IT201900011634A1 - Access release system of a structure and associated method - Google Patents

Description

DESCRIPTION

Attached to a patent application for an INDUSTRIAL INVENTION PATENT entitled:

"Access release system for a structure and associated method"

Field of the invention

The present invention relates to the sector of access control systems and in detail concerns an access release system for a structure and a method of authentication and access to structures or buildings.

Known art

With the spread of remote booking systems and electronic management of access to structures, in particular apartments and hotel rooms, systems have spread that allow you to interact with the locks of apartments and hotel rooms without intermediaries, i.e. without the presence of the hotelier or property owner; such systems typically employ software applications and hardware operating on the locks of interest.

Known systems are characterized by limits in the management of safety and considerable complexity. The main problems relating to security are given by the location of the hardware interfaced with the locks, often easily accessible to any malicious persons, and / or are also related to the management of the veracity control of user access credentials. The Applicant has in fact observed that the access management systems are easily subject to the actions of hackers, who can fraudulently take access codes via software in order to perform fraudulent access.

Among the purposes that the object of the present invention aims at, there are the description of a system for unlocking the accesses of a structure, which is capable of solving the drawbacks of the prior art.

Also among the purposes that the object of the present invention aims is to describe a method of authentication and access to structures, which is able to solve the drawbacks of the known art.

Summary of the invention

The object of this disclosure will now be described in accordance with one or more aspects, combinable with each other or with claims or with portions of the following detailed description.

According to a first aspect, a system (1) for unlocking accesses (2) of a structure is provided, the said system comprising:

- an interface (4a) towards a portable electronic device (5), said interface (4a) being configured to detect the presence of a portable electronic device (5) in proximity of the same interface (4a), said interface (4a) comprising a receiver stage configured to receive at least one authentication signal or code (20, 21), for requesting authorization to unlock an access adjustment device (3), from said portable electronic device (5);

- a control unit (4), designed to be operatively connected in use to an access adjustment device (3), in which:

- the control unit (4) includes a server interface (4c), configured to automatically retransmit an authentication signal or code (20, 21) to a remote server (6) and to wait for an authorization signal (10e) from said server (6);

- and in which the control unit (4) is configured to cause at least one release of said lock (3) upon receipt of an authorization signal (10e) from the server (6)

According to a further non-limiting aspect, the control unit (4) is configured to: first automatically retransmit the said authentication signal or code (20, 21) received from the portable electronic device (5), and / or a access authorization contained in the authentication signal or code (20, 21) received by the portable electronic device (5) towards the server (6) and subsequently to wait for the reception of said authorization signal (10e) from the server (6) .

According to a further non-limiting aspect, the said authentication signal or code (20, 21) in turn includes an alphanumeric access authorization code.

According to a further non-limiting aspect, the control unit (4) is configured to be mechanically connected to the access adjustment device (3) and / or is configured to be electrically connected to a servo-actuator of said access adjustment device ( 3) and / or integrates said access control device (3), or is mechanically connected to the access control device (3) and / or is configured to be electrically connected to a servo actuator of said access control device ( 3).

According to a further non-limiting aspect, the access adjustment device (3) is a lock and / or a part of a lock and / or a turnstile or opening that can be opened.

According to a further non-limiting aspect, said authentication signal or code (20, 21) comprises a QR code and / or a visual code and / or an alphanumeric OTP code, and / or a single-use password, and / or a timestamp.

According to a further non-limiting aspect, the alphanumeric OTP code and / or the single-use password are or include codes of the dynamic type.

According to a further non-limiting aspect, the authentication signal or code (20, 21) is automatically generated by the portable electronic device (5) for access to the structure (2) and / or upon approximation of the electronic device portable (5) to the control unit (4) and / or to the interface (4a).

According to a further non-limiting aspect, said control unit (4) is also configured to extract the access authorization code from the authentication signal (20, 21) within a predetermined time, and / or to retransmit the said access code access authorization, without alteration, within a predetermined time, optionally in which the said predetermined time is an expiration time stored on the said server (6).

According to a further non-limiting aspect, said predetermined time is comprised between 10s and 45s, more preferably between 20s and 30s or over intervals comprised between 5s, 10s and 15s.

According to a further non-limiting aspect, said access authorization code is a dynamic code, having a predetermined and limited temporal validity, following which it is no longer usable for access to said structure, optionally said dynamic code being regenerated cyclically from said server (6).

According to a further non-limiting aspect, said access authorization code is a dynamic code, having a predetermined and limited temporal validity, following which it is no longer usable for access to said structure, optionally said dynamic code being regenerated cyclically by said portable electronic device (5).

According to a further non-limiting aspect, the code is regenerated cyclically at each said predetermined time interval, in particular with a predetermined time interval between 10s and 45s, more preferably between 20s and 30s or on intervals between 5s, 10s and 15s .

According to a further non-limiting aspect, the control unit (4) is configured to: first automatically retransmit the said access authorization code received from the portable electronic device (5) to the server (6) and subsequently to wait for the reception of the said authorization signal (10e) from the server (6).

According to a further non-limiting aspect, the control unit (4) is configured to extract the access authorization code from the authentication signal (20, 21) within a predetermined time, and / or to retransmit the said access code access authorization, without alteration, within a predetermined time,

According to a further non-limiting aspect, said predetermined time is an expiration time stored on said server (6).

According to a further non-limiting aspect, the interface (4a) towards the portable electronic device (5) is, alternatively,

- separate from the body of the control unit (4), and includes a camera (4a) for the optical reading of codes and / or a receiver adapted to receive a radio signal including a predefined code; said interface (4a) being configured to be installed in an external space with respect to the structure delimited by said access (2); or

- is integrated in the body of the control unit (4), and preferably includes a radio receiver stage.

According to a further non-limiting aspect, the radio receiver is a short-distance communication receiver, optionally of the NFC or Bluetooth type.

According to a further non-limiting aspect, the radio signal is an encrypted radio signal.

According to a further non-limiting aspect, the control unit (4) comprises a memory, optionally a non-volatile memory, within which it is possible to store an electronic address of a user to which to assign the transmission of an access signal, said signal control being indicative of an access or an attempt to access the structure and being determined by the receipt, by the control unit (4) and / or the interface (4a) of an access authorization code; said control unit (4) being configured to transmit or cause the transmission of said access signal when the control unit (4) has received an access authorization code.

According to a further non-limiting aspect, the system includes a server (6), operationally connected with the control unit (4), optionally configured to be at least temporarily operationally connected with the portable electronic device (5).

According to a further non-limiting aspect, the server comprises a memory, optionally a non-volatile memory, within which it is possible to store an electronic address of a user to which to assign the transmission of an access signal, said control signal being indicative of a access or an attempt to access the facility and being determined by the receipt by the control unit (4) and / or the interface (4a) of an access authorization code; said server (6) being configured to transmit said access signal when the control unit (4) has received an access authorization code.

According to a further non-limiting aspect, the server (6) comprises:

- a data transceiver interface respectively to and from the control unit (4);

- a time counter, configured to automatically perform at least one count of the time that elapses between a first instant in which the server (6) generates a random or pseudorandom number and / or an access authorization code to be transmitted to the electronic device portable, and a second instant of time in which the server (6) receives the access authorization code retransmitted by the control unit (4);

- optionally a data transceiver interface respectively to and from the portable electronic device (5).

According to a further non-limiting aspect, the system includes a server (6), operationally connected with the control unit (4), having a data transceiver interface respectively to and from the control unit (4);

said server (6) being configured to generate an alphanumeric OTP code, and / or a single-use password, and / or a timestamp upon receipt of an alphanumeric OTP code, and / or a single-use password and / or a timestamp retransmitted from the control unit (4) to the server (6);

said server (6) being configured to generate the authorization signal (10e), and to automatically transmit the authorization signal (10e) to the control unit (4) when the alphanumeric OTP code generated by the server (6) is identical to the alphanumeric OTP code retransmitted by the control unit (4) to the server (6), and / or when the single-use password generated by the server (6) is identical to the single-use password retransmitted by the control unit (4) to the server (6) and / or when the timestamp generated by the server (6) is identical to the timestamp retransmitted by the control unit (4) to the server (6).

According to a further non-limiting aspect, the server (6) is configured to generate the alphanumeric OTP code, and / or the single-use password, and / or the timestamp upon receipt of an alphanumeric OTP code, and / or a single-use password and / or a timestamp retransmitted from the control unit (4) to the server (6) by electronically accessing a memory associated with the server (6) and accessing a seed stored in an account corresponding to the profile of the 'user (798) and / or of the portable electronic device (5) that generated the authentication signal or code (20, 21).

