ES2919127T3 - Procedure for operating an access system - Google Patents

Abstract

The invention relates to a method for operating an access system (100, 200) with at least one door (104, 204) and at least one first transmission device (102, 202) assigned to the door (104, 204) , at least at least One first signal, integral to at least one first detection of the transmitter of the first transmission device (102, 202), by which the first signal is configured, in a mobile device (106, 206, 306) a generation from an access data set with AT AT at least one key for the first transmission identification and one on the mobile device (106, 206, 306) of saved access detection, receive the access data set from the mobile device ( 106, 206, 306) by an interface device (108, 208) of the door (104, 204), verify the access authorization by at least comparing the receiving KeyN with the first transmission detection provided in a first test step and launch access over there S GATE (104, 204), at least s depending on the first test result. (Automatic translation with Google Translate, without legal value)

Description

DESCRIPTION

Procedure for operating an access system

The application relates to a method for operating an access system and an access system.

Access to a certain area and/or exit from a certain area can be controlled with the help of an access system. An access system may have at least one gate. A gate is in particular a passage barrier. By means of a gate, it can be ensured that only authorized users can pass through the gate, to reach, for example, the determined area.

For example, it is known from the state of the art that a user at an automatic ticket dispenser acquires a (paper) ticket with a readable set of access data, for example in the form of a readable code. To pass through the gateway, the ticket, in particular the access data set, is received or registered by the gateway and then verified. Access through the gate is unlocked or prohibited depending on the verification result.

A constant desire is to improve the ease of handling of access systems. Access systems are therefore known from the state of the art, in which the set of access data is transmitted to a user's mobile terminal via a remotely arranged central computing device (e.g. an access system). backend backup) via a telecommunication network (eg mobile phone network). Instead of a separate (paper) ticket, the user can use his mobile terminal. In particular the readable access data set can be read by a gateway interface equipment from the mobile terminal.

A corresponding system and method is disclosed in US 9317976 B2. Initially, according to document US 9317976 B2, an application on a mobile terminal is awakened and activated by a first signal (in particular a beacon signal), when the user's mobile terminal is in the emission area of the first communication device. issue. The application using the mobile terminal then initiates a communication with a remotely arranged central computing device via a telecommunication network (in particular a mobile telephone network). From the central computing device, after a positive verification result of a user authorization check, a readable access data set is transmitted to both the mobile terminal and the gateway. To pass through the gateway, the access data set is now read by a gateway interface equipment of the mobile terminal and compared with the access data set transmitted by the host computing device. When the verification result is positive, access or passage through the gate is unlocked in the conventional manner.

A disadvantage of this method, however, is that a communication connection between the mobile terminal and the remotely arranged central computing device and between the gateway and the remotely arranged central computing device must always exist in order to carry out the method. If, for example, a fault occurs in the mobile phone network (or in another used telecommunication network), then there is no communication between the mobile terminal and the central computing device arranged remotely and/or the gateway and the computing device. central arranged remotely.

So, for example, an access system for a certain area to be controlled may be located in a geographical region, in which a mobile phone network is only available with insufficient quality. This may be the case in particular in underground access systems (eg subway stations and the like). Finally, the problem may arise that the access data set is already presented in the mobile terminal, however, due to a delay in the transmission of the access data set to the corresponding gateway, this gateway still does not have the set of access data. In this case, access through the gateway remains blocked, even if the user has a valid access data set.

Furthermore, WO 2016/089837 A1 discloses an access control system with a mobile terminal, a server and a multitude of access controls. Documents US 2014/255036 A1, EP 2 575 091 A1, US 2010/307206 A1, US 9317 976 B2, US 2012/115512 A1 and DE 102013 013391 A1 disclose additional access control systems.

Therefore, the object of the invention is based on providing a method for operating an access system, which improves both the ease of handling and the operational safety of the access system.

The objective previously deduced and exposed is achieved according to a first aspect of the application by means of a method for operating an access system according to claim 1. The access system comprises at least one gate and at least one first device for near-field emission associated with the gate.

The procedure includes:

- emitting, by means of the near-field emission device, at least one first signal comprising at least one first emission identification of the first emission device,

- wherein the first signal is designed to cause in a mobile terminal a generation of a set of access data with at least one key corresponding to the first transmission identification received and an access identification stored in the mobile terminal,

- wherein the mobile terminal has code generation equipment, wherein the mobile terminal receives the first signal and processes it in such a way that the access data set is generated locally,

- where the key is identical to the first broadcast identification received,

- receiving the access data set comprising the time information of the mobile terminal by means of a gateway interface equipment,

- verifying the access authorization at least by comparing the key received with the at least one first emission identification provided in a first verification stage and

- unlocking access through the gateway, at least depending on the first verification result, - wherein receiving the set of access data from the mobile terminal by means of the gateway interface equipment comprises reading a bar code and /or QR code displayed from the mobile terminal through the gateway interface equipment.

Unlike the state of the art, when a first signal is broadcast through a wireless channel, in such a way that a local generation of a set of access data is caused in a mobile terminal that receives the first signal, at least taking as Based on a transmitted first broadcast identification and an access identification stored in the mobile terminal, both the ease of handling and the security of the access system are improved. In particular, according to the application no communication is performed between a remotely arranged central computing device and a mobile terminal. In verifying the unlocking of the access or passage through the gate, no communication between a remote central computing device and the gate is necessary either. In other words, the present access system can be operated without communication with a remotely disposed central computing device.

