EP3107073B1 - Invalidation d'une clé électronique - Google Patents

Invalidation d'une clé électronique Download PDF

Info

Publication number
EP3107073B1
EP3107073B1 EP15172118.0A EP15172118A EP3107073B1 EP 3107073 B1 EP3107073 B1 EP 3107073B1 EP 15172118 A EP15172118 A EP 15172118A EP 3107073 B1 EP3107073 B1 EP 3107073B1
Authority
EP
European Patent Office
Prior art keywords
invalidation
electronic key
central
command
confirmation message
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP15172118.0A
Other languages
German (de)
English (en)
Other versions
EP3107073A1 (fr
Inventor
Stefan STRÖMBERG
Johan Gärde
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Assa Abloy AB
Original Assignee
Assa Abloy AB
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Assa Abloy AB filed Critical Assa Abloy AB
Priority to EP15172118.0A priority Critical patent/EP3107073B1/fr
Priority to PCT/EP2016/063623 priority patent/WO2016202795A1/fr
Publication of EP3107073A1 publication Critical patent/EP3107073A1/fr
Application granted granted Critical
Publication of EP3107073B1 publication Critical patent/EP3107073B1/fr
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00571—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by interacting with a central unit
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00857—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the data carrier can be programmed
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00857—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the data carrier can be programmed
    • G07C2009/00865—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the data carrier can be programmed remotely by wireless communication

