FR3107153A1 - Access control procedures and system implementing said procedures - Google Patents

Abstract

An access control system comprising at least one electronic access control box (2) and a remote access control server (3). The access control box (2) includes security keys in memory, including a valid security key. The remote access control server is suitable for communicating with multifunction mobiles (4) having downloaded a local access control application (APP) and also having security keys in memory. An access control method implemented in said box and adapted to communicate with multifunction mobiles (4). The access control method includes a step of updating the valid security key of the box, the instruction of which is sent by an active multifunction mobile (4). A method of periodically updating a security key valid for the access control method, implemented in the remote access control server. Figure for abstract figure: figure 5

Description

Access control methods and system implementing said methods

The present invention relates to the control of access to a closed space.

In particular, it relates on the one hand to an access control method and an electronic access control box implementing said access control method. It also relates to a method for updating a valid security key as well as a remote access control server implementing said updating method. Finally, it relates to an access control system comprising at least one electronic access control box and at least one remote access control server.

The present invention finds its application for any closed space to which access can be controlled. Indeed, the issue of access control can arise in various areas and situations. By way of non-limiting examples, the closed space to which access is to be controlled may be a place such as a car park or a house, an area or part of a place such as a box in a car park or a room in a house, an object such as a car or trunk, etc.

In this context, access control systems using radio frequency remote controls, magnetic badges, or access codes (digicodes) are known in the prior art. This type of access control system, although functional, has its limits since it requires an access tool (badge, remote control, etc.) specially dedicated to each person and/or does not allow access to be limited over time. . Indeed, a person in possession of the badge, the remote control or the code, can reuse it at any time to access the closed space. However, it may be desirable to authorize access only during a given time, for example to one person, or even to several people, other than the usual user of the access control system. A security problem also arises in the event, for example, of loss of the access tool or knowledge by third parties of the access code.

There are also known access control systems using GSM boxes, recognition means (license plate recognition in the case of a car park for example), or even means of interaction between machines ( machine to machine in English abbreviated by M2M) connected. Although these types of systems provide better security, they require more expensive technology.

The document US 2002 0135461 describes for example an access control method and an access control box to a parking space implementing said method. This box is controlled by a device installed in a vehicle and is also connected to a computer device allowing the management and storage of access codes. The case of this document as constituted is particularly expensive and complicated to manufacture since it requires, in addition to a control device, a computer device and means of connection to said computer device for the management of access codes.

The present invention aims to solve at least one of the aforementioned drawbacks.

The invention relates, according to a first aspect, to an access control method implemented in an electronic access control box adapted to communicate with multifunction mobiles, comprising the following steps:

- receipt of a security key sent by one of said multifunction mobiles;

- comparison of said security key received with a valid security key stored in said electronic access control box; And

- Emission of an access authorization signal when said received security key is identical to said valid security key.

According to the invention, said access control method comprises a step of updating said valid security key, comprising the following sub-steps:

- acquisition of an update instruction sent by an active multifunction mobile, said instruction including a new security key;

- substitution of said valid security key by a second security key stored in said electronic access control unit;

- Storing said new security key as a second security key in said electronic access control unit; And

- sending an update confirmation message to said active multifunction mobile.

Thanks to the method of the invention, the electronic access control box can be updated easily and only thanks to a multifunction mobile. The multifunction mobile is not only suitable for controlling the box but also for updating it. The proposed solution saves the use of additional computer device for the update.

The invention is particularly well suited to a system in which the electronic access control box is not connected to a remote computing device.

The update ensures better security. Indeed, a person in possession of a valid security key at a time t, can control access by means of the access box for a given period, but as soon as an update of the box is carried out, the security key he had will no longer be valid, thus preventing him from controlling access. The security key can thus be renewed for security for the usual user or to give temporary access to an authorized person other than the usual user.

The method according to the invention also makes it possible to grant access authorization to several people. This can be useful, for example, if you want to authorize access to a parking lot for several people but only for a specific period.

According to one characteristic, the step of acquiring an update instruction is implemented after said steps of receiving and comparing a security key addressed by said active multifunction mobile, when said received security key is different from said valid security key.

Thus, when the security key received is different from the valid security key, an update of the electronic access control box is carried out so as to authorize access by means of the second security key which has become a key. valid security. The box then subsequently emits an access authorization signal if a multifunction mobile sends it the second security key that has become a valid security key.

According to one characteristic, the step of updating the valid security key further comprises, when said received security key is different from said valid security key, a prior sub-step of comparing said received security key with said second stored security key, the acquisition, substitution, storage and sending sub-steps being performed when said received security key is identical to said second stored security key.

