RU2636698C2 - Access control unit of door communication system or building engineering system devices - Google Patents

Abstract

FIELD: physics.SUBSTANCE: according to the invention, the access control unit has an optical reading unit (6) connected to the control/processing unit (5), wherein the door communication system device or the building engineering system for activating the optical reading unit by the control/processing unit is equipped with a motion sensor or proximity sensor, or a key switch (8).EFFECT: providing access release in the standby mode and activating a costly image analysis mechanism by means of the reading unit only at suitable times.9 cl, 1 dwg

Description

The invention relates to an access control unit for a door communication system device or a building system device. It is used, in particular, in private housing when controlling a door opener in a home communication system.

Methods of visual coding of data are used to present data in a form that provides the possibility of optical recording, evaluation and further processing of this data. Well-known methods in this regard are barcodes (containing a small amount of information) and QR codes (a registered trademark of Denso Wave Incorporated, Quick Response, with an extended amount of information). For these codes, there is no need for a special reader, a standard digital camera is enough. QR codes are currently used, for example, in advertising, to simply call the advertiser's website on a smartphone. At the same time, a QR code is printed in which the website (URL) is machine-readable. Using the built-in camera of the smartphone, the QR code is photographed and the integrated URL (Uniform Resource locator, Internet address, web address) is decoded, which is then transmitted to a web browser.

EP2237234 A1 describes an access control method in which an access code can be requested from a mobile phone, for example a QR code, which is then read by a reader and provides access. This code can be compared by the control device with a list of allowed codes, and access is granted if it is consistent.

The disadvantage of the above method is the transmission of an identification code to the access node. This identification code can be transmitted to the access node only through the data channel from the mobile phone. In certain cases, this pre-connection is undesirable, for example, when due to poor network coverage, a connection in a data network is not possible. In addition, a global and centrally maintained list of valid identification codes is required.

The basis of the invention is to create an optimized access control unit for a door communication system device or a building system device.

This task in accordance with the invention is solved using the access control unit of the door communication system device or device building systems, and the device has:

- a generator for creating a digital certificate,

- data memory for storing the created digital certificate, which is connected to the control / processing unit,

- structural component for transmitting the created digital certificate to the terminal device,

- an optical readout unit connected to the control / processing unit, an alarm unit connected to the control / processing unit, provided with a connected controlled release device,

- in this case, if there is a valid access permission, the access authorization device is controlled to provide access / unlock / unlock.

The advantages achieved by the invention are, in particular, in that simple access control is possible, in which the terminal device can be a kind of electronic key that allows long-term access. Alternatively, it may also be possible not to provide long-term, but time-limited access, in which case a period of time is set for a certain permitted action, as well as the number of uses. In all cases, access to the superior shared data memory is not required. In addition, there is no need to maintain a list of “credible” end devices.

Preferably, the terminal device may constitute an optical access permission from a digital certificate that can be verified by a reader.

The structural component for transmitting the created digital certificate can be made in the form of a transmission unit, and in this case, the transmission is via a wireless / wired connection to the receiving unit of the terminal device.

The structural component for transmitting the created digital certificate can be made in the form of a memory card reader, in which case the transfer is carried out by means of a memory card / USB stick to the memory card reader of the terminal device.

Preferably, the terminal device has a memory for certificates to which a code generator is connected to compose an optical access permission.

Advantageously, the terminal device has an optical display unit for presenting optical access authorization through a visual connection.

In another embodiment, a door communication system device or a building system device for activating a reading unit by a control / processing unit is equipped with a motion sensor, or an proximity sensor, or a key switch.

In addition, the optical access permission created by the terminal device can be transferred to another device equipped with a display unit, which can be used to allow access.

In addition, the optical access authorization created by the code generator can be used to permit access in paper form.

The code generator is expediently contained in the door communication system device or the building system engineering device, while the created access permission is transmitted to the terminal device and stored there for access permissions.

Below, the invention is explained in more detail using the embodiment shown in the drawing.

In FIG. 1 shows a fragment of a door communication system or building systems engineering. A door communication system device 1 or a building system engineering device 1, for example, a door communication system station, in particular a door station or a control panel, is shown, while the control / processing unit 5 is shown as a structural component of interest for this door communication system or building system 5, which connected to a data memory 4, an optical reading unit 6, an alarm unit 7 and a motion sensor, or a proximity sensor, or a key switch 8. Important structural components The devices 1 are a generator 2 for creating digital certificates Z, which are transmitted to a data memory 4, a transmission unit 3 and / or a memory card reader 9. The signaling unit 7 on the output side is connected to a controlled release device 19, for example a door opener.