According to a further non-limiting aspect, said time counter is in particular configured to cause the transmission of the authorization signal from the server to the control unit only when the following conditions occur:

- a time span between the first and second instant of time is less than a predetermined value, said predetermined value being optionally stored in the server itself,

- the access authorization code retransmitted from the control unit (4) to the server (6) is identical to a copy of the access authorization code stored on said server (6).

According to a further non-limiting aspect, the control unit (4) comprises a power supply control element, optionally a button, physical or electronic, which supplies power to the data processing unit of the control unit (4) and / or to the control unit (4) in its entirety in a temporally limited manner, said control unit (4) being configured to make it impossible to implement the access regulation device (3) and / or to retransmit data to the server ( 6) and / or receiving data from the server (6), without pressing said power control element.

According to a further non-limiting aspect, the control unit (4) comprises an electronic circuit which disables the power supply of the control unit (4) for a predetermined period of time, and optionally increasing the number of failed access attempts, optionally when the authentication signal (20, 21), or a part of it, transmitted by the said portable electronic device (5) to the control unit (4) is incorrect or corrupted.

According to a further aspect, a method of authentication and access to structures or buildings is described, which includes:

- a phase of approach (900) of a portable electronic device (5) to a control unit (4),

- an authentication step (904) of the portable electronic device (5), in which the transmission of an authentication signal from the portable electronic device (5) to an interface (4a) of the control unit (4) of an access release system, wherein said authentication signal (20, 21) comprises an access authorization code, said access authorization code being a dynamic code;

- sending the access authorization code, received from the control unit (4), to a remote server (6), said sending being performed by the control unit (4); - a verification phase (906), in which the server (6) electronically compares the access authorization code received from the control unit (4) with an original version of the access authorization code.

According to a further non-limiting aspect, following the verification phase (906) the server (6) carries out a transmission (907; 908) towards the said control unit, alternatively of one of the following two signals:

- an authorization signal for the release of an access control device (3) to a structure (2) via the control unit (4); or

- a rejection signal, which prevents the opening of the access adjustment device (3) to the structure (2) through the control unit (4).

According to a further aspect, a method of authentication and access to structures is described, said method comprising:

- a phase of approach (900) of a portable electronic device (5) to a control unit (4),

- an authentication step (904) of the portable electronic device (5), in which the transmission of an authentication signal or code (20, 21) from the portable electronic device (5) to an interface (4a) of the control unit (4) of an access release system, wherein said authentication signal or code (20, 21) comprises an access authorization code;

- sending the authentication signal or code (20, 21) and / or the access authorization code, received by the control unit (4), to a remote server (6), said sending being performed by the control unit (4);

- a verification phase (906), in which the server (6) electronically compares the access authorization code received from the control unit (4) with a secondary version of the signal or authentication code (20, 21) and / or the access authorization code generated by the server (6) itself;

- in which following the verification phase (906) the server (6) carries out a transmission (907; 908) towards the said control unit, alternatively of one of the following two signals:

- an authorization signal (10e) for the release of an access control device (3) to a structure (2) via the control unit (4); or - a rejection signal, which prevents the opening of the access control device (3) to the structure (2) through the control unit (4).

According to a further non-limiting aspect, said authorization signal (10e) is transmitted only when the verification phase (906) ends with an identity result between the secondary version of the authentication signal or code (20, 21) and / or the access authorization code generated by the server (6) and the authentication signal or code (20, 21) and / or the access authorization code received from the server (6).

According to a further non-limiting aspect, the rejection signal is transmitted when the verification phase (906) ends with a result of lack of identity, or of at least partial difference, between the secondary version of the signal or authentication code (20, 21) and / or the access authorization code generated by the server (6) and the authentication signal or code (20, 21) and / or the access authorization code received from the server (6).

According to a further non-limiting aspect, the unlocking authorization signal can be transmitted from the server (6) to the control unit (4) when the access authorization code received from the control unit (4) and / or retransmitted by the latter to the server (6) it is identical to the copy of the access authorization code temporarily stored on said server (6); the rejection signal is transmitted by the server (6) to the control unit (4) if the access authorization code received from the control unit (4) and / or by the latter is retransmitted to the server (6 ) is different from the copy of the access authorization code temporarily stored on said server (6).

According to a further non-limiting aspect, the access authorization code is a dynamic code and / or includes a single-use password and / or an OTP code.

According to a further non-limiting aspect, the secondary version of the authentication signal or code (20, 21) and / or of the access authorization code is electronically generated, in said verification phase (906) by the server starting from a seed electronically retrieved by the server (6) in a memory operatively associated with it, in which the seed is stored in an account previously created and associated, optionally univocally associated, to the portable electronic device (5) and / or to a user (798) uniquely associated with said portable electronic device (5).

According to a further non-limiting aspect, in said verification phase (906) said server (6) generates a secondary version of said dynamic code and / or of the single-use password and / or OTP code starting from said seed, and compares electronically the dynamic code and / or single use password with the dynamic code and / or single use password received from the control unit (4).

According to a further non-limiting aspect, there is a pre-authentication step (903), comprising a reception of an access authorization code, in which the portable electronic device (5) receives the access authorization code generated by the server, said pre-authentication taking place prior to the authentication phase (904).

According to a further non-limiting aspect, the pre-authentication step (903) comprises a transmission of a request signal (10a) or is anticipated by a code generation request step (902) to said server (6), in to which said transmission is carried out by the portable electronic device (5) and being destined for said server (6).

According to a further non-limiting aspect, the method comprises a step of generating a timestamp by the portable electronic device (5) and transmitting the said timestamp in association with and / or within the said authentication signal or code (20, 21) ; said method comprising a timestamp comparison step, in which the control unit (4) compares the timestamp received by the portable electronic device (5) with a time indication found by the control unit (4) itself, and if a deviation between the timestamp and the time indication is greater than a predefined time interval, the phase of sending the signal or authentication code (20, 21) and / or the access authorization code received by the control unit (4), towards the server (6).

According to a further non-limiting aspect, the request signal (10a) includes a hash of the current time of the generation of the request signal itself (10a).

According to a further non-limiting aspect, in the verification phase (906) the server (6) performs a comparison between a first instant of time in which the server (6) itself has generated and temporarily stored the access authorization code and a second instant of time in which the access authorization code transmitted by the control unit (5) is received by the server (6) and / or in which the transmitted access authorization code is received by the control unit (4) from the portable electronic device (5).

According to a further non-limiting aspect, the method comprises a memorization step of at least one account uniquely associated with a user (798) in a memory operatively connected to said server (6) and a subsequent memorization step, in said account, of at least an authorization code with limited validity, usable a predefined number of times, and in which in said verification phase (906), the server (6) electronically compares a limited validity code received from, and / or read through, the control unit (4) with a code of limited validity previously stored in said account, and sends the authorization signal (10e) to the unlocking of the access regulation device (3) to the structure (2) via the control unit ( 4) if the comparison result provides proof of identity between the two authorization codes of limited validity; said method comprising a step of reducing the number of times said limited validity authorization code can be used and / or comprising a cancellation of said limited validity authorization code from said account.

According to a further non-limiting aspect,

- if the time interval between the first instant of time and the second instant of time is less than a predetermined value:

- if the access authorization code transmitted by the control unit (4) to the server (6) is identical to the access authorization code stored by the server (6), the transmission is carried out towards the said control unit the authorization signal for the release of an access regulation device via the control unit; or

- if the access authorization code transmitted by the control unit (4) to the server (6) is different from the access authorization code stored by the server (6), (908) the transmission to the said rejection signal control unit, which prevents the opening of said lock (3) by means of the control unit (4);

and, alternatively,

- if the time interval between the first instant of time and the second instant of time is greater than the predetermined value, the rejection signal is transmitted to the said control unit, which prevents the opening of the said lock (3 ) via the control unit (4).

According to a further non-limiting aspect, following the transmission of the request signal (10a), the server (6) performs a procedure for generating a random or pseudorandom number on which to base the generation of the access authorization code, and executes a time counting step lasting for a predetermined period of time, following which the access authorization code is no longer usable and / or is replaced and / or following which it automatically generates a new random or pseudorandom number and / or a new access authorization code, said time count step determining the first instant of time, said time span being determined by the temporal distance between the first time interval and the second time interval.