In other words, the update is launched only if the user has a correct access code, namely here the second security key. This avoids carrying out an update of the box even though the user does not have or no longer has a code or security key allowing him access.

The invention also relates, according to a second aspect, to an electronic access control unit comprising means of two-way communication with multifunction mobiles, means for storing a valid security key and a second security key and means processing adapted to implement the access control method described above.

The box thus produced is less complex to manufacture, uses only two-way communication means and is thus less expensive.

According to one characteristic, the box comprises means for connection to access opening control means implementing an electronic lock with a predefined alphanumeric code, or a radio frequency transmitter-receiver pair or a transmitter-receiver pair by technology magnetic.

The box can thus be mounted in parallel with an existing access control system using said access opening control means. In this way, an authorized person other than the usual user can also obtain access authorization. The usual user can for example have access authorization via the existing access control system and the authorized person can have access authorization via the box. This use is all the more interesting as the access authorization of the authorized person can be limited in time.

The box can be used alone or in combination with an existing system.

According to one characteristic, the two-way communication means implement a link by UHF radio waves, and preferably the Bluetooth standard.

The invention also relates, according to a third aspect, to a method for periodically updating a valid security key for the access control method previously described, implemented in a remote access control server adapted to communicate with multifunction mobiles having downloaded a local access control application.

The periodic update process includes the following steps:

- sending to said multifunction mobiles a new security key to be stored as a future security key in said downloaded local application;

- sending to said multifunction mobiles an update instruction for an electronic access control box;

- receipt of an update confirmation message sent by an active multifunction mobile among said multifunction mobiles; And

- sending a message deleting the update instruction of said electronic access control box to said multifunction mobiles.

By carrying out periodic updates, this makes it possible to limit access to the box over time, thus responding on the one hand to temporary access problems and on the other hand to improve the security of access control to the box. .

In addition, once the update of the box is carried out by the active mobile multifunction, the server is notified and sends the deletion message to all the multifunction mobiles. This prevents an update instruction from being sent to the box when the latter is already up to date.

According to one feature, the method for periodically updating a valid security key for the access control method is repeated between every day and every 10 days, and preferably between every 2 days and every 5 days. days.

The invention also relates, according to a fourth aspect, to a remote access control server adapted to communicate with multifunction mobiles having downloaded a local access control application. Said server is suitable for implementing the process for periodically updating a valid security key described above.

The invention also relates, according to a fifth aspect, to an access control system comprising at least one electronic access control unit, and a remote access control server having the preceding characteristics.

Other particularities and advantages of the invention will appear further in the description below with reference to the appended drawings, given by way of non-limiting examples:

FIG. 1 is a schematic block diagram of an access control system for implementing one or more embodiments of the invention;

FIG. 2 is a schematic block diagram of an access control unit according to one embodiment of the invention;

FIG. 3 is a schematic block diagram of an access control box according to another embodiment of the invention;

FIG. 4 schematically represents steps of an access control method implemented in the box; And

FIG. 5 schematically represents steps of a periodic updating method implemented in a server for said access control method.

FIG. 1 illustrates, in a schematic block diagram, an embodiment of an access control system 1 comprising an electronic access control box 2 and a remote access control server 3. The control system access 1 is configured to allow or deny access to a closed space to a user. The access control system 1 also includes at least one multifunction mobile 4.

Said at least one multi-function mobile 4 is connected on the one hand to the box 2 and on the other hand to the server 3. A single multi-function mobile 4 is illustrated for the example of FIG. 1, but of course the number of multi-function mobiles 4 can vary.

The electronic access control unit 2, also referred to below as unit 2, is shown more precisely in figure 2.

The box is powered, for example by cables allowing a power supply between 9 and 36 VDC. This is schematized in the block diagram by power supply 20.

The box 2 comprises two-way communication means 21, 22. The two-way communication means here comprise an antenna 21 and a module 22. The two-way communication means are adapted to implement a link by radio waves so as to receive and send signals to multifunctional mobiles 4. In this case, the antenna 21 is adapted to implement a link by UHF radio waves, for example the Bluetooth standard. Module 22 is adapted to process the signal received and sent via antenna 21.

The box 2 further comprises storage means and processing means. The storage means are suitable for storing security keys. In particular, in the embodiment described, the storage means are suitable for storing a valid security key and a second security key. The second security key is considered as a future valid security key, i.e. the next security key to authorize access. The processing means are suitable for implementing an access control method described below according to one embodiment of the invention. In the schematic embodiment example, the box 2 comprises a microcontroller 23 integrating the storage means and the processing means. Of course, the storage means and the processing means can be designed differently.

