EP3489915A1 - Access control method and access control system - Google Patents

Abstract

The invention relates to a method (100, 200), in particular access control method (100, 200), for granting access to a physical area, the method (100, 200) being at least accessible from an access control device (3) that is assignable to the physical area , and performed by a mobile device (2), the mobile device (2) containing access information (10) for the access control device (3), the access information (10) including at least one access attribute (13, 14, 15). According to the invention, the method (100, 200) comprises the following steps (102, 202, 104, 105, 106, 107, 205, 206, 210): - transmitting (102, 202) the access attribute (13, 14, 15) to the Access control device (3) using (104, 105, 106, 107, 205, 206, 210) the access attribute (13, 14, 15) in the access control device (3) during the current procedure (100, 200).

Description

The invention relates to a method, in particular an access control method, for granting access to a physical area according to claim 1. The invention also relates to an access control device according to independent claim 14. Also an access control system is provided with an access control device according to the invention under protection.

Access control methods for granting access to a physical area are, for example, the WO2006 / 098690 A1 known. Here, an access control device is transmitted an access code. The access control device has a tabular database to perform an access check. If the result of the access check is positive, the access control device grants access. Is z. For example, if access is permitted for the corresponding access code in the tabular database within a certain time range, then the access control device grants access to the physical area.

In the WO2006 / 098690 A1 The granting of access depends on the tabular database deposited in the access control device. The tabular database stores a large amount of data in the access control device. In order for the granting of access to comply with the current wishes of an access manager, extensive updates must be carried out regularly.

It is therefore an object of the invention to provide a method, an access control device and an access control system which improve at least one mentioned disadvantage, in particular the need to reduce extensive updates and / or to use as current access data.

The object is achieved by the independent claim 1. Advantageous developments of the method are given in the dependent method claims, the description and in the figures. Furthermore, the object is also achieved by an access control device according to independent claim 14 and by an access control system according to claim 15. Advantageous developments of the access control device and the access control system are given in the description and in the figures. Features and details which are described in connection with the method according to the invention also apply in connection with the access control device according to the invention and the access control system according to the invention and vice versa. The features mentioned in the description and in the claims may each be essential to the invention individually or in combination. In particular, an access control device and an access control system is provided with which the inventive Method, in particular the method according to one of claims 1 to 13, is executable, as well as a method with the access control device according to the invention, in particular with an access control device according to claim 14, or with the access control system according to the invention, in particular with an access control system according to claim 15 , can be executed.

• Übermitteln des Zugangsattributs von der mobilen Vorrichtung an die Zugangskontrollvorrichtung
• Verwenden des Zugangsattributs in der Zugangskontrollvorrichtung während des aktuellen Verfahrens.

According to the invention, the method serves to grant access to a physical area. The method according to the invention is carried out at least by an access control device that can be assigned to the physical area and by a mobile device. The mobile device includes access information for the access control device. The access information includes at least one access attribute. The method according to the invention comprises the following steps:

• Transmitting the access attribute from the mobile device to the access control device
• Use the access attribute in the access control device during the current procedure.

By transmitting the access attribute to the access control device from the mobile device and subsequently also using it during the current procedure, the use of current data is ensured to perform the method.

The access information serves to provide access to the physical area guarded by the access control device.

The access attribute may be formed at least as a rule, as data for at least one rule, at least as an instruction and / or as data for at least one instruction. The access attribute may correspond to at least one rule, data for at least one rule, at least one instruction and / or data for at least one instruction.

The access attribute may be formed at least as a rule or correspond to a rule. A rule is used to give access to the physical area. Thus, a rule is used to control access. A rule can define an access requirement. Thus, an admission profile may include at least one rule. A "check on a rule" means that it is checked whether or not the access requirement defined in the rule is fulfilled.

If the result of the rule check is negative, access to the physical area is denied. The positive result of the review of the rule is at least a prerequisite for granting access. Will only be one rule during the procedure If the verified rule of the last rule to be checked is checked or the rule checked is checked, access will be granted if the result of the check is positive. If a further rule needs to be checked, the procedure with the aim of granting access will be continued if the rule is positive. Access will only be granted if there is a positive result of all the rules to be checked.

The access attribute can be designed at least as an instruction or correspond to an instruction. The instruction defines the way of granting access to the physical area in more detail. The instruction is not a requirement for granting access to the physical area.

The access attribute may be formed as data for at least one rule or correspond to the data for at least one rule. In particular, the data for a rule may be provided as the access attribute instead of the complete rule. The access control device can use the data for the rule to check the associated rule. If data for the rule is transmitted as an access attribute, then the rest of the rule can be stored in the access control device. In this case, the rule can be completed by means of the data transmitted by the mobile device for the rule. The access control device can check the associated rule by means of the transmitted data for the rule.

For example, the rule may state that access is granted only in a certain period of time. The access attribute may e.g. For example, the time range may include data for the rule or the time range. An algorithm stored in the access control device can use the time domain to create the rule and check the rule. As another example, the rule may state that access is granted only if a comparison of a comparison value with a verification value is positive. The access attribute may include the comparison value as data for the rule or may correspond to the comparison value. An algorithm stored in the access control device can use the comparison value to check the rule by the access control device comparing the comparison value with the verification value.

The access attribute may be configured as data for at least one instruction or may correspond to data for at least one instruction. In particular, the data for the at least one instruction may be provided in place of the complete instruction in the access attribute. The access control device may perform the associated instruction using the access attribute instruction data. If data for the instruction is transmitted as an access attribute, then the rest of the instruction can be stored in the access control device. In this case, the instruction can be completed by means of the data transmitted by the mobile device for the instruction.

The instruction can z. For example, to cease granting access after a predetermined period of time after the start of the grant. The access attribute may e.g. For example, the time span may include data for the instruction. An algorithm stored in the access control device can perform the instruction by means of the time span.

The access information may preferably include multiple access attributes. The access attributes may be configured as multiple rules and / or multiple data for rules. The access attributes may be formed as multiple instructions and / or multiple instructions for instructions. The plurality of access attributes may be formed both partially as at least one rule or as data for at least one rule and partly as at least one instruction or as data for at least one instruction.

The method is in particular an access control procedure. In particular, the access control process takes place to give a user access to the physical area. The physical area is locked at the beginning of the access control process. Checking whether access may be granted is an essential part of the access control procedure. For this purpose, at least one rule for granting access is checked.

The access control process is performed at least by means of the access control device and the mobile device, in particular when the mobile device is in the vicinity of the access control device. The access control procedure ends, in particular, with the granting of access or the termination of the granting of access, if the entry requirements are met. If an entry requirement is not fulfilled, the access control procedure may end earlier, but access is denied. The current procedure corresponds in particular to the current access control procedure.

The physical area is preferably blocked by a barrier. The barrier can be designed as a door, in particular as a building door, as a lid, as a flap, as a turnstile or as a barrier. The door can z. B. be designed as a revolving door, a sliding door or as a revolving door.

In particular, the physical area is fixed. The physical area can be designed as a room or as a box. For example, the physical area may be a space locked by a door. Alternatively, the physical area may be defined as an obstructed box, in particular a postbox, a locker, an outdoor area or a restricted area by a barrier, e.g. B. parking area, be formed.

