DE102012006013A1 - Access control of a door communication device or building system technology device - Google Patents

Abstract

An access control of a door communication device (1) or building system technology device (1) is proposed, wherein the device (1) comprises: • a generator (2) for generating a digital certificate (Z), • a data memory (4) for Storing a generated digital certificate (Z) which is connected to a control / processing unit (5), a building component for transmitting a generated digital certificate (Z) to a terminal (11), one with the control / processing unit ( 5) connected to the optical reading unit (6), • a signaling unit (7) connected to the control / processing unit (5) with an attached release device (19), • wherein in the presence of a valid access authorization (B) an activation of the release device (19) to access / unlock / release.

Description

The invention relates to an access control of a door communication device or building system technology device. An application is given especially in private housing in the control of a door opener in a home communication system.

Visual data coding methods are used to display data in a form that enables the optical recording, evaluation and further processing of this data. Known methods in this regard are barcodes (with low information content) and QR codes (registered trademark of Denso Wave Incorporated, Quick Response, with enhanced information content). For these codes, no special reader is necessary, it is enough a commercial, digital camera. QR codes are currently z. B. used in advertising to easily call the website of an advertiser on a smartphone. A QR code is printed in which the website (URL) is machine-readable encoded. With the built-in camera of a smartphone, the QR code is photographed and the integrated URL (Uniform Resource locator, Internet address, web address) is decoded, which is then passed to the web browser.

In. of the EP2237234 A1 describes an access control method in which an access code, for example a QR code, can be requested via a mobile telephone, which is then read by a reader and grants access. This code can be compared by a controller with a list of approved codes, and if they match, access is granted.

Disadvantage of the aforementioned method is the transmission of an identification code to an access node. This identification code can only be transmitted via a data connection from the mobile phone to the access node. In certain cases, this prior connection is disadvantageous, for. B. if due to poor network coverage no data connection is possible. Furthermore, a global and centrally maintained list of permissible identification codes is necessary.

The invention has for its object to provide an optimized access control of a door communication device or building system engineering device.

• • einen Generator zur Erzeugung eines digitalen Zertifikats,
• • einen Datenspeicher zum Abspeichern eines erzeugten digitalen Zertifikats, welcher an eine Steuer-/Verarbeitungseinheit angeschlossen ist,
• • eine Baukomponente zur Übertragung eines erzeugten digitalen Zertifikats an ein Endgerät,
• • eine mit der Steuer-/Verarbeitungseinheit verbundene optische Leseeinheit,
• • eine mit der Steuer-/Verarbeitungseinheit verbundene Signalisierungseinheit mit angeschlossenem anzusteuernden Freigabegerät,
• • wobei bei Vorliegen einer gültigen Zugangsberechtigung eine Ansteuerung des Freigabegeräts zum Zugänglichmachen/Entsperren/Freigeben erfolgt.

This object is achieved according to the invention by an access control of a door communication device or building system technology device, the device comprising:

• A generator for generating a digital certificate,
• A data memory for storing a generated digital certificate which is connected to a control / processing unit,
• A building component for transmitting a generated digital certificate to a terminal,
• An optical reading unit connected to the control / processing unit,
• A signaling unit connected to the control / processing unit with a connected release device connected to it,
• • In the presence of a valid access authorization, the release device for accessing / unblocking / releasing is activated.

The achievable with the present invention consist in particular in that a simple access control is made possible, in which the terminal can be quasi an electronic key that allows permanent access. Alternatively, no permanent, but a time-limited access can be made possible, in which case the period for a specific authorized action and the number of uses are defined. In all cases, no access to a parent shared datastore is required. Furthermore, no list with "trusted" terminals must be maintained.

Advantageously, the terminal can create an optical access authorization from the digital certificate, which is verifiable by the reading unit.

The construction component for transmitting a generated digital certificate may be in the form of a transmitting unit, in which case the transmission takes place via a wireless / wired connection to a receiving unit of the terminal.

