EP2434461A1 - Security system providing temporary personnel access based upon near-field communication and related methods - Google Patents

Security system providing temporary personnel access based upon near-field communication and related methods Download PDF

Info

Publication number
EP2434461A1
EP2434461A1 EP10178684A EP10178684A EP2434461A1 EP 2434461 A1 EP2434461 A1 EP 2434461A1 EP 10178684 A EP10178684 A EP 10178684A EP 10178684 A EP10178684 A EP 10178684A EP 2434461 A1 EP2434461 A1 EP 2434461A1
Authority
EP
European Patent Office
Prior art keywords
security code
nfc
unique
temporary
controller
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
EP10178684A
Other languages
German (de)
French (fr)
Inventor
Jason Tyler Griffin
Steven Henry Fyke
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
BlackBerry Ltd
Original Assignee
Research in Motion Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Research in Motion Ltd filed Critical Research in Motion Ltd
Priority to EP10178684A priority Critical patent/EP2434461A1/en
Priority to CA2753493A priority patent/CA2753493C/en
Publication of EP2434461A1 publication Critical patent/EP2434461A1/en
Ceased legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00Individual registration on entry or exit
    • G07C9/00174Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00857Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the data carrier can be programmed
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00Individual registration on entry or exit
    • G07C9/00174Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00309Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00Individual registration on entry or exit
    • G07C9/00174Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00857Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the data carrier can be programmed
    • G07C2009/00865Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the data carrier can be programmed remotely by wireless communication
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C2209/00Indexing scheme relating to groups G07C9/00 - G07C9/38
    • G07C2209/04Access control involving a hierarchy in access rights
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C2209/00Indexing scheme relating to groups G07C9/00 - G07C9/38
    • G07C2209/08With time considerations, e.g. temporary activation, valid time window or time limitations