In particular, the mobile device is intended to be carried by a user who wishes to have access to the physical area. In particular, the mobile device comprises a processor. The mobile device comprises at least one memory, in the access information is stored. Preferably, the mobile device comprises a connection to a mobile communication network. The mobile communication network can be designed as a telecommunications network. Thus, the mobile device is particularly preferably designed as a mobile phone. Preferably, the mobile phone is designed as a smartphone. The mobile device may in particular comprise a display. Particularly preferably, the user can enter commands via the display.

In particular, the mobile device and the access control device can communicate with each other wirelessly. Here, in particular, a short-range communication such as Bluetooth, in particular Bluetooth Low Energy (BLE), RFID or NFC is used.

In particular, the mobile device comprises a first transmitting and receiving device for the telecommunications network. In particular, the mobile device comprises a second transceiver for short-range communication. In particular, the access control device comprises a transmitting and receiving unit for short-range communication.

The access control device is associated with the physical area. In particular, a user will associate the access control device with the physical area. The access control device serves as a particular permanently installed guard to the physical area. The access control device is preferably provided for placement near the physical area. The access control device may comprise an electromechanical device, e.g. As an electric motor or a solenoid, or include an electromagnetic device by means of which the user can gain access to the physical area. For example, the access control device may comprise a handle which is operatively connectable by means of the electromechanical device with a lock. Alternatively, the access control device by means of the electromechanical device, a locking element, in particular a latch and / or a trap operated. In a further alternative, the access control device by means of the electromechanical or electromagnetic device, an opening of the barrier, in particular the door, the barrier or the turnstile allow. The access control device may in particular be designed as an electromechanical fitting, as an electromechanical lock cylinder, as an electromechanical door opener or as a motor lock. The access control device may comprise an electric motor for moving the barrier, in particular the door, the turnstile or the barrier. The access control device can be designed in several parts. Thus, the access control device may comprise a reader. The reader can with the electromechanical or electromagnetic device, in particular with the Electromechanical fitting, the electromechanical lock cylinder, the electric motor, the electromagnet or the engine lock, communicate wirelessly or wired.

If the access control device is of a multi-part design, the part of the access control device that receives the instruction or data for the instruction as the access attribute may be different or identical to the part of the access control device that receives the rule or data for the rule as the access attribute ,

The access information is preferably specific to the access control device. Ie. In particular, the access information contains only information intended to grant access to the physical area guarded by the specific access control device. The access information preferably contains only information for exactly one access control device. The access information is in particular assigned to exactly one access control device.

If the user can be granted access to several physical areas guarded by different access control devices by means of the mobile device, the mobile device preferably contains a plurality of access information. In particular, access information can be provided and stored in the mobile device for each of the access control devices.

The access information preferably contains only access attributes relevant to the access of the mobile device containing the access information. In other words, the access information is free access attributes relevant to the access of another mobile device. Most preferably, the mobile device is free of access information relevant to other mobile devices.

The access information, in particular the access attribute, is preferably designed specifically for the mobile device and the access control device. As a result, a transmission of information that is not required for the current access control process, be largely prevented. Thus, the amount of data sent by the transmission of the access attribute from the mobile device to the access control device is small.

The access information is preferably provided to the mobile device by an access management device. The access management device may deposit the access information in a cloud, for example. The mobile device can receive the access information wirelessly, in particular via the mobile communication network. The mobile device may e.g. B. access the access information wirelessly, in particular via the mobile communication network, from the cloud.

Preferably, the access information loses its validity after a predetermined time. If the access information has lost its validity, the mobile device must retrieve the access information again in order to grant access.

The access information may include an access authorization code, in particular access control device identifier, in addition to the access attribute. Preferably, the access information can be assigned to the access control device on the basis of the access control device identifier. The access information is provided or specified for the access control device whose access control device identifier comprises the access information. In particular, the access information includes only access attributes intended for the access control device whose access control device identifier is included in the access information.

The access information may be formed as a file.

It can be provided that the access control device uses the transmitted access attribute only during the current procedure.

Preferably, storage of the transmitted access attribute is omitted. The method, in particular the access control method, is only continued if the access attribute was previously transmitted from the mobile device to the access control device during the method. This largely eliminates the need for updates and / or the storage capacity of the access control device can be kept slim. In addition, the use of up-to-date data to grant access is always achieved.

In particular, the access information may include an encrypted portion that is undecipherable by the mobile device. The encrypted portion may be intended to be communicated to the access control device during the procedure, particularly during the access control procedure. Preferably, the encrypted portion comprises the access attribute. Most preferably, the encrypted portion includes multiple access attributes.

The encrypted portion is transmitted to the access control device, in particular during the current access control procedure. In particular, the encrypted portion is always transmitted to the access control device during the current access control procedure.

Preferably, only that access information that is assigned to the access control device is transmitted at least partially, in particular at least its access attribute, to the access control device. Only the encrypted portion is preferred, which is associated with the access control device, transmitted to that access control device. For this purpose, the mobile device can select the corresponding access information based on the access control device identifier. If several access control devices are in question, the access control devices and / or the associated physical areas and / or barriers can be displayed on the mobile device, so that a user can select the corresponding access control device and / or the corresponding access information.

The access information may include a readable portion that is unencrypted or decryptable by the mobile device. The readable portion may include information that may be displayed to the user on the mobile device. The displayable information can be displayed in particular on a display of the mobile device. The displayable information can be z. B. be information about the physical area and / or the barrier. The information about the physical area and / or about the barrier may e.g. For example, include the name of the physical area, an image of the physical area, and / or an image of the barrier, a state of the physical area, and / or the barrier. The displayable information may additionally or alternatively include an indication of the state of the method.

The rule that matches the access attribute or whose data matches the access attribute can be of the following rule type or include the following rule type: The access is granted only after a positive result of a comparison of a comparison value with a validation value (rule type a.). The comparison value and / or the check value may be in the form of a code, in particular as a hash value or as an electronic signature. The comparison identifies the mobile device as being authorized in principle. The comparison of the comparison value with the check value is used in particular if it is to be particularly ensured that the mobile device is authorized. An access attribute, in particular, correspond to the comparison value. The comparison value can be transmitted encrypted from the mobile device to the access control device. In particular, the encrypted portion may include the comparison value. Preferably, the comparison value is always transmitted in the current access control process from the mobile device to the access control device.

The rule that corresponds to the access attribute, or whose data matches the access attribute, can be of the following rule type or include the following rule type: Access is granted only in a specific time range (rule type b.). The time range may include times, days of the week, days off and working days, months and / or years. The time range can be encrypted from the mobile device to the Access control device are transmitted during the access control process. In particular, the encrypted portion may include the time range. If the time range is always transmitted in the current access control procedure, there is no need to store the time range in the control device.

The rule that corresponds to the access attribute or whose data matches the access attribute may be of the following rule type or may include the following rule type: Access is granted only if there is a positive result of further authentication, in particular by code or biometric recognition ( Rule type c.) Preferably, the access control device performs the further authentication. For this purpose, a control value is compared with a code or a biometric identifier. The code and / or the biometric recognition may be input to the mobile device and transmitted to the access control device. The comparison of the code and / or the biometric recognition with the control value preferably takes place in the access control device. In a positive comparison, the further authentication is available.

