EP3489914A1 - Access control method and access control system - Google Patents

Abstract

The invention relates to a method (100, 100a, 200, 300), in particular an access control method (100, 100a, 200, 300), for granting access to a physical area, the method (100, 100a, 200, 300) at least from an access control device (3) which can be assigned to the physical area and is carried out by a mobile device (2), the mobile device (2) containing at least a first rule for granting access. According to the invention, the method (100 , 100a, 200, 300) the step (106, 207, 307) comprises: -checking (106, 207, 307) the first rule in the mobile device (2).

Description

The invention relates to a method, in particular access control method, for granting access to a physical area according to claim 1. The invention also relates to an access control system according to independent claim 14. Also, a computer program product for a mobile device of the access control system according to the invention is protected.

Access control methods for granting access to a physical area are, for example, the WO2006 / 098690 A1 known. Here, an access control device is transmitted an access code. The access control device has a tabular database to perform an access check. If the result of the access check is positive, the access control device grants access. Is z. For example, if access is permitted for the corresponding access code in the tabular database within a certain time range, then the access control device grants access to the physical area.

In the WO2006 / 098690 A1 The granting of access depends on the tabular database deposited in the access control device. The tabular database stores a large amount of data in the access control device. So that the granting of access corresponds to the current wishes of an access manager, therefore, extensive updates must be carried out. It is in the WO2006 / 098690 A1 not foreseen to carry out access audits not stored in the database.

It is therefore the object of the invention to provide a method and an access control system which improves at least one mentioned disadvantage, in particular to make granting access partially independent of data stored in an access control device.

The object is achieved by the independent claim 1. Advantageous developments of the method are given in the dependent method claims, the description and in the figures. Furthermore, the object is also achieved by the features of the access control system according to the invention according to independent claim 14. Advantageous developments of the device are given in the description and in the figures. Features and details described in connection with the method according to the invention also apply in connection with the access control system according to the invention and vice versa. The features mentioned in the description and in the claims may each be essential to the invention individually or in combination. In particular, an access control system is under Protection with which the inventive method, in particular the method according to one of claims 1 to 13, executable, as well as a method that can be performed with the access control system according to the invention, in particular with an access control system according to claim 14.

According to the invention, the method serves to grant access to a physical area. The method according to the invention is carried out at least by an access control device that can be assigned to the physical area and by a mobile device. The mobile device includes at least a first rule for granting access. The method includes the step of checking the first rule in the mobile device.

By checking at least one first rule in the mobile device, the access check is partly independent of information present in the access control device, in particular of data stored in the access control device. Thus, on the one hand, it is possible to reduce the amount of data in the access control device. On the other hand, it is possible to design the access check partially independently of data stored in the access control device.

The method is in particular an access control procedure. In particular, the access control process takes place to give a user access to the physical area. The physical area is locked at the beginning of the access control process. Access to the physical area is denied at the beginning of the access control process. Checking whether access may be granted is an essential part of the access control procedure. For this purpose, at least the first rule is checked.

The access control process is performed at least by means of the access control device and the mobile device, in particular when the mobile device is in the vicinity of the access control device. The access control procedure may in particular end with the granting of access or the termination of the granting of access. In particular, the access control procedure may end with the granting of access or the termination of the grant of access if the entry requirements are met. If an entry requirement is not fulfilled, the access control procedure may end earlier, but access is denied.

The access control method preferably includes at least one step to be performed by the user. In particular, the user must make an entry on the mobile device. It may be that the input is formed as the first step or part of the first step of the access control process. In addition, the transmission and / or the execution of instructions on how to grant access should be part of the access control procedure.

During the procedure, especially during the access control procedure, one or more rules will be reviewed. A rule is used to give access to the physical area. Thus, a rule is used to control access. A rule can define an access requirement. Thus, an admission profile may include at least one rule. A "check on a rule" means that it is checked whether or not the access requirement defined in the rule is fulfilled.

If the result of the rule check is negative, access to the physical area is denied. The positive result of the review of the rule is at least a prerequisite for granting access. If only one rule is checked during the procedure, or if the rule being checked matches the last rule to be checked, access will be granted if the result of the check is positive. If a further rule needs to be checked, the procedure with the aim of granting access will be continued if the rule is positive. Access will only be granted if there is a positive result of all the rules to be checked.

Several rules in the mobile device can be checked. If the rule to be checked in the mobile device is mentioned below, several rules to be checked in the mobile device may also always be meant.

The physical area is preferably blocked by a barrier. The barrier can be designed as a door, in particular as a building door, as a lid, as a flap, as a turnstile or as a barrier. The door can z. B. be designed as a revolving door, a sliding door or as a revolving door.

In particular, the physical area is fixed. The physical area can be designed as a room or as a box. For example, the physical area may be a space locked by a door. Alternatively, the physical area may be defined as an obstructed box, in particular a postbox, a locker, an outdoor area or a restricted area by a barrier, e.g. B. parking area, be formed.

In particular, the mobile device is intended to be carried by a user who wishes to have access to the physical area. In particular, the mobile device comprises a processor with which the mobile device can check the first rule. The mobile device in particular comprises a memory.

Preferably, the mobile device comprises a connection to a mobile communication network. The mobile communication network can be designed as a telecommunications network. Thus, the mobile device is particularly preferred as a mobile phone educated. Preferably, the mobile phone is designed as a smartphone. The mobile device may in particular comprise a display. Particularly preferably, the user can enter arrangements via the display.

In particular, the mobile device and the access control device can communicate with each other wirelessly. Here, in particular, a short-range communication such as Bluetooth, in particular Bluetooth Low Energy (BLE), RFID or NFC is used.

In particular, the mobile device comprises a first transmitting and receiving device for the telecommunications network. In particular, the mobile device comprises a second transceiver for short-range communication. In particular, the access control device comprises a transmitting and receiving unit for short-range communication.

The access control device is associated with the physical area. In particular, a user will associate the access control device with the physical area. The access control device serves as a particular permanently installed guard to the physical area. The access control device is preferably provided for placement near the physical area. The access control device may comprise an electromechanical device, e.g. Example, an electric motor or a solenoid, or an electromagnetic device, by means of which the user can gain access to the physical area. For example, the access control device may comprise a handle which is operatively connectable by means of the electromechanical device with a lock. Alternatively, the access control device by means of the electromechanical device, a locking element, in particular a latch and / or a trap operated. In a further alternative, the access control device by means of the electromechanical or electromagnetic device, an opening of the barrier, in particular the door, the turnstile or the barrier, allow. The access control device may in particular be designed as an electromechanical fitting, as an electromechanical lock cylinder, as an electromechanical door opener or as a motor lock. The access control device may comprise an electric motor for moving the barrier, in particular the door, the turnstile or the barrier. The access control device can be designed in several parts. Thus, the access control device may comprise a reader. The reader can preferably communicate with the electromechanical or electromagnetic device, in particular with the electromechanical fitting, the electromechanical lock cylinder, the electromechanical door opener, the electric motor, the electromagnet or the motor lock, wireless or wired.

