SE539039C2

SE539039C2 - Reader device for an electronic access key for a lock and method for configuring a reader device

Info

Publication number: SE539039C2
Application number: SE1350544A
Authority: SE
Inventors: Berglund Jens; Bovin Perla; Sevallius Patrik; Blomqvist Fredrik; Johansson Kjerstad Ove
Original assignee: Assa Ab
Priority date: 2013-05-03
Filing date: 2013-05-03
Publication date: 2017-03-28
Also published as: SE1350544A1; EP2800067B1; EP2800067A3; EP2800067A2

Abstract

1O 17 ABSTRACT It is presented a reader device arranged to determine access rights of anelectronic access key for gaining access to open an electronically controlledphysical lock. The reader device supports a plurality of electronic access keyprotocols and the reader device comprises: a near field radio frequencycommunication device arranged to read access data from an electronic accesskey; a controller arranged to determine, based on the access data read fromthe electronic access key, whether the electronic access key is eligible to openthe electronically controlled physical lock; wherein the near field radiofrequency communication device is further arranged to read configurationdata from an electronic configuration key; and the controller is arranged toinactivate at least one electronic access key protocol in the reader device based on the configuration data. A corresponding method is also presented. (Fig 2)

Description

1O READER DEVICE AND ASSOCIATED METHOD TECHNICAL FIELD The invention relates to a reader device arranged to determine access rights of an electronic access key.

BACKGROUND It is known to use near field wireless access keys to allow or deny access tophysical locks, controlling whether it is possible to open a door or not. Insuch systems, reader devices are used on the lock side to read access information stored on the near field wireless access keys.

There are many different protocols used for reading the access information.Hence, reader devices need to be appropriate for the correct protocol or protocols to be used in a particular installation.

It would be greatly beneficial if there were a way to simplify the installation of reader devices.

SUMMARY It is an object to simplify installation of reader devices.

According to a first aspect, it is presented a reader device arranged to readaccess rights of an electronic access key for gaining access to open anelectronically controlled physical lock. The reader device supports a pluralityof electronic access key protocols and the reader device comprises: a nearfield radio frequency communication device arranged to read configurationdata from an electronic configuration key; a controller arranged to inactivateat least one electronic access key protocol in the reader device based on theconfiguration data; wherein the near field radio frequency communicationdevice is further arranged to read access data from an electronic access key;and the reader device is arranged to send the access data to a controller unitfor determining whether the electronic access key is eligible to open the electronically controlled physical lock. 1O .By using the electronic configuration key, the configuration of the readerdevice is effected using only local communication. This is a more secure wayto configure the reader device compared to e.g. remote configuration from acentral administration node. After installation, the electronic configurationkey could e.g. be locked away in a safe location such as a safe. Moreover, thisreader device could be provided with a great amount of electronic access keyprotocols enabled from the start, and the reader device is then configured byinactivating protocols which are not to be used, using the electronicconfiguration key. In this way, an installation operator could e.g. have a stockof generic, unconfigured, multiprotocol reader devices in stock. This reducesor even eliminates the need to keep installation specific reader devices. Thesegeneric reader devices are then easily configured for a particular installationby simply using an electronic configuration key, without any need of thereader device being connected to any external devices; it is sufficient that the reader device is only connected to power.

In one embodiment, the reader device is only responsive to configurationdata during a configuration period, the configuration period ending aconfiguration duration after when the reader device is powered up. Thisreduces the risk of random people being able to reconfigure the lock, e.g. to circumvent access control of the reader device.

The configuration data may comprise a communication control commandsection and a communication control parameter section. In this way, a configuration specific to a particular installation site can be achieved.