The authentication control value may be received in encrypted form by the access control device during the access control process from the mobile device. The control value may include a control code and / or a control biometrics detection. In particular, the encrypted portion may include the control value. This eliminates the need to store the control value in the access control device.

The rule that corresponds to the access attribute or whose data matches the access attribute may be of the following rule type or may include the following rule type: access is granted only if a label that identifies the user as a guard is neglected (rule type d .). It may be desirable for a guard to identify himself on a tour of the access control device to detect the proper departure of the tour. It may be desirable for the guard not to be granted access. In the case of a positive identification as a guard, access is thus denied.

The positive or negative tag as a guard may be transmitted encrypted from the mobile device to the access control device during the access control process. In particular, the encrypted portion may include the positive or negative identifier as a guardian. If the positive or negative identification is always transmitted as a guard in the current access control procedure, there is no need to store the identification.

The rule that includes the access attribute or whose data matches the access attribute may be of the following rule type or may include the following rule type: access is granted only if the positive result of a rule to be examined in the mobile device is present (rule type e.). It may be desirable to check at least one rule for granting access to the physical area in the mobile device. The rule to be checked in the mobile device can be z. B. access information that is not available to the access control device. For example, the mobile device may check whether payment has been made or receipt of payment has been made prior to granting access, whether a user order for the physical area has been accepted, and / or whether a security briefing has been successfully completed. It is also conceivable that the further authentication, in particular by means of the input of a code or a biometric recognition in the mobile device is checked, in particular when the control value is stored in the mobile device.

The access attribute may include a characteristic that includes the need to consider the result of checking the rule in the mobile device when granting the access. If a rule is to be tested in the mobile device, the access control device expects the positive result of the rule to be checked in the mobile device within a time frame. If the access control device does not receive the positive result of the rule to be checked in the mobile device within the time frame, the access is denied.

The comparison value, the time range, the control value, the identifier as guard and / or the characteristic value therefore correspond to data for a rule that can be matched by the access attribute.

The access information may include multiple rules or data for multiple rules as access attributes. The rules or data for the rules can be assigned to multiple rule types.

In particular, if a rule is to be checked in the mobile device in order to grant access (rule type e.), The comparison value is also compared with the check value (rule type a.). This ensures that the result of the rule to be checked in the mobile device is transmitted from an authorized mobile device to the access control device. Thus, a combination of checking a rule of rule type a. and of the rule type e. particularly preferred for granting access.

At least rule b is particularly preferred. to grant access.

Likewise preferred are the checking of the rules b. and c., the rules b. and d. or rules b., c. and d. to grant access.

Checking a rule of rule type a., C., D. and / or e. can be provided only for a given time window in the access control process. This is particularly preferred for the rules of the rule type c., D. and / or e .. Outside the time window, a check of the rule provided for a time slot is omitted.

For example, granting access on weekends can only be done with a further authentication using a PIN code. Within the working week, there is no need for further authentication. In this case, a rule of the rule type c. be checked in the window "weekend" to grant access. Within the working week, further authentication is a precondition for granting access.

The access information, in particular the encrypted portion, may include the time window. In the access information, the rule to be checked only in the time window may include the corresponding time window. The access attribute may include the rule that includes the time window.

The access attribute at least may correspond to an instruction or data for an instruction, which instruction corresponds to or includes at least one of the instruction types directed to being able to retrace the procedure.

Thus, the instruction type may correspond to storing or omitting storage of the method, the output of the method, and / or features of the method in the access control device (instruction type i.). For example, the access attribute may correspond to a traceback value, the first value of which holds the occurrence of the method, the outcome of the method, and / or features of the method. On the other hand, a second value of the traceback value will omit corresponding storage.

In addition to the storage, it is possible that the instruction type corresponds to a transmission or failure to transmit the method, the output of the method and / or features of the method from the access control device, in particular to the mobile device (instruction type ii.). For example, the access attribute may correspond to a traceback value, at the first value of which a transmission of the process, the outcome of the method, and / or features of the method takes place. On the other hand, a second value of the traceback value will miss a corresponding submission.

By an instruction of instruction type i. logging data can be recorded. By an instruction of instruction type ii. logging data can be returned. The return transmission preferably takes place to the cloud and / or to the access management device. The return transmission preferably takes place via the mobile device. The backtracking transmission value and / or the retrace memory value may be transmitted encrypted from the mobile device to the access control device. In particular, the encrypted portion contains the traceback value and / or the traceback value.

The access attribute at least may correspond to an instruction or data for an instruction, which instruction corresponds to or includes at least one of the instruction types directed to the possibility of acoustically or visually presenting a grant of access. Thus, the instruction type may correspond to an audible and / or visual indication of granting of access or omission of the respective audible and / or visual indication (instruction type iii.). Thus, it is conceivable that the instruction includes whether an audible and / or visual indication should be made and / or omitted (instruction type iii.). For example, the access attribute may correspond to a display value at the first value of which the granting of the access is acoustically and / or visually presented. On the other hand, if the display value assumes a second value, a visual and / or acoustic indication of the grant of access is omitted. The display value can be transmitted encrypted from the mobile device to the access control device. In particular, the encrypted portion contains the display value.

In addition, a specification of the audible and / or visual indication of granting access is conceivable. Thus, the type of instruction may correspond to a manner of audible and / or visual display of granting access (instruction type iv.). The instruction can z. As the volume, the tone length or height, the color, the brightness and / or a flashing frequency concern (instruction type iv.). The corresponding instruction can be transmitted encrypted from the mobile device to the access control device. In particular, the encrypted portion contains the corresponding instruction.

The audible and / or visual indication of the grant of access may be made in the access control device. For this purpose, the access control device comprises an acoustic sounder and / or at least one light source.

The access attribute at least may correspond to an instruction or data for an instruction, the instruction corresponding to at least one of the instruction types or which is aimed at ending the granting of access. The instruction can determine when the grant of access is terminated.

Thus, the instruction type may correspond to the termination of the granting of access to the physical area after a predetermined period of time after the start of the grant (instruction type v.). Thus, the instruction may include a predetermined amount of time after which the grant of access is terminated. The period starts in particular with the granting of access. For example, access can always be granted for 5 seconds with the time set to 5 seconds. The time span can be transmitted encrypted from the mobile device to the access control device. In particular, the encrypted portion contains the period of time.

The instruction type may correspond to the termination of the granting of access to the physical area as a function of a predetermined time independently of the start of the grant (instruction type vi.). The predetermined time can z. B. correspond to the end of a business. The time can z. B. always at 5 o'clock in the afternoon. The predetermined time can thus be set to 5 o'clock in the afternoon. The time can be transmitted encrypted from the mobile device to the access control device. In particular, the encrypted portion contains the time.

The statement type may correspond to the termination of the grant of access to the physical area depending on the number of grants already granted (instruction type vii.). For example, the grant is always alternately terminated or retained immediately or after the predetermined period of time.