The access control device comprises in particular a processor for carrying out the method according to the invention. The access control device comprises in particular a memory.

It is preferably provided that the mobile device comprises access information for the access control device. The access information is preferably specific to the access control device. Ie. In particular, the access information contains only information intended to grant access to the physical area guarded by the specific access control device. The access information may be associated with the access control device. If the user may be granted access to a plurality of physical areas guarded by different access control devices through the mobile device, the mobile device preferably includes a plurality of access information. In particular, access information can be provided and stored in the mobile device for each of the access control devices.

It may be that the method is terminated if the mobile device does not transmit the access information at least partially to the access control device during the procedure. In other words, a transmission of at least part of the access information from the mobile device to the access control device may be a prerequisite for granting the access.

In particular, the access information may include an encrypted portion that is undecipherable by the mobile device. The access information may include a readable portion that is unencrypted or decryptable by the mobile device.

The encrypted portion may be intended to be communicated to the access control device during the procedure, particularly during the access control procedure. The transmission of the encrypted portion from the mobile device to the access control device may be a prerequisite for granting the access.

The readable portion may include the first rule or data for the first rule. Alternatively, the first rule may have been transmitted to the mobile device in a different way. In particular, the first rule can be transmitted from the access management device to the mobile device.

The readable portion may include information that may be displayed to the user on the mobile device.

The access information is preferably provided to the mobile device by an access management device. The access management device may deposit the access information in a cloud, for example. The mobile Device can receive the access information wirelessly, in particular via the mobile communication network. The mobile device may e.g. B. access the access information wirelessly, in particular via the mobile communication network, from the cloud.

Preferably, the access information loses its validity after a predetermined time. If the access information has lost its validity, the mobile device must retrieve the access information again in order to grant access.

The access information may include an access authorization code, in particular access control device identifier, and / or at least one access attribute. The access attribute may correspond to a rule, data for a rule, an instruction and / or data for an instruction.

The displayable information can be displayed in particular on a display of the mobile device. The displayable information can be z. B. be information about the physical area and / or the barrier. The information about the physical area and / or about the barrier may e.g. For example, include the name of the physical area, an image of the physical area, and / or an image of the barrier, a state of the physical area, and / or the barrier. The displayable information may additionally or alternatively comprise an indication of the state of the method and / or an indication of the checking rule.

The encrypted portion is transmitted to the access control device, in particular during the current access control procedure. In particular, the encrypted portion is always transmitted to the access control device during the current access control procedure.

Preferably, only the access information or a part of the access information for that access control device is transmitted during the procedure from the mobile device to the access control device to whose access physical access is to be granted. For this purpose, the mobile device can select the corresponding access information based on the access control device identifier. If several access control devices are in question, the access control devices or references to the access control devices in question may be able to be displayed on the mobile device so that a user can select the corresponding access control device and / or the corresponding access information.

It can be provided that the access control device has knowledge of a second rule or of data for a second rule or during the execution of the method obtained. The method, in particular the access control method, may comprise the step of checking the second rule in the access control device.

The second rule is to give access to the physical area. The second rule defines an admission requirement. A review of the second rule states that it is checked whether or not the access requirement defined in the rule is fulfilled.

Several rules can be checked in the access control device. If the rule to be checked in the access control device is mentioned below, several rules to be checked in the access control device may also always be meant.

The checking of the rule (s) to be checked in the mobile device can take place before or after checking the rule (s) to be checked in the access control device. In particular, the rule (s) to be checked in the access control device are / is first checked before the rule (s) to be checked in the mobile device are checked. Alternatively, it is z. B. conceivable that initially at least one rule is checked in the access control device before at least one rule is checked in the mobile device and then at least one more rule is checked in the access control device.

It is conceivable that the access control device sends a message to the mobile device after checking at least one second rule, whereupon the mobile device checks the first rule.

It is preferably provided that the mobile device comprises the second rule or data for checking the second rule and the mobile device of the access control device transmits the second rule or the data for checking the second rule during the method. The data for checking the second rule will be referred to as data for the second rule in the following. The data for a rule may, in particular, be provided instead of the complete rule. If data is transmitted for the second rule, then the second rule can be stored in the access control device. In this case, the second rule can be completed by means of the data transmitted by the mobile device. The access control device can use the data for the rule to check the associated rule.

For example, the rule may state that access is granted only in a certain period of time. The access information can z. For example, include the time range as data for the rule. An algorithm stored in the access control device can complete the rule by means of the time domain and check the rule. As another example, the rule may state that access is granted only when comparing a comparison value with positive check value. The access information may include the comparison value as data for the rule. An algorithm stored in the access control device can use the comparison value to check the rule by the access control device comparing the comparison value with the verification value.

The second rule or the data for the second rule are transmitted in particular encrypted to the access control device. This allows the second rule to be checked by the access control device in an updated form.

Particularly preferably, the access information, in particular the encrypted portion, the second rule or the data for the second rule include.

Particularly preferably, it is conceivable that the access control device uses the second rule transmitted by the mobile device or the data for the second rule only during the current access control process for obtaining an access authorization to a physical area. As a result, it is not necessary to store the transmitted second rule of the data for the second rule in the access control device. Rather, the second rule or the data for the second rule transmitted by the mobile device are preferably always used for the current access control method.

In particular, if the corresponding information is not transmitted by the mobile device to the access control device during the current access control procedure, in particular no access is granted.

It may be that access is granted only after a positive result of the comparison of a comparison value with a verification value. The access control device preferably performs the comparison of the comparison value with the check value. The positive result of the comparison of the comparison value with the verification value may be a prerequisite for granting access. The comparison of the comparison value with the check value thus corresponds to a second rule, which is checked in the access control device. The comparison serves to identify the mobile device as being in principle authorized for the access control device. The comparison value and / or the check value can be embodied as a code, in particular as a hash value or as an electronic signature. The comparison value and / or the check value can thus correspond to data for the second rule.

At least the verification value is transmitted from the mobile device to the access control device during the procedure, in particular during the access control procedure. The mobile device contains the verification value.

The check value is particularly provided to the mobile device by the access management device. The check value can be z. B. in the be readable share. Alternatively, the check value z. B. be provided by the access management device of the mobile device in addition to the access information.

The verification value can be encrypted. The check value is preferably always transmitted from the mobile device to the access control device.

The mobile device particularly preferably transmits the comparison value to the access control device during the method, in particular during the access control procedure. The comparison value can be encrypted. The comparison value can be encrypted in such a way that the comparison value can not be decrypted by the mobile device. In particular, the encrypted portion may include the comparison value.

It is conceivable that the comparison value is always transmitted during the method before a comparison of the comparison value with the check value takes place, so that the access control device always uses the transmitted comparison value only in the current access control method. Thus, it is not necessary to store the comparison value in the access control device. Rather, access is denied if the comparison value is not transmitted by the mobile device to the access control device during the current access control process. Thus, the use of a current comparison value is always ensured, in particular without having to carry out extensive updates in quick succession to the access control device.