The controller may be further arranged to apply an installation specificconfiguration for at least one electronic access key protocol, based on theconfiguration data. Installation specific is here to be interpreted as specific toa specific installation, such as a site or a company. In this way, security can beimproved and/ or customised compared to the generic configuration of the reader device. 1O The near field radio frequency communication device is further arranged toread reset data from an electronic reset key; and the controller may bearranged to reset the reader device based on the reset data, to thereby enableall of the supported plurality of electronic access key protocols in the readerdevice. By resetting the radio device, the reader device can again be set in ageneric mode, allowing a new configuration to be applied. This can e.g. beuseful in the case of a changed configuration of an existing installation (suchas due to an upgrade to a more secure protocol) or for reuse of the reader device in another installation.

The electronic reset key may support an electronic access key protocol whichis supported by the reader device and which has not been inactivated. Inother words, it is here ensured that the reader device is able to read the electronic reset key without any need of modification.

The near field radio frequency communication device may be operable around a centre frequency of 13.56 MHZ.

According to a second aspect, it is presented a method for reading accessrights of an electronic access key for gaining access to open an electronicallycontrolled physical lock. The method is performed in a reader devicesupporting a plurality of electronic access key protocols. The methodcomprises the steps of: reading configuration data from an electronicconfiguration key; inactivating at least one electronic access key protocol inthe reader device based on the configuration data; reading access data froman electronic access key; and sending the access data to a controller unit fordetermining whether the electronic access key is eligible to open the electronically controlled physical lock.

The method may further comprise the step of ending a configuration periodat a time being a configuration duration after when the reader device ispowered up; and wherein the step of inactivating is only performed during the configuration period. 1O The configuration data may comprise a communication control command section and a communication control parameter section.

The method may further comprise the step, after the step of reading theconfiguration data, of: applying an installation specific configuration for at least one electronic access key protocol, based on the configuration data.

The method may further comprise the steps of: reading reset data from anelectronic reset key; and resetting the reader device based on the reset data,to thereby enable all of the supported plurality of electronic access key protocols in the reader device.

The step of reading the reset data may comprise using an electronic accesskey protocol which is supported by the reader device and which has not been inactivated.

The step of reading the configuration data and the step of reading the data may comprise reading around a centre frequency of 13.56 MHZ.

It is to be noted that the term “electronic access key protocol”, whenever usedin the claims or description of this document, is to be interpreted as a way in which a reader device reads data from an electronic access key.

Generally, all terms used in the claims are to be interpreted according to theirordinary meaning in the technical field, unless explicitly defined otherwiseherein. All references to "a/ an /the element, apparatus, component, means,step, etc." are to be interpreted openly as referring to at least one instance ofthe element, apparatus, component, means, step, etc., unless explicitly statedotherwise. The steps of any method disclosed herein do not have to be performed in the exact order disclosed, unless explicitly stated.

BRIEF DESCRIPTION OF THE DRAWINGS The invention is now described, by way of example, with reference to the accompanying drawings, in which: 1O Fig 1 is a schematic diagram illustrating an environment where embodiments presented herein can be applied; Fig 2 is a schematic diagram illustrating a reader device of Fig 1 and its communication with various electronic keys according to one embodiment; Fig 3 is a schematic diagram illustrating an electronic configuration key of Fig 2 according to one embodiment; Fig 4 is a schematic diagram illustrating an electronic reset key of Fig 2 according to one embodiment; Fig 5 is a schematic diagram illustrating an electronic configuration key of Fig 2 according to one embodiment; Fig 6 is a schematic graph illustrating operation of the reader device of Figs 1 and 2 according to one embodiment; Fig 7 is a schematic diagram illustrating a user interface device of the reader device of Fig 2 according to one embodiment; Fig 8 is a schematic side view of the user interface device of Fig 7 according to one embodiment; and Fig 9 is a ﬂow chart illustrating one embodiment of a method performed in the reader device of Fig 1 and 2.

DETAILED DESCRIPTION The invention will now be described more fully hereinafter with reference tothe accompanying drawings, in which certain embodiments of the inventionare shown. This invention may, however, be embodied in many differentforms and should not be construed as limited to the embodiments set forthherein; rather, these embodiments are provided by way of example so thatthis disclosure will be thorough and complete, and will fully convey the scopeof the invention to those skilled in the art. Like numbers refer to like elements throughout the description. 1O Fig 1 is a schematic diagram illustrating a system where embodimentspresented herein can be applied. An electronically controlled physical lock 8is controlled by a local control unit 7. Optionally, the electronically controlled physical lock 8 can also be controlled by a conventional mechanical key.

