EP4075398A1 - Access control system - Google Patents

Abstract

Radio system (1) for access control, comprising locking devices (10), portable transceivers (20) and a remote central computer (40), characterized in that:- each locking device (10) comprises a unique visual identification code (11) and a Bluetooth receiver (12) configured to communicate with said portable transceivers (20),- each portable transceiver (20) comprises a microprocessor (24) configured to communicate with an optical reader (21), a Bluetooth transmitter (22) and a memory unit (23) located in said transceiver (20), said portable transceiver (20) being configured to communicate wirelessly with said remote central computer (40) and with the Bluetooth receiver (12) of said closure devices (10),said system (1) being configured to perform a method in which:- said visual identification code (11) of a closure device ( 10) is read by said reader (21), - said portable transceiver verifies whether it is authorized to unlock said locking device (10), - if the portable transceiver (20) finds that it has this authorization, its Bluetooth transmitter (22) emits an opening signal, which triggers the unlocking of said closing device (10).

Description

Technical field of the invention

The invention relates to the field of devices and systems for controlling access to buildings and to the various rooms within a building. More particularly, it relates to access systems comprising a plurality of mechatronic locking devices, which can be opened by users carrying an identification medium and having the right to open one or more of these locking devices. The invention also relates to a method of using such an access control system.

State of the art

Various mechatronic locking devices are known which are configured to recognize persons having access authorization. For this, the closing devices cooperate with an identification medium dedicated to the system, which is personal to the user and which remains in his custody. This identification medium may for example be a transponder or a magnetic card or a smart card; this identification medium contains the user's access rights or can simply be used to identify the user carrying this medium. The identification medium sends an identification signal to the mechatronic locking device to open or close the door. Access authorizations are centrally managed by a computer which transmits them to mechatronic locking devices and/or identification media. These mechatronic locking devices are commercially available under different names, such as “digital locking”. An example for such a system according to the state of the art is known under the designation “System 3060 ^™ ” from the company SimonsVoss. Similar systems are described in US 2014/000 2236 (Viscount Security Systems).

In general, access control and authorization systems can be designed with different levels of security, knowing that not all sites, and within the same site all doors, need the same level of security. In a clinic, for example, the door to the kitchen garbage room is not protected with the same degree of security as the door to the room for storing anesthetic products. Indeed, the technical complexity of a control system and access authorization, its investment cost, its installation cost and its operating cost depend on the level of security desired by the operator of the site in which it is installed. In general, the state of the art offers many systems of a high degree of complexity, aimed at ensuring a high degree of security, whereas the present invention aims at a system that is as simple as possible, easy to install, which provides a sufficient level of security in very many cases, without aiming for the highest degree of security imaginable.

The advantage of mechatronic closing devices according to the state of the art mentioned above is that they incorporate a battery and do not require wiring; this simplifies their installation. The disadvantage of credential-based systems is their capital cost, and the need to schedule user support for each assigned user, which increases the operating cost of the system. Furthermore, it is observed that the identification medium is quite often lost by the holder to whom it has been entrusted. The disadvantage of most existing systems is the need for dedicated wireless communication between the central computer and the mechatronic locking device, which makes the mechatronic locking device more complex, makes it vulnerable to cyberattacks, and increases its energy consumption.

We also know of US 2017/0142 581 (Sensormatic Electronics ) radioelectric systems for access control in which the user must scan with his mobile phone a bar code affixed to the door, and his authentication will be analyzed by a central computer; this request (as well as the response) passes through the Internet and through a data processing center at the local level. This system is flexible enough to program different modes of use, but it requires in addition to the central computer a central processing unit at the local level, and the data passes through the Internet, a telecommunications network and/or a local area network. . A similar system is described in US 2015/022 8133 (Illinois Tool Works ). The level of security of this system can be further increased by modifying the code displayed at the door each time it is closed, and by sending a single-use confidential code to the mobile phone of the authorized user; such a system is proposed in EP 3 584 769 A1 (Detec AS ).

There is a need for a simpler access control system which has, at a roughly comparable level of security, the advantages of the existing systems described above, without having the drawbacks. In particular, it is desired to have a system which not only avoids any cabling work in the premises to which access must be controlled, but also a system which is easy to modify, easy to extend, and for which the management of the rights of access is as simple as possible.

Indeed, these access rights often refer not only to a single locking device, but to several locking devices within an access control system, which extends for example to an office floor, an industrial or commercial building, an industrial site. Managing these access rights for a large site with a large number of doors and users can be complex, and involves managing a large amount of data. Similarly, the query sent by a locking device to a central station to check whether the user who arrives in front of the door has the right of access to open it may involve the generation and management of a large number signals; taking into account the different range of the different wireless transmission paths within a site of a certain size, this makes the radio system both hardware and software complex, and can also generate a risk of electromagnetic interference.

As has just been mentioned, the present invention aims to provide a particularly simple solution, which does not require a large investment, and which also minimizes the number of signals to be transmitted within the building or site concerned.

Objects of the invention

According to the invention, the problem is solved by a combination of means which will be explained below, and which are brought together in a radioelectric system.