According to a further non-limiting aspect,

- defined t0 as the instant in time in which the control unit (4) receives the said authentication signal or code (20, 21) and / or the access authorization code, - when the server (6 ) receives the authentication signal or code (20, 21) and / or the access authorization code that is / have been transmitted by the control unit (4), towards the server (6) itself, it generates a plurality of secondary versions of the authentication signal or code (20, 21) and / or of the access authorization code possible, on the basis of said seed, starting from said basic time instant t0, in the time intervals [ (t0-Δt) ÷ (t0 + Δt)] where Δt is a predetermined instant of time;

- said server (6) transmitting said authorization signal (10e) only if at least one of the secondary versions of said plurality of secondary versions of the authentication signal or code (20, 21) and / or of the authorization code to possible access, on the basis of the said seed, starting from the said basic time instant t0, in the time intervals [(t0-Δt) ÷ (t0 + Δt)] coincides with the authentication signal or code (20, 21 ) and / or the access authorization code that is / have been transmitted by the control unit (4) to the server (6) itself.

According to a further non-limiting aspect, following the generation of the random or pseudorandom number, and / or following the generation of the access authorization code, a transmission of the access authorization code to the portable electronic device is performed automatically.

According to a further non-limiting aspect, the verification phase (906) is followed by the transmission of the authorization signal for the release of an access regulation device (3) only when this verification is performed within the predetermined time frame and only when the code access authorization transmitted by the control unit is equal to the access authorization code generated by the server (6).

According to a further non-limiting aspect, comprising a step for activating an actuator of said lock (3), said actuator being contained within the body of said control unit (4) and acting directly on said lock (3), said activation taking place following the transmission of the authorization signal for the release of the access control device (3).

According to a further non-limiting aspect, following activation of the actuator, at least one bolt of said lock (3) is moved to eliminate the removable junction of said access with the portion of said structure.

According to a further non-limiting aspect, the transmission of the access authorization code from the server (20, 21) to the portable electronic device (6) takes place within the aforementioned predetermined time frame and / or within the second instant of time.

According to a further non-limiting aspect, said access authorization code comprises a visual code, in particular a QR code, and in which said authentication signal is a light signal and / or is a representation of said visual code, in particular of the said QR code, on a screen (5d) of the said portable electronic device (5).

According to a further non-limiting aspect, the interface (4a) towards the portable electronic device (5) comprises a camera, said method comprising positioning the portable electronic device (5) in correspondence with said camera (4a), so that said camera can read the visual code, in particular the said QR code, from the screen of the said portable electronic device (5).

According to a further non-limiting aspect, the interface (4a) comprises an optical and / or radio receiver stage.

According to a further non-limiting aspect, said receiver stage, and / or said interface (4a), comprises in particular a radio receiver, configured to receive a radio signal incorporating said access authorization code; said method comprising a phase of receiving the said radio signal transmitted by the portable electronic device so that this control unit receives the said access authorization code.

According to a further non-limiting aspect, the said method comprises receiving a control signal on an input of the control unit (4), said control signal being a start and / or end signal of access to said structure; the said method comprising the inhibition of the transmission of the said an authorization signal for the release of an access regulation device by the control unit (4), and / or the activation of the actuator when the said control signal is configured in an inhibit configuration, said inhibition configuration optionally being present prior to a check-in date of a user within said structure.

According to a further non-limiting aspect, said unlocking authorization signal is a signal with a first hierarchy, and the control signal is a second hierarchy signal lower than the first hierarchy.

According to a further non-limiting aspect, the method comprises a step of transmitting an access signal to the structure, said transmission being carried out by the control unit (4), or by the server (6) upon authorization from the control unit (4), upon transmission of an access authorization code from a portable electronic device (5) to the control unit (4) and / or upon verification of identity between the access authorization code transmitted to the control unit (4) by the portable electronic device (5) to the control unit (4) or retransmitted by the control unit (4) to the server (6) and access authorization code temporarily stored on the server (6).

According to a further non-limiting aspect, the transmission of said access signal takes place towards a predetermined recipient, optionally towards a recipient whose address is previously stored in a memory of the control unit (4) and / or of the server ( 6).

According to a further aspect, a software program is described here, adapted to be executed by an electronic processor; said software program comprising portions of code that when executed cause the execution of the steps of the method in accordance with one or more of these aspects.

According to a further aspect, a software program is described in particular which, when executed, causes the execution of:

- an authentication step (904) of a portable electronic device (5), in which an authentication signal transmitted by the portable electronic device (5) to an interface (4a) of the control unit (4) is received ) of an access release system, wherein said authentication signal (20, 21) comprises an access authorization code, said access authorization code being a dynamic code;

- an electronic extraction phase of the said access authorization code from the authentication signal;

- sending the previously electronically extracted access authorization code to a remote server (6), said sending being performed by the control unit (4);

- in which with the said sending, the said software causes the execution of a verification phase (906), in which the server (6) electronically compares the access authorization code received from the control unit (4) with a original version of the access authorization code;

- a reception phase on the data processing unit (4), alternatively, of one of the following two signals,

- an authorization signal for the release of an access control device (3) via the control unit (4); or

- a rejection signal, which prevents the opening of said lock (3) through the control unit (4),

in which reception takes place following the verification step (906) and in which said one of the two preceding signals is transmitted by the server (6).

According to a further aspect, a non-transitory memory support is also described, comprising said software program.

According to a further aspect, a distributed computing environment is also described, configured to perform:

- an authentication step (904) of a portable electronic device (5), in which the transmission of an authentication signal from the portable electronic device (5) to an interface (4a) of a control unit (4) takes place of an access release system, in which said authentication signal (20, 21) comprises an access authorization code, in which the access authorization code is a dynamic code and in which the authentication step ( 904) takes place following a phase of approach (900) of a portable electronic device (5) to the control unit (4);

- sending the access authorization code, received from the control unit (4), to a remote server (6), said sending being performed by the control unit (4); - a verification phase (906), in which the server (6) electronically compares the access authorization code received from the control unit (4) with an original version of the access authorization code;

- in which following the verification phase (906) the server (6) carries out a transmission (907; 908) towards the said control unit, alternatively of one of the following two signals:

- an authorization signal for the release of an access regulation device via the control unit; or

- a rejection signal, which prevents the opening of said lock through the control unit.

According to a further aspect, the use of the system and / or the use of the method is described according to one or more of the previous aspects for accessing structures, said structures optionally including at least one of the buildings of the following list: houses, warehouses, apartments, villas, hotels, motels, bed and breakfasts, health facilities and / or parts or rooms of health facilities, security areas, detention centers, police stations, shelters, train cabins, bathing and / or spa facilities .

Description of the figures

The invention will now be described with reference to one or more non-limiting embodiments described with the aid of the attached figures, in which:

Figure 1 illustrates a simplified diagram of a first embodiment of a system object of the present disclosure;

Figure 2 illustrates a simplified diagram of a second embodiment of the system object of the present disclosure;

Figure 3 illustrates a diagram showing a data transceiver part between a portable electronic device and a control unit according to the first embodiment of the system described here;

Figure 4 illustrates a diagram showing a data transceiver part between a portable electronic device and a control unit according to the second embodiment of the system described here;

- Figure 5 illustrates a simplified time diagram, where a time scale is represented indicating a first and a second time value, which together define a time interval within which an access authorization code, temporarily stored on a memory a server, must be retransmitted to the latter;

- figure 6 illustrates a flow diagram, illustrating some phases of a data interchange process between a portable electronic device of a user, a control unit part of the system object of the present disclosure, and a server also part of the same system;

- Figure 7 illustrates a flow diagram, illustrating some phases of a booking process for a structure in accordance with a first alternative configuration in which the user is not profiled;

- Figure 8 illustrates a flow diagram, illustrating some phases of a booking process for a structure in accordance with a second alternative configuration in which the user is profiled;

- figure 9 illustrates a simplified scheme, in which subjects involved in booking the said structure are identified;

- figure 10 illustrates a temporal relational diagram, from which the information exchange flows between the subjects involved in the reservation of the structure are deduced according to the first configuration;

- figure 11 illustrates a temporal relational diagram, from which the information exchange flows between the subjects involved in the reservation of the structure are deduced according to the second configuration;

Figure 12 illustrates a schematic illustration of a further embodiment of the present invention;

Figure 13 illustrates a block diagram which partially illustrates the functionality of the further embodiment described above.

Detailed description of the invention.

With reference to Figure 1, the reference number 1 indicates as a whole a system for unlocking access to a structure. According to the present invention, accesses mean doors or portals, or windows, or passages that allow individuals or vehicles to access a structure. In particular, figure 2 shows a door 2, having an access adjustment device 3, in particular and not limited to a lock, which engages in a 2m portion of wall in front of it. More precisely, the access adjustment device 3 is equipped with at least one movable bolt between a first position in which it releases the door 2 from engagement with the 2m portion of the wall and a second position in which it engages the door 2 with said 2m portion of the wall, in particular by constraining the door in a predetermined position. The access regulation device can alternatively and in a non-exhaustive way be represented by an opening passage and / or by a turnstile.