A positive result of the comparison of the comparison value with the verification value may be a prerequisite for checking the first rule in the mobile device. Ie. First, the comparison value is preferably compared with the verification value, and only if the result is positive is the first rule subsequently checked.

The first and / or second rule may conform to the following rule or include the following rule: Access is granted only after a positive result of the comparison of the comparison value with the verification value (rule a.). Preferably, rule a. always checked as a second rule in the access control device. By rule a. the mobile device is identified as authorized in principle.

The first and / or the second rule may conform to the following rule or include the following rule: Access is granted only in a specific time period (rule b.). The time range may include times, days of the week, days off and working days, months and / or years. The time domain may be transmitted in encrypted form from the mobile device to the access control device during the access control process. In particular, the encrypted portion may include the time range. Will always be the Time range in the current access control method transmitted, so eliminates the need to save the time range in the access control device.

The first and / or the second rule may conform to the following rule or include the following rule: Access is granted only if there is a positive result of further authentication, in particular by means of a code or biometric recognition (rule c.). The access control device preferably performs the further authentication. For this purpose, a control value is compared with a code or a biometric identifier. The code and / or the biometric recognition may be input to the mobile device and transmitted to the access control device. The comparison of the code and / or the biometric recognition with the control value preferably takes place in the access control device. In a positive comparison, the further authentication is available.

The authentication control value may be received in encrypted form by the access control device during the access control process from the mobile device. The control value may include a control code and / or a control biometrics detection. In particular, the encrypted portion may include the control value. This eliminates the need to store the control value in the access control device.

The first and / or the second rule may conform to the following rule or include the following rule: Access is granted only if a label that identifies the user as a watcher is designed negatively (rule d.). It may be desirable for a guard to identify himself on a tour of the access control device to detect the proper departure of the tour. It may be desirable for the guard not to be granted access. In the case of a positive identification as a guard, access is thus denied.

The positive or negative tag as a guard may be transmitted encrypted from the mobile device to the access control device during the access control process. In particular, the encrypted portion may include the positive or negative identifier as a guardian. If the positive or negative identification is always transmitted as a guard in the current access control procedure, there is no need to store the identification.

Preferably, at least the rule a. checked. Particularly preferably, at least one more rule is checked. This can be at least one of the rules b., C. or d. his. At least two of the rules are preferred, that is to say b. and c., c. and d. or b. and d., checked. Particularly preferred are the rules b., C. and d. checked. The verification can take place in particular in the access control device. As a result, the security can be increased.

The time range, the control value and / or the identifier as a guard thus corresponds to a second rule or data for a second rule, which are preferably transmitted from the mobile device to the access control device. The transmission preferably always takes place in the current access control process.

Preferably, at least one rule is checked in the mobile device, which is not verifiable in the access control device, since the access control device, the necessary data can not be provided.

It is preferably provided that the first rule corresponds to the following rule: The access is granted only if the mobile device performs a further authentication, in particular by means of the input of a code or a biometric recognition, with a positive result (rule e.). Restrictive to rule b. the mobile device performs the further authentication. The further authentication takes place in particular during the access control process. Thus, the further authentication is provided in particular in addition to unlocking the mobile device.

It is preferably provided that the first rule corresponds to the following rule: The access is granted only if a residence history of the mobile device coincides with a specification of the residence history (rule f.). The default of the residence history may be stored in the mobile device. The residence history may include granting access granted to at least one predetermined physical area. The at least one physical area of the residence history may be different from the physical area to which access is sought by means of the access control process. The resident history may include an order of granting access to predetermined physical areas. The residence history may include a predetermined time range for granting access to the predetermined area (s). For example, a user seeks access to an office area. The granting of access to the office area, for example, depends on access being granted first to a main entrance area and then to a changing area within the last half hour.

It is preferred that the first rule conform to the following rule: Access is granted only if payment has been made previously (Rule g.). In particular, access can only be granted if confirmation of a successful payment is available. The mobile device may capture or include the confirmation of the payment made. It is preferable that the first rule conforms to the following rule: Access is granted only if a physical order of use has been accepted (rule h.). The user order can z. B. Conditions for using the physical area, such as: For example "smoking prohibited".

It is preferred that the first rule conforms to the following rule: Access is granted only if a training, in particular a safety instruction, has been successfully completed (Rule i). The instruction, in particular the safety instruction, can be completed positively by the confirmation of an acknowledgment. The instruction, especially the safety instruction, can be completed positively by passing a test. The test can be performed and / or evaluated on the mobile device. Alternatively, the result of the test of the mobile device may be transmitted.

At least one of the rules e., F., G., H. or i., z. As a rule, checked in the mobile device. In particular, the rule f. checked in the mobile device. In particular, the rule g. checked in the mobile device. In particular, the rule h. and / or i. checked in the mobile device.

It may also be that at least two of the rules, eg. E. and f., e. and g., e. and h., e. and i., f. and g., f. and h., f. and i., g. and h., g. and i. or h. and i., z. Exactly two rules, to be checked.

It may also be that at least three of the rules, eg. E./f./g., E./f./h., E./f./i., E./g./h., E./g./i., E. h./i., f./g./h., f./g./i., f./h./i. or g./h./i., z. B. exactly three rules to be checked.

Similarly, four rules f./g./h./i., E./g./h./i., E./f./h./i., E./f./g./i , or e./f./g./h. or all five rules e., f., g., h. and i. be checked.

It may be that the first and / or the second rule applies only in a given time window. The first and / or second rule, which only applies in a given time window, may in particular involve at least one of the rules c. to i. act.

Outside the time window, compliance with the rule is not a requirement for granting access. In particular, a check of the rule is omitted outside the time window. The time window may include times, days of the week, working and non-working days, months and / or years. The rule includes the time window. Several rules can only apply in a given time window. The time windows of different rules may differ. If the time window is mentioned below, several time windows can also be meant.

For example, rule g. be met only on a working day to grant access. On weekends, access is free. Rule g. would then be that the access is granted only if it is a weekday and before a payment has been made.

For example, rule f. only be fulfilled on Mondays. On the remaining days of the week, it is not necessary to have at least access to at least one other physical area prior to granting access to the physical area.

As another example, rule c. or e. only be fulfilled on a weekend. No additional authentication is required on a working day.

In a third example, it is only checked at night between 20.00 and 6.00 whether there is an identification as a guard, otherwise the rule d. not checked.

The time window can be encrypted to be handed over to the access control device, in particular if the access control device checks the corresponding rule that applies in the time window. In particular, the encrypted portion may include the time window.