Preferably, only one instruction of the instruction type v., Vi. or vii. performed during the procedure. The access attribute can thus preferably only one instruction of the instruction type v., Vi. or vii. contain. But it is conceivable that z. B. the encrypted share information, eg. B. contains values that state that the other two statements are not to be executed, d. H. to refrain are.

For example, the traceback value, the traceback value, the display value, the time span, and / or the time respectively correspond to data for one instruction, and therefore may each correspond to the access attribute.

It is conceivable that the access attributes statements of the statement type i. and / or ii., and instruction type instructions iii. and / or iv. include. It is conceivable that the access attributes statements of the statement type i. and / or ii., and an instruction of the instruction type v., vi. or vii. include. It is conceivable that the access attributes statements of the instruction type iii. and / or iv., and an instruction of the instruction type v., vi. or vii. include. It is conceivable that the access attributes are instructions of the Instruction type i. and / or ii., instructions of instruction type iii. and / or iv. and an instruction of instruction type v., vi. or vii. include.

The instruction may include a particular time window in which to execute the instruction. Outside the time window, an execution of the instruction is omitted. Thus, the execution of the instruction in the access control process takes place only in a predetermined time window. For example, within the working week granting of access at a predetermined time, for. B. 5 pm, regardless of the start of the grant ended. The time window for executing the instruction vi then corresponds to the work week. Thus, within the work week an instruction according to the instruction type vi. carried out. On the other hand, at the weekends, the grant is granted after a predetermined period of time, e.g. B. 5 seconds, after the start of the grant ended. Thus, at the weekend, a statement according to the instruction type v. carried out. The time window for executing the instruction v. corresponds in this case to the weekend.

The access information, in particular the encrypted portion, may include the time window. In the access information, the one instruction to be performed only in the time window may be the corresponding time slot. The access attribute may include the instruction that includes the time slot.

The time windows may differ for each rule or statement. So every rule or statement can be linked to an individual time slot.

It is conceivable that a default attribute is stored in the access control device. The default attribute may be associated with one of the rule types and / or one of the instruction types of the access attribute. The default attribute may correspond to data for a rule type for which a corresponding access attribute is possible and / or data for an instruction type for which a corresponding access attribute is possible. The access attribute transmitted by the mobile device preferably overrides the default attribute. The access attribute transmitted by the mobile device and the default attribute belong to the same rule type or to the same type of instruction. In other words, if there is an access attribute transmitted from the mobile device in the current access control process, then in the current access control process, the access attribute transmitted from the mobile device is used, while the default attribute is disregarded in the current access control process.

Preferably, for a plurality of access attributes that are transmittable by the mobile device, a default attribute is stored in the access control device. By the Depositing the default attribute, the amount of data that can be stored by the mobile device to the access control device during the access control process can be kept low. If the access attribute is to correspond to the default attribute, the access attribute may be missing in the access information.

The default attribute may be designed to be referenceless to the mobile device. In other words, the same default attribute can be used whenever no corresponding access attribute is transmitted from the mobile device in the current access control process. In particular, only one default attribute may be stored in the access control device for each rule type and / or instruction type to which an access attribute is conveyable by the mobile device. As a result, storage space can be saved in the access control device. It eliminates the need to maintain a tabular database in the access control device with data for various mobile devices. An update of the preset attributes can be simplified. Preferably, a default attribute that is designed as a comparison value is missing.

It can be provided that the access information comprises a plurality of access attributes, wherein the plurality of access attributes relate to a rule type or an instruction type. Preferably, the plurality of access attributes differ from each other to a rule type or to an instruction type. For example, the multiple access attributes may conflict with a rule type or an instruction type. One of the multiple access attributes may be configured as a general access attribute and another of the multiple access attributes may be configured as a specific access attribute.

So z. For example, one as an instruction to instruction type v. trained universal access attribute means that the granting of access shall cease after 5 seconds from the date of grant of access. The remainder as an instruction for instruction type v. a trained special access attribute may indicate that the granting of access is to be terminated after 15 seconds from the date of grant of access.

The access control device comprises an algorithm by means of which the access control device decides whether the method is to be carried out with the aid of the general access attribute or by means of the specific access attribute. It can be provided that the specific access attribute overrides the general access attribute. In other words, if the access control device has a general access attribute and a special access attribute, the access control device will perform the procedure using the specific access attribute, while disregarding the general access attribute.

In particular, the specific access attribute may include a particular time range in which the specific access attribute applies. Outside the specific time range, the specific access attribute is not valid. The time range covered by the specific access attribute is part of the specific access attribute. Preferably, no time range is defined for the general access attribute.

If the access control device has a general access attribute and a special access attribute that is valid only in a certain time range, the access control device will perform the procedure using the specific access attribute if the procedure is to be performed in the particular time range while disregarding the general access attribute remains. If, on the other hand, the procedure is to be performed outside the specified time range, the access control device will perform the procedure using the general access attribute, while disregarding the specific access attribute. By this method, the amount of data to be transmitted to the access control device can be kept low because an exception to the general access attribute can be defined in a simple manner by means of the specific access attribute valid only in a certain time range. Say z. For example, if the general access attribute indicates that the grant of access is to be terminated after 5 seconds, and the specific access attribute that access must be completed after 15 seconds on Mondays between 8:00 and 10:00, the access control device will become between 8 and 10 on Mondays Clock 15 seconds to end the grant of access, while in the remaining periods of the week, the access control device always ends the granting of access after 5 seconds.

It is preferably provided that the access control device comprises a block list. The blacklist includes at least one mobile device that is denied access to the physical area. Preferably, the revocation list comprises a plurality of mobile devices that are denied access to the physical area. More preferably, the revocation list prohibits the granting of access to the physical area exclusively for at least one mobile device which is free from a telecommunication connection to a telecommunication network, or exclusively for mobile devices which are free from a telecommunication connection to a telecommunication network. The telecommunication connection is for connection to an access management device.

In the mobile device that is free from a telecommunications connection to a telecommunications network, it may, for. B. act an access card or a Zugangsbadge. Thus, the access control device can be used in access control systems, in addition to those as a mobile phone mobile devices, such as access cards or access badges, can also be used. The block list relates exclusively to mobile devices, such as access cards and / or access badges. As a result, the length of the blacklist can be kept low and thus an update can be facilitated.

The revocation list may be transmitted by the mobile device.

Preferably, it can be provided that the access control device transmits an access control device identifier to the mobile device. The mobile device may send the access information to the access control device only for the access control device whose access control device identifier the mobile device has received. In particular, if the mobile device has received access control device identifiers from a plurality of access control devices, it is possible that the mobile device includes an advertisement, the mobile device displaying a selection of possible access control devices and / or the associated physical areas and / or barriers to a user for selection. The mobile device may display the access control devices, the associated physical areas, and / or associated barriers whose access control device identifier the mobile device has received. If the user has made a selection, only the access control device that the user has selected will transmit the at least one access attribute associated with the selected access control device.

The rule to be checked may include comparing the comparison value with the verification value (rule type a.). The access attribute may include the comparison value. In particular, the encrypted portion may include the comparative value.

