Wireless Key Device Authentication for Access Control Systems

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic access control systems for physical spaces face challenges in efficiently updating access rights, particularly when key devices are lost, as current methods using large and cumbersome update devices lead to security compromises due to delayed propagation of new access rights across lock devices.

Innovation Solution

A method and key device that detect the presence of a lock device, determine if new authorization data is required, send a request for authorization data to an access control server, receive and verify the data, and send an unlock signal, allowing for secure and efficient control of access rights, with some locks mandating online access and others not, based on stored access lists.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If dedicated key update devices are used to update access rights, then access rights can be updated, but the devices are large and cumbersome leading to infrequent updates and security compromises

Engineering Contradiction:
ImprovesecurityVSAvoidease of updating access rights
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical dedicated key update device with a wireless communication system. The key device communicates with the access control server via wireless transmission to receive updated access rights, eliminating the need for physical update devices and enabling frequent, convenient updates while maintaining security.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces a wireless communication module as an intermediary between the key device and the access control server. This intermediary enables the key device to receive updated access rights wirelessly without requiring physical contact with dedicated update devices, thus improving ease of operation while maintaining security through controlled wireless communication.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If there is a delay in propagating updated access rights to all lock devices, then system complexity is reduced, but security is compromised due to outdated access rights

Engineering Contradiction:
ImprovesecurityVSAvoidlatency in updating access rights
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary action by having the key device check with the access control server for updated access rights before each access attempt. This ensures that the key device has the latest authorization data before trying to open a lock, eliminating security delays while maintaining system efficiency through on-demand updates rather than continuous propagation.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If all locks mandate online access control, then security is improved, but system efficiency decreases due to constant server communication requirements

Engineering Contradiction:
ImprovesecurityVSAvoidsystem efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent applies local quality by enabling different lock devices to have different authorization modes. Some locks can be configured to mandate online access control for high-security areas, while other locks can operate with stored access lists for lower-security areas, allowing the system to optimize security and efficiency based on local requirements rather than applying a uniform approach system-wide.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS10726654B2Authentication of a user for access to a physical space
Publication Date: 2020.07.28 ASSA ABLOY AB
  • US10726654B2 patent drawing
  • US10726654B2 patent drawing
  • US10726654B2 patent drawing

AI summary

It is presented a method performed in a key device for authenticating a user for access to a physical space. The method comprises the steps of: detecting the presence of a lock device; sending a request for authorisation data to an access control server, the request comprising an identifier of the key device; receiving authorisation data from the access control server; determining whether the key device is authorised to open the lock device; and sending an unlock signal to the lock device when the key device is allowed to open the lock device.