Definitions

  • This application relates to the field of communications, and more particularly, to electronic devices and related methods that use near-field communication (NFC).
  • NFC near-field communication
  • PDA Personal Digital Assistant
  • NFC near field communication
  • Some mobile devices incorporate contactless card technology and/or near field communication (NFC) chips.
  • NFC technology may be used for contactless short-range communications using magnetic field induction to enable communication between electronic devices, including mobile wireless communications devices.
  • These short-range communications include payment and ticketing, electronic keys, identification, device set-up service and similar information sharing.
  • This short-range high frequency wireless communications technology exchanges data between devices over a short distance, such as only a few centimeters.
  • FIG. 1 is a schematic block diagram of a security system in accordance with one example embodiment.
  • FIG. 2 is a schematic block diagram of the mobile wireless communications device of the system of FIG. 1 shown in greater detail.
  • FIG. 3 is a schematic block diagram in which a plurality of mobile wireless communications devices are shown for use with the security system of FIG. 1 .
  • FIG. 4 is a schematic block diagram of an alternative embodiment of the mobile wireless communications devices of FIG. 3 .
  • FIGS. 5 and 6 are flow diagrams illustrating method aspects associated with the system of FIG. 1 and mobile wireless communications devices of FIGS. 2 through 4 .
  • FIG. 7 is a schematic block diagram of another security system in accordance with an example embodiment.
  • FIG. 8 is a schematic block diagram of an alternative embodiment of the system of FIG. 7 .
  • FIGS. 9 and 10 are flow diagrams illustrating method aspects associated with the systems of FIGS. 7 and 8 .
  • FIG. 11 is a schematic block diagram illustrating an example mobile wireless device components that may be used with the mobile wireless communications devices of the example embodiments.
  • the security system may include a plurality of electronic devices, each having a unique identification (ID) associated therewith and configured to generate a temporary security code based upon the unique ID.
  • the system may further include at least one mobile wireless communications device comprising a first Near-Field Communication (NFC) sensor, and a mobile controller configured to receive the temporary security code from a given electronic device from among the plurality of electronic devices.
  • the system may also include an access control device associated with a personnel access position and comprising a second NFC sensor configured to receive the temporary security code from the first NFC sensor via NFC communications and a security controller.
  • the security controller may be, configured to selectively grant personnel access based upon the received temporary security code, and determine the unique ID associated with the given electronic device.
  • the system may conveniently be used to provide personnel access at a secured location from a mobile wireless communications device with NFC communications, and while allowing for tracking of the electronic device which provided the temporary security code.
  • the security controller may be configured to further selectively grant personnel access also based upon the determined unique ID.
  • the security controller may also be configured to update a log of the determined unique ID.
  • each of the plurality of electronic devices may be further configured to generate an event notification, and to communicate the temporary security code to the at least one mobile wireless communications device along with the event notification.
  • the event notification may have a scheduled event time associated therewith, and the security controller may be configured to selectively grant personnel access further based upon the scheduled event time.
  • the temporary security code may comprise a single-use security code.
  • at least one of the plurality of electronic devices may also comprise a mobile wireless communications device.
  • each of the plurality of electronic devices may further comprise a third NFC sensor, and the mobile controller may be configured to receive the temporary security code via the third NFC sensor.
  • the at least one mobile wireless communications device may further include a wireless transceiver coupled to the mobile controller and configured to receive the temporary security code from the given electronic device.
  • the wireless transceiver may comprise a cellular transceiver, a Wireless Local Area Network (WLAN) transceiver, etc.
  • WLAN Wireless Local Area Network
  • a related access control device such as the one described briefly above, and security method are also provided.
  • the method may include generating a temporary security code at a given electronic device based upon the unique ID associated therewith, receiving the temporary security code at the at least one mobile wireless communications device from the given electronic device, and receiving the temporary security code at the access control device from the first NFC sensor via NFC communications.
  • the method may further include selectively granting personnel access via the access control device based upon the received temporary security code, and determining the unique ID associated with the given electronic device at the access control device.
  • a related computer-readable medium having computer-executable instructions for causing an access control device to perform steps including receiving the temporary security code from the first NFC sensor via NFC communications, selectively granting personnel access based upon the received temporary security code, and determining the unique ID associated with the given electronic device.
  • NFC is a short-range wireless communications technology in which NFC-enabled devices are “swiped,” “bumped” or otherwise moved in close proximity to communicate.
  • NFC may operate at 13.56 MHz and with an effective range of about 10cm, but other suitable versions of near-field communication which may have different operating frequencies, effective ranges, etc., for example, may also be used.
  • the system 30 illustratively includes an access control device associated with a personnel access position.
  • the personnel access position is at a security door 31 which is locked to prevent unauthorized access to a particular area.
  • the personnel access position may correspond to a security gate or turnstile, or to a secure object such as a safe, locker, or a vehicle, for example.
  • the access control device illustratively includes a first NFC sensor (e.g., an NFC transceiver) 32 , and a controller 33, which will be referred to as a security controller herein for clarity of reference.
  • a first NFC sensor e.g., an NFC transceiver
  • controller 33 which will be referred to as a security controller herein for clarity of reference.
  • these components may be co-located or separately located in different embodiments.
  • the NFC sensor 32 may be located at the personnel access position
  • the security controller 33 may be co-located therewith or remotely connected to the NFC sensor, such as over a local area network (
  • the security system 30 also illustratively includes a mobile wireless communications device 34 (also referred to as a "mobile device” herein) which comprises a second NFC sensor 35 , a wireless receiver or transceiver 36 which communicates via a wireless communications network 39 , and a controller 37 , which will be referred to as the "mobile controller” herein for clarity of reference since it is located in the mobile device.
  • the wireless transceiver 36 may comprise a cellular transceiver, a Wireless Local Area Network (WLAN) transceiver, etc.
  • the mobile device 34 components may be carried by a portable housing 38 .
  • the security controller 33 and the mobile controller 37 may be implemented using a combination of hardware (e.g., microprocessor, etc.) and non-transitory computer readable medium components including computer-readable instructions for causing the various operations discussed herein to be performed.
  • Example mobile devices may include portable or personal media players (e.g., MP3 players, video players, etc.), remote controls (e.g., television or stereo remotes, etc.), portable gaming devices, portable or mobile telephones, smartphones, etc.
  • NFC is a short range variant of radio-frequency identification (RFID), typically operating at approximately 13.56 MHz.
  • RFID radio-frequency identification
  • NFC technology allows a wireless connection to be established between a mobile device that has an embedded NFC chipset and an NFC reader terminal (e.g., 14443A/B, Felica, ISO 15693) at a range of about 10cm, so that the devices are "swiped", “bumped”, “tapped”, or otherwise moved relative to one another to be in close proximity to communicate.
  • NFC is a standardized technology that may be used in various applications such as mobile banking, ticketing, secure physical access, etc.
  • NFC includes other similar short-range wireless communication formats that may have a different operating frequency, effective range, etc.
  • the first and second NFC sensors 32, 35 may be passive tags or active readers depending upon the given implementation.
  • the mobile controller 37 is configured to communicate a security code, which may be valid or invalid, via the second NFC sensor 35 to the first NFC sensor 32 based upon proximity therewith (i.e., when they are within NFC communication range), at Block 51 .
  • the security code may comprise a series of alphanumeric characters, and in some embodiments the security code may be encrypted to provided enhanced security.
  • the security controller 33 is configured to selectively grant personnel access based upon receiving a valid security code from the first NFC sensor 32 , at Blocks 52 and 53 , which illustratively concludes the method shown in FIG. 5 at Block 54.
  • the security controller 33 denies personnel access and generates at least one access denial electronic message, at Block 55 .
  • the mobile controller 37 is configured to receive the at least one denial electronic message (e.g., electronic mail (email) message, Short Message Service (SMS) message, etc.) from the security controller 36 via the second NFC sensor 35 or the wireless transceiver 36 based upon communicating the invalid security code, at Block 56 .
  • the at least one denial electronic message e.g., electronic mail (email) message, Short Message Service (SMS) message, etc.
  • a particular security code may only be valid during certain times of the day, or certain days of the week, but invalid outside of those times.
  • a security code may be valid for a particular access point (e.g., the front of a building), but not other access points (e.g., a back entrance to the building).
  • the denial message may also inform the user who the appropriate contact is to obtain access.
  • one or more mobile devices 134a, 134b may be used. It should be noted that in the illustrated embodiments the components which are similar to those already described above with reference to FIG. 2 are indicated by increments of one-hundred (e.g., the wireless transceiver 36 is similar to the wireless transceivers 136a, 136b, etc.) for convenience of reference. Not only does the use of multiple mobile devices 134a, 134b allow them to individually communicate with the access control device to gain personnel access, but this may also allow one mobile device to exchange a security code with the other device. That is, one of the mobile devices 134a may advantageously receive a valid security code from the other mobiles device 134b.
  • the wireless transceiver 36 is similar to the wireless transceivers 136a, 136b, etc.
  • the mobile device 134b may have an authorized valid security code assigned thereto (such as for an employee, etc.), and the mobile controller 137b may provide a temporary or single-use (i.e., "one-time") code to the other mobile device 134a (see Block 51' , FIG. 6 ), such as to allow guest or visitor access, for example.
  • the mobile device 134b may provide a valid security code to the mobile device 134a for an event by tapping the devices together, or sending an email or SMS message with the appropriate information. That is, in some embodiments the mobile controller 137a may be configured to receive the valid security code via the second NFC sensor 135a, as seen in FIG. 3 . In other embodiments, the mobile controller 137a' may be configured to receive the valid security code via the wireless transceiver 136a and the wireless communications network 139', as seen in FIG. 4 .
  • additional authentication data e.g., biometric data (e.g., fingerprint, iris, retina, etc.), a password or personal identification number (PIN), etc.
  • a prompt may be provided (such as on a display of the mobile device) to authenticate the mobile device, and the mobile controller 37 may communicate with the security controller 33 via the wireless transceiver 36 to thereby provide access upon receiving the correct additional authentication information.