During the method, in particular during the access control procedure, the check value is preferably transmitted from the mobile device to the access control device. The mobile device contains the verification value. The check value is particularly provided to the mobile device by the access management device. The verification value can be encrypted. The check value is preferably always transmitted from the mobile device to the access control device during the process, in particular during the access control process.

The check value can be z. B. be contained in the readable portion. Alternatively, the check value z. B. be provided by the access management device of the mobile device in addition to the access information.

It is conceivable that the comparison value and the check value are always transmitted during the method before a comparison of the comparison value with the check value takes place the access control device always uses the transmitted comparison value and the transmitted verification value only in the current access control method. Thus, it is not necessary to store the comparison value in the access control device. Rather, access is denied if the comparison value is not transmitted by the mobile device to the access control device during the current access control process. Thus, the use of a current comparison value is always ensured, in particular without having to carry out extensive updates in quick succession to the access control device.

A positive result of the comparison of the comparison value with the verification value may be a prerequisite for continuing the procedure for granting access to the physical area with the aim of granting access.

A positive result of the comparison of the comparison value with the check value may be a prerequisite for checking a rule in the mobile device. Ie. First, the comparison value is preferably compared with the verification value, and only if a positive result is subsequently a rule in the mobile device is checked. A positive result of the comparison of the comparison value with the check value may be a prerequisite for allowing a check of a rule in the mobile device.

The access control device may include a programming interface. It is conceivable that the programming interface will open during the access control process. In other words, processing of data that the mobile device transmits to the access control device is allowed by the programming interface only during the access control process. At the beginning of the method, in particular the access control method, however, communication of the mobile device with the access control device via the programming interface is prohibited. A positive result of the comparison of the comparison value with the check value may be a prerequisite for allowing communication with the programming interface of the access control device.

The object of the invention is also achieved by an access control device according to the invention. The access control device serves to grant access to a physical area. The access control device is assignable to a physical area. The access control device according to the invention is designed to receive an access attribute for the access control device wirelessly. The access control device uses the received access attribute to grant access to the physical area.

In particular, the access control device receives the access attribute from a mobile device. The access control device uses the received access attribute directly to check whether access can be granted or for the way of access. If the access control device uses the received access attribute immediately to verify the grant of the access, the access attribute corresponds to a rule or data for a rule. If the access control device uses the received access attribute directly for the way of access, then the access attribute corresponds to an instruction or data for an instruction.

Through the immediate use of the received access attribute, a current access attribute is used in the current access control process. This ensures the use of up-to-date data.

The object of the invention is also achieved by an access control system according to the invention for granting access to a physical area.

The access control system includes an access control device assignable to a physical area and a mobile device. The mobile device includes access information for the access control device. The access information includes at least one access attribute. The access control device is configured to receive the access attribute from the mobile device and to use it to grant access to the physical area. The access control device uses the received access attribute directly to check whether access can be granted or for the way of access. If the access control device uses the received access attribute immediately to verify the grant of the access, the access attribute corresponds to a rule or data for a rule. If the access control device uses the received access attribute directly for the way of access, then the access attribute corresponds to an instruction or data for an instruction.

Through the immediate use of the received access attribute, a current access attribute is used in the current access control process. This ensures the use of up-to-date data.

• Fig. 1 eine erfindungsgemäße Zugangskontrollvorrichtung und ein erfindungsgemäßes Zugangskontrollsystem mit einer erfindungsgemäßen Zugangskontrollvorrichtung und gemäß einem ersten Ausführungsbeispiel,
• Fig. 2 die Zugangskontrollvorrichtung und das Zugangskontrollsystem aus Figur 1, bei dem die Übertragung von Zugangsattributen dargestellt ist,
• Fig. 3 ein erfindungsgemäßes Verfahren gemäß einem ersten Ausführungsbeispiel und
• Fig. 4 ein erfindungsgemäßes Verfahren gemäß einem zweiten Ausführungsbeispiel.

The invention will be explained in more detail with reference to embodiments. Technical features with the same function are provided in the figures with identical reference numerals. Show it:

• Fig. 1 an access control device according to the invention and an access control system according to the invention with an access control device according to the invention and according to a first exemplary embodiment,
• Fig. 2 the access control device and the access control system FIG. 1 which shows the transfer of access attributes,
• Fig. 3 an inventive method according to a first embodiment and
• Fig. 4 an inventive method according to a second embodiment.

In FIG. 1 an access control device 3 according to the invention and an access control system 1 according to the invention are shown. The access control system 1 comprises a mobile device 2 and the access control device 3 according to the invention. The mobile device 2 is shown schematically. The mobile device 2 is designed as a smartphone. The mobile device 2 comprises a display 18. The access control device 3 according to the invention and the access control system 1 according to the invention can carry out a method 100, 200 according to the invention.

The mobile device 2 has access to a cloud 5 via a telecommunications network 4. For this purpose, the mobile device 2 comprises a first transmitting and receiving device. The telecommunications network 4 is shown schematically as a double arrow. In the cloud 5 there are access information 10.

The access information 10 comprises an encrypted portion 11 and a readable portion 12. If the access information 10 is intended for the mobile device 2, the mobile device 2 can retrieve the access information 10 from the cloud 5. The retrieval option for the mobile device 2 is restricted here to the access information 10 provided for the mobile device 2. The access information 10 is also specific to the access control device 3. D. h. the access information 10 contains information intended to grant access to the physical area guarded by the specific access control device 3. If the user can be granted access to several physical areas guarded by different access control devices 3 by means of the mobile device 2, then the mobile device 2 contains a plurality of access information 10. In particular, access information 10 in the mobile device can be provided for each of the access control devices 3 2 provided and deposited. In FIG. 2 is purely schematically an access information 10 for the illustrated access control device 3 in the mobile device 2 deposited.

The access information 10 is made available to the cloud 5 by a purely schematically illustrated access management device 9. The access management device 9 may be part of the access control system 1 according to the invention. The access management device 9 or the cloud 5 encrypts the encrypted portion 11 of the access information 10 such that the mobile device 2 is unable to access the encrypted portion 11 to decrypt. The encrypted portion 11 is intended to be at least partially transmitted from the mobile device 2 to the access control device 3. The access control device 3 can decrypt the encrypted portion 11. The access information 10 may be formed as a file.

The access management device 9 can communicate with the cloud 5 via a communication link 19.

The cloud 5 may be part of the access control system 1. Alternatively, the cloud 5 is not part of the access control system 1 according to the invention. Rather, the mobile device 2 may be designed such that the access control information 10 can be retrieved from the mobile device 2 from the cloud 5. The access management device 9 can be configured such that the access information 10 can be stored by the access management device 9 in the cloud 5.

In an alternative, not shown, the access management device 9 can send the access information to the mobile device 2 via the telecommunication network 4 without being deposited in the cloud 5.

The access control device 3 serves as a permanently installed guard of a barrier-locked physical area, not shown. In FIG. 1 the access control device 3 is exemplified as electromechanical fitting 3. By way of example, such a fitting 3 in the EP2998484 A1 described. Alternatively, the access control device 3 z. B. be designed as an electromechanical lock cylinder, as a door opener or as a motor lock. The access control device 3 can also be designed in several parts (not shown). The access control device 3 can, for. B. a reader and a part with an electromechanical or electromagnetic device, for. As a motor lock, include (not shown).