Although the system described here has been conceived mainly for access to rental apartments, it is clear that this intended use should not be understood as exhaustive, since it is also possible to use - in a non-exhaustive way - the system described here for the '' access to one or more of the following structures: houses, warehouses, apartments, villas, hotels, motels, bed and breakfasts, health facilities and / or parts or rooms of health facilities, security areas, detention centers, police stations, shelters, train cabins, bathing establishments and / or spas, ports or parts of ports and / or airports, stadiums or luggage storage.

The system 1 object of the present disclosure comprises at least a control unit 4, equipped with an interface 4a towards a portable electronic device 5 supplied to the user, in particular to the user who wishes to open the door 2 through the system here described. The interface 4a is in particular configured to detect the presence of a portable electronic device 5, for example through a proximity sensor or directly through the interface 4a. The portable electronic device 5 can be any cellular telephone equipped with technology such as to allow data exchange via wireless network or cellular mobile radio network, or a transceiver, or a portable computer or tablet PC. A software program (or application) is conveniently installed on this mobile phone or computer or tablet that performs certain predefined steps for the execution of the method object of this disclosure. Also the portable electronic device 5 can be a device for short-distance radio communication of the active type, or alternatively of the semi-active or passive type. The passive device is preferably equipped with a ROM to store a suitable code, including for example an emergency code for operating the access control device 3. Protocols and / or standards that can be used for radio communication can be non-exhaustive Bluetooth, in particular BLE, or NFC, or ZigBee, ISO 14443 and / or ISO 15693 protocol for contactless smartcards, The use of a short-distance communication protocol reduces the risk of fraudulent interception of communications by third parties , and therefore contributes to the security of the system described here.

The control unit 4 is configured to be operationally connected with a server 6, which is typically installed in a remote position with respect to the control unit 4. According to the present invention, for "operatively connected" or "operatively connected" is to be meaning a control unit 4 connected by means of a wired or wireless data transmission between the server 6 and the control unit 4 itself. The data transmission can be of the wire type or on a wireless channel, for example a radio channel. The portion of the control unit 4 which is responsible for managing the data exchange with the server 6 is defined as the server interface 4c. The control unit 4 finally comprises an actuator, or servo-actuator or servomechanism, indicated with the reference number 8, which is mechanically interfaced with the access adjustment device 3 in order to allow its movement between the open configuration and the closed configuration. and / or in order to allow at least temporary switching between a first configuration in which access to structure 2 is prevented and a second configuration in which access to structure 2 is permitted for at least one user. Although not shown, it is possible to provide a configuration where the control unit 4 integrates the access adjustment device 3 inside the body. In this case, the actuator is preferably contained inside the control unit 4. L The actuator can comprise an electro-actuated solenoid, for example integrated in a relay, which for example commands the opening of the lock bolt and / or which temporarily releases, during its activation, the lock of a turnstile.

In order to reduce the risk of remote or brute force attacks, and therefore in the broader purpose of contributing overall to the computer security of the system 1 in synergy also with the components described in the present disclosure, the control unit 4 can conveniently be provided of a physical security device designed to prevent attacks by malicious users. For example and not limitedly, the control unit 4 can be equipped with a push button, physical or electronic, which supplies power to the data processing unit of the control unit 4 in a timed manner, without which it is not possible to perform the retransmission of the data towards the server 6 and / or it is not possible to perform the reception of the data from the server 6 in accordance with one or more portions of this disclosure and / or an electronic circuit that disables the power supply of the control unit 4 for a predetermined period of time, and optionally increasing the number of failed login attempts.

In a first embodiment, a plurality of data transmissions take place between the elements of the system 1, and in particular between the portable electronic device 5 and the server 6, performed according to a predetermined scheme, better described in the following text portion. A first transmission is indicated with the reference number 10a, and is a transmission of a request signal which takes place from the portable electronic device 5 to the server 6. Preferably, this transmission takes place upon, more precisely following, recognition or identification of a portable electronic device 5 by the control unit 4. A second transmission is indicated with the reference number 10b, and is a transmission of an access authorization code from the server 6 to the portable electronic device 5 which has carried out the request. The second transmission 10b takes place after the first transmission 10a; both the first transmission 10a and the second transmission 10b take place at least partially on a wireless transmission channel, in particular at least partially on a cellular mobile radio channel and / or on a radio channel of a wireless local network. This allows you to have a lot of flexibility in establishing the authentication request with the server in terms of positioning the portable electronic device 5.

A third transmission, indicated with the reference 10c, is a transmission of the authorization code to access the structure from the portable electronic device 5 to the control unit, and in particular to the interface 4a of the control unit. If no anomalies are found, the access authorization code transmitted by the server 6 to the electronic portal device 5 is identical to the access authorization code that the portable electronic device 5 transmits to the interface 4a of the control unit. Otherwise, if there are anomalies, or in the event of an attempted fraud, this code may also be different. A fourth transmission is indicated with the reference 10d, and is a retransmission of the access authorization code received from the control unit 4. The control unit retransmits this code, in particular without alteration, towards the server 6. A fifth transmission is indicated by the reference number 10e and is a transmission alternatively, either of an authorization signal for the release of the access control device 3 or of a refusal signal for the release of the access control device 3. The transmission of the signal authorization to unlock the access regulating device 3 or denying the unlocking of the access regulating device 3 depends on a comparative check that the server 6 is configured to perform automatically. The access authorization code is automatically and temporarily stored in the memory of the server 6 and is kept for at least the time necessary for the second transmission 10b, the third transmission 10c, and the fourth transmission 10d to take place. In particular, the transmission of the authorization signal for the release of the access adjustment device 3 is the result of an equality comparison.

In a first embodiment of the system, shown in Figure 1, the control unit 4 is in the form of a single body installed at the door 2 and in particular near the access adjustment device 3; in this case, the interface 4a towards the portable electronic device 5 is preferably a wireless interface, in particular a radio interface. The access authorization code is therefore a code transmitted in an authorization signal transmitted by the portable electronic device 5 to the interface, which subsequently extracts the code from said signal.

In a second embodiment, shown in Figure 2, the interface 4a is an interface comprising a camera or equivalent recording means. The body of the control unit 4 is separate from the interface 4a: while the latter is installed in front of the door 2, and is therefore accessible from the outside of the structure, the body of the control unit 4 is positioned inside door 2, or in any case behind it, so as to be more difficult to access. The camera is in particular configured to allow you to capture an image contained on the 5d screen. The access authorization code on the portable electronic device 5 is therefore a visual code and preferably, although not limitedly, it is a QR code. This visual code can be a code that is always valid, with unlimited validity over time and / or for an indefinite number of accesses, or a code with limited validity, usable only a finite number of times, greater than or equal to one. This code is a static code. This configuration advantageously allows to reduce the generation of radio signals and makes the transmission of the access authorization signal difficult to identify by malicious parties. Also this configuration allows the management of safety operations and / or emergency situations as described in the following part of the patent application. The operational connection between the body of the control unit 4 and the 9 interface 4a can be on a wired or wireless channel.

As shown in Figure 5, one of the peculiarities of the system object of the present disclosure is that following the second transmission 10b, the server 6 generates an ideally pure random number, or at least a suitably seeded pseudorandom number, through which it generates a copy of the access authorization code and transmits it to the portable electronic device 5. This code is temporarily stored for a predetermined period of time, for example and not limitedly between 10s and 45s, even more preferably between 20s and 30s , on a server memory. According to the present invention, the instant of storage of the access authorization code on server 6, or equivalent its generation, correspond to a first and predefined instant of time t1. The access authorization code on server 6 is generated on the basis of a first random or pseudorandom number RND1. When the control unit 4 transmits to the server 6 the copy of the access authorization code received previously from the transmission carried out by the portable electronic device 5, and this retransmission takes place at a second instant of time t2, it occurs if the code access authorization stored on the server is identical to the one retransmitted by the control unit, and if so, the fifth transmission 10e is carried out with an authorization signal to unlock the access control device 3. The server 6 it also checks if the retransmission is carried out within the predefined time period tmax, which is provided for safety. Figure 5 shows in particular a configuration in which the retransmission at the second instant of time t2 takes place within the predefined time period tmax. In fact, if fraud attempts occur, it is in fact easy for them to occur by retransmitting the access authorization code well beyond the predefined time period tmax; server 6 is automatically configured to generate a new random or pseudorandom number RND2, and therefore a new access authorization code, and to delete the previously generated one from the memory. In this case, even if the access authorization code retransmitted by the control unit 4 or by a fraudulent copy of it were actually correct, but occurred after the predefined time period, it would no longer be identical to that stored on server 6, and consequently the server 6 would carry out the fifth transmission 10e with a denial signal. For this reason, the access authorization code described here is defined as a dynamic code, that is, a code that varies over time.