A reader device 1 communicates with an electronic access key 10, inpossession of a user, using near field radio frequency communication. A userinterface device 9 allows the user to input data into and read data from the system.

The electronically controlled physical lock 8 is controllable by the localcontrol unit 7 to be in a locked or unlocked state, depending on the electronicaccess key 10. In this way, access to a physical space can be controlled. Forexample a door can be controlled to be able to be opened when theelectronically controlled physical lock 8 is in an unlocked state and not to beable to be opened when the electronically controlled physical lock 8 is in alocked state. Optionally, the local control unit 7 is configured to useadditional security measures to gain access, e.g. by requiring a code to be entered using the user interface device 9 or using biometrics.

A central control unit 5 enables administration of the system and canconfigure one or more local control units 7. In one embodiment, the centralcontrol unit allows the reader device 1 to receive software upgrades remotely.As explained in more detail below, the reader device 1 can subsequently beconfigured to make use of the software upgrade, e.g. to use a new electronicaccess key protocol, using an electronic configuration key readable by the reader device 1.

Each local control unit 7 can e.g. be a computer with a central processingunit, memory, input/ output unit(s), etc. The communication between thelocal control unit 7, user interface device 9, reader device 1 and theelectronically controlled physical lock 8 can occur using any suitable electronic access key protocol, e.g. using a controller area network (CAN) bus, 1O Ethernet, universal serial bus (USB), serial connections (e.g. RS-232, RS-422, etc.) and/ or parallel connections (e.g. Centronics).

The communication between the local control unit 7 and the central controlunit 5 can e.g. occur using a wide area protocol such as Internet Protocol (IP),whereby the local control unit 7 and the central control unit can be situated inremote locations far from each other and can e.g. communicate via the Internet (e.g. using an encrypted connection).

The central control unit 5 can e.g. be a general purpose computer withdisplay, keyboard, etc., with appropriate software installed, allowing anoperator to configure one or more connected local control unit, e.g. belonging to one company or installation.

The local control unit 7, user interface device 9, reader device 1, andelectronically controllable physical lock 8 can be e.g. powered by a connectionto a mains AC (alternating current) source, optionally via a chargeable backup power storage device such as a rechargeable battery.

Optionally, one or more of the local control unit 7, user interface device 9,reader device 1, and electronically controllable physical lock 8 can be combined in a single physical device.

Fig 2 is a schematic diagram illustrating a reader device 1 of Fig 1 and itscommunication with various electronic keys 10-12 according to oneembodiment. The reader device 1 comprises a controller 4 using anycombination of one or more of a suitable central processing unit (CPU),multiprocessor, microcontroller, digital signal processor (DSP), applicationspecific integrated circuit (ASIC), field programmable gate array (FPGA) etc.,capable of execution inherent to the controller 4 and/ or according to softwareinstructions stored in a computer program product 6. The computer programproduct 6 is memory being any combination of read and write memory(RAM) and read only memory (ROM). The memory comprises persistent storage, which, for example, can be any single one or combination of 1O magnetic memory, optical memory, solid state memory or even remotely mounted memory.

The controller 4 can be configured to execute the method described with reference to Fig 9 below.

The reader device 1 also comprises a near field radio frequencycommunication device 3 arranged to communicate with one or more ofelectronic keys 10-12 using near field communication. Near field is here tointerpreted as a distance between the reader and the electronic key whereelectric and magnetic components produced directly by currents and charge-separations dominate. The reader device 1 supports a plurality of electronicaccess key protocols. However, as explained in more detail below, one ormore electronic access key protocols can be inactivated using an electronicconfiguration key 11. The near field radio frequency communication device 3comprises appropriate transmitter and receiver circuitry to read data from anearby electronic key 10-12. For example, the near field radio frequencycommunication device 3 can comprise circuitry to send a signal to theelectronic key 10-12 which energises the electronic key such that data storedon the electronic key is sent to and received by the near field radio frequency communication device 3.