Definitions

  • the invention relates to a method, an invalidation device, a computer program and a computer program product for invalidating an electronic key, e.g. when the key has been reported lost.
  • Locks and keys are evolving from the traditional pure mechanical locks. These days, there are wireless interfaces for electronic locks, e.g. by interacting with an electronic key. In some installations, to save power and complexity, the electronic locks are offline without communication ability with a central access control system.
  • a major issue is when an electronic key is lost. In such a case, an attacker should be prevented to gain access to closed spaces by using the lost electronic key.
  • the identity of the electronic key can be added to a black list in the central access control system, and the black list can be sent to the electronic lock. In this way, the electronic lock can block entry for any electronic key on the black list, thus stopping an attacker having found or stolen the lost electronic key.
  • EP 2 821 970 discloses an access control communication device comprising: a short distance radio communication module; a cellular radio communication module; and a controller arranged to communicate access rights associated with a key device, using the cellular radio communication module, with an access control device over a cellular communication network upon the access control device being in communication with the key device using the short distance radio communication module.
  • a method for invalidating an electronic key for access to a physical space is performed in an invalidation device forming part of a mobile phone, the invalidation device being one of a plurality of invalidation devices performing the method, the method comprising the steps of: receiving a central invalidation command from a central server, the central invalidation command comprising an identifier of an electronic key, the central invalidation command indicating that the electronic key is a lost key to be invalidated; discovering a presence of the electronic key over short range radio; and transmitting a local invalidation command to the electronic key only when an identity of the discovered electronic key matches the identifier of the central invalidation command, the local invalidation command causing the electronic key to invalidate itself.
  • the method further comprises the steps of: receiving a local confirmation message from the electronic key, the local confirmation message indicating a successful invalidation; and transmitting a central confirmation message to the central server, the central confirmation message indicating a successful invalidation.
  • the central confirmation message comprises an indicator of a position of the invalidation device.
  • the central invalidation command may comprise a main command and an integrity indicator.
  • the integrity indicator may be derived using the main command and a private electronic key.
  • the step of discovering may comprise discovering the presence of the electronic key using Bluetooth low energy, BLE.
  • the step of receiving a central invalidation command may comprise receiving the central invalidation command over a wide area network.
  • an invalidation device for invalidating an electronic key for access to a physical space.
  • the invalidation device comprises: a processor; and a memory storing instructions stored in a plurality of invalidation devices that, when executed by the processor, cause the invalidation device to: receive a central invalidation command from a central server, the central invalidation command comprising an identifier of an electronic key, the central invalidation command indicating that the electronic key is a lost key to be invalidated; discover a presence of the electronic key over short range radio; and transmit a local invalidation command to the electronic key only when an identity of the discovered electronic key matches the identifier of the central invalidation command, the local invalidation command causing the electronic key to invalidate itself.
  • the invalidation device further comprises instructions that, when executed by the processor, cause the invalidation device to: receive a local confirmation message from the electronic key, the local confirmation message indicating a successful invalidation; and transmit a central confirmation message to the central server, the central confirmation message indicating a successful invalidation.
  • the central confirmation message comprises an indicator of a position of the invalidation device.
  • the central invalidation command may comprise a main command and an integrity indicator.
  • the invalidation device forms part of a mobile phone.
  • the invalidation device may be a device dedicated to the purpose of invalidating electronic keys.