According to an essential characteristic of the invention, the unlocking instruction (unlocking) is transmitted from a portable transceiver to the receiver of a closing device by a Bluetooth type wireless channel.

We understand here by Bluetooth a means of data transmission at short distance and at low speed according to a Bluetooth protocol; this transmission usually uses radio waves in the 2.4 GHz frequency band, at low power. This transmission channel includes in particular a transmission according to the BLE (Bluetooth Low Energy) standard, which is used in the context of the present invention. The range of these BLE signals typically does not exceed 10 meters; this is suitable for implementing the present invention, knowing that the invention can operate with a lower range of Bluetooth signals, for example of the order of one meter. Note that the name Bluetooth is a registered trademark.

Thus, each closure device forming part of the radio system according to the invention is necessarily provided with a Bluetooth receiver; it can be a Bluetooth transceiver. In addition, each closing device includes a visual identification code, unique on the same network. It is referred to herein as "visual" because the information it contains can be read by visual means, as opposed to magnetic or digital codes. This code is attached to the closing device.

• chaque dispositif de fermeture comporte un code d'identification visuelle unique et un récepteur Bluetooth configuré pour communiquer avec lesdits émetteur-récepteurs portables,
• chaque émetteur-récepteur portable comporte un microprocesseur configuré pour communiquer avec un lecteur optique, un émetteur Bluetooth et une unité dé mémoire situés dans ledit émetteur-récepteur, ledit émetteur-récepteur portable étant configuré pour communiquer sans fil avec ledit ordinateur central distant et avec le récepteur Bluetooth desdits dispositifs de fermeture,

ledit système étant configuré pour exécuter un procédé dans lequel :

• ledit code d'identification visuelle d'un dispositif de fermeture est lu par ledit lecteur optique,
• ledit émetteur-récepteur portable vérifie ensuite s'il dispose de l'autorisation pour déverrouiller ledit dispositif de fermeture,
• si l'émetteur-récepteur portable dispose de cette autorisation, son émetteur Bluetooth émet un signal d'ouverture, qui, après réception par ledit récepteur Bluetooth dudit dispositif de fermeture, déclenche le déverrouillage dudit dispositif de fermeture.

A first object of the invention is an access control radio system, comprising a plurality of locking devices, a plurality of portable transceivers and a remote central computer, characterized in that:

• each closing device comprises a unique visual identification code and a Bluetooth receiver configured to communicate with said portable transceivers,
• each portable transceiver includes a microprocessor configured to communicate with an optical reader, a Bluetooth transmitter and a memory unit located in said transceiver, said portable transceiver being configured to communicate wirelessly with said remote central computer and with the Bluetooth receiver of said closing devices,

said system being configured to perform a method in which:

• said visual identification code of a closure device is read by said optical reader,
• said portable transceiver then checks whether it has authorization to unlock said locking device,
• if the portable transceiver has this authorization, its Bluetooth transmitter emits an opening signal, which, after reception by said receiver Bluetooth of said locking device, triggers the unlocking of said locking device.

According to an advantageous embodiment, the detection of said visual identification code triggers the execution of software previously loaded into a memory unit of said microprocessor of the portable transceiver, said software being configured to execute said method.

The radio system includes a remote central computer. The adjective “remote” means here that its location is not important, insofar as the central computer only communicates with the portable transceivers, and by a means of wireless communication. The radio system according to the invention does not require the intervention of the remote central computer for the authorization of each opening of a closing means. It does not provide for direct communication between the closing devices and the remote central computer.

The radio system according to the invention is advantageously configured so that the remote central computer delivers to at least one portable transceiver an authorization to transmit, each time said portable transceiver has read the visual identification code of a determined closing means, an opening signal, also called unlocking signal, to unlock said closing device; this dispatch may be limited to certain time slots and/or certain days of the week and/or certain dates, or may be given only once.

The radio system according to the invention is advantageously configured so that said remote central computer can send a signal to the portable transceiver which terminates the authorization delivered to said portable transceiver.

According to a very advantageous embodiment of the invention, said closing device comprises a mechatronic lock. According to another very advantageous embodiment, said closing device does not comprise any other transmitter and/or receiver of radioelectric signals than said Bluetooth receiver.

A second object of the invention is a closing device for a radioelectric network according to the invention, comprising a Bluetooth receiver configured to communicate with a portable transceiver. According to a variant, said closing device comprises a Bluetooth transceiver.

• dans une troisième étape ledit microprocesseur vérifie si ledit émetteur-récepteur portable a reçu préalablement à la première étape de l'ordinateur central distant un signal transmis par un moyen sans fil lui conférant le droit de déverrouiller ledit dispositif de fermeture ;
• et si ledit émetteur-récepteur portable a reçu ce droit, et seulement dans ce cas, dans une quatrième étape, son émetteur Bluetooth émet un signal qui sera reçu par le récepteur Bluetooth du dispositif de fermeture, et qui ordonne le déverrouillage dudit dispositif de fermeture.