Using the near field radio frequency communication device 3, the readerdevice 1 can communicate with an electronic access key 10, an electronicconfiguration key 11 and/ or an electronic reset key. As explained above, theelectronic access key 10 is read by the reader device 1, and evaluated by thelocal control unit 7 to allow or deny access. The local control unit 7 is thusarranged to determine, based on access data read from the electronic accesskey 10, whether the electronic access key 10 is eligible to open the electronically controlled physical lock 8.

Furthermore, the near field radio frequency communication device 3 isarranged to read configuration data from an electronic configuration key 11.

The controller 4 is arranged to inactivate electronic access key protocol in the 1O reader device based on the configuration data 20. Moreover, installationspecific configuration can be applied. This is explained in more detail with reference to Fig 6 below.

Optionally, the near field radio frequency communication device 3 is furtherarranged to read reset data from an electronic reset key 12. Based on the resetdata, the controller 4 is arranged to conditionally reset the reader device, tothereby enable all of the supported plurality of electronic access key protocolsin the reader device. Also, the reset can optionally remove any installationspecific configuration to thereby reset the reader device to a generic state. Forexample, the reader device 1 can support any combination of the followingprotocols using 13.56 MHz centre frequency (in effect 13.553 MHZ to 13.567MHZ): MIFARE Classic, MIFARE Ultralight, MIFARE Ultralight EV1,MIFARE Ultralight C, MIFARE DESFire, MIFARE DESFire EV1, MIFAREPlus, MIFARE sam av2, and Near Field Communication (NFC).

Fig 3 is a schematic diagram illustrating an electronic configuration key 11 ofFig 2 according to one embodiment. The electronic configuration key 11comprises a memory 15 holding configuration data 20 which, when read by areader device in a configuration period, makes the reader device 1 inactivateone or more electronic access key protocols. Moreover, the configuration data20 can control how the electronic access key protocol is to function, e.g.which sectors to read on the electronic access key, etc. Optionally, theconfiguration data 20 comprises a communication control command section21 and a communication control parameter section 22. The electronicconfiguration key 11 can use any protocol supported by the reader device 1.The electronic configuration key 11 supports one of the electronic access key protocol used by the reader device.

Fig 4 is a schematic diagram illustrating an electronic reset key 12 of Fig 2according to one embodiment. The electronic reset key 12 comprises amemory 15” holding reset data 25 which, when read by a reader device in aconfiguration period, makes the reader device 1 inactivate one or more electronic access key protocols. Since the electronic reset key 12 is used to 1O reset the reader device, it supports an electronic access key protocol which an, already configured reader device, is configured to support.

Fig 5 is a schematic diagram illustrating an electronic access key 10 of Fig 2according to one embodiment. The electronic access key 10 comprises amemory 15” holding access data 26 which, when read by a reader device in aconfiguration period, allows the reader device determine whether to grant ordeny access. The electronic access key 10 supports an electronic access key protocol which is supported by the reader device 1.

Fig 6 is a schematic graph illustrating operation of the reader device 1 of Figs1 and 2 according to one embodiment. At time t0, the reader device ispowered up. During a configuration period 30, the reader device is arrangedto read any electronic configuration key 11 provided within range of the nearfield radio frequency communication device 3. The configuration period endsat time t1, which is a configuration duration after the power on time t0. Theconfiguration duration represents an amount of time (e.g. a certain number of seconds) and can e.g. be a parameter which is stored in the reader device.

After the time t1, the reader device 1 is in a normal operation period 31 andgrants or denies access using the electronically controlled physical lock independence on what electronica access keys are provided in the vicinity of its near field radio frequency communication device 3.

Optionally, the reader device is also only responsive to electronic reset keys in the configuration period 30, and not during the normal operation period 31.