The access control device 3 and the mobile device 2 communicate with each other via a short-range communication link 6 such as Bluetooth, BLE, RFID or NFC. Preferably, BLE is used. The short-range communication connection 6 is shown purely schematically as a double arrow. For the short-range communication link 6, the mobile device 2 has a second transmitting and receiving device. The access control device 3 has a transmitting and receiving unit for short-range communication 6. The mobile device 2 and the access control device 3 each comprise at least one processor and memory, not shown, for carrying out the method 100, 200 according to the invention. The mobile device 2 can in this case use a processor with which further functions of the mobile device 2 are also exercised.

The mobile device 2 comprises a computer program product, e.g. As an app, by means of which the mobile device 2, the inventive method 100, 200 can perform. The access control device 3 likewise comprises a computer program product with algorithms for carrying out the method 100, 200 according to the invention.

The access control system 1 according to the invention can dispense in particular with a connection of the access control device 3 to the telecommunications network 4 and / or with a wired connection to the access management device 9. Thus, the access control device 3 may be configured as a stand-alone / offline device.

The access control device 3 comprises an in FIG. 1 purely schematically illustrated electromechanical device 7. The electromechanical device 7 is located inside the access control device 3 and is therefore in FIG. 1 indicated only by dashed lines. The electromechanical device 7 may couple a handle 17 of the access control device 3 with a lock to provide access to the physical area. In the coupled state, a user can transfer the lock into an unlocked state by the actuation of the handle 17. This is z. B. in the in EP2998484 A1 described. Alternatively, the electromechanical device 7 can automatically transfer the lock to an unlocked state, in which the electromechanical device 7 retracts a latch and / or a latch. In a further alternative, the electromechanical device 7 can release a case of a door opener.

The access control device 3 comprises a light guide 16. Behind the light guide 16, a light source is arranged inside the access control device 3. By means of the light source and the light guide 16, the access control device 3 can indicate a denial of access and a grant of access by different visual signals. For example, a denial of access may be displayed in red and a grant of access in green.

The access control device 3 comprises a sounder, not shown, through which a denial of access and / or a grant of access can be indicated by an acoustic signal. In particular, only the grant of access is displayed acoustically.

The access control device 3 comprises a timer, not shown, for measuring the time.

At the in FIG. 3 The inventive method 100 shown is an access control method 100. At the beginning of the access control method 100, the access control device 3 denies access to the physical area. The access control method 100 is used to check whether the user of the mobile Device 2 access can be granted. The access control method 100 may begin with a first communication of the mobile device 2 and the access control device 3 for the purpose of granting access to the physical area. The access control procedure 100 may, if the result of the review is positive, include the granting of the access. The access control procedure 100 may, if the result of the check is positive, end with the granting of the access or the end of the granting of the access. Here, the way in which access is granted is part of the access control procedure 100.

In a first method step 101 of the inventive method 100, an access control device identifier is sent from the access control device 3 to the mobile device 2.

The mobile device 2 then checks, in a second method step 102 of the method 100, whether access information 10, which is identifiable as belonging to the access control device 3 on the basis of the access control device identifier, is stored in the mobile device 2. If such access information 10 is stored, then the mobile device 2 transmits the encrypted portion 11 of the access information 10 that has been identified as belonging to the access control device 3 to the access control device 3. This is particularly in FIG. 2 shown. If a corresponding access information 10 for the access control device 3 is not stored in the mobile device 2, then the method 100 ends. This is indicated by an arrow at the second method step 102 in FIG FIG. 3 clarified.

In the method step 101, it may be provided that the user on the mobile device 2 receives an input, e.g. For example, pressing a button or launching an app must prompt the user for access. If the input is missing, the method 100 can be ended. This is indicated by an arrow at the first method step 101 in FIG FIG. 3 clarified.

Part of the first method step 101 may additionally or alternatively be that the mobile device 2 the user all access control devices 3, with which the mobile device 2 can communicate, in particular their access control device identifier has received the mobile device 2 and to which access information 10 in the mobile device 2 is deposited, 18 displays on the display. The display of the access control devices 3 is supported by the information contained in the respective readable portion 12 of the access information 10 to the corresponding access control devices 3. Thus, the readable portion 12 may be a picture or a description of the possible access control devices 3, the possible physical spaces and / or the barriers guarded by the possible access control devices 3. The corresponding images and / or descriptions may be displayed on the display 18 of the mobile device 2. The user can select one of the access control devices 3 based on the displayed information. The mobile device 2 then sends in the method step 102 only to the selected access control device 3, the associated access information 10, in particular the encrypted portion 11th

The encrypted portion 11 received in the method step 102 is decrypted by the access control device 3 in a third method step 103 of the method 100, 100a.

The encrypted portion 11 contains access attributes 13. Some access attributes 13 are formed as a rule or data for a rule 14. The access attributes 13 formed as a rule or as data for a rule 14 are shown in FIG FIG. 2 purely schematically marked as a star. Some access attributes 13 are formed as an instruction or data for an instruction 15. The access attributes formed as an instruction or data for an instruction 15 are in FIG. 2 purely schematically represented as a triangle. For reasons of clarity, no access attribute 13 is shown in the encrypted portion 11 deposited in the cloud 5. However, the encrypted portion 11 deposited in the cloud 5 also contains the access attributes 13.

According to the invention, the access attributes 13 are used in the current access control method 100. This always allows the use of current access attributes 13.

Thus, in a method step 104, rules 14 are checked by the access control device 3, the rules 14 or data for rules 14 being received by the mobile device 2 in method step 102. If data for the rules 14 has been contained in the encrypted portion 11 and has been transmitted with the encrypted portion 11, the rest of the rule is stored in the access control device 3, so that the rule can be checked with the aid of the transmitted data in the access control device 3. If necessary, further data for checking the rule 14 are necessary, for. For example, a check value or a PIN code input.

The access control device 3 checks z. At step 104, if the current time is within a predetermined time range. Thus, the mobile device checks the rule b. The access control device 3 knows the current time based on the timer.

In addition, z. B. the access control device 3 before a further authentication and thus checked rule c. For this purpose, the encrypted portion 11 contains a PIN control value as data for a rule 14. The PIN code input is made after a request to the mobile device 2 and is transmitted to the access control device 3 so that the access control device can perform the further authentication by comparing the control value with the PIN code as the PIN code was input to the mobile device 2 and transmitted to the access control device 3.

If all the rules to be checked 14 have been checked by the access control device 3 with a positive result, the access is granted. If at least one of the rules to be checked 14 could not be checked with a positive result, the access is denied and the access control procedure 100 ends. This is in FIG. 3 represented by an arrow at the method step 104.

In a fifth method step 105, access to the physical area is granted by actuating the electromechanical device 7. In addition, in the fifth method step 105, an instruction 15 is carried out, with which the granting of the access is visually displayed. For this purpose, the light source is driven behind the light guide 16. The instruction 15 or data for the instruction 15, z. As the flashing frequency, this are included in the encrypted portion 15 and have thus been transmitted in the method step 102 from the mobile device 2 to the access control device 3.