A third object of the invention is a method for unlocking a closure device according to the invention, in which: in a first step, a user approaches his portable transceiver, which has an optical reader, a Bluetooth transmitter and a microprocessor, the visual identification code attached to a closing device provided with a Bluetooth receiver, so that said optical reader can read said visual identification code; in a second step, said optical reader reads said visual identification code;

• in a third step, said microprocessor verifies whether said portable transceiver has received, prior to the first step from the remote central computer, a signal transmitted by a wireless means conferring on it the right to unlock said closing device;
• and if said portable transceiver has received this right, and only in this case, in a fourth step, its Bluetooth transmitter emits a signal which will be received by the Bluetooth receiver of the closing device, and which orders the unlocking of said closing device .

In the third step, "previously" means "prior to the triggering of the unlocking method according to the invention by this portable transceiver" (in other words, before the start of the execution of the unlocking method), knowing that the progress of the unlocking method according to the invention as such does not involve any exchange of information between the portable transceiver and the remote central computer.

Yet another object of the invention is software loaded on a memory of a portable transceiver, specifically configured to execute the unlocking method according to the invention when it is executed on the microprocessor of said portable transceiver forming part of the radio system according to the invention.

tricks

• [Fig. 1] montre de manière schématique un réseau radioélectrique selon l'invention dans une configuration minimale, avec un seul dispositif de fermeture et un seul utilisateur.
• [Fig. 2] montre de manière schématique un réseau radioélectrique selon l'invention avec plusieurs dispositfs de fermeture.
• [Fig. 3] montre de manière schématique les étapes d'un premier procédé d'utilisation du résau radioélectrique selon l'invention.
• [Fig. 4] montre de manière schématique les étapes d'un autre procédé d'utilisation du résau radioélectrique selon l'invention.

The invention is illustrated with the aid of several figures, which represent particular aspects of the invention to facilitate its understanding, but which are not intended to limit its legal scope to the illustrated embodiments alone.

• [ Fig. 1 ] schematically shows a radio network according to the invention in a minimal configuration, with a single closing device and a single user.
• [ Fig. 2 ] schematically shows a radio network according to the invention with several closing devices.
• [ Fig. 3 ] schematically shows the steps of a first method of using the radio network according to the invention.
• [ Fig. 4 ] schematically shows the steps of another method of using the radio network according to the invention.

1

Système radioélectrique selon l'invention

10

Dispositif de fermeture

11

Code d'identification visuelle

12

Récepteur Bluetooth

20

Emetteur-récepteur portable

21

Lecteur optique

22

Emetteur Bluetooth

23

Unité de mémoire

24

Microprocesseur

25

Emetteur-récepteur

31

Lecture optique

32

Liaison Bluetooth

35

Communication sans fil bidirectionnelle

40

Ordinateur central distant

45

Emetteur-récepteur de 40

In the figures and in the following description, the following reference numerals are used:

1

Radio system according to the invention

10

Closing device

11

Visual identification code

12

Bluetooth receiver

20

Handheld transceiver

21

Optical drive

22

Bluetooth transmitter

23

memory unit

24

microprocessor

25

Transmitter receiver

31

Optical reading

32

Bluetooth link

35

Two-way wireless communication

40

Remote central computer

45

40 transceiver

The four-digit numerals refer to process steps.

detailed description

The radioelectric system according to the invention comprises a plurality of closing devices, each of which is associated with a different visual identification code which distinguishes from others. This visual identification code is fixed. Preferably, this code is engraved in a visible part of the closure device, or printed on a visible part of the closure device. It can also be engraved or printed on a plate or any other support attached to the closure device, for example by gluing or embedding. Insofar as the replacement of the closure device entails the replacement of the visual identification code, it is preferred that said code be materially integrated into the closure device, as has just been explained. However, it would also be conceivable to attach the code close to the locking device, for example on the door, on the door frame or on a wall next to the door.

Within the framework of the normal execution of the unlocking method according to the invention and of the normal use of the device and radioelectric system according to the invention, it is not intended to change this code. This would theoretically be possible, for example by sticking a new code label on an old label, but would require reconfiguring the remote central computer which would then have to associate this new code with this specific locking device; on the other hand, no intervention would be necessary on the transceiver contained in the device itself. However, we do not see what could be the benefit of changing this code, insofar as the user cannot use another code for this locking device, and cannot use this code with another locking device.

Advantageously, said visual identification code is a graphic identification code according to a standardized format, for example a code of the QR Code type. In another embodiment, which is less preferred, it is an alphanumeric code.

According to an essential characteristic of the invention, this visual identification code is read by the portable transceiver, which deduces therefrom the alphanumeric identification code associated with the closure means. More specifically, the transceiver comprises a microprocessor configured to deduce from the visual identification code an alphanumeric identification code associated with the closure means, which it then compares to a list of alphanumeric identification codes which has been given to it previously communicated; if it follows from this comparison that the portable transceiver has the right to open this means of closure when the this comparison, it emits a coded unlocking signal which is transmitted to the closing means by a short-range wireless transmission means.