The building component for transmitting a generated digital certificate may be in the form of a memory card reader, in which case the transmission takes place via a memory card / USB stick to a memory card reader of the terminal.

Preferably, the terminal has a certificate store, to which a code generator for creating the optical access authorization is connected.

The terminal expediently has an optical display unit for displaying the optical access authorization via a visual connection.

In a further refinement, the door communication device or building system technology device for activating the reading unit via the control / processing unit is equipped with a motion detector or proximity sensor or pushbutton.

Furthermore, the optical access authorization generated by the terminal can be transmitted to another device with display unit, which can be used for access authorization.

Furthermore, the optical access authorization in paper form generated by the code generator can be used for access authorization.

A code generator is expediently contained in the door communication device or building system technology device, wherein the generated access authorization is transmitted to a terminal and stored there in an access authorization memory.

The invention will be explained in more detail below with reference to the embodiment shown in the drawing.

In 1 a section of a door communication or building system technology is shown. It is a door communication device 1 or building system engineering device 1 to recognize, for example, a station of a door communication, in particular a door station or a control panel, wherein as components of interest of this device 1 Door communication or building system technology, a control / processing unit 5 which is indicated with a data memory 4 , an optical reading unit 6 , a signaling unit 7 and a motion detector or proximity sensor or button 8th connected is. Important component of the device 1 is a generator 2 for generating digital certificates Z which the data memory 4 , a transmitting unit 3 and / or a memory card reader 9 be supplied. The signaling unit 7 is the output side to a to be controlled release device 19 , For example, a door opener connected.

Of course, the above-mentioned device 1 the door communication or building management system on other components, which, however, are immaterial to the considered context. Furthermore, the mentioned door communication or building system technology of course further devices or stations, which, however, also for the considered context is immaterial.

1 further shows a terminal 11 , For example, in the form of a PC or a mobile phone or tablet computer, being constructed components of interest of the terminal 11 a receiving unit 12 with subordinate certificate store 13 and the latter downstream code generator 14 are indicated. To the code generator 14 is a display unit 15 connected. The certificate store 13 is optional with a memory card reader 16 connected. Of course, the terminal 11 other components on which, however, are immaterial to the considered context.

1 further shows a terminal 20 , For example, in the form of a portable PC or a mobile phone or tablet computer, being constructed components of interest of the terminal 20 a receiving unit 12 with a downstream access authorization store 21 are indicated. At this is a display unit 15 connected. The access authorization store 20 is optional with a memory card reader 16 connected. Of course, the terminal 20 other components on which, however, are immaterial to the considered context.

• • visuelle, maschinenlesbare Codes MLC, beispielsweise QR-Codes und
• • mit einer Signaturfunktion digital signierte Daten

zur Zugangssteuerung. Die Erfindung nutzt den Generator 2 zur Erzeugung digitaler Zertifikate Z. Ein so erstelltes digitales Zertifikat Z wird einmalig über die Sendeeinheit 3 und eine drahtlose/drahtgebundene Verbindung 10 an beliebige Endgeräte 11 z. B. per E-Mail oder Download übertragen – siehe die Empfangseinheit 12 des Endgerätes 11 –, sowie im Gerät 1 im Datenspeicher 4 abgelegt, welcher der Steuer-/Verarbeitungseinheit 5 zugeordnet ist. Gekoppelt mit der Steuer-/Verarbeitungseinheit 5 sind die optische Leseeinheit 6 sowie die Signalisierungseinheit 7. Die Signalisierungseinheit 7 kann mit dem anzusteuernden Freigabegerät 19, beispielsweise einem Türöffner, verbunden werden, um bei als gültig erkannter Berechtigung z. B. eine Türöffnung zu veranlassen.The invention combines

• • visual, machine-readable codes MLC, such as QR codes and
• • digitally signed data with a signature function

for access control. The invention uses the generator 2 for the generation of digital certificates Z. A digital certificate Z thus created becomes unique via the transmitting unit 3 and a wireless / wired connection 10 to any devices 11 z. Eg by e-mail or download - see the receiving unit 12 of the terminal 11 -, as well as in the device 1 in the data store 4 filed, which the control / processing unit 5 assigned. Coupled with the control / processing unit 5 are the optical reading unit 6 as well as the signaling unit 7 , The signaling unit 7 can with the release device to be controlled 19 , For example, a door opener, are connected to when validly recognized authorization z. B. to arrange a door opening.