  • a security system 230 illustratively includes a plurality of electronic devices 231a- 231n, each having a unique identification (ID) associated therewith.
  • the electronic devices 231a-231n may comprise computers (e.g., PCs, Macs, etc.), mobile devices such as those noted above, etc.
  • each electronic device 231a-231n is configured to generate a temporary security code based upon the unique ID, at Blocks 251, 251'.
  • the unique ID may be a unique alphanumeric code associated with the electronic device, such as an Internet Protocol (IP) address, a Uniform Resource Locator (URL) address, an International Mobile Equipment Identity (IMEI) number, a mobile device PIN, a phone number, etc.
  • IP Internet Protocol
  • URL Uniform Resource Locator
  • IMEI International Mobile Equipment Identity
  • the unique ID may instead be associated with a user to which the given electronic device 231 is assigned, such as an employee ID or PIN, etc.
  • the temporary security code may be a series of alphanumeric characters as described above, and may be used to provide temporary (e.g., single-use) access to a secure area, such as a building, office, storage area or locker, etc.
  • the temporary security code may be generated using the unique ID as a key seed, such as with a cryptographic algorithm, or may instead be incorporated within or included as part of the temporary security code, for example.
  • the temporary security code provides the requisite information for an access control device 240 to grant personnel access.
  • the system 230 further illustratively includes one or more mobile devices 234 comprising a first NFC sensor 235 , and a mobile controller 237 configured to receive the temporary security code from a given electronic device, namely the electronic device 231b in FIG. 7 , from among the plurality of electronic devices 231a-231n, at Blocks 252, 252' .
  • the temporary security code may be communicated to the mobile controller 237 via a third NFC sensor 241' in an NFC-enabled electronic device 231a', or via a wireless communications network 239' from an electronic device such as a mobile device 231b' comprising a wireless transceiver (e.g., cellular, WLAN, WiMAX, etc.), as seen in FIG. 8 .
  • a wireless transceiver e.g., cellular, WLAN, WiMAX, etc.
  • the access control device 240 is associated with a personnel access position, as noted above, and it illustratively includes a second NFC sensor 232 and a security controller 233.
  • the security controller 233 is configured to receive the temporary security code from the first NFC sensor 235 via NFC communications, at Blocks 253, 253', selectively grant personnel access based upon the received temporary security code, at Block 254, and determine the unique ID associated with the given electronic device, at Block 255, thus concluding the method illustratively shown in FIG. 9 .
  • This advantageously allows one user to grant temporary access to another, such as to enter a building for a meeting, etc., while also allowing the security controller 233 to track the user who granted the temporary access.
  • the access control device 240' shown in FIG. 8 further illustratively includes a security database 242' coupled to the security controller 233' and configured to update or maintain a log of unique IDs used for granting temporary access.
  • the log may also include an indication of the mobile device 234' to which access was granted, date/time of access, etc.
  • the determination as to whether to grant personnel access may be based upon factors other than whether a valid temporary security code is presented to the security controller 233, at Block 257' ( FIG. 10 ).
  • the security controller 233 may also be configured to further selectively grant personnel access also based upon the determined unique ID. More particularly, the security controller 233' may check to see whether the unique ID is valid, at Block 258 '.
  • a unique ID may no longer be valid if it corresponds to a user that is no longer an employee or is no longer authorized to grant access.
  • the unique ID may have been issued by an electronic device 231 having a valid unique ID at the time the temporary security code was issued, if the unique ID is no longer valid at the time access by the mobile device 234 is requested, then it may be desirable to exclude the temporary personnel access in some implementations.
  • the temporary security code may be exchanged as part of, or along with, an event notification generated by a given electronic device, which in the embodiment of FIG. 8 is the mobile device 231b' .
  • a user may issue an event invitation from a PC or Mac computer, such as through Microsoft® Outlook, for example, and invite one or more participants to an event in the user's building at a scheduled event time (i.e., a given date and time).
  • the event invitation may include a temporary security code that allows event attendees to temporarily access the building at the time of, or within a time window of (e.g., 15 minutes prior to the start time), the event.
  • the temporary security code may be included as part of an initial event invitation, or may be provided in response to an acceptance of an event invitation, for example. If the temporary security code or unique ID is not valid, or it is not the scheduled time (or within a window of the scheduled time), then personnel access may be denied, which concludes the method illustrated in FIG. 10 (Block 256' ). Otherwise, personnel access may be granted, at Block 254'.
  • a related computer-readable medium having computer-executable instructions for causing the access control device 240 to perform steps including receiving the temporary security code from the first NFC sensor 235 via NFC communications, selectively granting personnel access based upon the received temporary security code, and determining the unique ID associated with the given electronic device (i.e., the device 231b in FIG. 7 ).
  • the computer-readable medium may further include computer-executable instructions for performing the additional steps described above.
  • the device 1000 illustratively includes a housing 1200 , a keyboard or keypad 1400 and an output device 1600 .
  • the output device shown is a display 1600 , which may comprise a full graphic LCD. Other types of output devices may alternatively be utilized.
  • a processing device 1800 is contained within the housing 1200 and is coupled between the keypad 1400 and the display 1600. The processing device 1800 controls the operation of the display 1600 , as well as the overall operation of the mobile device 1000, in response to actuation of keys on the keypad 1400.
  • the housing 1200 may be elongated vertically, or may take on other sizes and shapes (including clamshell housing structures).
  • the keypad may include a mode selection key, or other hardware or software for switching between text entry and telephony entry.
  • FIG. 11 In addition to the processing device 1800 , other parts of the mobile device 1000 are shown schematically in FIG. 11 . These include a communications subsystem 1001 ; a short-range communications subsystem 1020 ; the keypad 1400 and the display 1600, along with other input/output devices 1060, 1080, 1100 and 1120; as well as memory devices 1160, 1180 and various other device subsystems 1201 .
  • the mobile device 1000 may comprise a two-way RF communications device having data and, optionally, voice communications capabilities. In addition, the mobile device 1000 may have the capability to communicate with other computer systems via the Internet.
  • Operating system software executed by the processing device 1800 is stored in a persistent store, such as the flash memory 1160, but may be stored in other types of memory devices, such as a read only memory (ROM) or similar storage element.
  • system software, specific device applications, or parts thereof may be temporarily loaded into a volatile store, such as the random access memory (RAM) 1180.
  • Communications signals received by the mobile device may also be stored in the RAM 1180.
  • the processing device 1800 in addition to its operating system functions, enables execution of software applications 1300A-1300N on the device 1000.
  • a predetermined set of applications that control basic device operations, such as data and voice communications 1300A and 1300B, may be installed on the device 1000 during manufacture.
  • a personal information manager (PIM) application may be installed during manufacture.
  • the PIM may be capable of organizing and managing data items, such as e-mail, calendar events, voice mails, appointments, and task items.
  • the PIM application may also be capable of sending and receiving data items via a wireless network 1401.
  • the PIM data items may be seamlessly integrated, synchronized and updated via the wireless network 1401 with corresponding data items stored or associated with a host computer system.
  • the communications subsystem 1001 includes a receiver 1500, a transmitter 1520, and one or more antennas 1540 and 1560.
  • the communications subsystem 1001 also includes a processing module, such as a digital signal processor (DSP) 1580, and local oscillators (LOs) 1601.
  • DSP digital signal processor
  • LOs local oscillators
  • a mobile device 1000 may include a communications subsystem 1001 designed to operate with the MobitexTM, Data TACTM or General Packet Radio Service (GPRS) mobile data communications networks, and also designed to operate with any of a variety of voice communications networks, such as AMPS, TDMA, CDMA, WCDMA, PCS, GSM, EDGE, etc. Other types of data and voice networks, both separate and integrated, may also be utilized with the mobile device 1000 .
  • the mobile device 1000 may also be compliant with other communications standards such as 3GSM, 3GPP, UMTS, 4G, etc.
  • Network access requirements vary depending upon the type of communication system. For example, in the Mobitex and DataTAC networks, mobile devices are registered on the network using a unique personal identification number or PIN associated with each device. In GPRS networks, however, network access is associated with a subscriber or user of a device. A GPRS device therefore typically involves use of a subscriber identity module, commonly referred to as a SIM card, in order to operate on a GPRS network.
  • SIM card subscriber identity module
  • the mobile device 1000 may send and receive communications signals over the communication network 1401.
  • Signals received from the communications network 1401 by the antenna 1540 are routed to the receiver 1500, which provides for signal amplification, frequency down conversion, filtering, channel selection, etc., and may also provide analog to digital conversion. Analog-to-digital conversion of the received signal allows the DSP 1580 to perform more complex communications functions, such as demodulation and decoding.
  • signals to be transmitted to the network 1401 are processed (e.g. modulated and encoded) by the DSP 1580 and are then provided to the transmitter 1520 for digital to analog conversion, frequency up conversion, filtering, amplification and transmission to the communication network 1401 (or networks) via the antenna 1560.
  • the DSP 1580 provides for control of the receiver 1500 and the transmitter 1520. For example, gains applied to communications signals in the receiver 1500 and transmitter 1520 may be adaptively controlled through automatic gain control algorithms implemented in the DSP 1580.
  • a received signal such as a text message or web page download
  • the communications subsystem 1001 is input to the processing device 1800 .
  • the received signal is then further processed by the processing device 1800 for an output to the display 1600, or alternatively to some other auxiliary I/O device 1060 .
  • a device may also be used to compose data items, such as e-mail messages, using the keypad 1400 and/or some other auxiliary I/O device 1060 , such as a touchpad, a rocker switch, a thumb-wheel, or some other type of input device.
  • the composed data items may then be transmitted over the communications network 1401 via the communications subsystem 1001 .
  • a voice communications mode In a voice communications mode, overall operation of the device is substantially similar to the data communications mode, except that received signals are output to a speaker 1100 , and signals for transmission are generated by a microphone 1120 .
  • Alternative voice or audio I/O subsystems such as a voice message recording subsystem, may also be implemented on the device 1000 .
  • the display 1 6 00 may also be utilized in voice communications mode, for example to display the identity of a calling party, the duration of a voice call, or other voice call related information.
  • the short-range communications subsystem enables communication between the mobile device 1000 and other proximate systems or devices, which need not necessarily be similar devices.
  • the short-range communications subsystem may include an infrared device and associated circuits and components, NFC or a BluetoothTM communications module to provide for communication with similarly-enabled systems and devices.