Each closing device is configured to receive a digital radio signal via a short-range wireless transmission channel, preferably according to the Bluetooth protocol, and more particularly according to the Bluetooth Low Energy protocol (abbreviated as BLE). This protocol uses a more limited bandwidth and has very low power consumption. It does not require pairing the Bluetooth receiver of the locking device with the Bluetooth transceiver of the mobile phone; this considerably simplifies the method of using the system according to the invention. The Bluetooth receiver located in the closing device can be a Bluetooth transceiver; the transmitter function can be used or not in the communication protocol with the mobile phone. According to a preferred embodiment, the closure device according to the invention does not comprise any other transmitter and/or receiver of radioelectric signals than said Bluetooth receiver (or transceiver), because this is neither necessary nor useful, and would increase the energy consumption of the closing device. The radio system according to the invention does not provide for direct communication between the closing devices and the remote central computer.

The closure device according to the invention has an independent power supply. It is typically powered by an energy storage element such as a battery, which can be a primary battery or a secondary battery; in the latter case it can be powered by a solar cell integrated in the device. The use of an energy storage element makes it possible to achieve the objective of having a closing device which does not require wiring during its installation.

In a very preferred embodiment of the invention, the closing device according to the invention comprises a mechatronic lock. Mechatronic locks are known as such, and will not be explained here in greater detail. The closing device according to the invention may also comprise an electromagnetic locking device; this solution has the disadvantage of high power consumption which does not allow for an energy-independent closing device: electromagnetic locking devices generally require an external power supply, and therefore wiring.

The Bluetooth digital signal capable of unlocking the locking device emanates from a portable transceiver device provided with a microprocessor associated with a memory unit; this device is also equipped with a camera. Such a device can be a device of the mobile phone type and will here sometimes be referred to by this term, without this limiting the characteristics of the device to those of a mobile phone (also known by the term “smartphone”). The portable transceiver comprises at least two radioelectric transceivers of different types and operating on different frequencies and according to different protocols. It must be configured to communicate, on the one hand, according to the Bluetooth protocol with the locking devices. On the other hand, it must be configured to communicate via a wireless link connected to the Internet and/or to a GSM-type link with a remote central computer, which is also part of the radio network; this will be explained below in greater detail.

The radio system according to the invention comprises at least one, and preferably a plurality of such portable transceiver devices. The belonging of a portable transceiver device to the radio system according to the invention is established by loading and activating specific software (also called a specific "application") in the memory unit of the microprocessor of the portable transceiver; this software controls the two wireless communication paths, namely to the locking device and to the remote central computer.

The membership of a locking device in the radio system is established by its specific software configuration, which makes it possible to receive and manage a coded Bluetooth signal which causes unlocking.

We describe here a method of using the radio system according to the invention.

The user approaches the reading zone of the camera of his transmitter-receiver device of the identification code attached to the closing device that he wishes to open. The camera takes a picture of this identification code. This code is identified as an identification code belonging to the radio system. This identification activates in the microprocessor of the portable transceiver software (application) which will have been previously loaded on the memory unit of said portable transceiver, as will be explained in more detail below. Alternatively, the system is configured so that the user first activates a specific application before taking the picture of the identification code; provision may be made for this activation to require the entry of an identifier, such as a user name and/or a password personal to this user.

This software verifies whether the user of this portable transceiver has the right to open the closing device of which said transceiver has just read the identification code. This opening right for a specific closing device has previously been transmitted to this portable transceiver in a coded manner by the central computer, and stored in the memory unit of said portable transceiver. This storage can be done according to different protocols, for example in the form of a specific configuration of the software (application).

If the software finds that the owner of the transceiver has the right to open the device, said transceiver sends a coded signal to the locking device whose code it has just read; this signal causes the unlocking (unlocking) of the closure means.

If the software finds that the owner of the portable transceiver does not have the right to open the device, said portable transceiver does not send a coded signal to the closing device whose code it has just read, and the closing device remains blocked (closed).

The remote central computer is the access rights manager within the radio system. It is called here “remote” because its location is not important for the correct operation of the system, since it is configured for and capable of communicating by a wireless link with the portable transceivers. This communication can be done by any means and according to any protocol, for example by an Internet link or a mobile telephone link (for example a GSM link); these wireless links between a mobile phone and a remote computer are known as such and will not be explained here in greater detail.

When the user receives authorization from the remote central computer to integrate his mobile telephone into the radioelectric system (this authorization may be communicated by an SMS or internet message, for example), it downloads said software via a wireless internet connection with the central computer. By way of example, the message (SMS or e-mail) sent to him by the remote central computer may include a link on which he must click to initiate the downloading and installation of the software. Subsequently, the central computer issues the authorizations for one or more locking devices. For each closing device, this authorization can be given for a certain duration and/or for certain days and/or for certain hours only. This authorization may be revoked or modified by the central computer at any time. The issuance, modification or cancellation of an authorization by the central computer can be accompanied by the sending by said remote central computer of a message to the portable transceiver. This sending can take different forms; it can be in particular an email, an SMS type message, or any other type of message.