In a particular embodiment, moreover, the first transmission 10a takes place by means of a request signal which contains a hash of the current time and of an access key also known to the server 6. This increases the security in the first phase of authentication. of the user. Preferably, although not limitedly, this hash is a hash according to the SHA3 standard. This allows to increase the computer robustness of the system to hacking attempts.

The control unit 4 allows access to the structure only under certain conditions, while in others it prevents access to the structure 2, not acting on the access adjustment device 3. In this case the control unit 4 is configured to receive a control signal for the start and end of access to the structure. This signal is placed in a hardware or software input of the control unit, and depending on its type, it allows to enable or disable the control of the opening of the access regulation device 3 by means of the actuator of the control unit 4 independently of the receipt of a correct access authorization code. In other words, this control signal is at a higher hierarchical level than the receipt (possibly in the correct time) of the access authorization code. This control is carried out and preferable since the control unit 4 is introduced in a wider booking management system, in which it is desirable that the user does not have access to the structure outside of predetermined dates. For this reason, when the control signal signals the beginning of access to the structure, the implementation of the access control device 3 is possible and takes place in the manner described here. Otherwise, when the control signal signals the end of access to the structure, the implementation of the access adjustment device 3 is made impossible. The control signal can signal the beginning, respectively the end, of access to the structure, for example and not limitedly, with a value equal to zero, respectively different from zero, or with a different coding and / or modulation between the start and end condition of access to the facility.

The control unit 4 can optionally comprise a memory, on which at least one address, in particular an electronic address, of a user is stored - in particular, as will be better clarified in the following description portion - a host who manages the structure at the which one you want to access. Upon receipt of an access authorization code, transmitted by the portable electronic device 5, the control unit 4 retrieves the saved electronic address and transmits an access message to the predetermined user. It should be noted that the transmission can take place either without checking whether the access authorization code is valid and / or transmitted in due time, or with checking the latter case, for example and not limited to differentiating the type of message. transmitted (message showing access attempt with wrong code, or access with valid code). Still alternatively, it is possible to notify the user only the cases in which the access is validly carried out, or again only the cases in which the access attempt was not successful because either the access authorization code was wrong ( other than that temporarily stored on the server) or transmitted too late. Although reference has been made to a memory incorporated on the control unit, it is clear that this memory may also belong to the server 6. In the latter case, the control unit will have the task of signaling access or access to the server. access attempt by means of an appropriate signal, and it will be the task of the server 6 to transmit to the user, whose electronic address has been stored in the memory, the notification of access in accordance with the methods described above.

Through the use of the control unit 4 it is therefore possible to carry out an authentication and access method to structures or buildings, which first of all comprises an approach phase (indicated in figure 6 with the reference number 900) of a portable electronic device 5 to the control unit 4 itself, which is followed by other steps as described here.

In a subsequent pre-authentication phase (indicated with the reference number 903), first of all a code generation request phase (indicated with the reference number 902) to the server 6 takes place, in which a transmission of the request 10a towards the server 6, and in which the transmission is carried out by the portable electronic device 5 associated with the user. As already indicated, preferably, the transmission of a request signal 10a is provided which includes a hash of the current time of the generation of the request signal itself.

Following the transmission of the request signal 10a, the server 6 performs a procedure for generating a random or pseudorandom number on which to base the generation of the access authorization code, and executes a time counting step which lasts for a predetermined period of time. , following which the access authorization code is no longer usable and / or is replaced and / or following which it automatically generates a new random or pseudorandom number and / or a new access authorization code. The time count step determines the first instant of time t1, and the time span is determined by the temporal distance between the first time interval t1 and the second time interval t2 which corresponds to the instant in which the server 6 receives the copy. of the access authorization code retransmitted by the control unit 4 downstream of the transmission carried out by the portable electronic device 5 and / or which corresponds to the instant of time in which the control unit 4 receives this access authorization code by the portable electronic device 5. For the purposes of the present disclosure, it is theoretically possible to consider the retransmission time of the access authorization code from the control unit 4 to the server 6 equal to zero. Following the generation of the access authorization code, an automatic transmission of the access authorization code to the portable electronic device 5 is performed. Clearly, the transmission takes place as quickly as possible, and takes place within the said predetermined time frame and / or within the second instant of time t2.

At this point, an access authorization code is received, in which the portable electronic device 5 receives the access authorization code generated by the server 6; this reception effectively ends the pre-authentication phase and enables the authentication phase indicated with the reference number 904, in which the portable electronic device 5 is authenticated on the control unit 4 when the user wishes to access the structure.

An authentication step is therefore provided (indicated by the reference number 904) of the portable electronic device 5, in which the transmission of an authentication signal 20, 21 from the portable electronic device 5 to the interface 4a of the control unit takes place. control 4, where the authentication signal 20, 21 comprises an access authorization code of the dynamic type, since it varies over time in the manner described above.

Here the access authorization code is sent, received by the control unit 4, to the server 6, said sending being performed by the control unit 4 so that the portable electronic device 5 is unloaded from this computational burden.

At this point, a verification phase is carried out, which is indicated with the reference number 906. In this phase, the server 6 electronically compares the access authorization code received from the control unit 4 with an original version of the access code. access authorization.

More specifically, in the verification phase 906 the server 6 performs a comparison between a first instant of time in which the server 6 itself has generated and temporarily stored the access authorization code and a second instant of time in which the server 6 the access authorization code transmitted by the control unit 4 is received and / or in which the control unit 4 receives the transmission of the access authorization code from the portable electronic device 5. If the time interval between the first instant of time and the second instant of time is lower than a predetermined value:

- if the access authorization code transmitted by the control unit 4 towards the server 6 is identical to the access authorization code stored by the server 6, the authorization signal for the unlocking of the an access adjustment device via the control unit; or

- if the access authorization code transmitted by the control unit 4 towards the server 6 is different from the access authorization code stored by the server 6, the transmission to the said control unit is carried out (block 908) rejection signal, which prevents the opening of said lock 3 through the control unit 4;

Alternatively, if the time interval between the first instant of time and the second instant of time is greater than the predetermined value, the transmission is carried out. said lock 3 through the control unit 4.

Following the verification phase 906, the server 6 carries out a transmission (indicated by the reference numbers 907; 908) towards the said control unit, alternatively of one of the two following signals:

- an authorization signal for the release of an access control device via the control unit 4; or

- a rejection signal, which prevents the opening of said lock through the control unit 4.

Therefore, the verification phase 906 is followed by the transmission of the authorization signal for the release of an access regulation device 3 only when this verification is performed within the predetermined time span and only when the access authorization code transmitted by the unit control 4 is equal to the access authorization code generated by the server 6.

If said access authorization code comprises and / or is associated with a visual code, in particular a QR code, said authentication signal is a light signal and / or is a representation of said visual code, in particular of the said QR code, on a screen 5d of the portable electronic device 5. The interface 4a towards the portable electronic device 5 comprises a camera, and a step is provided comprising positioning the portable electronic device 5 in correspondence with said camera 4a, so that the said camera can read the visual code, in particular the said QR code, from the screen of the said portable electronic device 5.

Otherwise, if the access authorization code is an alphanumeric code, this alphanumeric code is transmitted via radio, and therefore a radio signal is transmitted over a wireless channel between the portable electronic device 5 and the interface 4a, which includes a radio receiver. More specifically, the radio receiver stage is configured to receive a radio signal incorporating the said access authorization code; said method comprising a phase of receiving the said radio signal transmitted by the portable electronic device so that this control unit receives the said access authorization code. Conveniently, the radio signal can be an encrypted and / or encrypted radio signal so that only the control unit 4 actually assigned to receive it can be able to decode it.

The server can also run software programs for managing a user's reservation; these software programs can be separate programs, or be integrated, for example through a subroutine, into the program that manages user authentication via the portable electronic device 5 in accordance with the previous description. In managing a user's booking, the following main subjects are identified:

- control body 796, for example and not limited to a police or public security command, or police headquarters or prefecture, or a registry office or a government identity management department, which holds identity data of a plurality of subjects , which is equipped with an information system capable of sending at least one confirmation data of identity data of one or more of said subjects following a verification request command by an external body or system;

- host 797, which is the natural or legal person who manages the structure 2 to which the user can access and who preferably has means - for example a personal computer - to receive electronic bookings from one or more external booking sources (for example , and not limitedly, Booking, Airbnb, etc.);

- user 798, who is the person who accesses the structure 2, and who in particular is the person equipped with the portable electronic device 5;

- reservation system 1, which includes the previously described server and / or the control unit 4 in any of the embodiments described herein;

- external booking source 795, which is designed to manage electronic bookings of a plurality of structures by receiving electronic data of the applicant, possibly a payment, check-in and check-out dates and / or times; for example and not limited to this structure can be AirBnB or Booking Specifically, the Applicant has conceived a particular embodiment in which the user is profiled. In this embodiment, as shown in the diagram of Figure 7, and as schematically represented in Figure 9 and in Figure 10, in a first phase (indicated in Figure 7 with the reference number 800), the host 797 receives a reservation by a user 798 through an external booking source 795. Subsequently, in a second and subsequent phase (indicated in figure 7 with the reference number 801), the user 798 checks in online, using the platform of the reservation external to the system, introducing its private data that allow the sending of a specific signal containing an access key to the system. Such private data may include, for example, an e-mail address or a telephone number, preferably associated with the portable electronic device 5 supplied to the user.