  • a computer program for invalidating an electronic key for access to a physical space comprises computer program code which, when run on an invalidation device forming part of a mobile phone, the invalidation device being one of a plurality of invalidation devices for running the computer program, causes the invalidation device to: receive a central invalidation command from a central server, the central invalidation command comprising an identifier of an electronic key, the central invalidation command indicating that the electronic key is a lost key to be invalidated; discover a presence of the electronic key over short range radio; transmit a local invalidation command to the electronic key only when an identity of the discovered electronic key matches the identifier of the central invalidation command, the local invalidation command causing the electronic key to invalidate itself; receive a local confirmation message from the electronic key, the local confirmation message indicating a successful invalidation; and transmit a central confirmation message to the central server, the central confirmation message indicating a successful invalidation, wherein the central confirmation message comprises an indicator of a position of the invalidation
  • a computer program product comprising a computer program according to the third aspect and a computer readable means on which the computer program is stored.
  • Fig 1 is a schematic diagram showing an environment in which embodiments presented herein can be applied.
  • Access to a physical space 16 is restricted by a physical barrier 15 which is selectively unlockable.
  • the physical barrier 15 stands between the restricted physical space 16 and an accessible physical space 14.
  • the accessible physical space 14 can be a restricted physical space in itself, but in relation to this physical barrier 15, the accessible physical space 14 is accessible.
  • the barrier 15 can be a door, gate, hatch, window, drawer, etc.
  • an access control device 13 is provided in order to unlock the barrier 15, an access control device 13 is provided.
  • the access control device 13 is connected to a physical lock device 12, which is controllable by the access control device 13 to be set in an unlocked state or locked state. In this embodiment, the access control device 13 is mounted close to the physical lock device 12.
  • the barrier 15 is provided in a surrounding fixed structure, such as a wall or fence.
  • the access control device 13 is able to receive and send signals from/to an electronic key 2 over a communication channel 3 which may be a short range wireless interface or a conductive (i.e. galvanic/electric) connection.
  • the electronic key 2 is any suitable device portable by a user and which can be used for authentication over the communication channel 3.
  • the electronic key 2 is typically carried or worn by the user and may be implemented as a physical key, a key fob, wearable device, etc.
  • the short range wireless interface is a radio frequency wireless interface and could e.g. be using Bluetooth, Bluetooth Low Energy (BLE), ZigBee, any of the IEEE 802. 11 standards, any of the IEEE 802.15 standards, wireless USB, etc.
  • BLE Bluetooth Low Energy
  • ZigBee any of the IEEE 802. 11 standards
  • any of the IEEE 802.15 standards wireless USB, etc.
  • the access control device 13 sends an unlock signal to the lock device 12, whereby the lock device 12 is set in an unlocked state.
  • this can e.g. imply a signal over a wire-based communication interface, e.g. using Universal Serial Bus (USB), Ethernet, a serial connection (e.g. RS-485 or RS-232) or even a simple electric connection (e.g. to the lock device 12), or alternatively signal over a wireless communication interface.
  • USB Universal Serial Bus
  • the barrier 15 can be opened and when the lock device 12 is in a locked state, the barrier 15 cannot be opened. In this way, access to a closed space 16 is controlled by the access control device 13.
  • the access control device 13 and/or the lock device 12 can be mounted in the fixed structure 16 by the physical barrier 15 (as shown) or in the physical barrier 15 itself (not shown).
  • the lock device 12 and access control device 13 are combined in one unit.
  • the lock device (optionally combined with the access control device) is in the form of a padlock or any other suitable implementation.
  • the access control device 13 can be implemented as an offline device, without the ability to directly communicate with a central server of an access control system. In this way, the access control device 13 is easier to implement and uses less power. This allows the access control device 13 to be powered for a long time using a battery or by the electronic key. Optionally, energy harvesting of mechanical user actions and/or environmental power (solar power, wind, etc.) can be utilised to prolong the life span of the battery or event to allow the battery to be omitted.
  • FIG 2 is a schematic diagram illustrating a situation where an electronic key is invalidated using an invalidation device.
  • a central server 10 of the access control system is responsible for managing keys and locks.
  • the central server 10 can be accessed by an operator to thereby perform management tasks in the access control system.
  • first invalidation device 1a There is a first invalidation device 1a and a second invalidation device 1b. Each one of the first and second invalidation devices are described in more detail below, and can e.g. be implemented as part of a mobile phone or as a dedicated invalidation device.