The present access system can be used to control access into and/or exit from at least one given area. Examples and non-conclusive fields of use for an access system are buildings and/or building areas, such as office buildings, airports, stations, platforms, boarding gates, residences, amusement parks, swimming pools and the like, and vehicles, such as railway vehicles, buses or airplanes. An access system may have one or more gates. A gate in the present example is a barrier to and/or from a certain area. Gates by way of example are gates or turnstiles.

The access system comprises one or more first issuing devices. The first emission device is associated with at least one gate or with a gate arrangement (also called a gate array), comprising the at least one gate. An association may in particular comprise a communication connection (wireless and/or preferably wired) between the gateway and the first sending device. Via the communication connection to the gateway, in particular to a verification device of the gateway, at least the first transmitted emission identification can be provided. Furthermore, in the present example, an association is understood in particular to mean that the first transmission field of one or more first transmission devices covers the uncontrolled area before the gate or the gate arrangement with the gate. In other words, a user arrives at the gateway usually only through a previous pass of the first broadcast field.

The present method comprises the preferably (almost) continuous emission of a first signal by the first emission device. The first signal may comprise at least a first emission identification of the first emission device. A first transmission identification, for example a certain character code, is in particular unambiguously associated with a first transmission device which transmits the corresponding first signal. In other words, the first broadcast device can be uniquely identified by the first broadcast identification.

If a mobile terminal reaches the (specifiable) broadcast area or the first broadcast field of the first broadcast device, the first signal causes the generation of an access data set. In particular, the first signal can comprise instructions, which after receiving the first signal and extracting the instructions and the first transmission identification cause the local generation of a readable access data set in the mobile terminal.

The access data set comprises at least one key corresponding to the received broadcast identification and an access identification. The key is identical to the first issue ID. The access identification can be a unique identification, in particular a unique user identification. In other words, the access identification can be unambiguously associated with the user of the mobile terminal, at least indirectly. Exemplary and inconclusive access identifications are user names, call numbers of the mobile terminal, an IMEI number ( International Mobile Station Equipment Identity ) of the mobile terminal, a MAC address ( Media- Access-Control, media access control) of the mobile terminal, a credit card number, and/or a SIM ( Subscriber Identity Module, subscriber identification module).

A mobile terminal presents processing means according to the request, such as processor(s), memories, receiving means, such as an antenna, etc., to receive a first wireless signal and process it in such a way that the set of access data can be be created locally. Exemplary and inconclusive mobile terminals are smartphones, tablet computers, mobile game consoles, touch screen laptops, notebook computers, smart glasses, smart watches, and similar wearable technology.

In addition, the method comprises the reception of a set of access data by a mobile terminal through a gateway interface equipment preferably through a wireless channel. The reception comprises in particular a registration of the set of access data by means of the interface equipment. The at least one interface device of the gateway may correspond to at least one interface device of the mobile terminal. At least the key can be extracted from the received access data set and used for an authentication of the received access data set. The key received in a first verification step is compared with the one or more first transmission identifications provided from the one or more first transmission devices, which are associated with the gateway.

At least depending on the first verification result of the first verification step, an access through the gate is then unlocked. An unlocking is only carried out then, when in the first verification stage it is verified that the received key corresponds to a first transmission identification provided. If no such comparison is found in the first verification stage, then the gate remains blocked.

In principle, various interface devices can be provided and/or used to receive the access data set of a mobile terminal, such as, for example, a Bluetooth interface or a WLAN interface.

The gate interface equipment is preferably intended for communication distances of less than 10 cm, preferably less than 2 cm. This ensures that a gate opening is performed only when the user is in immediate proximity to the gate. For example, an RFID interface ( Radio Frequency Identification), in particular an NFC interface ( Nearfield Communication), can be provided.

According to the procedure according to the application, the reception of the access data set of the mobile terminal by means of the gateway interface equipment comprises the reading of a barcode and/or QR code displayed by the mobile terminal by means of the interface equipment. gate interface. In particular, as interface equipment, a barcode reader and/or QR code reader (provided for in any case) of the gate can be used. An installation of special interface equipment can be dispensed with. A barcode and/or QR code can be displayed by interface equipment, in particular a display screen of the mobile terminal, and recorded by the barcode reader and/or QR code reader of the gateway. In particular, a set of access data, comprising at least the password and the access identification, can be represented in a simple way by means of a barcode and/or QR code. In addition, the password and access identification can be easily extracted for further verification by the processing means (eg processor, memories, etc.) of the registered barcode and/or QR code gateway.

A first emission device is a near field emission device.

The first emission device can have a minimum range of at least 5 m, preferably at least 8 m, and a maximum range of at most 20 m, preferably at most 12 m. For example, RFID technology, infrared technology, WLAN technology and/or acoustic technology can be used. Preferably the first signal is a Bluetooth signal emitted by a Bluetooth beacon. Particularly preferably, a BLE beacon ( Bluetooth Low Energy) can be used as the first transmission device.