Abstract

A security system may include a plurality of electronic devices, each having a unique identification (ID) associated therewith and configured to generate a temporary security code based upon the unique ID. The system may further include at least one mobile wireless communications device including a first Near-Field Communication (NFC) circuit, and a mobile controller configured to receive the temporary security code from a given electronic device from among the plurality of electronic devices. The system may also include an access control device associated with a personnel access position and including a second NFC circuit and a security controller. The security controller may be configured to receive the temporary security code from the first NFC circuit via NFC communications, selectively grant personnel access based upon the received temporary security code, and determine the unique ID associated with the given electronic device.

Description

    Technical Field
  • This application relates to the field of communications, and more particularly, to electronic devices and related methods that use near-field communication (NFC).
  • Background
  • Mobile communication systems continue to grow in popularity and have become an integral part of both personal and business communications. Various mobile devices now incorporate Personal Digital Assistant (PDA) features such as calendars, address books, task lists, calculators, memo and writing programs, media players, games, etc. These multi-function devices usually allow electronic mail (email) messages to be sent and received wirelessly, as well as access the Internet via a cellular network and/or a wireless local area network (WLAN), for example.
  • Some mobile devices incorporate contactless card technology and/or near field communication (NFC) chips. NFC technology may be used for contactless short-range communications using magnetic field induction to enable communication between electronic devices, including mobile wireless communications devices. These short-range communications include payment and ticketing, electronic keys, identification, device set-up service and similar information sharing. This short-range high frequency wireless communications technology exchanges data between devices over a short distance, such as only a few centimeters.
  • Brief Description of the Drawings
  • FIG. 1 is a schematic block diagram of a security system in accordance with one example embodiment.
  • FIG. 2 is a schematic block diagram of the mobile wireless communications device of the system of FIG. 1 shown in greater detail.
  • FIG. 3 is a schematic block diagram in which a plurality of mobile wireless communications devices are shown for use with the security system of FIG. 1.
  • FIG. 4 is a schematic block diagram of an alternative embodiment of the mobile wireless communications devices of FIG. 3.
  • FIGS. 5 and 6 are flow diagrams illustrating method aspects associated with the system of FIG. 1 and mobile wireless communications devices of FIGS. 2 through 4.
  • FIG. 7 is a schematic block diagram of another security system in accordance with an example embodiment.
  • FIG. 8 is a schematic block diagram of an alternative embodiment of the system of FIG. 7.
  • FIGS. 9 and 10 are flow diagrams illustrating method aspects associated with the systems of FIGS. 7 and 8.
  • FIG. 11 is a schematic block diagram illustrating an example mobile wireless device components that may be used with the mobile wireless communications devices of the example embodiments.
  • Detailed Description
  • The present description is made with reference to the accompanying drawings, in which example embodiments are shown. However, many different embodiments may be used, and thus the description should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete. Like numbers refer to like elements throughout, and prime notation is used to indicate similar elements or steps in alternative embodiments.
  • Generally speaking, a security system is disclosed herein, the security system may include a plurality of electronic devices, each having a unique identification (ID) associated therewith and configured to generate a temporary security code based upon the unique ID. The system may further include at least one mobile wireless communications device comprising a first Near-Field Communication (NFC) sensor, and a mobile controller configured to receive the temporary security code from a given electronic device from among the plurality of electronic devices. The system may also include an access control device associated with a personnel access position and comprising a second NFC sensor configured to receive the temporary security code from the first NFC sensor via NFC communications and a security controller. The security controller may be, configured to selectively grant personnel access based upon the received temporary security code, and determine the unique ID associated with the given electronic device. Thus, the system may conveniently be used to provide personnel access at a secured location from a mobile wireless communications device with NFC communications, and while allowing for tracking of the electronic device which provided the temporary security code.
  • The security controller may be configured to further selectively grant personnel access also based upon the determined unique ID. In addition, the security controller may also be configured to update a log of the determined unique ID.
  • In some embodiments, each of the plurality of electronic devices may be further configured to generate an event notification, and to communicate the temporary security code to the at least one mobile wireless communications device along with the event notification. Furthermore, the event notification may have a scheduled event time associated therewith, and the security controller may be configured to selectively grant personnel access further based upon the scheduled event time.
  • By way of example, the temporary security code may comprise a single-use security code. In some embodiments, at least one of the plurality of electronic devices may also comprise a mobile wireless communications device. Furthermore, each of the plurality of electronic devices may further comprise a third NFC sensor, and the mobile controller may be configured to receive the temporary security code via the third NFC sensor. In addition, the at least one mobile wireless communications device may further include a wireless transceiver coupled to the mobile controller and configured to receive the temporary security code from the given electronic device. By way of example, the wireless transceiver may comprise a cellular transceiver, a Wireless Local Area Network (WLAN) transceiver, etc.
  • A related access control device, such as the one described briefly above, and security method are also provided. The method may include generating a temporary security code at a given electronic device based upon the unique ID associated therewith, receiving the temporary security code at the at least one mobile wireless communications device from the given electronic device, and receiving the temporary security code at the access control device from the first NFC sensor via NFC communications. The method may further include selectively granting personnel access via the access control device based upon the received temporary security code, and determining the unique ID associated with the given electronic device at the access control device.
  • A related computer-readable medium is also provided having computer-executable instructions for causing an access control device to perform steps including receiving the temporary security code from the first NFC sensor via NFC communications, selectively granting personnel access based upon the received temporary security code, and determining the unique ID associated with the given electronic device.
  • Referring initially to FIGS. 1 and 2, a security system 30 is first described. By way of background, NFC is a short-range wireless communications technology in which NFC-enabled devices are "swiped," "bumped" or otherwise moved in close proximity to communicate. In one non-limiting example implementation, NFC may operate at 13.56 MHz and with an effective range of about 10cm, but other suitable versions of near-field communication which may have different operating frequencies, effective ranges, etc., for example, may also be used.
  • The system 30 illustratively includes an access control device associated with a personnel access position. In the illustrated example, the personnel access position is at a security door 31 which is locked to prevent unauthorized access to a particular area. In other embodiments, however, the personnel access position may correspond to a security gate or turnstile, or to a secure object such as a safe, locker, or a vehicle, for example. The access control device illustratively includes a first NFC sensor (e.g., an NFC transceiver) 32, and a controller 33, which will be referred to as a security controller herein for clarity of reference. These components may be co-located or separately located in different embodiments. For example, the NFC sensor 32 may be located at the personnel access position, and the security controller 33 may be co-located therewith or remotely connected to the NFC sensor, such as over a local area network (LAN), wireless communications link, the Internet, etc.
  • The security system 30 also illustratively includes a mobile wireless communications device 34 (also referred to as a "mobile device" herein) which comprises a second NFC sensor 35, a wireless receiver or transceiver 36 which communicates via a wireless communications network 39, and a controller 37, which will be referred to as the "mobile controller" herein for clarity of reference since it is located in the mobile device. By way of example, the wireless transceiver 36 may comprise a cellular transceiver, a Wireless Local Area Network (WLAN) transceiver, etc. The mobile device 34 components may be carried by a portable housing 38. By way of example, the security controller 33 and the mobile controller 37 may be implemented using a combination of hardware (e.g., microprocessor, etc.) and non-transitory computer readable medium components including computer-readable instructions for causing the various operations discussed herein to be performed. Example mobile devices may include portable or personal media players (e.g., MP3 players, video players, etc.), remote controls (e.g., television or stereo remotes, etc.), portable gaming devices, portable or mobile telephones, smartphones, etc.