  • the invalidation devices 1a-b can communicate with an electronic key for invalidation, as explained below, and optionally also for other purposes.
  • a user has lost an electronic key 2' or has had the electronic key 2' stolen.
  • the electronic key 2' then needs to be invalidated to prevent an attacker from gaining access to closed physical spaces, otherwise accessible using the lost electronic key 2'.
  • the central server 10 is made aware of the lost electronic key 2', e.g. by an operator indicating that the electronic key 2' is lost.
  • the central server 10 then sends a central invalidation command to all relevant invalidation devices 1a-b as explained more below.
  • the second invalidation device 1b is within range 7 to communicate over a short range radio interface 5 with the lost electronic key 2'. This allows the second invalidation device 1b to communicate with the lost electronic key 2'. In this way, the second invalidation device 1b can send a local invalidation command to the electronic key 2'.
  • the range 7 depends on the type of short range radio which can be used and radio conditions in the vicinity of the electronic key 2'.
  • the short range radio interface 5 may be the same as the communication channel 3.
  • the short range radio interface 5 is not the same as the communication channel 3.
  • the short range radio interface 5 may optionally be used for other purposes, e.g. other maintenance purposes for the electronic key 2'.
  • the first invalidation device 1a is outside the range 7 of the lost electronic key 2', whereby it is unable to invalidate the lost electronic key 2'
  • Fig 3 is a sequence diagram illustrating communication for invalidation of an electronic key, e.g. in the environment shown in Fig 2 .
  • the sequence is performed to perform invalidation of an electronic key.
  • the electronic key to be invalidated is referred to as a lost electronic key.
  • there may be other reasons for invalidating the electronic key e.g. the electronic key being stolen or that an employee has ended employment and whose electronic key needs to be invalidated.
  • the central server 10 sends a central invalidation command 30 to all relevant invalidation devices 1.
  • This can e.g. be all possible invalidation devices or only invalidation devices in a specific area, e.g. within a specific range from a last known location of the lost electronic key 2'.
  • An invalidation device 1 detects the presence 31 of the lost electronic key 2' (e.g. as shown for the second invalidation device 1b of Fig 2 ).
  • the invalidation device 1 detects that the identity of the electronic key 2' matches the identity of the central invalidation command 30 and thus proceeds with an invalidation. It is to be noted that when an electronic key is detected which does not have an identity matching any received central invalidation command, the invalidation device 1 does not proceed with the invalidation.
  • the invalidation device 1 transmits a local invalidation command 32 to the lost electronic key 2'. Upon receipt of the local invalidation command 32, the lost electronic key 2' makes itself invalid.
  • the electronic key 2' verifies the integrity of the invalidation command (as explained below) prior to performing its invalidation procedure. Furthermore, the electronic key 2' sends a local confirmation message 33 to the invalidation device 1. The invalidation device 1 then sends a central confirmation message 34 to the central server 10.
  • the central server 10 can initiate an invalidation using all relevant invalidation devices and can be informed of when the invalidation has been successful.
  • the lost electronic key 2' can be invalidated even though it has no direct communication link with the central server 10.
  • Fig 4 is a flow chart illustrating a method for invalidating an electronic key for access to a physical space. The method is performed in the invalidation device of Figs 2 and 3 . The method corresponds to the actions of the invalidation device 1 in Fig 3 .
  • a central invalidation command is received from the central server.
  • the central invalidation command comprises an identifier of the electronic key to be invalidated, e.g. of a lost electronic key.
  • the central invalidation command can e.g. be received over a wide area network, such as the Internet.
  • the central invalidation command can comprise a main command and an integrity indicator.
  • the integrity can e.g. be derived using the main command and a private electronic key, e.g. using a cryptographic hash function such as SHA-2 (Secure Hash Algorithm 2) or MD-5 (Message Digest algorithm 5).
  • SHA-2 Secure Hash Algorithm 2
  • MD-5 Message Digest algorithm 5
  • a presence of the electronic key to be invalidated is discovered over short range radio. This can e.g. be performed by discovering the presence of the electronic key using BLE. Any other short range radio technology is equally applicable.
  • a local invalidation command is transmitted to the electronic key to be invalidated.