The issuance of authorizations is sent to a portable transceiver prior to the triggering of the unlocking method according to the invention by this portable transceiver: the execution of the unlocking method according to the invention as such does not require an exchange information between the portable transceiver and the remote central computer. This is advantageous because thus the unlocking process can take place even in the case where a wireless link (for example via the Internet) between the portable transceiver and the remote central computer cannot be established.

It can however be provided that the progress of the unlocking process involves an exchange of information between the portable transceiver and the remote central computer: the system can be configured in such a way that this embodiment is selected each time when a wireless link can be established between the portable transceiver and the remote computer. In this case, the portable transceiver sends to the remote central computer the identification code which it has determined from the visual identification code, and receives, if authorized, in return a coded signal that it transmits, via its Bluetooth connection, to the closing device. This mode of operation makes it possible to check in real time at the level of the central computer the right of access of the holder of the transceiver to open this closing device. However, insofar as in a building of a certain size the wireless link with a remote server cannot be ensured everywhere, it is essential that the method of unlocking can take place in such a way as not to require an exchange of information between the portable transceiver and the remote central computer.

Said coded unlocking signal is generated by the portable transceiver if the latter is not connected to the Internet; otherwise it can be generated either by the remote central computer (after transmission to the central computer of the alphanumeric identification code that the portable transceiver has extracted from the visual identification code) or by the portable transceiver (by searching for said alphanumeric identification code in the list of authorized closing means which was transmitted to it beforehand by the central computer). This coded signal is not brought to the attention of the user of the portable transceiver.

In an advantageous embodiment, the remote central computer instructs the mobile telephone to request, regularly or not, the list of closing devices authorized for unlocking, together with an expiry date for said list. At the expiry of said list, or shortly before this moment, the mobile telephone will request a new list. In the event that the remote central computer sends an early authorization cancellation order, which may include the total cancellation of the list or the modification of the list, this order has no effect if the mobile telephone is not connected to a wireless network that supports this transmission. In this case, the authorization is valid until the scheduled expiry of the list.

Provision can also be made for the sending of a new list of closing devices authorized for unlocking to take place on the initiative of the remote central computer.

In a particular embodiment of the invention, the software loaded into the memory of the microprocessor of the portable transceiver verifies the identity of the holder of said portable transceiver before unlocking a locking device; this procedure can be applied to all closing devices in the list, or to some only. To this end, in a first variant, the holder can record a photograph of his face or a fingerprint, which is analyzed to extract at least one biometric parameter therefrom. This biometric parameter can be requested each time the closing device is opened, and it is then compared with a value of the same parameter previously established by the same user. This analysis is performed by the transceiver, whose microprocessor has been suitably configured.

In a second variant, which can be combined with the first, the portable transceiver asks the holder to enter a confidential code which has been communicated to him beforehand; this input is made on the transceiver.

Typically, the unlocking which has been triggered by the reception by the closing means of the coded unlocking signal is active only for a certain predetermined period of time; the latter, called here “short period of time”, is for example between three and ten seconds. This means that if during this period of time after the reception by the closing means of the coded unlocking signal, said closing means is not opened by the user, it locks again. In a third variant, which can be combined with each of the two others, the system is configured in such a way as to allow the sending of a coded unlocking signal selected from among two different unlocking signals: one which unlocks for a period of short time, the other which unlocks for a longer, predetermined period of time, called here "long period of time", which can be for example between one hour and ten hours, or which can extend up to a certain time, for example the normal closing time of the site; thus, during this long period of time, the closure means allows free passage. This free passage can apply, for example, to the door of an individual office, of an open space office, or of a canteen.

In this third variant, it is advantageously provided that the system can be configured in such a way as to allow authorized users, or certain authorized users, to freely select whether they wish to provide unlocking at a given time for a short period of time or long.

The invention can be applied in particular to access control by means of doors capable of being locked by closing devices according to the invention. Access control may concern in particular the various access doors to a building, and inside a building, whether offices, technical rooms, workshops, laboratories, corridors, garages , cellars, attics, artisanal or industrial production sites, warehouses, hospital rooms, hotels, holiday apartments or other temporary accommodation establishments.

The invention has several advantages over the state of the art. It considerably simplifies the management of access rights. It simplifies the construction of closing devices, which no longer need to be connected to the Internet or even to a central or local computer. Thus, access control becomes independent of any disturbance of the radioelectric link between the locking device and the central computer. Moreover, insofar as a non-existent Internet connection cannot be the subject of a cyberattack, this improves the overall level of security of the radioelectric system.

The invention replaces the dedicated identification medium, which must be provided to the user of the radioelectric system, and can easily be lost, by an object specific to its holder, which has a very varied functional utility for him and which he will take care, namely his mobile phone, and whose possible loss or theft will be immediately detected.