This procedure for releasing an action is not limited to devices of door communication, but can also generally z. B. to unlock / release device functions or devices of building system technology.

By means of the digital certificate Z can on the terminal 11 an optical (visual) access authorization B as a machine-readable code MLC, such as QR code created and the device 1 via an optical (visual) connection 18 submitted for review. In a first application, in which the digital certificate Z directly on the terminal 11 saved any unrestricted access authorizations are generated, which are signed with the digital certificate Z. For checking one of the terminal 11 created visual access authorization B via the visual connection 18 is from the control / processing unit 5 in the device 1 via optical reading unit 6 checks the signature and gives access if the result is positive, ie as a validly recognized certificate. In this first application, the terminal provides 11 a kind of "electronic key" that provides permanent access to a device 1 door communication or building system technology.

Advantage of this method is that the control / processing unit 5 only has to check the signed access data, but no access to one of the door communication or the building management system parent common data storage must exist. Only during commissioning must the digital certificate Z in the certificate memory be unique 13 of the terminal 11 be stored. This can also be done, for example, by the generator 2 the digital certificate Z to the memory card reader 9 of the device 1 sends, whereby a storage of the digital certificate Z on a memory card or a USB stick 17 is possible. A memory card reader 16 of the terminal 11 can then use the digital certificate Z from the memory card or the USB stick 17 read.

Furthermore, for the access control advantageous that no previous connection of a terminal 11 to the control / processing unit 5 of the device 1 is necessary because the digital certificate Z previously on the terminal 11 has been stored and via a suitable application the access authorization as needed in the terminal 11 itself can be generated. Another advantage of this method is that no list of trusted terminals 11 must be maintained, since only accesses based on a digital certificate Z must be checked for access control.

• • einen Zeitraum t, in dem die zeitlich limitierte Zugangsberechtigung gültig ist,
• • eine berechtigte Aktion a, beispielsweise „Toröffnung der Tiefgarage”,
• • die erlaubte Anzahl der Nutzungen n – beispielsweise könnte eine Berechtigung zur „Toröffnung der Tiefgarage” nur einmalig in dem angegebenen Zeitraum t ausgeführt werden.

In a second application, no permanent, but a time-limited access is to be made possible. This is from the generator 2 of the device 1 Door communication or building system technology (eg door station) generates a limited access authorization, which comprises one or more of the following data:

• A period t, in which the time-limited access authorization is valid,
• A legitimate action a, for example "gate opening of the underground car park",
• • the permitted number of uses n - for example, an authorization for "door opening of the underground car park" could only be executed once in the specified period t.

These access authorizations are identified as valid via a digital signature s, which is generated by means of the digital certificate Z: B = t, a, n, s; s = Sig _z (t, a, n).

This from the generator 2 of the device 1 generated limited access authorization is for example in the form of an image file via connection 10 or memory card / USB stick 17 to the terminal 11 transferred and in the conditional access memory 21 stored and as needed machine-readable code MLC on the display unit 15 of the terminal 11 presented visually. Alternatively, the limited access authorization can also be printed on paper. The control / processing unit 5 device of door communication or building system technology 1 Check with the optical reader 6 detected optical (visual) access authorization B with respect to validity of the signature s, the period t, the action a and possible restrictions in terms of the number of possible uses n. If all data is valid, is via the signaling unit 7 the desired action for the release device to be controlled 19 released, for example, the control of the door opener.

Alternatively, an optical (visual) access authorization B can also be created on a PC and as an image file on the terminal 11 respectively. 20 be transmitted. This also makes it possible to grant restricted access to third parties without requiring access to the digital certificate Z itself by transmitting or making available an appropriate visual (visual) access authorization B as an image file or as a printout.