According to a further embodiment the reception of the access data set by the gateway interface equipment may comprise the reception of the access identification. The procedure may further comprise:

- verifying the access authorization by comparing the received access identification with at least one authorization list stored in a storage equipment of the gateway in a second verification step, and

- unlock access through the gate at least depending on the second verification result.

Since a received access identification can be verified in addition to the above-described first verification step in a second verification step, the security of the access system can be improved. Access by unauthorized users can at least be made more difficult. Preferably, a local authorization list can be stored in a local storage device that is associated with the gateway (eg all gateways of a gateway arrangement can access this storage device). The storage equipment can be integrated, for example, in the gate or connected via a communication connection. The local authorization list may in particular be a so-called negative list. In other words, the authorization list may comprise at least one access identification of unauthorized users/mobile terminals. At least depending on the second verification result of the second verification step, an access through the gate can then be unlocked. For example, an unlocking can be carried out at least only when, in the second verification stage, it is found that the access identification received does not correspond to any identification stored in the authorization list. If in the second verification stage it is found that the access identification received does not correspond to any access identification in the authorization list, then the gateway remains blocked (despite a possibly positive first verification result).

It goes without saying that as an alternative or in addition to a negative list, a so-called positive list can also be stored in the storage device of the gate and used for the second verification stage.

An additional advantage of using a local authorization list is that no communication with a remote central computing device is necessary in performing the second verification stage.

Preferably the local authorization list can be updated. Updating means in particular that the data content of the authorization list can be changed, added and/or deleted.

According to a further embodiment the method may comprise:

- transmitting the access identification received by the gateway to a remote central computing device,

- verifying by means of the central computing device, if the transmitted access identification is a permitted access identification, in a third verification step, and

- causing an update of the authorization list stored in the gateway storage equipment, at least depending on the third verification result.

For example, via a telecommunication data network (eg the Internet), an access identification received by the gateway can be transmitted from a suitable sending device of the gateway to a corresponding receiving device of the central computing device. The central computing device may comprise one or several (eg cloud servers). The central computing device may also be referred to as a back-end system. The central computing device may comprise at least one verification equipment for carrying out the third verification stage. For example in the third verification step a comparison can be made of the received access identification with stored permitted access identifications. The third verification step can be performed for example within the framework of a (conventional) calculation step, in particular the third verification step can be performed subsequently, after granting access through the gateway. If the received access identification is found to be an unauthorized access identification, then the host computing device may cause a corresponding update of the authorization list.

Preferably a locally generated access data set may have limited temporal validity (eg max x min). In particular, provision can be made according to the request that, for example, in a fourth verification step via the gateway it is verified whether a received access data set is a temporarily valid access data set (or not).

According to an embodiment of the application it is proposed that the first signal may comprise a timestamp representing the time of emission of the first signal. The first signal may be designed to cause the mobile terminal to generate the access data set with time information corresponding to the timestamp. In a (simple) case the time information may be identical to the timestamp. The procedure may comprise:

- receiving the access data set comprising the time information of the mobile terminal via the gateway interface equipment,

- verify the access authorization by comparing the time information with a permitted duration in a fourth verification step, and

- unlock access through the gate at least depending on the fourth verification result.

In particular, the at least one sending device and the gate corresponding to the at least one sending device (or the corresponding time means) can be synchronized in time. The first signal preferably has a timestamp corresponding to the time of emission of the first signal. Based on the received timestamp, time information can be inserted into the access data set. In addition, a maximum allowed duration can be specified (eg x min from the time of broadcast). In the fourth verification step, for example, the difference between the time of receipt of the access data set and the received timestamp can be determined initially. the determined difference can then be compared to the specified maximum allowed duration. It can thus be checked whether the access data set is (still) valid. At least depending on the fourth verification result of the fourth verification step, an access through the gate may be unlocked. For example, unlocking can be done at least only, when in the fourth verification step it is verified that the determined difference between the moment of reception of the access data set and the received timestamp is less than or equal to the specified maximum allowed duration. If in the fourth verification stage it is found that the difference is greater, the gate remains blocked. By being able to carry out the fourth verification step in addition to the first verification step described above, and preferably in addition to the second verification step described above, the security of the access system can be further improved. Access by unauthorized users can be made even more difficult.

According to a particularly preferred embodiment, the first signal can be designed to trigger code generation equipment arranged in the mobile terminal.

The code generation equipment may comprise at least one generation means, designed to generate the access data set (described above). The code generation device can be formed in particular in the form of a software module, such as one of the so-called "apps". The code generation equipment may in particular be a computer program with instructions executable in a processor of the mobile terminal, such that a set of access data described above is locally generated. Such a code generation device can be arranged in a mobile terminal, in particular installed. Preferably before or during installation, or on first use, a registration of the user/mobile terminal in the central computing device may be necessary. During registration, an unambiguous access identification can be set both in a storage device of the mobile terminal (unless it is already present) and in a storage device of the central computing device.

The first signal may comprise instructions, which cause an activation or wake-up of the code generation equipment in the mobile terminal, and in particular a subsequent automatic generation of the access data set described above. This may in particular comprise an automatic display of the barcode or QR code corresponding to the set of access data on a display screen of the mobile terminal. With particularly simple handling, an access data set can be created and made easy to read.