While access is granted, in a sixth method step 106, the grant of access to the mobile device 2 is communicated. Thus, the output of the method is transmitted to the mobile device 2. This corresponds to an instruction according to instruction type ii. The instruction 15 to communicate the granting of access to the mobile device 2 was transmitted in the encrypted portion 11 in the method step 102 to the access control device 3.

In a seventh method step 107, access to the physical area is ended. For this purpose, the encrypted portion 11 comprises a predetermined period of time as data for an instruction 15. By means of the timer, the access control device 3 determines the time span which has elapsed since the access was granted in step 105. If the determined time period corresponds to the predetermined period of time, the controller of the access control device 3 activates the electromechanical device 7. This is then denied access by the electromechanical device 7. For example, the electromechanical device 7 disengages the handle 17 from a lock, so that a torque of the handle 17 is no longer transferable to the lock. Thereafter, the access control process 100 ends.

The encrypted portion 11 is not stored in the access control device 3 after completion of the method 100. Thus, it is ensured that always a current encrypted portion 11, the mobile device 2 during the process 100th is transmitted is used. If the transmission of the encrypted portion 11 is missing, the method 100 is ended.

Notwithstanding the method step 104 described above, in the method step 104, a rule 14 may comprise a first time window. Rule 14 is only to be tested within the first time window. So z. B. the additional authentication to be made only in the time window. In order to remain in the above-mentioned example for method step 104, the access control device checks 3 z. B. first rule b., Whether the current time is within a predetermined time range. Further, the access control device 3 checks whether the current time is in the first time slot. If the current time is in the first time window, the access control device 3 performs the further authentication (rule c.). Access is granted only if rule b. and rule c. are fulfilled. If the current time is outside the first time window, where will the further authentication fail. Access is already granted if rule b. is satisfied.

Notwithstanding method step 106 described above, in method step 106, the instruction to communicate the granting of access to mobile device 2 may be linked to a second time window. The access control device 3 first checks the second time slot before the access control device 3 executes the instruction 15. If the current time is in the second time slot, the access control device 3 executes the instruction 15. Ie. the access control device transmits the information that the access has been granted to the mobile device 2. If the current time is outside the second time window, then the corresponding communication is omitted.

The instruction for the seventh method step 107, in which period the granting of the access after commencement of the grant of the access is to be ended, may be present several times in the access control system 1.

For example, a first time period may be stored in the access control device 3 as a default attribute. If the encrypted portion 11 does not contain an access attribute with a time span, the access control device 3 uses the first time period. If the time period determined by the timer corresponds to the first period of time, then the controller of the access control device 3 activates the electromechanical device 7 for decoupling.

On the other hand, if the encrypted portion 11 contains an access attribute 13 with a second time span, then the access control device 3 uses the second time span. The first period is not used. Corresponds to the time span determined by the timer the second time period, the controller of the access control device 3 controls the electromechanical device 7 for decoupling.

The encrypted portion 11 may alternatively comprise a general access attribute 13 with a third time span and a specific access attribute 13 with a fourth time span. The specific access attribute 13 is associated with a third time slot. The access control device 3 now checks first whether the current time is in the third time window. If the current time is in the third time slot, the access control device 3 uses the fourth time slot. The first and third time periods are not used. If the time interval determined by means of the timer corresponds to the fourth period of time, then the controller of the access control device 3 activates the electromechanical device 7 for decoupling. If the current time is outside the third time window, the access control device 3 uses the third time period. The first and fourth time periods are not used. If the time period determined by means of the timer corresponds to the third time span, then the controller of the access control device 3 activates the electromechanical device 7 for decoupling.

The first, second and third time windows may differ.

In FIG. 4 another method 200 according to the invention is shown. The method 200 may be designed in particular as an access control method 200. The method 200 can use the access control system 1 according to the invention and the access control device 3 according to the invention FIGS. 1 and 2 be performed. The first, second, and third method steps 101, 102, 103 of the method 100 FIG. 1 corresponds to the first, second and third method steps 201, 202, 203 of the method 200 FIG. 4 ,

The encrypted portion 11, which was decrypted in the third method step 203 in the access control device 3, contains a comparison value as data for a rule 14.

In a fourth method step 204, a check value is transmitted from the mobile device 2 to the access control device 3. The mobile device 2 has previously received the check value from the access management device 9, for example via the cloud 5. The check value may be included in the readable portion 12. It is also conceivable that the mobile device 2 receives the check value separately from the access information 10 from the access management device 9. The check value can be z. B. downloaded via the cloud 5 of the mobile device 2.

The comparison value and the check value have a code-like character and can, for. B. be designed as a hash value or as an electronic signature.

In a fifth method step 205 of the method 200, the access control device 3 compares the comparison value with the check value. As a result, the access control device 3 checks a rule. In a positive comparison, the access control device 3 recognizes the mobile device 2 as authorized in principle and the access control process 200 is continued.

If the comparison value and / or the check value is not transmitted in the current method 200 or if the comparison between the comparison value and the check value is negative, the access is denied and the access control method 200 ends. This is indicated by arrows at steps 203, 204 and 205 in FIG FIG. 4 shown.

In a sixth method step 206, the access control device 3 checks whether the user is allowed access at the current time. Ie. the access control device 3 checks whether the current time is within a predetermined time range. Thus, the access control device 3 checks the rule b. The time range for checking the rule b. is included as an access attribute in the encrypted portion 11. If the result of the check is negative, ie if the current time is outside the specified time range, the access control procedure ends and access is denied. This is indicated by arrows at step 206 in FIG FIG. 4 shown.

In a seventh method step 207, a message is first transmitted from the access control device 3 to the mobile device 2. Subsequently, in step 207, at least one rule for granting access is checked in the mobile device 2.

For example, the mobile device 2 may prompt the user to accept a user order such as "this is a non-smoking room" by input to the mobile device 2. Additionally or alternatively, the mobile device 2 can check the successful completion of a security briefing. For this purpose, the mobile device 2 perform a test and evaluate. Additionally or alternatively, the mobile device 2 may grant access only if another access has previously been granted. In this case, it may be that the user first another physical area, for. As a lock or a clean room, must pass through before the user the currently desired access is granted. The mobile device 2 thus checks a residence history of the mobile device 2. The mobile device 2 can also check whether a payment for the use of the physical area has been made previously.

Likewise, one of the rules b, c. or d. be checked in the mobile device 2. For example, step 206 may be omitted in this case.

If a rule to be checked in the mobile device 2 is given a negative result, the access is denied and the method 200 ends. This is in FIG. 4 indicated by an arrow at step 207.

If all rules to be checked in the mobile device 2 have been checked with a positive result, then in a method step 208 the mobile device 2 transmits the positive result to the access control device 3. The access control device 3 awaits the positive result within a predetermined time frame. The time is measured from the transmission of the message to in the access control device 3. If the positive result reaches the access control device 3 within the time frame, the access control device 3, in particular the controller of the access control device 3, controls the electromechanical device 7 in a method step 209. If no positive result reaches access control device 3 within the time frame, access is denied and the access control procedure ends. This is in FIG. 4 indicated by an arrow at the method step 208.