Then, in a subsequent phase (indicated in figure 7 with the reference number 802), the user 798 receives an electronic key from the host 797 by sending a specific signal to the portable electronic device 5, for example via an email or SMS.

At this point the system object of the present disclosure comes into play, which first (in a phase indicated in figure 7 with the reference number 803), and automatically, immediately following the sending of the electronic key to the portable electronic device 5, generates a collection of data of the user 798 which are sent to the control body 796 and subsequently, although optionally, generates an invoice, in particular an electronic invoice relating to the tourist tax (phase indicated in figure 7 with the reference number 804). It should be noted that in the diagram of figure 10 the sending to the control body 796 is represented by a first arrow placed between the host 797 and the control body 796 itself and by a second arrow placed between the server 6 and the control body 796. This representation is given by the fact that the sending, although just described as automatically carried out by the system, can also be manually controlled by the host 797.

Based on the data retrieved from the external booking source, the system subject of this disclosure also receives data relating to the check-out of user 798, in particular on the check-out date. Based on these data, the system subject of this disclosure can optionally automatically generate cleaning booking requests for the structure 2 to which user 798 accesses. These data are sent automatically (figure 7, reference number 805) to a facility cleaning company or to a person in charge of cleaning the facility 2.

In any case, as indicated in Figure 7 in the block with the reference number 806, the system object of the present disclosure also generates the random and / or pseudorandom number as previously described. In particular, the generation of the random number is carried out when the user 798 for the first time approaches the access adjustment device 3.

Optionally, the booking management program can include an electronic chat, where the host 797 and the user 798 can contact each other; this facilitates access to structure 2 if user 798 encounters any problems of various kinds.

Preferably, although not limitedly, the control unit 4 can be configured to interface with the program described here so that at each access made by the user 798 to the structure by opening the access adjustment device 3 through the device portable electronic device 5, the host 797 is notified by sending a suitable signal, preferably an access signal transmitted for example on a wireless channel; in this way the host 797 is constantly informed of the instant of access by the user 798. This control signal can also be sent if there is an attempt to access the structure 2 with an access authorization code that either it is incorrect or is transmitted to the control unit 4 after the predetermined period of time and / or after the second instant of time t2. Thanks to this aspect, the host 797 is able to have immediate information of unauthorized or otherwise non-compliant access attempts to the facility, and may possibly take measures such as contacting a control center for private security services.

The control unit 4 can preferably receive from the server 6 a start and end access control signal to the structure, and this signal is transmitted when today's date, and / or today's date and time, exceed the date - the date and time respectively - fixed for check-out in the reservation previously made at the external reservation source. In this way, when the control unit 4 has received the signal to terminate access to the structure, access authorization codes, even admissible ones, are no longer accepted, and the activation of the opening of the access regulation device 3 by control unit 4 is uninhibited. This ensures that 798 users cannot access facility 2 for longer than expected. Clearly, when the user 798 tries to access the structure before the check-in date, respectively the date and time, the control unit 4 will again be configured to prevent the opening of the access adjustment device. 3.

Furthermore, the host 797 can also access the program described here to manage his own structure or structures, and preferably, he does so through a transmission of a dynamic type management authorization code, which in a preferred embodiment even if not limiting, every time interval between 10s and 45s is modified, more preferably every 20s-30s.

An alternative embodiment for the program described here is characterized by user profiling. This alternative embodiment is represented in the diagrams of figures 8 and 11. In particular, a software application is provided that allows it to be installed on the portable electronic device 5 of the user 798. In this case the selection of the structure no longer takes place through the passage from the source of external booking to the system described here, but directly through this software application. In particular, therefore, a first phase indicated in figure 8 with the reference number 810, comprises the download of a software application on the portable electronic device 5. Subsequently, the user 798 selects the structure of interest by means of the software application installed on the his portable electronic device 5, and upon selection (block 811, figure 8), the user decides (block 812, figure 8) the check-in and check-out dates that will determine the enabling and - respectively - disabling of the opening of the access adjustment device 3 by means of the control unit.

As in the case of the previously described embodiment, also in this case automatically, immediately following the confirmation of the reservation made through the software application installed on the portable electronic device 5, the software program which is executed on the server, upon receipt of a suitable booking confirmation signal, generates a collection of user data 798 which are sent to the control body 796 (phase indicated in figure 8 with the reference number 803) and subsequently, even if optionally, generates a invoice, in particular an electronic invoice relating to the tourist tax (phase indicated in figure 8 with the reference number 804). In figure 11 this sending is represented with a first arrow between the software application and the control body 796 and with a second arrow between the server 6 and the control body. In fact, sending can be completely managed through the software program that is run on server 6 or, alternatively, be commanded upstream by an consent signal sent by the application itself.

Based on the data retrieved from the external booking source, the system subject of this disclosure also receives data relating to the check-out of user 798, in particular on the check-out date. Based on these data, the system subject of this disclosure can optionally automatically generate cleaning booking requests for the structure 2 to which user 798 accesses. This data is automatically sent (figure 8, reference number 805) to a facility cleaning company or to a person in charge of cleaning the facility 2.

In any case, as indicated in Figure 8 in the block with the reference number 806, the system object of the present disclosure also generates the random and / or pseudorandom number as previously described. In particular, the generation of the random number is carried out when the user 798 for the first time approaches the access adjustment device 3.

Also in the case of this embodiment, the booking management program may include an electronic chat, where the host 797 and the user 798 can contact each other; this facilitates access to structure 2 if user 798 encounters any problems of various kinds.

As in the case of the embodiment described above, also in this case, albeit not limitedly, the control unit 4 can be configured to interface with the program described here so that at each access made by the user 798 to the structure through opening the access control device 3 through the portable electronic device 5, the host 797 is notified by sending a suitable signal, preferably a periodic control signal transmitted for example on a wireless channel; in this way the host 797 is constantly informed of the instant of access by the user 798. This control signal can also be sent if there is an attempt to access the structure 2 with an access authorization code that either it is incorrect or is transmitted to the control unit 4 after the predetermined period of time and / or after the second instant of time t2.

The control unit 4 can preferably receive from the server 6 a start and end access control signal to the structure, and this signal is transmitted when today's date, and / or today's date and time, exceed the date - the date and time respectively - fixed for check-out in the reservation previously made at the external reservation source. In this way, when the control unit has received the access termination signal to the structure, access authorization codes, even admissible ones, are no longer accepted, and the activation of the opening of the access regulation device 3 by the control unit 4 is uninhibited. This ensures that users cannot access facility 2 for longer than expected. Clearly, when the user 798 tries to access the structure before the check-in date, respectively the date and time, the control unit 4 will again be configured to prevent the opening of the access adjustment device. 3.

Furthermore, the host 797 can also access the program described here to manage his own structure or structures, and preferably, he does so through a transmission of a dynamic type management authorization code, which in a preferred embodiment even if not limiting, every time interval between 10s and 45s is modified, more preferably every 20s-30s.

Although the embodiment without user profiling allows greater flexibility since it leans on already managed and tested external structures, the embodiment with user profiling advantageously allows greater effectiveness in the system's processing of the user's electronic identity. subject of this disclosure.

Parts of the process described here can be carried out by means of a data processing unit, or control unit, technically replaceable with one or more electronic processors designed to execute a portion of a software or firmware program loaded on a memory medium. This software program can be written in any known programming language. The electronic processors, if in number equal to two or more, can be connected to each other through a data connection such that their computing powers are shared in any way; the same electronic processors can therefore be installed in geographically different positions, creating a distributed computing environment through the aforementioned data connection.

The data processing unit, or control unit, may be a general purpose processor specifically configured to perform one or more parts of the process identified in the present disclosure through the software or firmware program, or be a dedicated ASIC or processor or a FPGA, specifically programmed to perform at least part of the operations of the process described here.