Of course, the aforementioned device 1 of the door communication system or building system engineering has other structural components, which, however, are not essential for the case in question. In addition, the said door communication system or building systems engineering, of course, has other devices or, respectively, stations, which, however, is also not essential for the case under consideration.

In FIG. 1 shows, in addition, the terminal device 11, for example, in the form of a PC, or a mobile phone, or a tablet computer, while the receiving unit 12 with the slave memory 13 for certificates and a code generator 14 connected to the last. A display unit 15 is connected to the code generator 14. The certificate memory 13 is optionally connected to a memory card reader 16. Of course, the terminal device 11 has other structural components, which, however, are not essential for the case under consideration.

In FIG. 1 also shows a terminal device 20, for example, in the form of a portable PC, or a mobile phone, or a tablet computer, while the receiving unit 12 with a slave memory 21 for access permissions is shown as structural components of interest to the terminal device 20. A display unit 15 is connected to it. A memory 20 for access permissions is optionally connected to a memory card reader 16. Of course, the terminal device 20 has other structural components, which, however, are not essential for the case under consideration.

The invention combines access control

- visual, machine-readable MLC (multi-level) codes, such as QR codes, and

- data digitally signed by the signature function.

The invention uses a generator 2 to create digital certificates Z. The digital certificate Z thus prepared is transmitted once through the transmission unit 3 and the wireless / wired connection 10 to any terminal devices 11, for example, by e-mail or by downloading, see block 12 receiving terminal device 11, and is also stored in device 1 in data memory 4, which is connected to control / processing unit 5. An optical reading unit 6 as well as an alarm unit 7 are connected to the control / processing unit 5. The signaling unit 7 can be connected to a controlled release device 19, for example a door opener, so that when recognizing the actual resolution, for example, to issue a door open command.

This method of resolving some action is not limited to door communication devices, but can also be used in general for unlocking / unlocking the functions of the device or the building system devices.

By means of a digital certificate Z, an optical (visual) access permission B in the form of a machine-readable MLC code, for example a QR code, can be compiled in terminal device 11 and presented for verification to device 1 via optical (visual) connection 18. In the first application, in which the digital certificate Z is stored directly in the terminal device 11, any unlimited access permissions that are signed by the digital certificate Z can be generated. To verify the data compiled by the terminal device 11 visual access permission B by visual connection 18 by the control / processing unit 5 in the device 1 by means of the optical reading unit 6, the signature is checked, and if the result is positive, that is, upon recognition of a valid certificate, access is granted. In this first application, the terminal device 11 is a kind of "electronic key", which provides long-term access for the device 1 of the door communication system or building systems.

The advantage of this method is that the control / processing unit 5 should only check the signed access data, however, access to the higher data memory of the door communication system or building systems should not be provided. Only in preparation for operation, the digital certificate Z of the terminal device 11 must be stored once in the memory 13 for certificates. This can, for example, also be due to the fact that the generator 2 sends a digital certificate Z to the memory card reader 9 of the device 1, due to which it becomes possible to store the digital certificate Z on a memory card or a USB flash drive 17. The memory card reader 16 of the terminal device 11 can then read the digital certificate Z from a memory card or a USB flash drive 17.

In addition, for access control, it is preferable that there is no need to pre-connect the terminal device 11 to the control / processing unit 5 of the device 1, since the digital certificate Z has already been previously stored in the terminal device 11 and by appropriate use, access authorization can be created if necessary the terminal device 11 itself. Another advantage of this method is that there is no need to maintain a list of reliable terminal devices 11, as for access control only signatures based on digital certificate Z should be verified.

In another application, the possibility should be provided not of long-term, but of time-limited access. In this case, the generator 2 of the device 1 of the door communication system and building systems (for example, a door station) generates a limited access permission, which includes one or more of the following data:

- the period of time t during which the access permission is really limited in time,

- permitted action a, for example, “opening the doors of an underground garage”,

- the permitted number of n uses, for example, the permission to “open the doors of the underground garage”, could be carried out once in a specified period of time t.

The validity of these access permissions is confirmed by a digital signature s, which is compiled by means of a digital certificate Z: B = t, a, n, s; s = Sig _z (t, a, n).