Optionally, the optical (visual) access permissions B can also be encrypted.

It is recommended as an optical reading unit 6 to use a camera already installed in many door stations.

In addition, the device can 1 with a motion detector or a proximity sensor or a button 8th when the access author / user approaches or when the authorized user / user operates the control / processing unit 5 of the device 1 activated, whereupon this via optical reading unit 6 seeks an optical (visual) access authorization B in the form of a machine-readable code MLC and carries out the operation encoded therein. This advantageously enables standby circuits and activates the (energy-) complex image analysis via the reading unit 6 only at reasonable times.

LIST OF REFERENCE NUMBERS

1

Door communication device or building system engineering device

2

Generator for generating digital certificates

3

transmission unit

4

data storage

5

Control / processing unit

6

optical reading unit

7

signaling unit

8th

Motion detector or proximity sensor or button

9

Memory card reader

10

wireless / wired connection

11

End device (PC, mobile phone, tablet computer)

12

receiver unit

13

certificate store

14

Code generator

15

optical display unit

16

Memory card reader

17

Memory card / USB flash drive

18

visual connection

19

Release device, z. B. door opener

20

Mobile terminal

21

Conditional access memory

a

authorized action

B

visual (visual) access authorization

n

Number of uses

s

digital signature

t

Period

Z

digital certificate

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• EP 2237234 A1 [0003]

Claims (10)

Access control of a door communication device ( 1 ) or building system technology device ( 1 ), whereby the device ( 1 ) comprises: a generator ( 2 ) for generating a digital certificate (Z), • a data memory ( 4 ) for storing a generated digital certificate (Z) which is sent to a control / processing unit ( 5 ), • a building component for transmitting a generated digital certificate (Z) or an authorization (B) to a terminal ( 11 ), • one with the control / processing unit ( 5 ) connected optical reading unit ( 6 ), • one with the control / processing unit ( 5 ) associated signaling unit ( 7 ) with an attached release device ( 19 ), Where, if a valid access authorization (B) exists, an activation of the release device ( 19 ) for accessing / unlocking / releasing. Access control according to claim 1, characterized in that the terminal ( 11 ) from the digital certificate (Z) an optical access authorization (B) created by the reading unit ( 6 ) is verifiable Access control according to claim 1, characterized in that the building component for transmitting a generated digital certificate (Z) in the form of a transmitting unit ( 3 ) and the transmission via a wireless / wired connection ( 10 ) to a receiving unit ( 12 ) of the terminal ( 11 ) he follows. Access control according to claim 1, characterized in that the building component for transmitting a generated digital certificate (Z) in the form of a memory card reader ( 9 ) and the transmission via a memory card / USB stick ( 17 ) to a memory card reader of the terminal ( 11 ) he follows. Access control according to claim 1, characterized in that the terminal ( 11 ) a certificate store ( 13 ) to which a code generator ( 14 ) is connected to create the optical access authorization (B). Access control according to claim 1, characterized in that the terminal ( 11 ) an optical display unit ( 15 ) for the representation of the optical access authorization (B). Access control according to claim 1, characterized in that the door communication device ( 1 ) or building system technology device ( 1 ) for the activation of the reading unit ( 6 ) via the control / processing unit ( 5 ) with a motion detector or proximity sensor or button ( 8th ) Is provided. Access control according to claim 1, characterized in that the from the terminal ( 11 ) generated optical access authorization (B) to another device with display unit will ask, which can be used for access authorization. Access control according to claim 1, characterized in that the code generator ( 14 ) generated optical access authorization (B) can be used in paper form for access authorization. Access control according to claim 1, characterized in that a code generator ( 14 ) in the door communication device ( 1 ) or building system technology device ( 1 ), wherein the generated access authorization (B) to a terminal ( 20 ) or ( 11 ) and stored in an access authorization memory ( 21 ) is stored.

Images