In order to further reduce a risk of tampering, it is preferably possible to provide at least one second emission device in addition to the at least one first emission device, which is associated with the first emission device. The second broadcast device can be, for example, a Bluetooth beacon. According to one embodiment the method may comprise:

- emit a second signal by at least one second emission device,

- wherein the second signal comprises at least one set of configuration data, comprising at least one reception information through the first signal, and

- wherein the mobile terminal is designed to receive the first signal only after previously receiving the reception information of the second signal.

Preferably the second signal can be a signal, which can be received and processed by a plurality of different terminals. The first signal in this embodiment can be a signal, which can be processed by a mobile terminal only in the case of a previous reception of the second signal by the mobile terminal.

The first signal may be designed to cause the mobile terminal to generate the access data set only after a previous reception of the reception information of the second signal.

In this embodiment, for example, different BLE beacons can be used as the first and second transmission devices. A second BLE beacon can be designed to emit a second signal, which can be received by almost any mobile terminal, in particular with a commercially available operating system (e.g. Apple iOS, Google Android, Microsoft Windows Mobile, Microsoft Mobile Phone, Blackberry OS, Symbian OS, Firefox OS, Tizen, Aliyun OS). The second signal comprises a set of configuration data, configured for the configuration of the mobile terminal, in particular a code generation equipment arranged in the mobile terminal. Preferably only after configuration, in particular by means of the reception information, the mobile terminal, in particular the code generation device, can process a first signal of a first BLE beacon.

The configuration data set may preferably be receiving information in the form of a UUID ( Universally Unique Identifier ) of the first transmitting device.

For example the UUID of the first sending device can be formed as a function of a hash value of the variable data of the receiving information. After receipt of the reception information in particular the code generation equipment can be started in the mobile terminal and in particular configured. By configuration the mobile terminal, comprising the code generation equipment is designed to scan according to signals comprising the reception information.

Furthermore, according to the application it has been identified that in particular after passing through a gate useful location data may be provided to the mobile terminal. In particular a location-related data set may comprise navigation data, transport data or the like. According to a further embodiment the method may comprise:

- emission of at least a third signal, comprising at least one set of data relating to the location after an unlocking of access through the gateway,

- wherein the location data set is generated at least based on the gate location data.

The third signal may be broadcast by a third broadcast device (eg a Bluetooth beacon). The third emission device can be associated with the gate. For example, the third broadcast device may comprise a communication connection to the host computing device. The location-related data set may be generated, for example, by the host computing device (eg after obtaining and evaluating the access identification). As described above, after an unlocking of an access through a gate, a communication between the gate and the central computing device can be performed. The gateway is a terminal configured in the host computing device, whose operating data, in particular its location, is known to the host computing device. Based on the location data (e.g. geographical coordinates, address data, etc.) of the gateway and preferably based on the transmitted access identification, the central computing device can generate the data set relating to the location (and preferably relative to the user). Individual user information about the respective access identifications can preferably be stored in the central computing device. For example, the desired use of a certain stream may be stored as user information. The location-related data set may in such a case comprise navigation data, which indicates to the user the path to the particular train's departure track. In this sense, the central computing device can be designed to detect change(s) regarding the given train (eg delay, change of wagon order, change of track, etc.) and a set of data related to the train. location with corresponding data.

This data set can be transmitted from the central computing device to at least one third broadcast device. The third signal, based on the access identification, can be designed in such a way that it can only be processed from the mobile terminal, which has stored the access identification.

Preferably the location data set may be generated on the basis of a recorded movement data set of the mobile terminal. If, for example, based on the motion data set and/or the location of the gate, as well as the stored user information, the central computing device detects that the mobile terminal or the user (probably) moves in a wrong address, a location data set can be generated with corresponding data. As described above, a third signal can be issued with this data set. The motion data set can be recorded and transmitted by sensors of the mobile terminal or, for example, recorded by the passage of certain emission devices and/or gates and/or the like.

An additional aspect of the application is an access system according to claim 10 with at least one gateway and at least one mobile terminal, comprising:

- at least one first near-field emission device associated with at least one gate, designed to emit at least one first signal, comprising at least one first emission identification of the first emission device,

- wherein the first signal is designed to cause in a mobile terminal a generation of a set of access data with at least one key corresponding to the first transmission identification received and an access identification stored in the mobile terminal, where the mobile terminal is designed to store the access identification, where the mobile terminal has code generation equipment, where the mobile terminal is designed to receive the first signal and to process such that the data set of access is generated locally, where the key is identical to the first broadcast identification received, - where the gateway comprises at least one interface equipment, designed to receive the set of access data from the mobile terminal,

- where the gateway comprises at least one verification equipment designed at least to verify the access authorization at least by comparing the received key with the at least one first emission identification provided in a first verification stage, and

- wherein the gate comprises at least one unlocking device, designed to unlock access through the gate at least depending on the first verification result,

- wherein the reception of the access data set of the mobile terminal by means of the gateway interface equipment comprises the reading of a bar code and/or QR code displayed by the mobile terminal by means of the gateway interface equipment.

The procedure described above can preferably be used to operate the access system.