Through the time window, a rule, in particular at least one of the rules c. to i., be defined a special deviation from a general validity of the corresponding rule. Thus, the access information may contain a special rule about a general rule. The additional information may also contain the general rule. The special rule defines a deviation from the general rule. The special rule and the general rule belong to the same rule type, in particular to one of the rules c. to i. So z. B. the general rule rule that an additional PIN entry in accordance with rule c. must be done every Monday. The special rule can state that an additional PIN entry according to rule c. in the month of august is omitted. The special rule can override the general rule. So it may be that in the result of the example on the Mondays in August no PIN input is necessary. In particular, the encrypted portion may include the general and / or special rule.

It is preferably provided that the mobile device comprises a time recording means and the first rule contains a time-dependent condition for granting an access. The first rule is checked by means of the time that the mobile device has by means of the time detection means. The check of a time-dependent rule is particularly useful if the access control device is free from a knowledge of a time. Especially in this case, it makes sense to use rule b. in the mobile device. Also this can be for rule c. or d. apply if rule c. or d. includes a time window. Thus, it may be that the at least one of the rules b. to d. checked in the mobile device.

The time-dependent condition, which is checked in the mobile device, can in particular rule b. correspond. The time dependent condition that is checked in the mobile device may be one of the rules c. to i., which apply only in a given time window, correspond.

The time detection means may correspond to a receiving device of the communication network over which the time is received and / or an internal timer. The mobile device may use the common time of the corresponding time zone transmitted to or set by the mobile device. It may also be that the mobile device is allowed to use the timekeeping only the time that has been provided to the mobile device by the access management device, or at least provided in a predetermined period previously.

It is conceivable that the first rule contains an additional condition in addition to the second rule and / or contains a restriction of the second rule.

In order to grant access, preference must be given to a positive result of the first rule and the second rule. In particular, it is not permissible for the first rule to be less restrictive than the second rule. In particular, it is not permissible for a positive result of the first rule to be sufficient to grant access. As a result, the tamper resistance of the method is increased.

It can be provided that the mobile device transmits the result of checking the first rule to the access control device and the access control device decides whether to obtain the access authorization. As a result, the manipulation security of the method can be increased. Thus, the mobile device will report the result of the review to the access control device. If the result of the check is not reported, access is denied. For the message, a predetermined time frame may be granted by the access control device. If the mobile device does not transmit the result within the specified time frame, access is denied.

The access control device may have been previously transmitted that at least a first rule is checked as an additional condition for granting access. The fact that at least one first rule is checked as an additional condition for granting access is transmitted to the access control device, in particular in encrypted form. Particularly preferably, the encrypted portion comprises the fact that at least a first rule is checked as an additional condition for granting access. For example the access information, in particular the encrypted portion, comprises a characteristic value which includes the need to take into account the result of checking the rule in the mobile device when granting the access. If the characteristic value is positive, the access control device expects the positive result of the rule to be checked in the mobile device within a time frame.

Alternatively, the mobile device may send an open command to the access control device.

The access control device may include a programming interface. The access control device and the mobile device may communicate with each other through the programming interface during the process, particularly during the access control process. The programming interface may correspond to an API.

In particular, it is provided that the access control device opens the programming interface during the process. The method may correspond in particular to the access control method.

In particular, the access control device may open the programming interface as a result of a positive result of a rule check. Ie. a rule that is checked to grant access to the physical area may also allow the programming interface to be opened. The check may be a condition to open the programming interface. It is conceivable that even more conditions must be met in order to open the programming interface. In particular, it is conceivable that the mobile device contains a command or data for a command with which the programming interface can be opened. In particular, the command or data for the command may be transmitted in encrypted form from the mobile device to the access control device.

The check of the rule, which corresponds to a condition for opening the programming interface, preferably takes place in the access control device. For example, the rule that corresponds to a condition for opening the programming interface may particularly preferably correspond to the comparison of the comparison value with the check value (rule a.).

It is preferably provided that the access control device at least partially opens the programming interface before the access control device has granted access to the physical area. This makes it possible that the programming interface is available to receive data for the current access control process.

Thus, the programming interface can be opened to obtain data for checking a rule, in particular another rule. A positive result of the review of the further rule can thereby precondition for the granting of access his. For example, biometric data of a user can be transmitted via the programming interface to the access control device. The biometric data may be captured by the mobile device.

The programming interface may be opened to obtain results of a check of a rule being checked in the mobile device.

The programming interface may be opened to receive an instruction or a control command regarding the way in which access is granted.

The programming interface may be opened to receive an opening command from the mobile device. As a result of the opening command, the access control device drives the electromechanical device to provide access.

The object of the invention is also achieved by an access control system. The access control system can be designed in particular for carrying out a method according to the invention, in particular a method according to one of claims 1 to 13.

The access control system according to the invention comprises an access control device assignable to a physical area and a mobile device. The mobile device includes at least a first rule for granting access to the physical area. According to the invention, the mobile device checks the first rule for granting access to the physical area.

As a result, part of the access check takes place in the mobile device. Thus, this part of the access check is independent of data stored in the access control device.

A computer program product for a mobile device of an access control system according to the invention, in particular an access control system according to claim 14, and / or for carrying out a method according to the invention, in particular a method according to one of claims 1 to 13, is also protected. The installation of the computer program product allows the mobile device to function as part of the access control system. The computer program product may comprise procedural instructions by means of which the mobile device can carry out the method according to the invention and / or act as part of the access control system according to the invention.

• Fig. 1 ein erfindungsgemäßes Zugangskontrollsystem gemäß einem ersten Ausführungsbeispiel,
• Fig. 2 das Zugangskontrollsystem aus Figur 1, bei dem die Übertragung einer Zugangsinformation dargestellt ist,
• Fig. 3 ein erfindungsgemäßes Verfahren gemäß einem ersten Ausführungsbeispiel,
• Fig. 4 ein erfindungsgemäßes Verfahren gemäß einem zweiten Ausführungsbeispiel und
• Fig. 5 ein erfindungsgemäßes Verfahren gemäß einem dritten Ausführungsbeispiel.

The invention will be explained in more detail with reference to embodiments. Technical features with the same function are provided in the figures with identical reference numerals. Show it:

• Fig. 1 an inventive access control system according to a first embodiment,
• Fig. 2 the access control system FIG. 1 in which the transmission of access information is shown,
• Fig. 3 an inventive method according to a first embodiment,
• Fig. 4 an inventive method according to a second embodiment and
• Fig. 5 an inventive method according to a third embodiment.

In FIG. 1 an access control system 1 according to the invention is shown. The access control system 1 comprises a mobile device 2 and an access control device 3. The mobile device 2 is shown schematically. The mobile device 2 is designed as a smartphone. The mobile device 2 comprises a display 18. The access control system 1 according to the invention can carry out a method 100, 100a, 200, 300 according to the invention.

The mobile device 2 has access to a cloud 5 via a telecommunications network 4. For this purpose, the mobile device 2 comprises a first transmitting and receiving device. The telecommunications network 4 is shown schematically as a double arrow. In the cloud 5 there are access information 10.