  • In its current implementation, NFC is a short range variant of radio-frequency identification (RFID), typically operating at approximately 13.56 MHz. NFC technology allows a wireless connection to be established between a mobile device that has an embedded NFC chipset and an NFC reader terminal (e.g., 14443A/B, Felica, ISO 15693) at a range of about 10cm, so that the devices are "swiped", "bumped", "tapped", or otherwise moved relative to one another to be in close proximity to communicate. NFC is a standardized technology that may be used in various applications such as mobile banking, ticketing, secure physical access, etc. However, it should be noted that, as used herein, "NFC" includes other similar short-range wireless communication formats that may have a different operating frequency, effective range, etc. The first and second NFC sensors 32, 35 may be passive tags or active readers depending upon the given implementation.
  • Referring additionally to FIG. 5, operation of the security system 30 is now further described. Beginning at Block 50, the mobile controller 37 is configured to communicate a security code, which may be valid or invalid, via the second NFC sensor 35 to the first NFC sensor 32 based upon proximity therewith (i.e., when they are within NFC communication range), at Block 51. By way of example, the security code may comprise a series of alphanumeric characters, and in some embodiments the security code may be encrypted to provided enhanced security. The security controller 33 is configured to selectively grant personnel access based upon receiving a valid security code from the first NFC sensor 32, at Blocks 52 and 53, which illustratively concludes the method shown in FIG. 5 at Block 54. However, if the mobile controller 37 instead provides an invalid security code, then the security controller 33 denies personnel access and generates at least one access denial electronic message, at Block 55. The mobile controller 37 is configured to receive the at least one denial electronic message (e.g., electronic mail (email) message, Short Message Service (SMS) message, etc.) from the security controller 36 via the second NFC sensor 35 or the wireless transceiver 36 based upon communicating the invalid security code, at Block 56.
  • In this way, the person attempting to obtain access may advantageously be informed as to the reason that access was denied. For example, a particular security code may only be valid during certain times of the day, or certain days of the week, but invalid outside of those times. Another example is that a security code may be valid for a particular access point (e.g., the front of a building), but not other access points (e.g., a back entrance to the building). The denial message may also inform the user who the appropriate contact is to obtain access.
  • Turning now additionally to FIGS. 3 and 4, in some embodiments one or more mobile devices 134a, 134b may be used. It should be noted that in the illustrated embodiments the components which are similar to those already described above with reference to FIG. 2 are indicated by increments of one-hundred (e.g., the wireless transceiver 36 is similar to the wireless transceivers 136a, 136b, etc.) for convenience of reference. Not only does the use of multiple mobile devices 134a, 134b allow them to individually communicate with the access control device to gain personnel access, but this may also allow one mobile device to exchange a security code with the other device. That is, one of the mobile devices 134a may advantageously receive a valid security code from the other mobiles device 134b.
  • Thus, for example, the mobile device 134b may have an authorized valid security code assigned thereto (such as for an employee, etc.), and the mobile controller 137b may provide a temporary or single-use (i.e., "one-time") code to the other mobile device 134a (see Block 51', FIG. 6), such as to allow guest or visitor access, for example. In one use case, the mobile device 134b may provide a valid security code to the mobile device 134a for an event by tapping the devices together, or sending an email or SMS message with the appropriate information. That is, in some embodiments the mobile controller 137a may be configured to receive the valid security code via the second NFC sensor 135a, as seen in FIG. 3. In other embodiments, the mobile controller 137a' may be configured to receive the valid security code via the wireless transceiver 136a and the wireless communications network 139', as seen in FIG. 4.
  • Referring additionally to FIG. 6, in some embodiments it may be desirable to grant personnel access based not only on provision of a valid security code, but also based upon additional authentication data from the wireless transceiver 36, such as biometric data (e.g., fingerprint, iris, retina, etc.), a password or personal identification number (PIN), etc., at Block 57'. In one example implementation, when the mobile device 34 is swiped or bumped to begin NFC communication, a prompt may be provided (such as on a display of the mobile device) to authenticate the mobile device, and the mobile controller 37 may communicate with the security controller 33 via the wireless transceiver 36 to thereby provide access upon receiving the correct additional authentication information.
  • Turning now to FIGS. 7 through 10, in accordance with another advantageous embodiment a security system 230 illustratively includes a plurality of electronic devices 231a-231n, each having a unique identification (ID) associated therewith. By way of example, the electronic devices 231a-231n may comprise computers (e.g., PCs, Macs, etc.), mobile devices such as those noted above, etc. Beginning at Blocks 250, 250', each electronic device 231a-231n is configured to generate a temporary security code based upon the unique ID, at Blocks 251, 251'. By way of example, the unique ID may be a unique alphanumeric code associated with the electronic device, such as an Internet Protocol (IP) address, a Uniform Resource Locator (URL) address, an International Mobile Equipment Identity (IMEI) number, a mobile device PIN, a phone number, etc. In other embodiments, the unique ID may instead be associated with a user to which the given electronic device 231 is assigned, such as an employee ID or PIN, etc.
  • The temporary security code may be a series of alphanumeric characters as described above, and may be used to provide temporary (e.g., single-use) access to a secure area, such as a building, office, storage area or locker, etc. The temporary security code may be generated using the unique ID as a key seed, such as with a cryptographic algorithm, or may instead be incorporated within or included as part of the temporary security code, for example. The temporary security code provides the requisite information for an access control device 240 to grant personnel access.
  • The system 230 further illustratively includes one or more mobile devices 234 comprising a first NFC sensor 235, and a mobile controller 237 configured to receive the temporary security code from a given electronic device, namely the electronic device 231b in FIG. 7, from among the plurality of electronic devices 231a-231n, at Blocks 252, 252'. The temporary security code may be communicated to the mobile controller 237 via a third NFC sensor 241' in an NFC-enabled electronic device 231a', or via a wireless communications network 239' from an electronic device such as a mobile device 231b' comprising a wireless transceiver (e.g., cellular, WLAN, WiMAX, etc.), as seen in FIG. 8.
  • The access control device 240 is associated with a personnel access position, as noted above, and it illustratively includes a second NFC sensor 232 and a security controller 233. The security controller 233 is configured to receive the temporary security code from the first NFC sensor 235 via NFC communications, at Blocks 253, 253', selectively grant personnel access based upon the received temporary security code, at Block 254, and determine the unique ID associated with the given electronic device, at Block 255, thus concluding the method illustratively shown in FIG. 9. This advantageously allows one user to grant temporary access to another, such as to enter a building for a meeting, etc., while also allowing the security controller 233 to track the user who granted the temporary access. To this end, the access control device 240' shown in FIG. 8 further illustratively includes a security database 242' coupled to the security controller 233' and configured to update or maintain a log of unique IDs used for granting temporary access. The log may also include an indication of the mobile device 234' to which access was granted, date/time of access, etc.
  • The determination as to whether to grant personnel access may be based upon factors other than whether a valid temporary security code is presented to the security controller 233, at Block 257' (FIG. 10). For example, the security controller 233 may also be configured to further selectively grant personnel access also based upon the determined unique ID. More particularly, the security controller 233' may check to see whether the unique ID is valid, at Block 258'. By way of example, a unique ID may no longer be valid if it corresponds to a user that is no longer an employee or is no longer authorized to grant access. Even though the unique ID may have been issued by an electronic device 231 having a valid unique ID at the time the temporary security code was issued, if the unique ID is no longer valid at the time access by the mobile device 234 is requested, then it may be desirable to exclude the temporary personnel access in some implementations.