  • the main command and the integrity indicator of the central invalidation command can form part of the local invalidation command. This allows the electronic key to verify the source of the invalidation, i.e. from the central server. In this way, third parties are prevented from invalidating keys.
  • the content of the central invalidation command 30 and the local invalidation command 32 is the same.
  • both can contain an invalidation package which can be encrypted and/or signed for the lost electronic key 2', i.e. using an integrity indicator. This allows the lost electronic key 2' to validate authenticity of the local invalidation command.
  • the locating device 1 routes the invalidation package to the lost key 2' and does not (or cannot) examine the contents of the invalidation package.
  • a local confirmation message is received from the electronic key to be invalidated.
  • the local confirmation message indicates a successful invalidation.
  • a central confirmation message is transmitted to the central server.
  • the central confirmation message indicates a successful invalidation.
  • the central confirmation message comprises an indicator of a position (e.g. in form of a longitude and a latitude) of the invalidation device, e.g. obtained using GPS (Global Positioning System) or any other suitable positioning technology.
  • the central confirmation message can comprise an estimated distance (e.g. in metres) to the electronic key from the position of the invalidation device.
  • the distance can be estimated using any suitable method. For instance, the distance can be estimated by measuring received signal strength (i.e. using a received signal strength indicator) and comparing this to transmission power. More specifically, an indicator of the transmission power which is used can be transmitted as part of the message.
  • the receiver can then compare the received signal strength with the power used to transmit it and can thus estimate the distance based on the attenuation of the signal.
  • two-way ranging can be used, measuring the time it takes to transmit a signal and receive its response, which gives a distance indication when divided by two multiplied by the speed of light. The position and optional estimated distance simplifies the retrieval of the electronic key to be able to reprogram and reuse the lost electronic key.
  • Fig 5 is a schematic diagram showing some components of the invalidation device of Figs 2 and 3 .
  • a processor 60 is provided using any combination of one or more of a suitable central processing unit (CPU), multiprocessor, microcontroller, digital signal processor (DSP), application specific integrated circuit etc., capable of executing software instructions 66 stored in a memory 64, which can thus be a computer program product.
  • the processor 60 can be configured to execute the method described with reference to Fig 4 above.
  • the memory 64 can be any combination of read and write memory (RAM) and read only memory (ROM).
  • the memory 64 also comprises persistent storage, which, for example, can be any single one or combination of magnetic memory, optical memory, solid state memory or even remotely mounted memory.
  • a data memory 66 is also provided for reading and/or storing data during execution of software instructions in the processor 60.
  • the data memory 66 can be any combination of read and write memory (RAM) and read only memory (ROM).
  • the invalidation device 1 further comprises an I/O interface 67 for communicating with other external entities.
  • the I/O interface 67 also includes a user interface.
  • Fig 6 is a schematic diagram illustrating an invalidation device 1 provided as part of a mobile phone 4. In such a case, components of the mobile phone 4 can be utilised also by the invalidation device 1.
  • the invalidation device 1 is a device dedicated to the purpose of invalidating electronic keys.
  • the dedicated invalidation device 1 can be placed in a location where there is a large chance of discovering a lost electronic key.
  • the dedicated invalidation device can be placed by the entrance of a building or by a public transport gateway (e.g. underground turnstiles).
  • the dedicated invalidation device 1 does not need to be portable and can thus be connected to a power socket and wireless and/or wire based communication links for communication with the central server. In this way, the dedicated invalidation device 1 can be continuously active.
  • Fig 7 shows one example of a computer program product comprising computer readable means.
  • a computer program 91 can be stored, which computer program can cause a processor to execute a method according to embodiments described herein.
  • the computer program product is an optical disc, such as a CD (compact disc) or a DVD (digital versatile disc) or a Blu-Ray disc.
  • the computer program product could also be embodied in a memory of a device, such as the computer program product 64 of Fig 5 .
  • the computer program 91 is here schematically shown as a track on the depicted optical disk, the computer program can be stored in any way which is suitable for the computer program product, such as a removable solid state memory, e.g. a Universal Serial Bus (USB) drive.
  • USB Universal Serial Bus