The access information 10 comprises an encrypted portion 11 and a readable portion 12. If the access information 10 is intended for the mobile device 2, the mobile device 2 can retrieve the access information 10 from the cloud 5. The retrieval option for the mobile device 2 is restricted here to the access information 10 provided for the mobile device 2. The access information 10 is also specific to the access control device 3. D. h. the access information 10 contains information intended to grant access to the physical area guarded by the specific access control device 3. If the user can be granted access to several physical areas guarded by different access control devices 3 by means of the mobile device 2, then the mobile device 2 contains a plurality of access information 10. In particular, access information 10 in the mobile device can be provided for each of the access control devices 3 2 provided and deposited. The access information 10 may be as a file be educated. In FIG. 2 is purely schematically an access information 10 for the illustrated access control device 3 in the mobile device 2 deposited.

The access information 10 is made available to the cloud 5 by a purely schematically illustrated access management device 9. The access management device 9 may be part of the access control system 1 according to the invention. The access management device 9 or the cloud 5 encrypts the encrypted portion 11 of the access information 10 such that the mobile device 2 is unable to decrypt the encrypted portion 11. The encrypted portion 11 is intended to be at least partially transmitted from the mobile device 2 to the access control device 3. The access control device 3 can decrypt the encrypted portion 11.

The access management device 9 can communicate with the cloud 5 via a communication link 19.

The cloud 5 may be part of the access control system 1. Alternatively, the cloud 5 is not part of the access control system 1 according to the invention. Rather, the mobile device 2 may be designed such that the access control information 10 can be retrieved from the mobile device 2 from the cloud 5. The access management device 9 can be configured such that the access information 10 can be stored by the access management device 9 in the cloud 5.

In an alternative, not shown, the access management device 9 can send the access information to the mobile device 2 via the telecommunication network 4 without being deposited in the cloud 5.

The access control device 3 serves as a permanently installed guard of a barrier-locked physical area, not shown. In FIG. 1 the access control device 3 is exemplified as electromechanical fitting 3. By way of example, such a fitting 3 in the EP2998484 A1 described. Alternatively, the access control device 3 z. B. be designed as an electromechanical lock cylinder, as a door opener or as a motor lock. The access control device 3 can also be designed in several parts (not shown). The access control device 3 can, for. A reader and an electromechanical or magnetic device, e.g. As a motor lock, include (not shown).

The access control device 3 and the mobile device 2 communicate with each other via a short-range communication link 6 such as Bluetooth, BLE, RFID or NFC. Preferably, BLE is used. The short-range communication connection 6 is shown purely schematically as a double arrow. For the short-range communication connection 6 The mobile device 2 has a second transmitting and receiving device. The access control device 3 has a transmitting and receiving unit for short-range communication 6. The mobile device 2 and the access control device 3 each comprise at least one processor, not shown, for carrying out the method 100, 100a, 200, 300 according to the invention. The mobile device 2 and the access control device 3 each comprise at least one memory (not shown) for carrying out the method 100 according to the invention, 100a, 200, 300. In this case, the mobile device 2 can use a processor and / or memory, with which other functions of the mobile device 2 are also exercised.

The mobile device 2 comprises a computer program product according to the invention, e.g. As an app, by means of which the mobile device 2, the inventive method 100, 100a, 200, 300 can perform.

The access control system 1 according to the invention can dispense in particular with a connection of the access control device 3 to the telecommunications network 4 and / or with a wired connection to the access management device 9. Thus, the access control device 3 may be configured as a stand-alone / offline device.

The access control device 3 comprises an in FIG. 1 purely schematically illustrated electromechanical device 7. The electromechanical device 7 is located inside the access control device 3 and is therefore in FIG. 1 indicated only by dashed lines. The electromechanical device 7 may couple a handle 17 of the access control device 3 with a lock to provide access to the physical area. In the coupled state, a user can transfer the lock into an unlocked state by the actuation of the handle 17. If access is again denied, the handle 17 is decoupled from the lock by the electromechanical device 7. This is z. B. in the in EP2998484 A1 described. Alternatively, the electromechanical device 7 can automatically transfer the lock to an unlocked state, in which the electromechanical device 7 retracts a latch and / or a latch. In a further alternative, the electromechanical device 7 can release a case of a door opener.

At the in FIG. 3 illustrated method 100, 100a is an access control method 100, 100a. At the beginning of the access control process 100, 100a, the access control device 3 denies access to the physical area. The access control method 100, 100a is used to check whether the user of the mobile device 2 can be granted access. The access control method 100, 100a may include a first communication of the mobile device 2 and the access control device 3 for the purpose of granting access to the physical Begin area. The access control procedure 100, 100a may include the granting of the access if the result of the review is positive. If the result of the review is positive, the access control procedure may end with the granting of access or the end of the granting of access. Here too, the way in which the access is granted is part of the access control procedure 100, 100a.

In a first method step 101 of the inventive method 100, 100 a, an access control device identifier is sent from the access control device 3 to the mobile device 2.

The mobile device 2 then verifies in a second method step 102 of the method 100, 100a whether access information 10 identifiable by the access control device identifier as belonging to the access control device 3 is stored in the mobile device 2. If such access information 10 is stored, then the mobile device 2 transmits the encrypted portion 11 of the access information 10 that has been identified as belonging to the access control device 3 to the access control device 3. This is particularly in FIG. 2 shown. The access information is received by means of the transmitting and receiving unit of the access control device 2. If a corresponding access information 10 for the access control device 3 is not stored in the mobile device 2, then the method 100 ends. This is indicated by an arrow at the second method step 102 in FIG FIG. 3 clarified.

In the method step 101, it may be provided that the user on the mobile device 2 receives an input, e.g. For example, pressing a button or launching an app must prompt the user for access. If the input is missing, the method 100 can be ended. This is indicated by an arrow at the first method step 101 in FIG FIG. 3 clarified.

Part of the first method step 101 may additionally or alternatively be that the mobile device 2 the user all access control devices 3, with which the mobile device 2 can communicate, in particular their access control device identifier has received the mobile device 2 and to which access information 10 in the mobile device 2 is deposited, 18 displays on the display. The display of the access control devices 3 is supported by the information contained in the respective readable portion 12 of the access information 10 to the corresponding access control devices 3. Thus, the readable portion 12 may include a picture or description of the possible access control devices 3, the possible physical spaces and / or the barriers guarded by the possible access control devices 3. The corresponding pictures and / or descriptions may be displayed on the display 18 the mobile device 2 are displayed. The user can select one of the displayed access control devices 3. The mobile device 2 then sends in the method step 102 only to the selected access control device 3 the encrypted portion 11 of the associated access information 10th

The encrypted portion 11 received in the method step 102 is decrypted by the access control device 3 in a third method step 103 of the method 100, 100a. The encrypted portion 11 contains a comparison value.

The mobile device 2 has received a check value from the access management device 9, for example via the cloud 5. The check value may be included in the readable portion 12. It is also conceivable that the mobile device 2 receives the check value separately from the access information 10 from the access management device 9. The check value can be z. B. downloaded via the cloud 5 of the mobile device 2.

