RU2001130055A

RU2001130055A - METHOD AND SYSTEM OF ORDERING, LOADING AND USE OF INPUT CARDS

Info

Publication number: RU2001130055A
Application number: RU2001130055/09A
Authority: RU
Inventors: Рудольф Риттер; Эрик ЛАУПЕР
Original assignee: Свисском Мобиле Аг
Filing date: 1999-04-07
Publication date: 2003-07-20

Claims

1. The method of ordering, loading and using input cards for access to office buildings with controlled access (3), according to which the input cards are stored in the memory module (21) of the mobile communication terminal device (1), data is exchanged via the contactless interface (13) between the memory module (21) and the reading device (31) of the corresponding office building (3), a decision is made on allowing access to the user of the mobile communication terminal device (1) taking into account the information contained in the input card, in accordance with the decision made by the input device (32) connected to the reader, the user is allowed or not allowed to access the corresponding office building (3), characterized in that it includes ordering at least one input card at the central booking station (4) by transmitting the order information via the order channel from various possible order channels to the indicated central reservation station (4), the order information containing the subscriber number of the mobile communication terminal (1), and ordered the transfer of mobile network cards (6) on the mobile communication device (1), which is attributed to the subscriber number contained in the order information.

2. The method according to claim 1, characterized in that each of the input cards contains a digitally signed card number stored in the memory module (21), the input card is transmitted to the reader (31), from the central reservation station (4) input data are transmitted to the reading device (31), and the decision to allow access is made taking into account these input data and by checking the mentioned signature.

3. The method according to claim 1, characterized in that the input cards contain information about at least one office building (3) with controlled access, the decision to allow access is made taking into account this information on the card and, if so, stored in the memory module ( 21) the entry card is redeemed.

4. The method according to claim 3, characterized in that the information indicated on the input card is transmitted to the reader (31) and a decision is made in this reader.

5. The method according to claim 1, characterized in that the reader (31) transmits the device identification data to the communication terminal device (1), the decision is made in this communication terminal device (1) additionally taking into account the device identification data, and the result of this decision is transmitted into the reader.

6. The method according to any one of claims 1 to 5, characterized in that at least certain input cards are assigned to a specific user, and when deciding on access permission, it is checked whether a specific card is assigned to a specific user, which is identified by identification data stored in the module memory (21).

7. The method according to any one of claims 1 to 6, characterized in that the reader (31) transmits the digitally signed identification data of the device to the communication terminal device (1) and the reading device (31) based on the identification data of the device is authenticated in the terminal device communication (1) before transferring the data stored in the memory module (21) to the reader (31).

8. The method according to claim 7, characterized in that after positive authentication of the reader (31) stored in the memory module (21), the user identification with a digital signature is transmitted to the reader (31), and the reader (31) authenticates the user communication terminal device (1).

9. The method according to any one of claims 1 to 8, characterized in that after a positive decision is made by the reader (31), the access confirmation is transmitted to the memory module (21).

10. The method according to any one of claims 1 to 9, characterized in that the contactless interface (13) receives power through a reader (31).

11. An ordering system for downloading and using input cards, comprising a mobile network (6), in which many users can communicate using mobile communication terminal devices (1), and at least one central reservation station is connected to the mobile network (6) ( 4), and the system includes office buildings with controlled access (3), for access to which the mentioned input cards are used, and these office buildings (3) are equipped with reading devices (31), which contain a transceiver sensors for exchanging data via a contactless interface (13), each of the communication terminal devices (1) containing a download module (211) that stores the received input cards in a memory module (21) of the corresponding communication terminal device (1), each of the terminal devices communication (1) contains a communication module (212), which, through a transceiver (11), communicates via a contactless interface (13) between a memory module (21) and one of the readers (31), the system contains decision modules (213, 312 ) that take re a decision on allowing access to the user of one of the communication terminal devices (1) taking into account the information on the card recorded in the input cards, and moreover, the reading devices (31) are connected to the input devices (32), which, in accordance with the decision, allow or do not allow the user access to one of these service facilities, characterized in that the central booking station (4) contains an order module (41), which receives orders with various order information for input cards via various order channels, moreover, inf The order reservation contains the subscriber number of one of the mentioned communication terminal devices (1), and the central booking station (4) contains a transmission module that transmits the ordered input cards via the mobile network (6) to that communication terminal device (1), which is assigned to order information subscriber number.

12. The system according to claim 11, characterized in that the input cards contain a digitally signed card number, the central booking station (4) contains a table (43) with stored input data, the central booking station (4) via a communication network (5) connected to readers (31), the central reservation station (4) contains an update module (42), which, through a communication network (5), transmits input data to one of the readers (31), in which there are decision modules (312), decision makers allowed and access taking into account the input data and by checking the said signature.

13. The system according to claim 12, characterized in that the input cards contain information about at least one of the office buildings with controlled access (3), decision modules (213, 312) make decisions on allowing access based on this information on the cards and each of the communication terminal devices (1) contains a cancellation module (214), which, if yes, cancels the input card stored in the corresponding memory module (21).

14. The system according to item 13, wherein the decision modules (312) are located in readers (31).

15. The system according to item 13, wherein each of the readers (31) contains an identification module (314), which transmits the device identification data to one of the communication terminal devices (1), decision-making modules (213) are located in the terminal communication devices (1), decision modules (312) make decisions on allowing the input, and additionally taking into account the identification data of the device, and the results of these decisions are transmitted, respectively, to one of the reading devices (31).

16. The system according to any one of paragraphs.11-15, characterized in that at least certain input cards contain user identification data, each of the memory modules (21) contains user identification data, and decision modules (213, 312) when solving on access permission, check whether the user identification of the corresponding input card matches the identification of the user in the corresponding memory module (21).

17. The system according to any one of paragraphs.11-15, characterized in that each of the readers (31) contains an identification module (314), which transmits digitally signed device identification data to one of the communication terminal devices (1), and each of the communication terminal devices (1) contains the first authentication module (215), which authenticates the corresponding reader (31) based on these device identification data.

18. The system according to 17, characterized in that each of the memory modules (21) contains the user identification data, the first authentication module (215) after positive authentication of the corresponding reader (31) transfers the stored identification data with a digital signature to the corresponding reader (31), and each of said readers (31) contains a second authentication module (311), which authenticates the user of the corresponding communication terminal device (1) based on the identities onnyh user data.

19. A system according to any one of claims 11-18, characterized in that each of the readers (31) contains a confirmation module (313), which, after a positive decision is made, transmits an access confirmation to the corresponding memory module (21).

20. The system according to any one of paragraphs.11-19, characterized in that the contactless interface (13) receives power through the reader (31).