The microcontroller 23 is connected to the module 22 itself connected to the antenna 21. The microprocessor 23 emits a discrete output signal (all or nothing) as shown schematically in Figures 2, 3. Thanks to the discrete output signal, the box 2 may or may not authorize access to a closed space.

In an exemplary embodiment shown schematically in Figure 3, the box 2 is mounted in parallel with an existing system. For example, the box includes means for connecting the microprocessor 23 to control means 24 for opening access to the existing system. The access opening control means can implement an electronic lock with a predefined alphanumeric code, or a radio frequency transmitter-receiver pair, or even a transmitter-receiver pair using magnetic technology. In this example, the means of connection send the discrete output signal to the means of control, which makes it possible to control access.

Thus, the box 2 can be used alone to control access as shown in Figure 2, or in conjunction with an existing system as shown in Figure 3.

The remote access control server 3 or server 3 can be of any known type, responding to requests from computing devices. In the embodiment described, the server 3 responds to requests from multifunction mobiles 4.

The multifunction mobiles 4 include an access control APP application allowing the connection to the box 2 and to the server 3. The connection is made by network connection, for example of the WIFI type. The APP application is suitable for memorizing security keys. In particular, the application APP is adapted to memorize two security keys addressed by the server 3; a first security key and a second security key stored as a future security key.

Figure 4 schematically shows the general operation of the box 2 allowing by means of the connection with the multifunctional mobiles 4 to control access to a closed space.

The left part of Figure 4 illustrates the box 2 at a time t0 before being controlled by a multifunction mobile 4. The storage means of the box 2 include in memory a valid security key V1 and a second security key V2.

A valid security key means the security key used to control access. The second security key V2 is the future valid security key authorizing access.

The right part of FIG. 4 illustrates a multifunction mobile 4 in which the application APP has been previously downloaded. The APP application here comprises in memory two security keys addressed by the server; the first security key Va1 and the second security key Va2.

The access control method implemented in box 2 is such that the multifunction mobile initially sends a security key, in particular here the first security key Va1, to box 2.

The box 2 receives, thanks to the two-way communication means and compares, thanks to the storage and processing means, the received security key Va1 with the valid security key V1 stored in said box 2.

When the received security key Va1 is identical to the valid security key V1, unit 2 then sends an access authorization signal, in particular via the discrete output signal.

When the received security key Va1 is different from the valid security key V1, unit 2 does not send an access authorization signal.

As explained below with reference to FIG. 5, in this case, the security key received Va1 can be compared with the second security key V2 and an update instruction (MAJ) can be sent by the multifunction mobile 4 to the box 2 optionally allowing access by means of another security key, in particular the second security key V2.

In order to improve the security of the access control, and to avoid for example that a security key remains valid for too long a period, there are provided update steps carried out on the one hand by the server 3 in the multifunction mobiles 4, and on the other hand by the multifunction mobiles 4 in the box 2. These steps make it possible to update the valid security key making it possible to authorize access.

In particular, an update step is periodically carried out by the server 3 in the multifunction mobiles 4 connected to said server 3. The periodic update can be repeated between every day and every 10 days. Preferably, the periodic update is repeated between every two days and every five days.

When the connection is broken for any reason between a multifunction mobile 4 and the server 3, the periodic update can be performed as soon as the connection is reestablished.

This periodic update step is represented schematically in FIG. 5. It is implemented here for three multifunction mobiles 4. Of course, the number of multifunction mobiles 4 can be different.

In the example of this figure, at an initial instant t0 before any update, the server 3, the box 2 and the multifunction mobiles 4 all include in memory two security keys, the valid security key V1, and a second V2 security key (or future valid security key).

The server 3 initially sends to the multifunctional mobiles 4 a new security key V3 to be stored as a future security key in the APP application.

In a second step or at the same time, the server 3 also sends to the multifunction mobiles 4 an instruction to update the box 2.

Upon receipt of the new security key V3, the APP application of the multifunction mobiles 4 substitutes the valid security key V1 with the second security key V2, and stores the new security key V3 as a new second security key or future valid security key.

At this stage, all the multifunction mobiles 4 connected to the server 3 are updated, that is to say in this example, they have in memory V2 as a valid security key and V3 as a second security key.

Furthermore, all the multifunction mobiles 4 connected to the server 3 have in memory the instruction for updating the box 2 sent by the server 3.