  • In some embodiments, the temporary security code may be exchanged as part of, or along with, an event notification generated by a given electronic device, which in the embodiment of FIG. 8 is the mobile device 231b'. For example, a user may issue an event invitation from a PC or Mac computer, such as through Microsoft® Outlook, for example, and invite one or more participants to an event in the user's building at a scheduled event time (i.e., a given date and time). The event invitation may include a temporary security code that allows event attendees to temporarily access the building at the time of, or within a time window of (e.g., 15 minutes prior to the start time), the event. Depending upon the given embodiment, the temporary security code may be included as part of an initial event invitation, or may be provided in response to an acceptance of an event invitation, for example. If the temporary security code or unique ID is not valid, or it is not the scheduled time (or within a window of the scheduled time), then personnel access may be denied, which concludes the method illustrated in FIG. 10 (Block 256'). Otherwise, personnel access may be granted, at Block 254'.
  • A related computer-readable medium is also provided having computer-executable instructions for causing the access control device 240 to perform steps including receiving the temporary security code from the first NFC sensor 235 via NFC communications, selectively granting personnel access based upon the received temporary security code, and determining the unique ID associated with the given electronic device (i.e., the device 231b in FIG. 7). The computer-readable medium may further include computer-executable instructions for performing the additional steps described above.
  • Example components of a mobile device 1000 that may be used in accordance with the above-described embodiments are further described below with reference to FIG. 11. The device 1000 illustratively includes a housing 1200, a keyboard or keypad 1400 and an output device 1600. The output device shown is a display 1600, which may comprise a full graphic LCD. Other types of output devices may alternatively be utilized. A processing device 1800 is contained within the housing 1200 and is coupled between the keypad 1400 and the display 1600. The processing device 1800 controls the operation of the display 1600, as well as the overall operation of the mobile device 1000, in response to actuation of keys on the keypad 1400.
  • The housing 1200 may be elongated vertically, or may take on other sizes and shapes (including clamshell housing structures). The keypad may include a mode selection key, or other hardware or software for switching between text entry and telephony entry.
  • In addition to the processing device 1800, other parts of the mobile device 1000 are shown schematically in FIG. 11. These include a communications subsystem 1001; a short-range communications subsystem 1020; the keypad 1400 and the display 1600, along with other input/ output devices 1060, 1080, 1100 and 1120; as well as memory devices 1160, 1180 and various other device subsystems 1201. The mobile device 1000 may comprise a two-way RF communications device having data and, optionally, voice communications capabilities. In addition, the mobile device 1000 may have the capability to communicate with other computer systems via the Internet.
  • Operating system software executed by the processing device 1800 is stored in a persistent store, such as the flash memory 1160, but may be stored in other types of memory devices, such as a read only memory (ROM) or similar storage element. In addition, system software, specific device applications, or parts thereof, may be temporarily loaded into a volatile store, such as the random access memory (RAM) 1180. Communications signals received by the mobile device may also be stored in the RAM 1180.
  • The processing device 1800, in addition to its operating system functions, enables execution of software applications 1300A-1300N on the device 1000. A predetermined set of applications that control basic device operations, such as data and voice communications 1300A and 1300B, may be installed on the device 1000 during manufacture. In addition, a personal information manager (PIM) application may be installed during manufacture. The PIM may be capable of organizing and managing data items, such as e-mail, calendar events, voice mails, appointments, and task items. The PIM application may also be capable of sending and receiving data items via a wireless network 1401. The PIM data items may be seamlessly integrated, synchronized and updated via the wireless network 1401 with corresponding data items stored or associated with a host computer system.
  • Communication functions, including data and voice communications, are performed through the communications subsystem 1001, and possibly through the short-range communications subsystem. The communications subsystem 1001 includes a receiver 1500, a transmitter 1520, and one or more antennas 1540 and 1560. In addition, the communications subsystem 1001 also includes a processing module, such as a digital signal processor (DSP) 1580, and local oscillators (LOs) 1601. The specific design and implementation of the communications subsystem 1001 is dependent upon the communications network in which the mobile device 1000 is intended to operate. For example, a mobile device 1000 may include a communications subsystem 1001 designed to operate with the Mobitex™, Data TAC™ or General Packet Radio Service (GPRS) mobile data communications networks, and also designed to operate with any of a variety of voice communications networks, such as AMPS, TDMA, CDMA, WCDMA, PCS, GSM, EDGE, etc. Other types of data and voice networks, both separate and integrated, may also be utilized with the mobile device 1000. The mobile device 1000 may also be compliant with other communications standards such as 3GSM, 3GPP, UMTS, 4G, etc.
  • Network access requirements vary depending upon the type of communication system. For example, in the Mobitex and DataTAC networks, mobile devices are registered on the network using a unique personal identification number or PIN associated with each device. In GPRS networks, however, network access is associated with a subscriber or user of a device. A GPRS device therefore typically involves use of a subscriber identity module, commonly referred to as a SIM card, in order to operate on a GPRS network.
  • When required network registration or activation procedures have been completed, the mobile device 1000 may send and receive communications signals over the communication network 1401. Signals received from the communications network 1401 by the antenna 1540 are routed to the receiver 1500, which provides for signal amplification, frequency down conversion, filtering, channel selection, etc., and may also provide analog to digital conversion. Analog-to-digital conversion of the received signal allows the DSP 1580 to perform more complex communications functions, such as demodulation and decoding. In a similar manner, signals to be transmitted to the network 1401 are processed (e.g. modulated and encoded) by the DSP 1580 and are then provided to the transmitter 1520 for digital to analog conversion, frequency up conversion, filtering, amplification and transmission to the communication network 1401 (or networks) via the antenna 1560.
  • In addition to processing communications signals, the DSP 1580 provides for control of the receiver 1500 and the transmitter 1520. For example, gains applied to communications signals in the receiver 1500 and transmitter 1520 may be adaptively controlled through automatic gain control algorithms implemented in the DSP 1580.
  • In a data communications mode, a received signal, such as a text message or web page download, is processed by the communications subsystem 1001 and is input to the processing device 1800. The received signal is then further processed by the processing device 1800 for an output to the display 1600, or alternatively to some other auxiliary I/O device 1060. A device may also be used to compose data items, such as e-mail messages, using the keypad 1400 and/or some other auxiliary I/O device 1060, such as a touchpad, a rocker switch, a thumb-wheel, or some other type of input device. The composed data items may then be transmitted over the communications network 1401 via the communications subsystem 1001.
  • In a voice communications mode, overall operation of the device is substantially similar to the data communications mode, except that received signals are output to a speaker 1100, and signals for transmission are generated by a microphone 1120. Alternative voice or audio I/O subsystems, such as a voice message recording subsystem, may also be implemented on the device 1000. In addition, the display 1600 may also be utilized in voice communications mode, for example to display the identity of a calling party, the duration of a voice call, or other voice call related information.
  • The short-range communications subsystem enables communication between the mobile device 1000 and other proximate systems or devices, which need not necessarily be similar devices. For example, the short-range communications subsystem may include an infrared device and associated circuits and components, NFC or a Bluetooth™ communications module to provide for communication with similarly-enabled systems and devices.
  • Many modifications and other embodiments will come to the mind of one skilled in the art having the benefit of the teachings presented in the foregoing descriptions and the associated drawings. Therefore, it is understood that various modifications and embodiments are intended to be included within the scope of the appended claims.