According to an embodiment of the access system according to the application the first access device broadcast can be a Bluetooth beacon. The (at least one) gateway interface equipment is a barcode reader and/or a QR code reader.

Furthermore, the application describes a code generation equipment for a mobile terminal for the (local) generation of an access data set. The code generation equipment comprises at least one receiving means, designed to obtain at least a first emission identification transmitted by means of a first signal. The code generation equipment, in particular the reception means, is designed to obtain at least one access identification stored in a storage equipment of the mobile terminal. The code generation equipment comprises at least one generation means, designed to generate the set of access data with at least one key corresponding to the broadcast identification obtained and the access identification obtained. The code generation equipment comprises at least one facilitating means, designed to facilitate the generated access data set in such a way that the access data set can be received by an interface equipment of a gateway.

The code generation device can be formed in particular in the form of a software module, such as one of the so-called "apps". The code generation equipment can in particular be a computer program with instructions, which can be executed on a processor (of the mobile terminal) in such a way that a set of previously described access data is generated locally. Such a code generation device can be arranged in a mobile terminal, in particular installed. The first (or second) signal may comprise instructions, which cause an activation or wake-up of the code generation equipment in the mobile terminal, and in particular a subsequent automatic generation of the access data set described above. In particular the code generation equipment can be provided with the first received broadcast identification and the stored access identification via the receiving means. After the generation of the access data set, it can be provided to an interface device of the mobile terminal by means of the providing means. This may in particular comprise an automatic display of a barcode or QR code corresponding to the set of access data on a display screen of the mobile terminal. With particularly simple handling, an access data set can be created and made easy to read. This allows a local generation of an access data set without the use of a central computing device.

Furthermore, a mobile terminal is described in the application. The mobile terminal comprises at least one piece of equipment for generating the code described above. In particular the code generation equipment may be implemented in the mobile terminal. The mobile terminal comprises at least one storage equipment, designed to store at least one access identification for at least one access system.

The characteristics of the procedures, systems, devices, equipment and computer programs can be freely combined with each other. In particular the features of the description and/or of the dependent claims may also be independently inventive by completely or partially avoiding features of the independent claims, individually or in free combination with each other.

There are now a plurality of possibilities, to configure and refine the method according to the request, the access system according to the request, the code generation equipment according to the request and the mobile terminal according to the request. For this, reference is made, on the one hand, to the claims dependent on the independent claims, and, on the other hand, to the description of exemplary embodiments in connection with the drawing. In the drawing shows:

Figure 1 a schematic view of an embodiment of an access system according to the present application,

Figure 2 a schematic view of a further exemplary embodiment of an access system according to the present application,

Figure 3 a schematic view of an exemplary embodiment of a code generation device according to the present application, which is arranged in a mobile terminal according to the present application,

Figure 4 a diagram of an exemplary embodiment of a method according to the present application, and

Figure 5 a diagram of a further embodiment of a method according to the present application.

The same references are used below for the same elements.

Figure 1 shows a schematic view of an embodiment of an access system 100 according to the present application. The access system 100 comprises at least one first emission device 102 and at least one gate 104. According to other variants of the application, two or more first emission devices and/or at least one gate arrangement with two or more gates.

The first transmission device 102 is associated with the gate 104. For this purpose, in particular, a communication connection 112 is provided between the first transmission device 102 and the gate 104, for example via a cable-connected channel. Furthermore, the first emission field covers in particular the area in front of the gate. Data can be exchanged between the first broadcast device 102 and the gateway 104 via the communication connection 112. For example, time data can be transmitted for a time synchronization of the respective time media and/or the first broadcast identification can be provided. by the first emission device 102 for gate 104.

The first transmission device 102, in particular a transmission device with a defined transmission range (eg approximately 10 m), is designed to transmit a first signal. The signal can preferably be transmitted (almost) continuously. The first signal comprises at least a first emission identification (unambiguously associated with the emission device that emits). Furthermore the first token may comprise other data, such as a timestamp. The first issue identification can for example be changed regularly, to improve security.

The access system 100 can ensure, for example, that only authorized users 110 can reach a certain controlled area (behind the gate 104) via the access system 100. For authentication at the gate 104, it is proposed in the present example, employ a mobile terminal 106. In addition to the use of a mobile terminal 106, the access system 100 can also be designed for the use of other means (such as a paper ticket, magnetic stripe ticket, etc.).

A mobile terminal 106 has in particular a first interface equipment (not shown) (eg a Bluetooth transceiver) designed to receive the first signal. If a mobile terminal 106 reaches the first broadcast field of the first broadcast device 102, it receives the first signal. The first signal is designed in the mobile terminal 106, in particular by cooperating with a code generation equipment installed in the mobile terminal 106, to cause a generation of a set of access data with at least one key corresponding to the first identification emission and an access identification stored in the mobile terminal 106.

For authentication at the gateway 104, the gateway 104 has at least one interface device 108. The interface device 108 is designed in the form of a barcode reader 108 and/or a QR code reader 108, to receive, in register, the set of access data of the mobile terminal 106. Preferably the mobile terminal 106 can have additional interface equipment (not shown) corresponding to the interface equipment 108, for example a display screen to display a code of bars or QR code. Via the interface device 108, the access data set can be read.