The invention simplifies the management of access rights because the identification media of the transponder or smart card type according to the state of the art cannot be reprogrammed remotely, unlike the identification media of the radio system according to the invention. 'invention. Furthermore, unlike the systems according to the state of the art, the radioelectric system according to the invention does not require the intervention of the central computer for the authorization of each opening of a means of closure: the central computer intervenes only to activate and deactivate the communication software loaded in the memory of the portable transceiver, and to establish, modify or withdraw the right of access for a given locking means, but not for its opening or unlocking .

Like the dedicated identification medium, any holder (here called "accidental holder") of the identification medium can use it to open a given means of closure (provided they are aware of this possibility ). But unlike the identification media of the state of the art, the system according to the invention can be provided with an additional function of biometric identification of the holder, which transfers the possibility of opening or unlocking the means of closure from the actual holder (who may be an accidental holder) of the mobile phone to its authorized holder.

And finally, the system according to the invention is very easy to install, to modify, and to configure. This is in particular due to the absence of a central processing unit at the local level. The system according to the invention is independent of an already existing access control system, as long as the closing device is capable of receiving signals via a short-range network, such as Bluetooth. In particular, it is very easy to add additional locking devices to the network. The system according to the invention can also be integrated into an access control system already existing on the site, in order to manage access rights easily and in the same way for operation.

We describe here a particular embodiment, with reference to the figures.

The figure 1 schematically shows a radio network 1 according to the invention in its simplest form. It comprises a closure device 10 , on which a visual identification code 11 has been fixed. The closure device comprises a Bluetooth receiver 12.

The radio network 1 according to the invention also comprises a portable transceiver device 20 , which has a camera 21 , a Bluetooth transmitter 22 , a microprocessor 24 in communication with a memory unit 23 , and a transceiver 25 capable of communicating wirelessly with a remote central computer 40. The latter has a transceiver 45 , or is connected to such a transceiver.

The figure 1 also shows communication links, with dotted or dashed arrows denoting wireless links. The link 35 between the transceiver 45 of the remote computer 40 and the portable transceiver 25 is typically an internet type link. As indicated above, this link is used only occasionally, when the remote central computer 40 assigns access rights to a portable transceiver 20 , or when it modifies or cancels the access rights previously. assigned to a portable transceiver 20. This Internet link 35 can be suitably secured, for example by the use of an encryption protocol (encryption).

The reference 32 designates the wireless link between the Bluetooth transmitter 22 of the portable transceiver 20 and the Bluetooth receiver 12 of the closing device 10. This link sends suitably coded signals, which cause the unlocking (unlocking) of the device. closure 10. These signals are advantageously encrypted, for example by a 128-bit AES type encryption protocol.

The reference 31 designates the optical reading of the visual identification code 11 by the optical reader 21 of the portable transceiver 20. It is noted that in the embodiment represented in this figure the closing device 20 does not emit any signal electronic, it only needs to receive signals; these signals are of short range, such as a Bluetooth signal. Its visual identification code 11 is permanently visible, but only a portable transceiver on which the specific software has been loaded, and which has been granted the opening right for this specific closing device, can transmit the signal of opening 32.

The figure 2 shows a system that includes the same three types of devices as those shown in the figure 1 , which are represented in a simplified way. The difference is that this system comprises several closing devices 10a , 10b , 10c , 10d , and several portable transceivers 20a , 20b , 20c , 20d , 20e , 20f ; the remote central computer 30 is one in number, because that is sufficient and contributes to the simplicity of the radio system according to the invention. It is noted in this regard that regardless of the number of closure devices 10 and the number of portable transceivers 20 , and regardless of the distance over which said radio network extends, there is no need to a second remote central computer, and there is no need for a local data processing center either.

We note that on the figure 2 , several communications are in progress between the three types of devices that make up the radio network.

The portable transceiver 20c is reading the code from the closing device 10d ; the portable transceiver 20b is sending the opening signal to the closing device 10c ; the remote central computer 30 is sending a signal 35 to the transceiver 20f to modify its access rights. It is also noted that certain transceivers 20a , 20d , 20e are part of the network radio, insofar as the specific software (application), which is activated by reading the visual code, has been loaded into the memory unit of their microprocessor, but at this time said portable transceivers 20a , 20d , 20e do not actively participate in the radio network as transceivers.

Likewise, certain closure devices 10a , 10b are part of the radio network, which are configured to receive an opening signal emanating from a portable transceiver forming part of the radio network and having opening rights for these devices. closing, but at this moment these devices are not requested by an opening signal.

We describe here in relation to the picture 3 a method of using the radio network according to the invention, with several variants.

We first describe a method for unlocking a closure device according to the invention. In a first step 1010 , a user approaches his portable transceiver 20 , which has an optical reader 21 , a Bluetooth transmitter 2 2 and a microprocessor 24 , the visual identification code 11 attached to a device closure 10 provided with a Bluetooth receiver 12 , so that said optical reader 21 can read said visual identification code 11 .

In a second step 1020 , said optical reader 21 , which is in functional communication with said microprocessor 24 , reads said visual identification code 11 . Typically, it determines from this visual identification code an alphanumeric identification code of this closure means; this code is unique and fixed.