Claims (15)

  1. A security system comprising:
    a plurality of electronic devices, each having a unique identification (ID) associated therewith and configured to generate a temporary security code based upon the unique ID;
    at least one mobile wireless communications device comprising
    a first Near-Field Communication (NFC) sensor, and
    a first controller configured to receive the temporary security code from a given electronic device from among said plurality of electronic devices; and
    an access control device associated with a personnel access position and comprising
    a second NFC sensor configured to receive the temporary security code from said first NFC sensor via NFC communications, and
    a second controller coupled to said second NFC sensor and configured to
    selectively grant personnel access based upon the received temporary security code, and
    determine the unique ID associated with the given electronic device.
  2. The security system of Claim 1 wherein said second controller is configured to further selectively grant personnel access also based upon the determined unique ID.
  3. The security system of Claim 1 wherein said second controller is configured to update a log of the determined unique ID.
  4. The security system of Claim 1 wherein each of said plurality of electronic devices is further configured to generate an event notification, and to communicate the temporary security code to said at least one mobile wireless communications device along with the event notification.
  5. The security system of Claim 4 wherein the event notification has a scheduled event time associated therewith; and wherein said second controller is configured to selectively grant personnel access further based upon the scheduled event time.
  6. The security system of Claim 1 wherein the temporary security code comprises a single-use security code.
  7. The security system of Claim 1 wherein at least one of said plurality of electronic devices also comprises a mobile wireless communications device.
  8. The security system of Claim 1 wherein each of said plurality of electronic devices further comprises a third NFC sensor; and wherein said first controller is configured to receive the temporary security code via the third NFC sensor.
  9. The security system of Claim 1 wherein said at least one mobile wireless communications device further comprises a wireless receiver coupled to said first controller and configured to receive the temporary security code from said given electronic device.
  10. The security system of Claim 9 wherein said wireless receiver comprises a cellular receiver.
  11. A security method for a plurality of electronic devices, each having a unique identification (ID) associated therewith, at least one mobile wireless communications device comprising a first Near-Field Communication (NFC) circuit, and an access control device associated with a personnel access position and comprising a second NFC sensor, the method comprising:
    generating a temporary security code at a given electronic device based upon the unique ID associated therewith;
    receiving the temporary security code at the at least one mobile wireless communications device from the given electronic device;
    receiving the temporary security code at the access control device from the first NFC sensor via NFC communications;
    selectively granting personnel access via the access control device based upon the received temporary security code; and
    determining the unique ID associated with the given electronic device at the access control device.
  12. The method of Claim 11 wherein selectively granting further comprises selectively granting personnel access also based upon the determined unique ID.
  13. The method of Claim 11 further comprising updating a log of the determined unique ID.
  14. The method of Claim 11 wherein each of the plurality of electronic devices is further configured to generate an event notification, and further comprising communicating the temporary security code from the given electronic device to the at least one mobile wireless communications device along with the event notification.
  15. The method of Claim 11 wherein the event notification has a scheduled event time associated therewith; and wherein selectively granting further comprises selectively granting personnel access based upon the scheduled event time.
EP10178684A 2010-09-23 2010-09-23 Security system providing temporary personnel access based upon near-field communication and related methods Ceased EP2434461A1 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP10178684A EP2434461A1 (en) 2010-09-23 2010-09-23 Security system providing temporary personnel access based upon near-field communication and related methods
CA2753493A CA2753493C (en) 2010-09-23 2011-09-23 Security system providing temporary personnel access based upon near-field communication and related methods

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP10178684A EP2434461A1 (en) 2010-09-23 2010-09-23 Security system providing temporary personnel access based upon near-field communication and related methods

Publications (1)

Publication Number Publication Date
EP2434461A1 true EP2434461A1 (en) 2012-03-28

Family

ID=43585611

Family Applications (1)

Application Number Title Priority Date Filing Date
EP10178684A Ceased EP2434461A1 (en) 2010-09-23 2010-09-23 Security system providing temporary personnel access based upon near-field communication and related methods

Country Status (2)

Country Link
EP (1) EP2434461A1 (en)
CA (1) CA2753493C (en)

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102970674A (en) * 2012-11-01 2013-03-13 中兴通讯股份有限公司 Method and system for achieving temporary dynamic authorization by utilizing near field communication (NFC)
CN103401868A (en) * 2013-07-31 2013-11-20 广东欧珀移动通信有限公司 Temporary authorization method for mobile communication equipment of authorizing party and authorized party and temporary authorization management method and device for manager
CN103544755A (en) * 2013-10-30 2014-01-29 徐升明 Two-dimensional code lock
WO2014098755A1 (en) * 2012-12-18 2014-06-26 Phoniro Ab Access control method, and associated proxy device and access control system
CN104737573A (en) * 2012-10-22 2015-06-24 三星电子株式会社 Device and method for transmitting electronic key thereof
CN104809773A (en) * 2014-01-23 2015-07-29 中国移动通信集团公司 Entrance guard control method, entrance guard control apparatus, and entrance guard system
WO2015123678A1 (en) * 2014-02-14 2015-08-20 Intertrust Technologies Corporation Network security systems and methods
CN106600775A (en) * 2016-12-08 2017-04-26 南京魔格信息科技有限公司 Non-networking dynamic password generation method used for intelligent access control system
WO2017185904A1 (en) * 2016-04-26 2017-11-02 平安科技(深圳)有限公司 Visitor authorization management method, device, terminal, server and storage medium
TWI645381B (en) * 2017-06-03 2018-12-21 華豫寧股份有限公司 Electronic door lock system
US10192372B2 (en) 2015-03-23 2019-01-29 Assa Abloy Ab Considering whether a portable key device is located inside or outside a barrier
CN109636952A (en) * 2017-10-05 2019-04-16 林劲璋 Access control system and its management method
US10431026B2 (en) 2015-05-01 2019-10-01 Assa Abloy Ab Using wearable to determine ingress or egress
KR20190112257A (en) * 2019-09-24 2019-10-04 삼성전자주식회사 Device for transmitting electronic key and control memethod thereof

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10033435B2 (en) 2014-06-26 2018-07-24 Intel IP Corporation Apparatus, system and method of detecting an activity of a wireless communication device