Gateway 104 comprises means (not shown) for extracting data (eg keys, timestamp, access identification, etc.) from the access data set read, which is made up of a barcode or QR code .

In one or more verification steps, a verification device 114 can verify the received data. Depending on the at least one verification result the access/passage through the gate 104 can be unlocked by unlocking equipment 118 (as is known).

In particular, the verification equipment 114 can be designed to verify the access authorization at least by comparing the received key with the at least first transmission identification provided by the first transmission device 102 in a first verification step. Corresponding to the key relating to the first issue identification provided (first positive verification result), an unlocking can be performed. When the first verification result is negative, the gate 104 remains blocked, and an access is prohibited.

The mode of operation and operation of the access system 100 can be described in more detail with the aid of Figure 4 as described in more detail below. Figure 4 shows a diagram of an exemplary embodiment of a method according to the application.

In a first step 401 (which can be carried out continuously) a first signal is emitted by the first emission device 102.

In step 402, the first signal causes the generation of an access data set with at least one key corresponding to the first transmission identification and an access identification stored in the mobile terminal 106.

In a subsequent step 403 the generated access data set is read by an interface device 108 from the gateway 104, and the access data of the received access data set is provided by the verification device 114. In step 404 at least a first verification step is performed. Thus, the access authorization is verified at least by comparing the key received with the at least one first transmission identification provided.

Next at step 405 gate 104 is unlocked when the verification result is positive. In In other words, an authorized user 110 can pass through the gate 104.

Figure 2 shows a schematic view of a further embodiment of an access system 200 according to the application. In order to avoid repetition, essentially only the differences from the exemplary embodiment according to FIG. 1 are described below. For the other components of the access system 200, reference is made to the previous embodiments.

The gate 204 has a storage device 216. The storage device 216 can be accessed in particular by the verification device 214. A (local) authorization list can preferably be stored in the storage device 216 and can be updated. For example, a negative list can be stored, which does not include access identifications of authorized access.

As can be extracted from figure 2, the access system 200, in addition to at least one first emission device 202, in the present example comprises at least one second emission device 226. The second emission device 226 is in particular a 226 emission of (near field) with a defined emission range (eg approx. 10 m). Preferably the second broadcast device 226 may be a Bluetooth beacon. The second transmitting device 226 can be associated with at least the first transmitting device 202. For this, for example, a communication connection 234 can be provided between the second transmitting device 226 and the first transmitting device directly or indirectly (eg. through gate 204). Thus, for example, the reception information of the configuration data set included in the second signal can be compared between the sending devices 202, 226. The second sending device 226 can be designed to send the second signal.

Furthermore, the present access system 200 comprises at least one third emission device 232. While the first or first emission devices 202 and/or the second or second emission devices 226 can essentially cover with their respective emission field the previously uncontrolled area gate 204, the at least one third emission device 232 can cover the controlled area behind the gate 204 with its emission field. The third broadcast device 232 (eg a Bluetooth beacon 232) may broadcast a third signal. The third sending device 232 can have at least one communication connection 236 with a telecommunication data network 220 (eg Internet).

As can be further distinguished, in the present exemplary embodiment a remotely arranged central computing device 222 is provided. Through an interface equipment 230 the central computing device 222 can be linked to the telecommunication data network 220, to exchange data with the gateway 204, for example, in particular through an interface module 220 of the gateway 204, and/or with the third issuing device 232. In addition, the central computing device 222 can have at least one verification equipment 224 and at least one storage equipment 228 (for example, a database for storing access identifications , user information, etc.).

Before the mode of operation and operation of the access system 200 is described in more detail by means of a further exemplary embodiment of a method according to the present application, an example of a method according to the present application is described in more detail below. embodiment of a code generation equipment 350 according to the invention. Figure 3 shows a schematic view of an embodiment of a code generation equipment 350 according to the present application, which is arranged in a mobile terminal 306 according to the present application.

The code generation equipment 350, in particular a software module 350, can be installed in the mobile terminal 306. The code generation equipment 350 comprises in the present example a reception means 338. The reception means 338 shown is designed to obtain a first received emission identification and an access identification provided by a storage equipment 344 for further processing by a generation means 340. The generation means 340 further processes the obtained data, as it is created locally (according to a scheme generation specified) a readable access data set. The generated access data set is provided by means of a facilitation module 342 of an interface equipment 352 of the mobile terminal 306. In the present embodiment, the interface equipment 352 is a display screen 352 of the mobile terminal 306. In other variants of the request, other interface devices (eg an NFC transceiver, a Bluetooth interface or a WLAN interface) can be used.

Figure 5 shows a diagram of a further embodiment of a method according to the present application.

According to step 501 (which can be carried out continuously) by the first sending device 202 a first signal with a first sending identification, and optionally receiving information, and by the second sending device 226 a second signal with a set of configuration data, comprising reception information corresponding to the reception information included in the first signal. The first signal and the second signal are configured in particular in such a way that a processing of the data content of the first signal can only be carried out at a previous reception of the second signal, and at in particular according to a configuration of the mobile terminal 306, in particular of the code generation equipment 350, in correspondence with the set of configuration data received from the second signal.