In a third step 1030 said microprocessor 24 verifies whether said portable transceiver 20c has previously received by the remote central computer 40 a signal transmitted by a wireless means conferring on it the right to open said closing device 10d.

If said portable transceiver 20c has received this right for the closing device 10d whose visual identification code has just been read by its optical reader, and only in this case, in a fourth step 1040 , its Bluetooth transmitter 22 emits a signal 32 which will be received by the Bluetooth receiver 12d of the closing device 10d , and which orders the unlocking of said closing device 10d. Then the method stops at step 1042.

If at step 1030 it turns out that said portable transceiver 20 has not received this right, the method stops at step 1032. Alternatively, optionally (not shown in the figures), the Bluetooth transmitter 22 emits a signal which will be received by the Bluetooth receiver 12 of the closing device 10 , and which orders the generation of a visual signal (a red light for example) and/or acoustic which warns the user of the lack of authorization to unlock the locking device 10.

In a variant of this method (not shown in the figures), said portable transceiver asks its user to enter biometric type information prior to the transmission of the signal which orders the unlocking of the closing device, such as a photograph of his face or a fingerprint.

In another variant of this method (not shown in the figures), said Bluetooth receiver 12 of the closing device 10 is a Bluetooth transceiver, configured to transmit at least one signal in the direction of the Bluetooth transceiver 22 of the telephone portable 20. This signal can confirm the opening of the closing device. It can also include information on the state of charge of the energy storage element of the closing device. These signals can be exploited in different ways. The opening confirmation signal can be transmitted by the mobile telephone to the remote central computer, for example for control purposes. The signal carrying information on the state of charge can be transmitted by the portable telephone to the central computer, in all cases or, preferably, only when this state of charge is less than or equal to a predetermined value; this allows the remote central computer to inform a local manager of the need for maintenance of the closing device.

Independently of this method of unlocking a locking device 10 , the remote central computer 30 can always communicate with any one of the portable transceivers 20 to confer on it the right to unlock a given locking device 10 , or to withdraw the right to unlock a given locking device 10 from him. The granting of the right to unlock may be linked to certain time slots and/or certain days of the week and/or certain dates. It can also be disposable. The software which must be previously loaded into a memory unit of said microprocessor of the portable transceiver 20 so that said portable transceiver 20 can form part of the radioelectric system 1 according to the invention, can be downloaded from said central computer remote 40 , or from another server, for example from a public application download platform; in the latter case it must then be activated by the remote central computer 40.

The remote central computer 40 therefore performs a multitude of different functions. It receives and stores the unique identification codes and declares the closure devices identified by their unique identification code (assigned at the factory) and gives them a label. It manages the identifiers of authorized users and their portable transceivers. It declares the users authorized to integrate the radioelectric system, and assigns them the locking devices which they have the right to unlock (possibly subject to restrictions as to the time slot and/or the day of the week and/or the date ). It records the events transmitted by the portable transceivers (unlocking of a locking device, status of the locking device's energy storage element).

Likewise, the portable transceiver performs a multitude of functions. It has two different transceivers, one via Bluetooth, the other to communicate with the remote central computer. He downloads and installs the software (application), which integrates it into the radio network according to the invention; during this download it is in functional connection with the remote central computer. It authenticates to the remote central computer. It sends the locking devices the Bluetooth signals ordering the unlocking (these signals are typically coded and advantageously encrypted). If necessary, it transmits to the remote central computer the unlocking confirmation information and the state of charge of the battery that it may have received by the Bluetooth transmitter of the closing device.

The locking device receives the unlocking order from the portable Bluetooth transceiver. It emits an unlock confirmation signal. In a variant, it can be configured to emit a signal comprising information on the state of charge of its primary or secondary battery.

We describe here in relation to the figure 4 another method of using the radio network according to the invention, with several variants. This process assumes an internet connection between the portable transceiver and the remote central computer.

In a first step 2010 the manager of the radioelectric system creates a new user, by recording the mobile telephone number of the latter. In a second step 2020 an SMS message is sent to the user with a software (application) installation link. In a third step 2030 the user receives the SMS, clicks on the link and installs the application. In a fourth step 2040 the user launches the application for the first time. At stage 2050 the central computer remote checks if the user is already registered. If this is not the case, at step 2052 the application (installed on the mobile telephone) asks 2054 the user to enter his identifier (which may be his mobile telephone number) and returns it to the remote central computer.

If the telephone number is indeed included in the list of authorized users and is indeed awaiting authentication, in step 2060 the remote central computer sends an SMS with an authentication code to the mobile telephone. At step 2070 the user enters this code into the application. This code is sent to the remote central computer at step 2080 and verified. If the code is not correct, the method stops at step 2082. If the code is correct 2074 , the central computer returns at step 2090 to the mobile telephone a unique identifier which is stored in an encrypted manner on the 2100 mobile phone.

More generally, in the context of the invention, several different modes of use can be implemented.

After the first launch of the application by a new user, the system proceeds to the creation of a user account. The user then receives an email with an email address confirmation link. So he can connect to the application.