The memory medium can be non-transient and can be internal or external to the processor, or control unit, or data processing unit, and can - specifically - be a memory geographically located remotely from the electronic computer. The memory support can also be physically divided into several portions, or in the form of a "cloud", and the software or firmware program can physically provide portions stored on portions of memory geographically divided between them.

In particular, a distributed computing environment can be conceived, which in accordance with what has been described up to now is configured to perform the following steps: - an authentication step 904 of a portable electronic device 5, in which the transmission of an authentication signal from the portable electronic device 5 towards an interface 4a of a control unit 4 of an access release system, in which said authentication signal 20, 21 comprises an access authorization code, in which the access authorization code access is a dynamic code and in which the authentication step 904 occurs following an approach step 900 of a portable electronic device 5 to the control unit 4; - sending the access authorization code, received from the control unit 4, to a remote server 6, said sending being performed by the control unit 4; - a verification phase 906, in which the server 6 electronically compares the access authorization code received from the control unit 4 with an original version of the access authorization code;

- in which following the verification step 906, the server 6 carries out a transmission 907; 908 towards said control unit, alternatively of one of the two following signals:

- an authorization signal for the release of an access regulation device via the control unit; or

- a rejection signal, which prevents the opening of said lock through the control unit.

An alternative embodiment is described below and is schematically represented in figures 12 and 13 in terms of structure and operating process. In this embodiment, as shown in Figure 12, an account 6a is created on the server 6 for each user 798 on which a seed generated through a pseudorandom number (ideally a random number) is stored. This seed is transmitted, preferably automatically, to a software application installed on the portable electronic device 5 supplied to the user 798. The transmission preferably takes place when the account is generated (phase indicated with the reference number 1000) .

Upon accessing the structure, in a first phase (schematically represented by the arrow 1001) the user 798 approaches the portable electronic device 5 to the interface 4a of the control unit 4, and transmits an authentication signal which comprises a OTP code and optionally a timestamp generated by the portable electronic device 5 itself. According to the present invention, an OTP code is intended as a single-use password, that is, a password that is valid only for a single access session. The use of OTP allows the reduction of the risk of system hacking. According to the present invention, by timestamp is meant a time stamp with a sequence of characters representing a date and / or a time indicative of the occurrence of a predetermined event (in the case described above, the instant of generation and / or transmission of the authentication signal). In a non-limiting embodiment, the timestamp follows the ISO 8601 standard, and thus comprises both a complete date stamp and a current time stamp.

In fact, therefore, the OTP code represents a first number, or alphanumeric sequence, pseudorandom RND1.

When the control unit 4 receives this authentication signal, it retransmits (step indicated by the arrow 1002) the OTP code and, optionally, the timestamp, to the server 6. Preferably, even if not limitedly, the transmission to the server 6 takes place immediately following the reception of the authentication signal by the control unit 4. The control unit 4 can also make a comparison itself between the timestamp received by the portable electronic device 5 and a time indication found by itself, by carrying out a electronic verification of congruence. In the event that the time difference between the time of the timestamp transmitted by the portable electronic device 5 and the time indication is greater than a predetermined period of time, for example greater than 5s, or greater than 10s, or greater than 15s, the control unit 4 automatically transmits a rejection of the OTP transmitted by the portable electronic device 5, which will therefore not be transmitted to the server 5.

When the server 6 receives the retransmission of the authentication signal from the control unit 4, it automatically proceeds with the generation of at least a second OTP code generated on the basis of the seed stored in the account for the predefined user 798. In fact, this second OTP code, or single-use password, represents a number, or alphanumeric sequence, pseudorandom RND2. This is made possible because the control unit 4, together with the authentication signal, transmits or makes the user ID 798 accessible to the server, which is needed by the server 6 to access the right account associated with it. This operation is schematically represented by the arrow 1003 in figure 12.

Preferably, although not limitedly, the connection between the control unit 4 and the server 6 occurs with the establishment of an end-to-end encrypted communication, preferably using a TLS or SSL algorithm. Server 6 also identifies the control unit 4 that carried out the transmission: in case of use of TLS or SSL algorithms, this identification takes place through the security certificate of these algorithms. To identify the control unit 4, various identification codes Id_serr1, Id_serr2, Id_serr3 are stored on the server 6, each relating to a respective control unit 4. These identification codes are schematically represented by reference 6b.

At this point the server accesses the memory and checks whether for the specific control unit 4 there are reservations for access to structure 2. If not, it sends a denial command. If the OTP code generated by the server 6 is identical to the OTP code generated by the portable electronic device of the user 798, then the server 6 transmits the authorization signal 10e to the control unit when the access control device 3 is opened. This operation is schematically represented by arrow 1004. Otherwise, a denial signal is transmitted.

Optionally, although preferably, the server 6 checks whether the OTP code generated by the portable electronic device 5 of the user 798 is generated within a predetermined period of time starting from the timestamp. Only when the server 6 receives the OTP within a predetermined time with respect to the timestamp, consent to the transmission of the authorization signal 10e can be provided.

More specifically, from the type of code received from the server, it is possible to deduce which check to carry out and for each potentially authorized user 798 the following checks are carried out.

Following the approach of the portable electronic device 6 to the control unit 4 (block 900, figure 13), and to the transmission of the OTP code from the portable electronic device 5 to the control unit 4 (block 910, figure 13), the The control unit 4 transmits at least the OTP code towards the server 6 (block 911, figure 13). Subsequently, in a first phase, if the server 6 verifies that the OTP code has been generated by an application installed on a portable electronic device 5, the seed associated with the account of the user 798 who generated the code is searched OTP, and subsequently the current timestamp of the server is considered, at a time t0. The latency time set for that specific structure is then read, which according to the present disclosure is indicated as Δt, which could vary according to various factors including - and not limited to - the speed and / or latency of the connection between the server 6 and the control unit 4 and / or the portable electronic device 5. The server 6 then generates a plurality of possible OTP codes (or, equivalently, a plurality of numbers or pseudorandom RND alphanumeric sequences generated starting from the predefined seed) for that user 798 on the basis of the seed found in the account (block 912, figure 13), from the instant t0 - Δt to the instant t0 Δt. If one of the calculated OTP codes corresponds to that transmitted by user 798 (block 913, figure 13, exit S), then access is authorized by sending the authorization code 10e to the control unit 4, and the access adjustment device 3 is open (block 914, figure 13); otherwise the consent to the release is denied and therefore the access adjustment device 3 is therefore not open (block 914, figure 13).

If, on the other hand, the server 6 verifies that the OTP code has been generated by a portable electronic device 5 other than a smartphone mobile phone, but by a dedicated radio transmitter device such as, for example, but not limited to, a BLE tag or a smartcard or an NFC / RFId tag , first all the seeds of all the devices assigned to the user 798 are obtained and then the current timestamp of the server is considered, at a time t0. The latency time set for that specific structure is then read, which according to the present disclosure is indicated as Δt, which could vary according to various factors including - and not limited to - the speed and / or latency of the connection between the server 6 and the control unit 4 and / or the portable electronic device 5. The server 6 then generates a plurality of possible OTPs for that user 798 on the basis of the seed found in the account, from instant t0-Δt to instant t0 Δt. If one of the calculated OTPs corresponds to that transmitted by user 798, then access is authorized by sending the authorization code 10e to the control unit 4; otherwise the consent to the release is denied and therefore the access adjustment device 3 is therefore not open,

The embodiment described here has the advantage of not needing a data connection (e.g. wifi or cellular mobile radio network) for the portable electronic device 5, which therefore does not have to establish direct communications with the server 6.

As in the case of the previously described embodiment, also in this case the QR code presented on the screen of the portable electronic device 5 can be an example of an authorization signal.

In the second embodiment it is that the transmission of the authentication signal can also be replaced by a reading of a QR code printed on a business card. In this case it is a QR code that can be used only once, if the user 798 loses or otherwise does not have the portable electronic device with him 5.

If, on the other hand, the server 6 verifies that the OTP code is associated with a visual code, for example and not limited to QR, printed, first of all it is checked whether the code is compatible with a list of non-dynamic codes (therefore, always valid and in accordance with this disclosure described as security codes) for the specific 798 user who made the request. If this code is compatible with those stored for the specific account, then the authorization code 10e is sent to the control unit 4. The security code can therefore be considered a passe-partout code. This code can be of the type that can be used only once or more times. If the code can be used only once, it is deleted from the memory through an action of the server 6.

If the server 6 verifies that the OTP code is associated with a portable electronic device 5 of the passive type, such as an NFC tag, first the server 6 proceeds with an electronic search of all the devices associated with the account of the user 798 which possesses the portable electronic device 5 and subsequently the device corresponding to the generated OTP code is identified. If this code is compatible with the OTP code generated by the portable electronic device 5, then the access authorization is carried out by transmitting the authorization code 10e to the control unit 4.