This access permission generated by the generator 2 of the device 1 is transmitted, for example, as a graphic file by connecting 10 or a memory card / USB stick 17 to the terminal device 11 and is stored in the memory 21 for access permissions, and if necessary is displayed visually in the form of a machine-readable MLC- the code on the display unit 15 of the terminal device 11. Alternatively, a limited access permission may also be printed on paper. The control / processing unit 5 of the device 1 of the door communication system or building systems engineering checks the optical (visual) access permission B registered with the optical reading unit 6 with respect to the validity of the signature s, time period t, action a and possible restrictions in the form of the number n possible uses. If all the data is valid, the desired action of the controlled release device 19, for example control of the door opener, is released by the signaling unit 7.

Alternatively, the optical (visual) permission of access B can also be compiled on a PC and transferred as a graphic file to the terminal device 11 or, respectively, 20. This also allows for limited access to third parties, without having to access the digital certificate Z itself, and The proper optical (visual) permission B for access is transmitted or made available as a graphic file or as a printout.

Optically, the optical (visual) access permissions B can also be encoded.

It is recommended to use a camera already integrated in many door stations as an optical reading unit 6.

Additionally, the device 1 can be equipped with a motion sensor, or proximity sensor, or a key switch 8, which, when approaching a person with an access right / user, or when serviced by a person with an access right / user, activates the control / processing unit 5 of device 1, after which this unit, by means of the optical reading unit 6, searches for the optical (visual) access permission B in the form of a machine-readable MLC code and performs the operation encoded therein. This allows you to preferably switch in standby mode and activates the (energy-) costly analysis of images by means of the reading unit 6 only at appropriate times.

LIST OF REFERENCE NUMBERS

1 Door communication system device or building systems engineering device

2 Generator for creating digital certificates

3 Transmission unit

4 Data memory

5 control / processing unit

6 Optical reader

7 Alarm unit

8 Motion sensor or proximity sensor or key switch

9 Card Reader

10 Wireless / wired connection

11 Terminal device (PC, mobile phone, tablet)

12 Reception unit

13 Certificate memory

14 Code Generator

15 Optical display unit

16 Card Reader

17 Memory Card / USB Flash Drive

18 Visual connection

19 Release device, e.g. door opener

20 Mobile terminal

21 Memory for access permissions

a Permitted action

B Optical (visual) access authorization

n Number of uses

s Digital Signature

t time period

Z Digital Certificate

Claims (16)

1. The access control unit of the device (1) of the door communication system or device (1) of the building systems, and the device (1) has: - a generator (2) for creating a digital certificate (Z), - data memory (4) for storing the created digital certificate (Z), which is connected to the control / processing unit (5), - a structural component for transmitting the created digital certificate (Z) or permission (B) to the terminal device (11), - optical reading unit (6) connected to the control / processing unit (5), - a signaling unit (7) connected to the control / processing unit (5), provided with a connected controlled release device (19), - in this case, if there is a valid access permission (B), the release device (19) is controlled to provide access / unlock / release, moreover a door communication system device (1) or a building system device (1) for activating an optical reading unit (6) by means of a control / processing unit (5) is equipped with a motion sensor, or an proximity sensor, or a key switch (8). 2. The access control unit according to claim 1, characterized in that the terminal device (11) consists of a digital certificate (Z) optical access permission (B) made with the possibility of verification by the optical reading unit (6). 3. The access control unit according to claim 1, characterized in that the structural component for transmitting the created digital certificate (Z) is made in the form of a transmission unit (3) and the transmission is carried out by means of a wireless / wire connection (10) to the terminal receiving unit (12) devices (11). 4. The access control unit according to claim 1, characterized in that the structural component for transmitting the created digital certificate (Z) is made in the form of a memory card reader (9) and the transfer is carried out using a memory card / USB stick (17) to the reader memory cards of the terminal device (11). 5. The access control unit according to claim 1, characterized in that the terminal device (11) has a memory device (13) for certificates, to which a code generator (14) is connected to compose an optical access permission (B). 6. The access control unit according to claim 1, characterized in that the terminal device (11) has an optical display unit (15) for representing the optical access permission (B). 7. The access control unit according to claim 1, characterized in that the optical access permission (B) created by the terminal device (11) can be transferred to another device equipped with a display unit that can be used to allow access. 8. The access control unit according to claim 5, characterized in that the optical access permission (B) created by the code generator (14) can be used to permit access in paper form. 9. The access control unit according to claim 5, characterized in that the generator (14) of the codes is contained in the device (1) of the door communication system or in the device (1) of the building’s system engineering, while the created access permission (B) can be transmitted to the terminal device (20, 11) and stored in the memory (21) of access permissions.

Images