The comparison value and the check value have a code-like character and can, for. B. be designed as a hash value or as an electronic signature.

In a fourth method step 104 of the method 100, 100 a, the mobile device 2 transmits the check value to the access control device 3. The check value is received by means of the transmitting and receiving unit of the access control device 3.

In a fifth method step 105 of the method 100, 100 a, the access control device 3 compares the comparison value with the check value. As a result, the access control device 3 checks a rule. In the case of a positive comparison, the access control device 3 recognizes the mobile device 2 as authorized in principle and the access control method 100, 100a is continued.

If the comparison value and / or the check value is not transmitted in the current method 100 or if the comparison between the comparison value and the check value is negative, access is denied and the access control method 100, 100a ends. This is indicated by arrows at steps 103, 104 and 105 in FIG FIG. 3 shown.

• In Figur 3 sind Verfahren 100, 100a dargestellt, bei dem nach dem fünften Verfahrensschritt 105 in einem sechsten Verfahrensschritt 106 zunächst die Zugangskontrollvorrichtung 3 der mobilen Vorrichtung eine Meldung sendet. Daraufhin wird erfindungsgemäß zumindest eine Regel in der mobilen Vorrichtung 2 überprüft Die zumindest eine Regel, die in der mobilen Vorrichtung 2 zu überprüfen ist, wird als erste Regel bezeichnet. Erfindungsgemäß kann hierdurch bei der Überprüfung der ersten Regel auf Daten aus der Zugangskontrollvorrichtung 3 verzichtet werden. Vielmehr befinden sich die in der mobilen Vorrichtung 2 zu überprüfende Regel oder Daten für die in der mobilen Vorrichtung 2 zu überprüfenden Regel in dem lesbaren Anteil 12. Alternativ kann die in der mobilen Vorrichtung 2 zu überprüfende Regel oder Daten für die zu überprüfende erste Regel auf einem weiteren Wege von der Zugangsverwaltungsvorrichtung 9, insbesondere über die Cloud 5, an die mobile Vorrichtung 2 übermittelt werden.

For the further procedure several possibilities are conceivable:

• In FIG. 3 Methods 100, 100a are shown in which, after the fifth method step 105, in a sixth method step 106, the access control device 3 of the mobile device first sends a message. Then, according to the invention, at least one rule in the mobile device 2 is checked. The at least one rule to be checked in the mobile device 2 is referred to as the first rule. According to the invention As a result, data from the access control device 3 are dispensed with when checking the first rule. Rather, the rule or data to be checked in mobile device 2 for the rule to be checked in mobile device 2 is in readable portion 12. Alternatively, the rule or data to be checked in mobile device 2 may be the first rule to be checked another way from the access management device 9, in particular via the cloud 5, are transmitted to the mobile device 2.

For example, the mobile device 2 checks as a first rule whether the user is allowed access at the current time. Ie. the mobile device 2 checks whether the current time is within a predetermined time range. Thus, the mobile device checks the rule b. For this purpose, the mobile device 2 receives a given by the access management device 9 current time, in particular via the cloud. 5

In addition, the mobile device 2 can check whether further authentication is necessary at the current time. Thus, the mobile device 2 checks whether the current time is in a time window in which further authentication is necessary. If this is the case, the mobile device 2 requests the user to enter a PIN code, a password or a biometric recognition. The input takes place on the mobile device 2 and is compared in the mobile device 2 with a control value (rule e.). Preferably, the control value and / or the current time is provided by the access management device 9 of the mobile device 2.

The mobile device 2 may additionally or alternatively check other rules. For example, the mobile device 2 may prompt the user to accept a user order such as "this is a non-smoking room" by input to the mobile device 2 (rule i.).

Other first rules already disclosed in the general description may also be checked in the mobile device 2.

If all the first rules to be checked in the mobile device 2 have been checked with a positive result, then send to the left in FIG. 3 In the method 100 illustrated in FIG. 7, in a seventh method step 107, the mobile device 2 issues an opening command to the access control device 3. Then, the controller of the access control device 3 controls the electromechanical device 7 to grant access. Alternatively, the electromechanical device 7 is directly driven by the opening command to grant access. If at least one of the rules to be checked in the mobile device 2 could not be checked with a positive result, the access is denied and the access control method 100 ends. This is in FIG. 3 represented by an arrow at the method step 106.

Access to the physical area is granted in an eighth method step 108 by means of the electromechanical device 7.

This in FIG. 3 illustrated method is particularly suitable for access control devices 3, which are free from a knowledge of the time.

The way of access is determined by at least one instruction. The instruction may include how the grant of access is displayed visually and / or acoustically in the access control device 3. Alternatively or additionally, the instruction may include how to terminate the grant of access, e.g. After a predetermined period of time after the start of the grant, at a predetermined time regardless of the start of the grant or after a number of grants made. The instruction may also include whether information about the method is being sent to the mobile device 2. The at least one instruction may be included in the encrypted portion 11. The instruction is transmitted to the access control device 3 in step 102.

Optionally, the access control method 100 according to the invention comprises a further step, in which the granting of access according to the instruction is terminated again. The further step follows the step 108.

Notwithstanding the in FIG. 3 The left-hand illustrated method 100 can also be an inventive in FIG. 3 right illustrated method 100a are performed. The method steps 101, 102, 103, 104, 105, 106 and 108 here remain the same as in the method 100. In the method 100a, the mobile device 2 can check the above-mentioned rules to be checked in the mobile device 2 in the step 106 However, the mobile device 2 does not send out the opening command according to step 107. Ie. Step 107 is omitted. If all the rules to be checked in the mobile device 2 have been checked with a positive result in step 106, the mobile device 2 instead transmits the positive result to the access control device 3 in an alternative seventh step 107a. This alternative is in FIG. 3 in the method 100a shown on the right. The access control device 3 awaits the positive result within a predetermined time frame. The time frame begins with the transmission of the message in step 106. If the positive result reaches the access control device 3 within the time frame, the access control device 3, in particular the access control device controller, controls the electromechanical device 7 to grant access. If no positive result reaches access control device 3 within the time frame, access is denied and the access control procedure ends. This is shown by an arrow at step 107a.

In FIG. 4 another method 200 according to the invention is shown. The method 200 may be designed in particular as an access control method 200. The method 200 can be realized by means of the access control system 1 according to the invention FIGS. 1 and 2 be performed. The first, second, third, fourth and fifth method steps 101, 102, 103, 104, 105 of the method 100, 100a FIG. 3 corresponds to the first, second, third, fourth and fifth method steps 201, 202, 203, 204, 205 of the method 200 FIG. 4 , Notwithstanding the method 100, 100a FIG. 3 In a sixth method step 206 of the method 200 in the access control device 3, at least one further rule is initially checked.

For example, the access control device 3 checks whether the user may be granted access at the current time. Ie. the access control device 3 checks whether the current time is within a predetermined time range. Thus, the access control device 3 checks the rule b. The time range for checking the rule b. is included in the encrypted portion 11.