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2002031778A1 (en) * 2000-10-13 2002-04-18 Nokia Corporation Wireless lock system
WO2007126375A1 (en) * 2006-04-28 2007-11-08 Sics, Swedish Institute Of Computer Science Ab Access control system and method for operating said system
WO2008076074A1 (en) * 2006-12-20 2008-06-26 Phoniro Ab Access control system, lock device, administration device, and associated methods and computer program products
EP2096240A1 (en) * 2006-12-20 2009-09-02 Panasonic Corporation Method for lending out electronic key and communication terminal

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2002031778A1 (en) * 2000-10-13 2002-04-18 Nokia Corporation Wireless lock system
WO2007126375A1 (en) * 2006-04-28 2007-11-08 Sics, Swedish Institute Of Computer Science Ab Access control system and method for operating said system
WO2008076074A1 (en) * 2006-12-20 2008-06-26 Phoniro Ab Access control system, lock device, administration device, and associated methods and computer program products
EP2096240A1 (en) * 2006-12-20 2009-09-02 Panasonic Corporation Method for lending out electronic key and communication terminal

Cited By (33)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2910045A4 (en) * 2012-10-22 2016-07-06 Samsung Electronics Co Ltd Device and method for transmitting electronic key thereof
CN110738763A (en) * 2012-10-22 2020-01-31 三星电子株式会社 Device and method for transmitting electronic key of device
CN104737573B (en) * 2012-10-22 2019-11-15 三星电子株式会社 The method of the electron key of equipment and sending device
CN104737573A (en) * 2012-10-22 2015-06-24 三星电子株式会社 Device and method for transmitting electronic key thereof
US11178214B2 (en) 2012-10-22 2021-11-16 Samsung Electronics Co., Ltd. Device and method for transmitting electronic key thereof
CN102970674A (en) * 2012-11-01 2013-03-13 中兴通讯股份有限公司 Method and system for achieving temporary dynamic authorization by utilizing near field communication (NFC)
CN102970674B (en) * 2012-11-01 2016-01-20 中兴通讯股份有限公司 NFC is utilized to realize the method and system of provisional dynamic authorization
WO2014098755A1 (en) * 2012-12-18 2014-06-26 Phoniro Ab Access control method, and associated proxy device and access control system
CN103401868A (en) * 2013-07-31 2013-11-20 广东欧珀移动通信有限公司 Temporary authorization method for mobile communication equipment of authorizing party and authorized party and temporary authorization management method and device for manager
CN103544755A (en) * 2013-10-30 2014-01-29 徐升明 Two-dimensional code lock
CN104809773A (en) * 2014-01-23 2015-07-29 中国移动通信集团公司 Entrance guard control method, entrance guard control apparatus, and entrance guard system
US10419492B2 (en) 2014-02-14 2019-09-17 Intertrust Technologies Corporation Network security systems and methods
US9973535B2 (en) 2014-02-14 2018-05-15 Intertrust Technologies Corporation Network security systems and methods
US10880335B2 (en) 2014-02-14 2020-12-29 Intertrust Technologies Corporation Network security systems and methods
US11683344B2 (en) 2014-02-14 2023-06-20 Intertrust Technologies Corporation Network security systems and methods
WO2015123678A1 (en) * 2014-02-14 2015-08-20 Intertrust Technologies Corporation Network security systems and methods
CN106416130B (en) * 2014-02-14 2019-09-27 英特托拉斯技术公司 Network safety system and method
CN106416130A (en) * 2014-02-14 2017-02-15 英特托拉斯技术公司 Network security systems and methods
US10192372B2 (en) 2015-03-23 2019-01-29 Assa Abloy Ab Considering whether a portable key device is located inside or outside a barrier
US10490005B2 (en) 2015-05-01 2019-11-26 Assa Abloy Ab Method and apparatus for making a decision on a card
US10679440B2 (en) 2015-05-01 2020-06-09 Assa Abloy Ab Wearable misplacement
US11468720B2 (en) 2015-05-01 2022-10-11 Assa Abloy Ab Wearable misplacement
US11087572B2 (en) 2015-05-01 2021-08-10 Assa Abloy Ab Continuous authentication
US10482698B2 (en) 2015-05-01 2019-11-19 Assa Abloy Ab Invisible indication of duress via wearable
US10854025B2 (en) 2015-05-01 2020-12-01 Assa Abloy Ab Wearable discovery for authentication
US10431026B2 (en) 2015-05-01 2019-10-01 Assa Abloy Ab Using wearable to determine ingress or egress
US10320805B2 (en) 2016-04-26 2019-06-11 Ping An Technology (Shenzhen) Co., Ltd. Visitor authorization management method and apparatus, terminal, server, and storage medium
WO2017185904A1 (en) * 2016-04-26 2017-11-02 平安科技(深圳)有限公司 Visitor authorization management method, device, terminal, server and storage medium
CN106600775A (en) * 2016-12-08 2017-04-26 南京魔格信息科技有限公司 Non-networking dynamic password generation method used for intelligent access control system
TWI645381B (en) * 2017-06-03 2018-12-21 華豫寧股份有限公司 Electronic door lock system
CN109636952A (en) * 2017-10-05 2019-04-16 林劲璋 Access control system and its management method
TWI667632B (en) * 2017-10-05 2019-08-01 林勁璋 Access control system and management method thereof
KR20190112257A (en) * 2019-09-24 2019-10-04 삼성전자주식회사 Device for transmitting electronic key and control memethod thereof

Also Published As

Publication number Publication date
CA2753493C (en) 2019-08-13
CA2753493A1 (en) 2012-03-23

Similar Documents

Publication Publication Date Title
US9269207B2 (en) Communications system providing personnel access based upon near-field communication and related methods
EP2660786B1 (en) Communications system providing personnel access based upon near-field communication and related method
US8912879B2 (en) Security system providing temporary personnel access based upon near-field communication and related methods
CA2753493C (en) Security system providing temporary personnel access based upon near-field communication and related methods
US9414234B2 (en) Personnel access system with verification features utilizing near field communication (NFC) and related methods
US20130331027A1 (en) Communications system providing remote access via mobile wireless communications device and related methods
US9532226B2 (en) Mobile wireless communications device performing device unlock based upon near field communication (NFC) and related methods
CA2828018C (en) Personnel access system with verification features utilizing near field communication (nfc) and related methods
US9276643B2 (en) Mobile wireless communications device providing near field communication (NFC) unlock and tag data change features and related methods
EP2434793B1 (en) Mobile wireless communications device establishing wireless communication links based upon near field communication and related methods
US8798532B2 (en) Mobile wireless communications device establishing wireless communication links based upon near field communication and related methods
CA2816787C (en) Communications system providing remote access via mobile wireless communications device and related methods
US20140180856A1 (en) System providing wireless network access responsive to completed transaction payment and related methods
EP2811725B1 (en) Mobile wireless communications device performing device unlock based upon near field communication (nfc) and related methods
SG172603A1 (en) Wireless personal area network having authentication and associated methods
EP2811724A1 (en) Mobile wireless communications device providing near field communication (nfc) unlock and tag data change features and related methods
EP2747017A1 (en) System providing wireless network access responsive to completed transaction payment and related methods

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20100923

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME RS

17Q First examination report despatched

Effective date: 20130409

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: BLACKBERRY LIMITED

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: BLACKBERRY LIMITED

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN REFUSED

18R Application refused

Effective date: 20160920