The second signal is received by mobile terminal 306 at step 502. The configuration data set is extracted and mobile terminal 306, in particular code generation equipment 350, is configured accordingly. The mobile terminal 306 can then receive the first signal and extract and process the data received therein. In particular at least the first broadcast identification and a timestamp can be extracted from the first signal and provided to code generation equipment 350 for further processing.

The second signal may comprise a UUID (eg according to the iBeacon standard) and so-called major and minor data (eg according to the iBeacon standard). The UUID data may be selected such that a mobile terminal identifies the second signal as coming from an iBeacon. The major and minor data can be used to represent a receive information in the form of a UUID of the first sending device 202. In one example the UUID of the first sending device 202 can be formed as a function of a hash value of the major data. and minor of the second signal. After the reception of the second signal, in particular the code generation equipment 350 knows according to which UUID to scan, in order to receive and process the first signal. Due to the association the second signal can be matched corresponding to the first signal.

The local generation of a readable access data set is then performed in step 506. In a first substep 503 the at least one receiving means 338 can obtain the first broadcast identification, the timestamp and an access identification ( in particular a valid user identification for the access system 200 by the storage equipment 344).

In a subsequent substep 504, the generation module 340, based on the data obtained in step 503 and according to the instructions deposited in the mobile terminal 306, can generate a set of access data. The saved instructions can fix for example the generation of a barcode or QR code and the binding of the obtained data in this code. In particular, a set of access data is generated, comprising a key corresponding to the first broadcast identification (specifically the first broadcast identification obtained), time information (eg the timestamp obtained) and the access identification.

In the last substep 505, the facilitation means 342 can facilitate the set of access data generated from an interface equipment 352 of the mobile terminal 306. Preferably, the barcode or QR code can be provided to a display screen 352 and from this it can be displayed. automatically for a reading. It is understood that a user confirmation for code display may be required.

It is further understood that the interface equipment 352 of the mobile terminal 306 may also be other suitable interface equipment, such as an NFC transceiver, a Bluetooth interface, or a WLAN interface.

In step 507, the generated access data set is received by interface equipment 208 corresponding to interface equipment 352 (a barcode reader and/or q-code reader R) of gateway 204. Gateway 204 it is designed to extract the data encrypted in a code (in particular password, time information and access identification) and at least provide it to a verification team 214.

In step 508, which may comprise several verification steps, in particular the verification equipment 214 of the gateway 204 may verify the validity of the access data set received, in particular the aforementioned data. In a first verification step, it can be verified whether the key corresponds to at least a first transmission identification provided. If the first verification result is negative (therefore no correspondence is found), then the gate 204 in step 511 is blocked or remains blocked regardless of the result of the other verification steps).

In a second verification step the access identification can be compared with the access identifications stored in the authorization list. If a correspondence between received and stored access identification is detected (negative second verification result), the procedure (for the case of a negative list) ends with step 511: the gate 204 is blocked or remains blocked.

It is understood that the second verification section in the use of a positive list proceeds exactly in the opposite way: If a correspondence between received and stored access identification is detected (second positive verification result), the procedure continues:

In a fourth verification step the received time information can be verified.

In particular, at least the time of emission of the first signal can be derived from the time information. This transmission time can be compared with the time at which the access data set was received by the gate 204. The determined difference can be compared with a maximum allowed duration. If the determined difference is greater than the maximum allowed duration (fourth negative verification result), the procedure ends with step 511: the gate 204 is blocked or remains blocked.

In the present case, only the access through the gate 204 in step 510 is unlocked by the unlocking equipment 218, when the first verification result, the second verification result and the fourth verification result are positive.

After unlocking, a third signal can be issued (step 515), which can be encrypted in such a way that it can only be received and processed by mobile terminal 306, which has previously transmitted the allowed access data set to gateway 204. For For example, the access identification can be used for this.

In particular, the data content of the third signal may be a set of location-related and preferably user-related data, which may for example comprise navigation data. The generation may depend in particular on the location data of the gate 204, through which the user can pass, and for example on user information stored in the central computing device 222 and/or recorded movement data of the mobile terminal 306. .

Also in step 512 at least the access identification received by the gateway 204 for further processing may be transmitted to the central computing device 222. The transmitted access identification can be verified in step 513 - for example within the framework of a calculation step - by means of the verification device 224 of the central computing device 222 . If, for example, no calculation is possible (e.g. no balance in the user's account) and/or the access ID received does not correspond to any of the allowed (registered) access IDs stored on the storage 228, the third verification result of the third verification step is negative. In this case, in step 514, an update of the authorization list stored in the storage device 216 of the gateway 204 can be carried out. In particular, the central computing device 222, for example by transmitting an updated authorization list at gate 204, it may cause a corresponding update. For example, the corresponding access identification can be added to a negative list in order to prevent at least one new unauthorized access via the gate 204 or the gate arrangement. It is understood that a corresponding update of all authorization lists of an access system 200 stored locally.

When the central computing device 222 is provided for the control of two or more access systems, additional local authorization lists of the gates of the additional access systems may be updated accordingly.

It should be noted that step 515 can be carried out in particular only after steps 512 and 513. It is further understood that some of the steps described above can be carried out in another order or in parallel.