In a method step 210, the controller of the access control device 3 terminates granting the access after the predetermined period of time. The time span has been transmitted as access attribute 13 in the encrypted portion 11 in method step 202.

After a positive result of the check in step 205 or 206, the access control device 3 may have a programming interface 8 (see FIG. FIG. 1 ) to open. The programming interface 8 may serve to receive the positive result of the at least one rule that has been checked in the mobile device 2. The programming interface 8 may serve to receive at least one instruction or data for an instruction for the manner of granting the access. If the programming interface 8 already opens after step 205, data for the step 206 can be transmitted via the programming interface 8 to the access control device 3 via the programming interface 8. For example, a control value, which is required for a check of a further authentication in the access control device 3, can be transmitted via the programming interface 8.

The programming interface may alternatively or additionally serve to receive an updated version of firmware and / or additional firmware, an updated version of the access control device identifier, and / or an updated version of data to perform the decryption in step 203.

The programming interface 8 can only be partially opened. Thus, the programming interface 8 can only be opened for receiving certain data, while other, in principle, also by the programming interface 8 receivable data are not receivable, if this is not allowed by the at least one command.

The mobile device 2 may include at least one command when and / or what to open the programming interface 8 for. Ie. that, alternatively to the previously described, the programming interface 8 does not open immediately as a result of a positive conclusion of step 305 or 306, but only if the mobile device 2 commands to at least partially open the programming interface 8 to the access control device 3, in particular to the conventional interface , sent. The command may be included in the access information 10.

If the programming interface 8 is not opened or at least not open for the data, then the data is received by a conventional interface of the access control device 3, z. B. a binary interface.

The programming interface 8 and the conventional interface receive the data and / or commands by the receiving device of the access control device 3.

Claims (15)

Method (100, 200), in particular access control method (100, 200), for granting access to a physical area,
the method (100, 200) being performed by at least one access control device (3) that can be assigned to the physical area and by a mobile device (2),
wherein the mobile device (2) contains access information (10) for the access control device (3), the access information (10) including at least one access attribute (13, 14, 15),
wherein the method (100, 200) comprises the following steps (102, 202, 104, 105, 106, 107, 205, 206, 210): - transmitting (102, 202) the access attribute (13, 14, 15) to the access control device (3) - using (104, 105, 106, 107, 205, 206, 210) the access attribute (13, 14, 15) in the access control device (3) during the current procedure (100, 200). Method (100, 200) according to claim 1, characterized in that the access control device (3) uses the transmitted access attribute (13, 14, 15) only during the current procedure (100, 200). Method (100, 200) according to claim 1 or 2, characterized in that the access information (10) comprises an encrypted portion (11) which is undecipherable by the mobile device (2), the encrypted portion (11) comprising In particular, the access information (10) comprises a readable portion (12) which is unencrypted or can be decrypted by the mobile device (2). Method (100, 200) according to one of the preceding claims, characterized in that the access attribute (13, 14, 15) contains at least one rule (14) for granting access to the physical area and / or data for the rule (14) where rule (14) is or includes one of the following rule types: a. The access is granted only after a positive result of a comparison of a comparison value with a check value, b. Access is granted only in a certain period of time, c. Access is granted only if there is a positive result of further authentication, in particular by means of a code or a biometric recognition, d. Access is granted only if a label identifying the user as a guard is negatively e. The access is granted only if the positive result of a rule to be tested in the mobile device (2) is present. in particular rule c., d. and / or e. only in a given time window applies. Method (100, 200) according to any one of the preceding claims, characterized in that the access attribute (13, 14, 15) comprises at least one instruction (15) or data for an instruction (15), the instruction (15) comprising at least one of corresponds to or includes the following statement types: i. Storing or omitting storage of the method, the output of the method and / or features of the method in the access control device (3) ii. Transmission or failure to transmit the process, the outcome of the process and / or features of the process from the access control device (3) to the mobile device (2) iii. Acoustically and / or visually indicating the granting of access or omitting the respective audible and / or visual indication, iv. Method of audible and / or visual indication of granting of access v. Ending the granting of access to the physical area after a predetermined period after the start of the grant, vi. Termination of access to the physical area as a function of a predetermined time regardless of the start of the grant, wherein z. B. the predetermined time corresponds to the end of a business, vii. Termination of access to the physical area depending on the number of grants already granted. Method (100, 200) according to one of the preceding claims, characterized in that the instruction (15) comprises a specific time window in which the instruction (15) is to be carried out. Method (100, 200) according to one of the preceding claims, characterized in that a default attribute is stored in the access control device (3), wherein the the access attribute (13, 14, 15) transmitted by the mobile device (2) overrides the default attribute, wherein in particular the default attribute is formed reference-free to the mobile device (2). Method (100, 200) according to one of the preceding claims, characterized in that the access information (10) comprises a plurality of access attributes (13, 14, 15), wherein the plurality of access attributes (13, 14, 15) is a rule type (14) or a Relate to instruction type (15), wherein one of the plurality of access attributes is formed as a general access attribute and another of the plurality of access attributes is formed as a specific access attribute, in particular the specific access attribute is assigned a specific time range in which the specific access attribute applies. Method (100, 200) according to one of the preceding claims, characterized in that the specific access attribute overrides the general access attribute. Method (100, 200) according to any one of the preceding claims, characterized in that the access control device (3) comprises a revocation list which at least grants access to the physical area exclusively for at least one mobile device which is free from a telecommunication connection to a telecommunication network is prohibited. Method (100, 200) according to one of the preceding claims, characterized in that the access control device (3) transmits an access control device identifier to the mobile device (2) and the mobile device (2) transmits the access information (10) only to the access control device (3). to the access control device (3), in particular the mobile device (2) comprises a display, wherein the mobile device (2) selects a selection of possible access control devices (3) to a user displays. Method (100, 200) according to one of the preceding claims, characterized in that the method comprises the following steps (204, 205): - transmission (204) of the check value from the mobile device (2) to the access control device (3) Comparison (205) of the comparison value with the check value in the access control device (3), depending on the result of the comparison (205) proceeding with the procedure (100, 200) to grant access to the physical area with the aim of granting access. Method (100, 200) according to one of the preceding claims, characterized in that the comparison (205) of the comparison value with the check value is a prerequisite for a check (207) of a rule in the mobile device (2) being permitted and / or the comparison (205) of the comparison value with the check value is a prerequisite for allowing communication with a programming interface (8) of the access control device (3). Access control device (3) for granting access to a physical area, in particular for carrying out a method (100, 200) according to one of Claims 1 to 13,
the access control device (3) being assignable to a physical area,
wherein the access control device (3) is adapted to wirelessly receive an access attribute (13, 14, 15) for the access control device (3) and to use to grant access to the physical area. Access control system (1) for granting access to a physical area, in particular for carrying out a method (100, 200) according to one of Claims 1 to 13,
with an access control device (3), which can be assigned to a physical area, in particular according to claim 14, and
with a mobile device (2),
wherein the mobile device (2) contains access information (10) for the access control device (3), the access information (10) including at least one access attribute (13, 14, 15),
wherein the access control device (3) is adapted to receive the access attribute (13, 14, 15) from the mobile device (2) and to use it to grant access to the physical area.

Images