The software application stored on the portable electronic device 5 can optionally comprise emergency codes which are associated with the specific access control device 3 and / or equivalent to the specific control unit 4. In this case, the server 6, after the identification of the control unit 4 as described above, verifies whether the specific security code is stored in the memory for the specific control unit 4, and if so, retransmits the authorization signal 10e. A further option is also foreseeable in which the emergency code is not retransmitted to server 6 for further verification. In this case, the control unit 4 directly performs the operations necessary for opening the access control device 3. Preferably, in this case, the emergency code is a single-use code.

Although explicit reference has been made to a QR code in the preceding description, this visual code morphology must not be construed in a limiting way, since it is also possible to use other visual codes such as, in a non-exhaustive list, a bar code. linear according to Codabar, or Code 25, or Code 39, or EAN 2 or EAN 5, or a two-dimensional or matrix visual code such as Aztec, or CrontoSign, or Datamatrix according to IEC 16022 standard.

It is also clear that the single-use password, or OTP code described here, which includes the actual "code" represented by the alphanumeric or only numeric or only alphabetic string, can be integrated into any visual code, in particular in one of the codes according to the standards described above. It will be the responsibility of the processing units of the system 1 described here to have the computational ability to decipher the visual code to extract the appropriate alphanumeric code.

Although not described again, the notifications to and from the control body 796 and to and from the host 797, and / or with reference to the external booking source 795 described above, may also apply to this embodiment.

The invention is not limited to the embodiments illustrated in the drawings; therefore it is understood that when features mentioned in the claims are followed by reference numbers or signs, such numbers or signs are included exclusively for the purpose of increasing the intelligibility of the claims and should not be considered as limiting.

Finally, it is clear that changes or additions may be made to the subject of this disclosure, without thereby departing from the scope of protection provided by the claims.

Claims (11)

CLAIMS 1. System (1) for unlocking accesses (2) of a structure, said system comprising: - an interface (4a) towards a portable electronic device (5), said interface (4a) being configured to detect the presence of a portable electronic device (5) in proximity of the same interface (4a), said interface (4a) comprising a receiver stage configured to receive at least one authentication signal or code (20, 21), for requesting authorization to unlock an access adjustment device (3), from said portable electronic device (5); - a control unit (4), designed to be operatively connected in use to an access adjustment device (3), in which: - the control unit (4) includes a server interface (4c), configured to automatically retransmit the authentication signal or code (20, 21) to a remote server (6) and to wait for an authorization signal (10e ) from said server (6); - and in which the control unit (4) is configured to cause at least one release of said lock (3) upon receipt of an authorization signal (10e) from the server (6). System according to claim 1, wherein the control unit (4) is configured to: first automatically retransmit the said authentication signal or code (20, 21) received from the portable electronic device (5), and / or an access authorization code contained in the authentication signal or code (20, 21) received by the portable electronic device (5) towards the server (6) and subsequently to wait for the reception of said authorization signal (10e) from the server (6); and wherein said authentication signal or code (20, 21) in turn comprises an access authorization code of the alphanumeric type and / or comprises a QR code and / or a visual code and / or an alphanumeric OTP code, and / or a single-use password, and / or a timestamp. . System according to claim 1 or 2, wherein said access authorization code is a dynamic code, having a predetermined and limited temporal validity, as a result of which it can no longer be used for access to said structure, optionally said dynamic code being regenerated cyclically by said portable electronic device (5). System according to one or more of the preceding claims, wherein the control unit (4) is configured to be mechanically connected to the access control device (3) and / or is configured to be electrically connected to a servo actuator of said access adjustment device (3) and / or integrates said access adjustment device (3), or is mechanically connected to the access adjustment device (3) and / or is configured to be electrically connected to a servo actuator of said access adjustment device (3). Access release system according to one or more of the preceding claims, wherein the interface (4a) towards the portable electronic device (5) is, alternatively, - separated from the body of the control unit (4), and comprises a video camera (4a) for the optical reading of codes and / or a receiver adapted to receive a radio signal comprising a predefined code; said interface (4a) being configured to be installed in an external space with respect to the structure delimited by said access (2); or - is integrated in the body of the control unit (4), and preferably includes a radio receiver stage, optionally of the NFC type. 6. System according to one or more of the preceding claims, comprising a server (6), operationally connected with the control unit (4), having a data transceiver interface respectively to and from the control unit (4); said server (6) being configured to generate an alphanumeric OTP code, and / or a single-use password, and / or a timestamp upon receipt of an alphanumeric OTP code, and / or a single-use password and / or a timestamp retransmitted from the control unit (4) to the server (6); said server (6) being configured to generate the authorization signal (10e), and to automatically transmit the authorization signal (10e) to the control unit (4) when the alphanumeric OTP code generated by the server (6) is identical to the alphanumeric OTP code retransmitted by the control unit (4) to the server (6), and / or when the single-use password generated by the server (6) is identical to the single-use password retransmitted by the control unit (4) to the server (6) and / or when the timestamp generated by the server (6) is identical to the timestamp retransmitted by the control unit (4) to the server (6). 7. Method of authentication and access to facilities, said method comprising: - a phase of approach (900) of a portable electronic device (5) to a control unit (4), - an authentication step (904) of the portable electronic device (5), in which the transmission of an authentication signal or code (20, 21) from the portable electronic device (5) to an interface (4a) of the control unit (4) of an access release system, wherein said authentication signal or code (20, 21) comprises an access authorization code; - sending the authentication signal or code (20, 21) and / or the access authorization code, received by the control unit (4), to a remote server (6), said sending being performed by the control unit (4); - a verification phase (906), in which the server (6) electronically compares the access authorization code received from the control unit (4) with a secondary version of the signal or authentication code (20, 21) and / or the access authorization code generated by the server (6) itself; - in which following the verification phase (906) the server (6) carries out a transmission (907; 908) towards the said control unit, alternatively of one of the following two signals: - an authorization signal (10e) for the release of an access control device (3) to a structure (2) via the control unit (4); or - a rejection signal, which prevents the opening of the access control device (3) to the structure (2) through the control unit (4). Method according to claim 7, the secondary version of the authentication signal or code (20, 21) and / or of the access authorization code is electronically generated, in said verification step (906) by the server starting from a seed electronically retrieved by the server (6) in a memory operatively associated with it, in which the seed is stored in an account previously created and associated, optionally uniquely associated, to the portable electronic device (5) and / or to a user (798 ) uniquely associated with said portable electronic device (5). Method according to claim 8, comprising a step of generating a timestamp by the portable electronic device (5) and transmitting said timestamp in association with and / or within said authentication signal or code (20, 21); said method comprising a timestamp comparison step, in which the control unit (4) compares the timestamp received by the portable electronic device (5) with a time indication found by the control unit (4) itself, and if a deviation between the timestamp and the time indication is greater than a predefined time interval, the phase of sending the signal or authentication code (20, 21) and / or the access authorization code received by the control unit (4), towards the server (6) .. Method according to one or more of the previous claims 7-9, comprising a memorization step of at least one account uniquely associated with a user (798) in a memory operatively connected to said server (6) and a subsequent memorization step, in said account, of at least one authorization code with limited validity, usable a predefined number of times, and in which in said verification phase (906), the server (6) electronically compares a limited validity code received from, and / or read through, the control unit (4) with a code of limited validity previously stored in said account, and sends the authorization signal (10e) to the unlocking of the access regulation device (3) to the structure (2) through the 'control unit (4) if the comparison result proves the identity of the two authorization codes with limited validity; said method comprising a step of reducing the number of times said limited validity authorization code can be used and / or comprising a cancellation of said limited validity authorization code from said account. Method according to claim 8, wherein: - defined t0 as the instant in time in which the control unit (4) receives the said authentication signal or code (20, 21) and / or the access authorization code, - when the server (6 ) receives the authentication signal or code (20, 21) and / or the access authorization code that is / have been transmitted by the control unit (4), towards the server (6) itself, it generates a plurality of secondary versions of the authentication signal or code (20, 21) and / or of the access authorization code possible, on the basis of said seed, starting from said basic time instant t0, in the time intervals [ (t0-Δt) ÷ (t0 + Δt)] where Δt is a predetermined instant of time; - said server (6) transmitting said authorization signal (10e) only if at least one of the secondary versions of said plurality of secondary versions of the authentication signal or code (20, 21) and / or of the authorization code to possible access, on the basis of the said seed, starting from the said basic time instant t0, in the time intervals [(t0-Δt) ÷ (t0 + Δt)] coincides with the authentication signal or code (20, 21 ) and / or the access authorization code that is / have been transmitted by the control unit (4) to the server (6) itself.