Claims (10)

1. Procedure for operating an access system (100, 200) with at least one gate (104, 204) and at least one first near-field emission device (102, 202) associated with the gate (104, 204) , comprising: - emitting, by means of the first near-field emission device, at least one first signal comprising at least one first emission identification of the first emission device (102, 202), - wherein the first signal is designed to cause in a mobile terminal (106, 206, 306) a generation of a set of access data with at least one key corresponding to the first transmission identification received and a stored access identification in the mobile terminal (106, 206, 306), - where the mobile terminal (106, 206, 306) has a code generation equipment (350), where the mobile terminal (106, 206, 306) receives the first signal and processes it in such a way that the set of access data is generated locally, - where the key is identical to the first broadcast identification received, - receiving the set of access data from the mobile terminal (106, 206, 306) through an interface equipment (108, 208) of the gateway (104, 204), - verifying the access authorization at least by comparing the key received with the at least one first emission identification provided in a first verification stage and - unlock access through the gate (104, 204), at least depending on the first verification result, - where the reception of the access data set of the mobile terminal (106, 206, 306) through the interface equipment (108, 208) of the gateway (104, 204) comprises the reading of a bar code and/or a code QR displayed by the mobile terminal (106, 206, 306) through the interface equipment (108, 208) of the gateway (104, 204). Method according to claim 1, characterized in that the first signal is a Bluetooth signal emitted by a Bluetooth beacon (102, 201). Method according to one of the preceding claims, characterized in that - receiving the access data set comprises receiving the access identification, and - the method further comprising: - verifying the access authorization by comparing the access identification received with at least one authorization list stored in a storage device (216) of the gateway (104, 204) in a second verification step, and - unlock access through the gate (104, 204), at least depending on the second verification result. 4. Method according to claim 3, characterized in that the method further comprises: - transmitting the access identification received from the gateway (104, 204) to a remote central computing device (222), - verifying in a third verification step by the central computing device (222), if the transmitted access identification is a permitted access identification, and - causing an update of the authorization list stored in the storage equipment (216) of the gateway (204), at least depending on the third verification result. Method according to one of the preceding claims, characterized in that - the first signal comprises a timestamp representing the time of emission of the first signal, - wherein the first signal is designed to cause the mobile terminal (106, 206, 306) to generate the access data set with time information corresponding to the time stamp, where the mobile terminal (106, 206, 306) receives the first signal and processes it in such a way that the access data set is generated locally, and - the procedure further comprises: - receiving the access data set comprising the time information of the mobile terminal (106, 206, 306) via the interface equipment (108, 208) of the gateway (104, 204), -verify in a fourth verification stage the access authorization by comparing the time information with a permitted duration, and - unlock access through the gate (104, 204), at least depending on the fourth verification result. Method according to one of the preceding claims, characterized in that - the first signal is designed to activate a code generation equipment (350) arranged in the mobile terminal (106, 206, 306), - wherein the code generation equipment (350) comprises at least one generation means (340), designed to generate the set of access data. Method according to one of the preceding claims, characterized in that the method comprises: - emitting a second signal by means of at least one second emission device (226), - wherein the second signal comprises at least one set of configuration data, comprising at least one reception information through the first signal, and - wherein the mobile terminal (106, 206, 306) is designed to receive the first signal only after prior reception of the reception information of the second signal. Method according to one of the preceding claims, characterized in that the method comprises: - emitting at least a third signal, comprising at least one set of data relating to the location after unlocking access through the gate (104, 204), - wherein the location data set is generated at least based on the location data of the gate (104, 204). Method according to claim 8, characterized in that the location data set is generated on the basis of a recorded movement data set of the mobile terminal (106, 206, 306). 10. Access system (100, 200) with at least one gateway (104, 204) and at least one mobile terminal (106, 206, 306), comprising: - at least one first near-field emission device (102, 202) associated with at least one gate (104, 204), designed to emit at least one first signal, comprising at least one first emission identification of the first emission device issue(102, 202), - wherein the first signal is designed to cause in a mobile terminal (106, 206, 306) a generation of a set of access data with at least one key corresponding to the first transmission identification received and to an access identification stored in the mobile terminal (106, 206, 306), wherein the mobile terminal (106, 206, 306) is designed to store the access identification, wherein the mobile terminal (106, 206, 306) presents a code generation equipment (350 ), where the mobile terminal (106, 206, 306) is designed to receive the first signal and for processing such that the access data set is generated locally, where the key is identical to the first identification of broadcast received, - where the gateway (104, 204) comprises at least one interface equipment (108, 208), designed to receive the access data set of the mobile terminal (106, 206, 306), - where the gateway (104, 204) comprises at least one verification equipment (216) designed at least to verify the access authorization in a first verification stage at least by comparing the received key with the at least one first identification facilitated issuance, and - wherein the gate (104, 204) comprises at least one unlocking device (118, 218), designed to unlock access through the gate (104, 204) at least depending on the first verification result, - where the reception of the access data set of the mobile terminal (106, 206, 306) through the interface equipment (108, 208) of the gateway (104, 204) comprises the reading of a bar code and/or a QR code displayed by the mobile terminal (106, 206, 306) through the interface equipment (108, 208) of the gateway (104, 204).