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Lock And Its Accessories (AREA)
  • Mobile Radio Communication Systems (AREA)

Claims (9)

  1. Procédé pour invalider une clé électronique (2') pour l'accès à un espace physique (16), le procédé étant mis en oeuvre dans un dispositif d'invalidation (1, 1a, 1b) formant une partie d'un téléphone portable, le dispositif d'invalidation étant l'un parmi une pluralité de dispositifs d'invalidation mettant en oeuvre le procédé, le procédé comprenant les étapes suivantes :
    la réception (40) d'une instruction d'invalidation centrale (30) d'un serveur central (10), l'instruction d'invalidation centrale (30) comprenant un identifiant d'une clé électronique (2'), l'instruction d'invalidation centrale (30) indiquant que la clé électronique est une clé perdue à invalider ;
    la découverte (42) d'une présence de la clé électronique (2') via une radiodiffusion à courte distance ;
    la transmission (44) d'une instruction d'invalidation locale (32) à la clé électronique seulement lorsqu'une identité de la clé électronique (2') découverte correspond à l'identifiant de l'instruction d'invalidation centrale (30), l'instruction d'invalidation locale (32) faisant en sorte que la clé électronique s'invalide elle-même ;
    la réception (46) d'un message de confirmation local (33) de la clé électronique (2'), le message de confirmation local (33) indiquant une invalidation réussie ; et
    la transmission (48) d'un message de confirmation central (34) au serveur central, le message de confirmation central (34) indiquant une invalidation réussie, dans lequel le message de confirmation central (34) comprend un indicateur d'une position du dispositif d'invalidation (1, 1a, 1b).
  2. Procédé selon la revendication 1, dans lequel l'instruction d'invalidation centrale (30) comprend une instruction principale et un indicateur d'intégrité.
  3. Procédé selon la revendication 2, dans lequel l'indicateur d'intégrité est obtenu en utilisant l'instruction principale et une clé électronique privée.
  4. Procédé selon l'une quelconque des revendications précédentes, dans lequel l'étape de découverte (42) comprend la découverte de la présence de la clé électronique (2') en utilisant Bluetooth Low Energy, BLE (ou basse énergie).
  5. Procédé selon l'une quelconque des revendications précédentes, dans lequel l'étape de réception (40) d'une instruction d'invalidation centrale comprend la réception de l'instruction d'invalidation centrale via un réseau étendu.
  6. Dispositif d'invalidation (1, 1a, 1b) pour invalider une clé électronique pour l'accès à un espace physique (16), le dispositif d'invalidation (1, 1a, 1b) formant une partie d'un téléphone portable, comprenant :
    un processeur (60) ; et
    une mémoire (64) stockant des instructions (66) stockées dans une pluralité de dispositifs d'invalidation, lesquelles, lorsque exécutées par le processeur, font en sorte que le dispositif d'invalidation (1, 1a, 1b) :
    reçoit une instruction d'invalidation centrale d'un serveur central (10), l'instruction d'invalidation centrale (30) comprenant un identifiant d'une clé électronique (2'), l'instruction d'invalidation centrale (30) indiquant que la clé électronique est une clé perdue à invalider ;
    découvre une présence de la clé électronique (2') via une radiofréquence à courte distance ;
    transmet une instruction d'invalidation locale (32) à la clé électronique seulement lorsqu'une identité de la clé électronique (2') découverte correspond à l'identifiant de l'instruction d'invalidation centrale (30), l'instruction d'invalidation locale (32) faisant en sorte que la clé électronique s'invalide elle-même ;
    reçoit un message de confirmation local (33) de la clé électronique (2'), le message de confirmation local (33) indiquant une invalidation réussie ; et
    transmet un message de confirmation central (34) au serveur central, le message de confirmation central (34) indiquant une invalidation réussie, dans lequel le message de confirmation central (34) comprend un indicateur d'une position du dispositif d'invalidation (1, 1a, 1b).
  7. Dispositif d'invalidation (1, 1a, 1b) selon la revendication 6, dans lequel l'instruction d'invalidation centrale (30) comprend une instruction principale et un indicateur d'intégrité.
  8. Programme informatique (90) pour invalider une clé électronique pour l'accès à un espace physique (16), le programme informatique comprenant un code de programme informatique lequel, lorsque exécuté sur un dispositif d'invalidation (1, 1a, 1b) formant une partie d'un téléphone portable - le dispositif d'invalidation étant l'un parmi une pluralité de dispositifs d'invalidation pour exécuter le programme informatique - fait en sorte que le dispositif d'invalidation (1, 1a, 1b) :
    reçoit une instruction d'invalidation centrale d'un serveur central (10), l'instruction d'invalidation centrale (30) comprenant un identifiant d'une clé électronique (2'), l'instruction d'invalidation centrale (30) indiquant que la clé électronique est une clé perdue à invalider ;
    découvre une présence de la clé électronique (2') via une radiofréquence à courte distance ;
    transmet une instruction d'invalidation locale (32) à la clé électronique seulement lorsqu'une identité de la clé électronique (2') découverte correspond à l'identifiant de l'instruction d'invalidation centrale (30), l'instruction d'invalidation locale (32) faisant en sorte que la clé électronique s'invalide elle-même ;
    reçoit un message de confirmation local (33) de la clé électronique (2'), le message de confirmation local (33) indiquant une invalidation réussie ; et
    transmet un message de confirmation central (34) au serveur central, le message de confirmation central (34) indiquant une invalidation réussie, dans lequel le message de confirmation central (34) comprend un indicateur d'une position du dispositif d'invalidation (1, 1a, 1b).
  9. Produit de programme informatique (91) comprenant un programme informatique selon la revendication 8 et un moyen lisible par ordinateur sur lequel le programme informatique est stocké.
EP15172118.0A 2015-06-15 2015-06-15 Invalidation d'une clé électronique Active EP3107073B1 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP15172118.0A EP3107073B1 (fr) 2015-06-15 2015-06-15 Invalidation d'une clé électronique
PCT/EP2016/063623 WO2016202795A1 (fr) 2015-06-15 2016-06-14 Invalidation d'une clé électronique

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP15172118.0A EP3107073B1 (fr) 2015-06-15 2015-06-15 Invalidation d'une clé électronique

Publications (2)

Publication Number Publication Date
EP3107073A1 EP3107073A1 (fr) 2016-12-21
EP3107073B1 true EP3107073B1 (fr) 2019-09-18

Family

ID=53404401

Family Applications (1)

Application Number Title Priority Date Filing Date
EP15172118.0A Active EP3107073B1 (fr) 2015-06-15 2015-06-15 Invalidation d'une clé électronique

Country Status (2)

