card as an appropriate programming card and thereby activate or deactivate users and/or cards. The present invention further provides encrypted communication between the controller device and a PC.