If a multifunction mobile 4 is not connected to the server 3 at the time of the update step, the multifunction mobile 4 receives the new key V3 and the update instruction of the box 2 as soon as the connection with server 3 is restored.

Insofar as the access control in the box 2 is carried out one by one, a multifunction mobile 4 among the multifunction mobiles 4, here among the three multifunction mobiles 4, is active first. In this case, active multifunction mobile 4 means a multifunction mobile 4 connected to the box 2 in an attempt to obtain access.

The active multifunction mobile 4 having been updated by server 3, said active multifunction mobile 4 addresses the security key V2 or valid security key stored by the multifunction mobile 4. This security key V2 is at this stage different from the key valid security code V1 stored in unit 2.

Thus, when the active multifunction mobile 4 addresses the security key V2, the box 2 does not authorize access since the security key V2 received is different from the valid security key V1 of the box 2.

In the embodiment described, the box 2 then compares in this case the security key received V2 with the second security key stored in the box 2. When the security key addressed by the multifunction mobile, here V2, is identical to the second security key stored in the box, a step of updating the box 2 is then performed.

The multifunction mobile 4 then sends the new security key V3 stored in the mobile 4 as a future valid security key. The valid security key V1 stored in box 2 is substituted by the second security key V2 stored in box 2. Box 2 also stores the new security key V3 as a second security key or future security key valid.

Box 2 is thus updated. The two keys memorized in unit 2 correspond to the two keys memorized in the APP application of multifunction mobiles 4.

Finally, the box 2 sends an update confirmation message to the active multifunction mobile 4. The active multifunction mobile 4 therefore sends the update confirmation message to the server 3. The server 3 then sends a message of deletion of the update instruction of the box 2 to the multifunction mobiles 4 connected to said server 3. This is schematized in the figure by a dotted arrow.

Thus, when a multifunction mobile 4 of a first user has updated the box 2, another multifunction mobile 4 of another user does not need to update it and can therefore directly have the access as long as he is in possession of the valid security key.

In the description given, the multifunction mobiles 4 and the box 2 always have two stored security keys. When shipped from the factory, box 2 may contain only one security key; the valid security key. A blank location is thus provided in the housing for the second security key. A step of initializing the box 2 and the multifunction mobiles 4 can therefore be provided. The initialization step initially comprises a sub-step of sending by the server the valid security key and a second security key to the multifunction mobiles as well as a sub-step of sending an instruction for initializing the box.

An active multifunction mobile 4 can then initiate the initialization of box 2. The initialization of box 2 is carried out according to the following sub-steps:

- Reception by the unit 2 of a security key addressed by said active multifunction mobile;

- comparison of said received security key with the valid security key stored in the box;

- acquisition of an initialization instruction sent by the active multifunction mobile when said received security key is identical to the valid security key stored in the box, said instruction including the second security key;

- memorization of the second security key in the blank slot in the box; And

- sending an initialization confirmation message to said active multifunction mobile.

Finally, the server also receives an initialization confirmation message from the active multifunction mobile. It then sends a message to delete the box initialization instruction to the multifunction mobiles.

The box 2 is thus initialized and includes in memory the valid security key and the second security key.

Of course, the present invention is not limited to the embodiments described and illustrated.

The connection, processing and storage means of the box can be of any other known type.

The number of security keys stored in the application of multifunction mobiles and in the box may be different, and in particular greater than two.

In the example shown in Figure 4 and described above, the multifunction mobile addresses a single security key, here the first security key Va1. In another example not shown, the multifunction mobile can, if the first security key Va1 is refused because it is different from the valid security key V1 and from the second security key V2 of the box 2, then send the second key safety device Va2. The second security key Va2 then undergoes the same processing undergone by the first security key Va1. In other words, the second security key Va2 of the multifunction mobile is compared with the valid security key V1 of the box. When the received security key Va2 is different from the valid security key V1, unit 2 does not send an access authorization signal.

In yet another exemplary embodiment (not shown), the multifunction mobile can send the first security key Va1 and the second security key Va2 to the unit 2 at the same time. The unit 2 then initially compares the first security key security Va1 received to the valid security key V1, then possibly to the second security key V2 or future valid security key if the first security key Va1 received is different from said valid security key V1. If the first security key Va1 received is different from the valid security key V1 and from the second security key V2 of box 2, box 2 then goes on to compare the second security key Va2 received from the multifunction mobile. The box 2 therefore compares the second security key Va2 received with the valid security key V1, then possibly with the second security key V2 or future valid security key if the second security key Va2 received is different from said security key valid V1.