Country Link
EP (1) EP3107073B1 (fr)
WO (1) WO2016202795A1 (fr)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10825273B2 (en) 2018-10-16 2020-11-03 Edst, Llc Smart thermostat hub
CN114882615B (zh) * 2021-01-22 2023-09-22 博泰车联网科技(上海)股份有限公司 车辆启动方法、装置、电子设备及介质
CN113688380B (zh) * 2021-10-26 2022-02-18 苏州浪潮智能科技有限公司 一种密码保护方法、装置及介质

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2004187096A (ja) * 2002-12-04 2004-07-02 Toshiba Corp キーレスエントリシステムおよびキーレスエントリ方法
US20110140838A1 (en) * 2004-02-05 2011-06-16 Salto Systems, S.L. Access control system
JP4524122B2 (ja) * 2004-02-16 2010-08-11 株式会社東海理化電機製作所 セキュリティ制御システム、セキュリティ制御装置、セキュリティ制御システムにおける管理装置、及び、セキュリティ制御方法
ES2323213B1 (es) * 2007-10-03 2010-03-16 Talleres De Escoriaza S.A. Sistema electronico programable de control de accesos.
EP2821970B2 (fr) * 2013-07-05 2019-07-10 Assa Abloy Ab Dispositif de communication de commande d'accès, procédé, programme informatique et produit de programme informatique

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
None *

Also Published As

Publication number Publication date
WO2016202795A1 (fr) 2016-12-22
EP3107073A1 (fr) 2016-12-21

Similar Documents

Publication Publication Date Title
EP3107072B1 (fr) Localisation d'une clé électronique
US11244524B2 (en) System and method for managing electronic locks
AU2015367766B2 (en) Authentication of a user for access to a physical space
JP2022526155A (ja) 位置推定に基づく意図検知を備える物理アクセス制御システム
AU2016280664B2 (en) Credential cache
US10380815B2 (en) Transient asset management systems and methods
US9026806B2 (en) Method and device for providing a cryptographic key for a field device
US20150213658A1 (en) Wireless access control system and related methods
US9747737B2 (en) Systems and methods for locking device management including time delay policies using random time delays
JP2011511350A (ja) アクセス制御の管理方法および装置
CN103635940A (zh) 用于使用便携式电子装置控制锁定机构的系统和方法
EP3107073B1 (fr) Invalidation d'une clé électronique
US10984620B2 (en) Access control device, access control system and access control method using the same
EP3147869A1 (fr) Détermination d'accès dans un scénario d'une pluralité de verrous
JP2007039895A (ja) 錠制御装置、及びプログラム
US20220014388A1 (en) Virtual security guard
KR101599055B1 (ko) 암호화 잠금 제어 장치
EP3987133B1 (fr) Identité du pêne
WO2023094260A1 (fr) Passerelle alimentée par batterie pour activer un contrôle d'accès basé sur l'emplacement par un serveur de contrôle d'accès
WO2024043835A1 (fr) Système et procédé permettant de partager un accès à un verrou électronique
WO2021052943A1 (fr) Évaluation de l'accès à un espace physique

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN PUBLISHED

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20170620

RBV Designated contracting states (corrected)

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTG Intention to grant announced

Effective date: 20190426

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602015038113

Country of ref document: DE

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 1182216

Country of ref document: AT

Kind code of ref document: T

Effective date: 20191015

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: NL

Ref legal event code: FP

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191218

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191218

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20191219

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

REG Reference to a national code

Ref country code: AT

Ref legal event code: MK05

Ref document number: 1182216

Country of ref document: AT

Kind code of ref document: T

Effective date: 20190918

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200120

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: AT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200224

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602015038113

Country of ref document: DE

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

PG2D Information on lapse in contracting state deleted

Ref country code: IS

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200119

26N No opposition filed

Effective date: 20200619

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200615

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20200630

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200630

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200630

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200630

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200615

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200630

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20190918

P01 Opt-out of the competence of the unified patent court (upc) registered

Effective date: 20230530

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: NL

Payment date: 20230515

Year of fee payment: 9

Ref country code: DE

Payment date: 20230510

Year of fee payment: 9

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20230511

Year of fee payment: 9