In addition, the access control device 3 can check whether further authentication is necessary at the current time. Thus, the access control device 3 checks whether the current time is in a time window in which further authentication is necessary. If this is the case, the mobile device 2 requests the user to enter a PIN code, a password or a biometric recognition. The entry is made on the mobile device 2. The entered PIN code, the entered password or an entered biometric recognition is transmitted to the access control device 3. The access control device 3 compares the transmitted PIN code, the transmitted password or the transmitted biometric recognition with a control value (rule c.). The control value and the time window are included in the encrypted portion 11.

Additionally or alternatively, the access control device 3 can check whether a label that makes the user recognizable as a guard is formed negative. If the designation is negative, the rule is d. been checked with a positive result. The tag that identifies the user as a watcher is included in the encrypted portion 11.

If a rule to be checked in the access control device 3 gives a negative result, the access is denied and the method 200 ends. This is in FIG. 4 indicated by an arrow at the process step 206.

In the method 200, therefore, those rules encrypted in the encrypted portion 11 by the access management device 9 are assigned to the Access control device 3 can be transmitted, checked in the access control device 3. In the method 200, at least a first rule, which depends on data that is not readily transferable to the access control device 3, is checked in the mobile device 2. The checking of the at least one first rule takes place in a method step 207. First, the access control device 3 sends the mobile device 2 a message. This is followed by the mobile device 2 starting to check the at least one rule. At the same time begins to measure the time for the time frame in the access control device 3.

For example, the mobile device 2 may prompt the user to accept an order of use such as "this is a non-smoking room" by input to the mobile device 2 (rule h.).

Additionally or alternatively, the mobile device 2 can check the successful completion of a security briefing (rule i.). For this purpose, the mobile device 2 perform a test and evaluate.

Additionally or alternatively, the mobile device 2 may grant access only if another access has previously been granted. In this case, it may be that the user first another physical area, for. As a lock or a clean room, must pass through before the user the currently desired access is granted. The mobile device 2 thus checks a residence history of the mobile device 2 (rule f.).

The mobile device 2 can also check whether a payment for the use of the physical area has been made previously (rule g.).

If a rule to be checked in the mobile device 2 is given a negative result, the access is denied and the method 200 ends. This is in FIG. 4 indicated by an arrow at step 207.

The rules that are checked in the mobile device 2 can only supplement the rules that are checked in the access control device 3. It is not permissible to grant access if only one rule to be checked has a negative result. If a rule of the same rule type, e.g. "In the access control device 3 as well as in the step 207 in the mobile device 2 is checked, wherein in step 206, a different time range than in the step 207 given access is granted only if there is a positive result for both time periods.

If all the rules to be checked in the mobile device 2 have been checked with a positive result, then in a method step 208 the mobile device 2 transmits the positive result to the access control device 3. The access control device 3 expects the positive result within a given timeframe. If the positive result reaches the access control device 3 within the time frame, the access control device 3, in particular the controller of the access control device 3, controls the electromechanical device 7 in a method step 209. If no positive result reaches access control device 3 within the time frame, access is denied and the access control procedure ends. This is in FIG. 4 indicated by an arrow at the method step 208.

In a method step 210, the controller of the access control device 3 terminates granting access after a predetermined period of time. For this purpose, the controller controls the electromechanical device 7, whereby the access control device 3 is transferred to a decoupled state. For example, this is a handle 17 (s. Fig. 1 ) Disconnected from a lock, so that a torque from the handle 17 is no longer transferable to the castle. The predetermined period of time has been transmitted in the encrypted portion 11.

As an alternative to the method step 208 and not illustrated, the mobile device 2 can directly control the controller of the access control device 3 or the electro-mechanical device 7 with an opening command, when all rules to be checked in the mobile device 2 have been checked with a positive result.

In FIG. 5 another method 300 according to the invention is illustrated. In FIG. 5 The method steps 301, 302, 303, 304, 305, 306 and 307 correspond to the method steps 201, 202, 203, 204, 205, 206, 207, which are described in FIG FIG. 4 are shown. In contrast to the method 200, the access control device 3 in the method 300 opens a programming interface (API) 8 of the access control device 3 during the time frame. The programming interface 8 is in FIG. 1 shown purely schematically. The programming interface 8 contains data from the transmitting and receiving unit of the access control device 3. The opening of the programming interface 8 takes place only if, in step 306, the rules to be checked in the access control device 3 were checked with a positive result.

If all rules to be checked in the mobile device 2 have been checked in step 307 with a positive result, then in a method step 308 the mobile device 2 transmits the positive result to the programming interface 8 of the access control device 3. The access control device 3 then decides in a method step 309 in that the access is granted and controls the electromechanical device 7 with an opening command in method step 309. Alternatively, in step 308, an opening command may be sent from the mobile device 2 to the programming interface 8 of the access control device 3.

Alternatively and not shown, first in the method step 308 via a conventional, in FIG. 1 not shown interface, z. B. a binary interface, the result of the rules to be checked in the mobile device 2 rules are transmitted to the access control device 3. The access control device 3 can only then open the programming interface 8. The programming interface 8 is for receiving after step 308 the instruction (s) or data for an instruction for the way of granting the access. The instruction received via the programming interface 8 or the data for an instruction received via the programming interface 8 can relate to an instruction as to when the grant of the access is to be ended. The instruction received via the programming interface 8 or the data for an instruction received via the programming interface 8 may also include the manner of visual and / or audible indication of granting the access.

In a further embodiment, the programming interface 8 already opens as a result of the positive result of the comparison of the comparison value with the check value. Ie. the programming interface 8 already opens after step 305. The programming interface 8 opens in particular before step 306. In this way, data, rules or commands for the step 306 can be transmitted via the programming interface 8 to the controller of the access control device 3. For example, a control value, which is required for a check of a further authentication in the access control device 3, can be transmitted via the programming interface 8.

The programming interface may alternatively or additionally be used to receive an updated version of firmware and / or additional firmware, an updated version of an access control device identifier, and / or an updated version of data to perform decryption.

The programming interface 8 can only be partially opened. Thus, the programming interface 8 can only be opened for receiving certain data, while other data that can in principle also be received by the programming interface 8 can not be received if this is not permitted by the at least one command.

The mobile device 2 may include at least one command when and / or what to open the programming interface 8 for. Ie. that, alternatively to the previously described, the programming interface 8 does not open immediately as a result of a positive conclusion of step 305 or 306, but only if the mobile device 2 commands to at least partially open the programming interface 8 to the access control device 3, in particular to the conventional interface , sent.

The programming interface 8 and the conventional interface receive the data and / or commands by the receiving unit of the access control device 3.