The comparison of two security keys addressed by the multifunction mobile 4 to the security keys stored in the box 2, makes it possible to prevent a multifunction mobile 4 which has not been able to be updated once by the server 3 from found, for example, unable to control access via box 2. Thus, this possibility of using the second security key of the multifunction mobile serves as a kind of spare wheel, if for example the connection had been broken between the server 3 and the multifunction mobile 4 for a certain period, thus leaving the multifunction mobile 4 not updated.

It can also be provided in one embodiment, when a first security key addressed Va1 and a second security key Va2 addressed by a multifunction mobile 4 is different from the valid security key V1 and from the second security key V2 of box 2, then said multifunction mobile 4 loses the right to attempt access at least momentarily to box 2. For example, the IP address is blocked for said multifunction mobile. This prevents, for example, a malicious person from trying to control access to box 2 by making several attempts to send security keys (here more than two security keys).

In an exemplary embodiment, it is planned to launch the periodic update step of the multifunction mobiles only if, at the end of the previous periodic update step, an update confirmation message has been sent by a multifunction mobile 4 to the server 3. This prevents the box 2 and the multifunction mobiles 4 from having completely different security keys in their memory.

The present invention thus proposes a solution for controlling access to a simple closed space and implementing few technical means. It only requires two-way communication for control of the box. The connection between the multifunction mobiles and the server is only useful during the periodic updates of the multifunction mobiles and can therefore be broken in the meantime.

The present invention further allows temporary access, which improves the security of access control and can be useful in various situations: one-time access authorization to a person other than the usual user, access authorization to several people for the same closed space, etc.

Claims (10)

Access control method implemented in an electronic access control unit (2) adapted to communicate with multifunction mobiles (4), comprising the following steps:
- receipt of a security key sent by one of said multifunction mobiles (4);
- comparison of said security key received with a valid security key stored in said electronic access control unit (2); And
- transmission of an access authorization signal when said received security key is identical to said valid security key,
characterized in that it comprises a step of updating said valid security key, comprising the following sub-steps:
- acquisition of an update instruction sent by an active multifunction mobile (4), said instruction including a new security key;
- substitution of said valid security key by a second security key stored in said electronic access control unit (2);
- storing said new security key as a second security key in said electronic access control box (2); And
- Sending an update confirmation message to said active mobile multifunction (4). Access control method according to Claim 1, characterized in that the step of acquiring an update instruction is implemented after the said steps of receiving and comparing a security key addressed by said active multifunction mobile (4), when said received security key is different from said valid security key Access control method according to claim 2, characterized in that the step of updating the valid security key further comprises, when said security key received is different from said valid security key, a sub - prior step of comparing said security key received with said second stored security key, the sub-steps of acquisition, substitution, storing and sending being carried out when said security key received is identical to said second key memorized security. Electronic access control unit comprising two-way communication means (21, 22) with multifunction mobiles (4), means for storing a valid security key and a second security key and processing means suitable for implementing the access control method in accordance with one of Claims 1 to 3. Electronic access control unit according to claim 4, characterized in that it comprises means of connection to control means (24) for opening access implementing an electronic lock with a predefined alphanumeric code, or a radiofrequency transmitter-receiver pair or a transmitter-receiver pair using magnetic technology. Electronic access control box according to one of Claims 4 or 5, characterized in that the two-way communication means (21, 22) implement a link by UHF radio waves, and preferably the Bluetooth standard. Method for periodically updating a valid security key for the access control method in accordance with one of Claims 1 to 3, implemented in a remote access control server adapted to communicate with mobiles multifunction (4) having downloaded a local application (APP) for access control, characterized in that it comprises the following steps:
- sending to said multifunction mobiles (4) a new security key to be stored as a future security key in said downloaded local application (APP);
- sending to said multifunction mobiles (4) an update instruction for an electronic access control unit (2);
- receipt of an update confirmation message sent by an active multifunction mobile among said multifunction mobiles (4); And
- Sending a message to delete the update instruction of said electronic access control box (2) to said multifunction mobiles (4). Method for periodically updating a valid security key for the access control method according to claim 7, characterized in that said periodic updating method is repeated between every day and every 10 days, and preferably between every 2 days and every 5 days. Remote access control server adapted to communicate with multifunction mobiles (4) having downloaded a local application (APP) for access control, characterized in that it is adapted to implement the method of periodic updating a valid security key according to one of claims 7 or 8. Access control system comprising at least one electronic access control unit (2) in accordance with one of Claims 4 to 6, and a remote access control server (3) in accordance with Claim 9.