The processing of an open request depends on whether the transceiver is connected to the internet or not. When the transmitter-receiver is connected to the internet, the user launches the application, logs into the application (typically by entering their user name and a password), then they receive the list of means authorized closures. It scans the visual identification code of a means of closure, the microprocessor of its transceiver determines the alphanumeric identification code of the means of closure and sends it to the central computer. If the user is authorized to open this locking means at this time, the central computer sends him an encrypted opening command.

When the transceiver is not connected to the internet, the user launches the application, logs into the application (typically by entering their user name and a password). It scans the visual identification code of a means of closure, the microprocessor of its transceiver determines the alphanumeric identification code of the means of closure and searches for said identification code in the list which was previously provided to it by the central computer. If the user is authorized to open this closing means at this time, the transceiver sends him an encrypted opening command.

Claims (15)

Radio system (1) for access control, comprising a plurality of locking devices (10), a plurality of portable transceivers (20) and a remote central computer (40), characterized in that : - each closure device (10) comprises a unique visual identification code (11) and a Bluetooth receiver (12) configured to communicate with said portable transceivers (20), - each portable transceiver (20) comprises a microprocessor (24) configured to communicate with an optical reader (21), a Bluetooth transmitter (22) and a memory unit (23) located in said transceiver (20), said portable transceiver (20) being configured to communicate wirelessly with said remote central computer (40) and with the Bluetooth receiver (12) of said closing devices (10), said system (1) being configured to perform a method in which: - said visual identification code (11) of a closing device (10) is read by said optical reader (21), - said portable transceiver then checks whether it has authorization to unlock said locking device (10), - if the portable transceiver (20) finds that it has this authorization, its Bluetooth transmitter (22) transmits an opening signal, which, after reception by said Bluetooth receiver (12) of said closing device (10 ), triggers the unlocking of said closing device (10), - The radio system does not require the intervention of the remote central computer for the authorization of each opening of a means of closure. Radioelectric system (1) according to Claim 1, characterized in that the detection of the said visual identification code triggers the execution of software previously loaded into a memory unit of the said microprocessor of the portable transceiver, the said software being configured to perform said method. Radioelectric system (1) according to Claim 1 or 2, characterized in that it is configured so that the remote central computer (40) delivers to at least one portable transceiver an authorization to transmit, each time that the said transmitter -portable receiver will have read the visual identification code of a determined closure means, an opening signal to unlock said closure device. Radio system (1) according to any one of Claims 1 to 3, characterized in that it is configured so that the said remote central computer (40) sends a signal to the portable transceiver (20) which terminates the authorization issued to said portable transceiver. Radioelectric system (1) according to any one of Claims 1 to 4, characterized in that the said closing device (10) comprises a mechatronic lock. Radioelectric system (1) according to any one of Claims 1 to 5, characterized in that the said closing device does not comprise any other transmitter and/or receiver of radioelectric signals than the said Bluetooth receiver (12). Radio system according to any one of Claims 1 to 6, characterized in that it does not provide for direct communication between the locking devices and the remote central computer. Radioelectric system according to any one of Claims 1 to 7, characterized in that the said closing devices (10) are powered by an energy storage element such as a battery and do not require wiring during their installation. Radioelectric system according to any one of Claims 1 to 8, characterized in that it is configured so that the remote central computer sends, at regular or irregular frequency, to a given transceiver the list of closing devices that said transceiver is authorized to unlock. Radio system according to any one of claims 1 to 9, characterized in that it is configured so that said remote central computer can send a signal to a portable transceiver which terminates the authorization issued to said portable transceiver. A radio system closure device (10) according to any of claims 1 to 10, comprising a Bluetooth receiver (12) configured to communicate with a portable transceiver, and comprising an energy storage element, so as not to require wiring during its installation. Closing device according to claim 11, characterized in that it comprises a mechatronic lock. Closing device (10) according to claim 11 or 12, characterized in that it does not comprise any other transmitter and/or receiver of radio signals than said Bluetooth receiver (12). A method of unlocking a locking device (10) according to any one of claims 11 to 13 forming part of a radio system (1) according to any one of claims 1 to 10, in which: in a first step (1010), a user approaches his portable transceiver (20), which has an optical reader (21), a Bluetooth transmitter (22) and a microprocessor (24), the visual identification code (11) attached to a closing device (10) provided with a Bluetooth receiver (12), so that said optical reader (21) can read said visual identification code (11); in a second step (1020), said optical reader (21) reads said visual identification code (11); in a third step (1030) said microprocessor (24) verifies whether said portable transceiver (20) has received prior to the first step from the remote central computer (40) a signal transmitted by a wireless means conferring on it the right to unlock said closing device (10); and if said portable transceiver (20) has received this right, and only in this case, in a fourth step (1040), its Bluetooth transmitter (22) transmits a signal which will be received by the Bluetooth receiver (12) of the device closure (10), and which orders the unlocking of said closure device (10). Method according to claim 14, in which said portable transceiver is configured to ask its user to enter information of the biometric type prior to the emission of the signal which orders the unlocking of the closing device, such as a photograph of his face or a fingerprint.

Images