In the inventive methods 100, 100a, 200, 300, the encrypted portion 11 is used only in the current access control method 100, 100a, 200, 300. The encrypted portion 11 is not stored in the access control device 3 after completing the access control process 100, 100a, 200, 300. Rather, in each access control method 100, 100a, 200, 300, the data transmitted from the encrypted portion 11 in the current access control method 100, 100a, 200, 300 to the access control device 3 is used. Thus, up-to-date data is always used. If the transmission of the encrypted portion 11 from the mobile device 2 to the access control device 3 is omitted, the access is denied and the access control method 100, 100a, 200, 300 ends.

In the in the FIGS. 3 to 5 In the illustrated method, the at least one first rule in the mobile device 2 is first checked after at least one rule has been checked in the access control device 3. The rule to be checked in the access control device 3 may correspond at least to the comparison of the comparison value with the check value. Alternatively, it is also conceivable that at least one rule to be checked in the access control device 3 is checked for a rule to be checked in the mobile device 2. Thus, in method 200, steps 206 and 207 could be temporally swapped.

As another example, a first rule in the mobile device 2 may already be checked before a rule in the access control device 3 is checked. For example, a first rule in the mobile device 2 may be checked before the comparison value in the access control device 3 is compared with the check value. For example, in the method step 101, 201, 301 already a first rule can be checked. Thus, it may be that for the received access control device identifiers first check whether a payment has been made (rule g.). Only the access control devices 3 are displayed on the display 18 for selection for the user for whom a corresponding payment has been made.

Claims (15)

Method (100, 100a, 200, 300), in particular access control method (100, 100a, 200, 300), for granting access to a physical area,
the method (100, 100a, 200, 300) being performed by at least one access control device (3), which is assignable to the physical area, and by a mobile device (2),
wherein the mobile device (2) contains at least a first rule for granting access,
wherein the method (100, 100a, 200, 300) comprises the step (106, 207, 307): - checking (106, 207, 307) the first rule in the mobile device (2). Method (100, 100a, 200, 300) according to claim 1, characterized in that the mobile device (2) comprises access information (10) for the access control device (3), and wherein the access information (10) comprises an encrypted part (11). which is decryptable by the mobile device (2), wherein the encrypted part (11) is intended to be transmitted to the access control device (3) during the method (100, 100a, 200, 300), wherein in particular the Access information (10) in a readable portion (12) that is unencrypted or decryptable by the mobile device, the readable portion (12) being the first rule and / or one that is displayable to the user on the mobile device (2) Information includes. Method (100, 100a, 200, 300) according to claim 1 or 2, characterized in that the access control device (3) has knowledge of a second rule or data for a second rule or during the execution of the method (100, 100a, 200, 300), the method (100, 100a, 200, 300) comprising the step (105, 205, 206, 305, 306): - checking (105, 205, 206, 305, 306) the second rule in the access control device (3). Method (100, 100a, 200, 300) according to one of the preceding claims, characterized in that the mobile device (2) has the second rule or data for checking the second rule and the mobile device (2) of the access control device (3) transmits the second rule or the data for checking the second rule during the method (100, 100a, 200, 300), in particular that the access information (10), in particular the encrypted portion (11), the second rule or the data for checking the second rule and / or in particular that the access control device (3) transmits the second rule transmitted by the mobile device (2) or the data for checking the second rule only during the current access control method (100, 100a, 200, 300) used to provide access to the physical area. Method (100, 100a, 200, 300) according to one of the preceding claims, characterized in that the mobile device (2) contains a comparison value contained in particular in the encrypted portion (11) during the method (100, 100a, 200 300, 300) in a step (102, 202, 302) of the method (100, 100a, 200, 300) to the access control device (3), the method (100, 100a, 200, 300) comprising the following steps (104, 204, 304, 105, 205, 305) comprises: - Transmission (104, 204, 304) of a check value from the mobile device (2) to the access control device (3) Comparison (105, 205, 305) of the comparison value with the check value in the access control device (3), in particular that the comparison value and the check value are always transmitted during the method (100, 100a, 200, 300) before the comparison value is compared with the check value, so that the access control device (3) always transmits the transmitted comparison value and the transmitted check value only in the current access control method (100, 100a, 200, 300) used. Method (100, 100a, 200, 300) according to one of the preceding claims, characterized in that the first and / or the second rule, in particular the second rule, corresponds to or comprises one of the following rules: a. Access is granted only after a positive result of the comparison of the comparison value with the verification value, b. Access is granted only in a certain period of time, c. Access is granted only if there is a positive result of further authentication, in particular by means of a code or a biometric recognition, d. Access is only granted if a label that identifies the user as a guard is negative. Method (100, 100a, 200, 300) according to one of the preceding claims, characterized in that the first rule corresponds to or comprises at least one of the following rules: e. The access is granted only if the mobile device (2) carries out a further authentication, in particular by means of the input of a code or a biometric recognition, with a positive result, f. The access is granted only if a residence history of the mobile device (2) coincides with a specification of the residence history, G. Access will only be granted if payment has been made in advance, H. Access is granted only if a physical order has been accepted, i. Access is only granted if a training, in particular a safety instruction, has been successfully completed. Method (100, 100a, 200, 300) according to one of the preceding claims, characterized in that the first and / or the second rule, in particular at least one of the rules c. to i., applies only in a given time window. Method (100, 100a, 200, 300) according to any one of the preceding claims, characterized in that the mobile device (2) comprises a time detection means and the first rule contains a time dependent condition for granting access, the first rule being by means of time, the mobile device (2) is present by means of the time detection means is checked, in particular, the access control device (3) is formed free of a knowledge of a time. Method (100, 100a, 200, 300) according to one of the preceding claims, characterized in that the first rule contains an additional condition in addition to the second rule and / or contains a restriction of the second rule. Method (100, 100a, 200, 300) according to one of the preceding claims, characterized in that the mobile device (2) transmits the result of checking the first rule to the access control device (3) and the access control device (3) grants the access control device (3) Access decides. Method (100, 100a, 200, 300) according to one of the preceding claims, characterized in that the access control device (3) comprises a programming interface (8), wherein the access control device (3) and the mobile device (2) during the method (100 , 100a, 200, 300), in particular during the access control process (100, 100a, 200, 300), communicate with each other via the programming interface (8). Method (100, 100a, 200, 300) according to one of the preceding claims, characterized in that the access control device (3) opens the programming interface (8) during the method (100, 100a, 200, 300), wherein in particular the access control device (3 ) the programming interface (8) opens as a result of a positive result of a check of the rule, which is preferably checked in the access control device (3), particularly preferably as a result of the comparison of the comparison value with the check value. Access control system (1) in particular for carrying out a method (100, 100a, 200, 300) according to one of Claims 1 to 13,
with an access control device (3), which can be assigned to a physical area, and with a mobile device (2),
wherein the mobile device (2) includes at least a first rule for granting access to the physical area, the mobile device (2) checking the first rule for granting access to the physical area. Computer program product for a mobile device (2) of an access control system (1) according to claim 14 and / or for carrying out a method (100, 100a, 200, 300) according to one of claims 1 to 13.

Images