Using the configuration period 30, a greater degree of security is provided,since a configuration, and optionally reset, of the reader device using appropriate electronic keys can only be performed during a relatively shortperiod. This reduces the risk of unauthorised attempts to configure and/ or reset the reader device 1, e.g. to gain unlawful access to a physical space.

Fig 7 is a schematic diagram illustrating a user interface device of the user interface device 9 of Fig 2 according to one embodiment. The user interface 1O 11 device 9 comprises a plurality of operation indicators 35a-e, an optional display 37 and an alphanumeric keypad 36.

The operation indicators 35a-e can for instance indicate when access isallowed, access is denied, or that a code sequence needs to be entered on thekeypad. The operation indicators 35a-e can be provided using differentcoloured lights and/ or different symbols. In one embodiment, operationindicators using green and red are provided at either end of the set ofoperation indicators. For example, the first operation indicator 35a can bered and the last operation indicator 35e can be green, or vice versa. In thisway, there is less risk of colour blind users confusing a green operationindicator for a red operation indicator or vice versa, since the user willeventually learn from experience which end corresponds to which colouredoperation indicator. For example, a green operation indicator can indicatethat an intrusion detection system is disarmed and a red operation indicatorcan indicate that an intrusion detection system is armed. While Fig 7illustrates five operation indicators 35a-e, any suitable number of operation indicators can be provided.

The display 37 is used to convey configurable information to the user. In oneembodiment, the display 37 is used to, upon granted access, display until how long the electronic access key is valid, e.g. en end validity date.Optionally, the reader device 1 is integrated with the user interface device 9.

Fig 8 is a schematic side view of the user interface device 9 of Figs 1 and 7according to one embodiment. It is here shown how a cable 45 connects theuser interface device 9 with other components of the system (see Fig 1). Thecable 45 is guided by a frame 41. In the space behind the frame 41, any excesscable can be stored. In this way, installation of an outer shell 40 can be doneafter the cable 45 is provided in a suitable way, which simplifies installation of the user interface device.

Fig 9 is a ﬂow chart illustrating one embodiment of a method performed in the reader device of Fig 1 and 2. 1O 12 In a read config step 50, configuration data is read from an electronic configuration key.

In an inactivate electronic access key protocol step 52, one or moreelectronic access key protocols in the reader device are inactivated based on the configuration data.

In an optional apply installation specific configuration step (51) aninstallation specific installation is applied for at least one electronic accesskey protocol, based on the configuration data. This can be used to improve and customise the security from the generic configuration.

In an optional end configuration period step 53, a configuration period (see30 of Fig 6) is ended at a time which is a configuration duration after whenthe reader device 1 is powered up. In this way, the inactivate electronicaccess key protocol step 52 is only performed during the configuration period.

In a read access data step 54, access data is read from an electronic accesskey. This step can be performed a significant amount of time after the previous steps.

In a send access data step 56, the reader device sends the access data, e.g. tothe local control unit. Thereby, the local control unit can determine, based onthe access data read from the electronic access key, whether the electronicaccess key is eligible to gain access to the electronically controlled physicallock. When access is granted, the electronically controlled physical lock is setin the unlocked state. Otherwise, the electronically controlled physical lock isset (or remains) in the locked state. The method can repeat the read accessdata step 54 and send access data step 56 as necessary, in a normal operation mode of the reader device.

In an optional read reset data step 58, reset data is read from an electronic reset key. The reading of the reset data comprises using an electronic access 1O 13 key protocol which is supported by the reader device and which has previously been inactivated.

In an optional reset reader device step 60, the reader device is conditionallyreset based on the reset data, i.e. when the reset data is considered to be validreset data. In this way, all of the supported plurality of electronic access keyprotocols are enabled in the reader device to allow reconfiguration of the reader device.

The invention has mainly been described above with reference to a fewembodiments. However, as is readily appreciated by a person skilled in theart, other embodiments than the ones disclosed above are equally possible within the scope of the invention, as defined by the appended patent claims.

Claims

1. A reader device (1) arranged to read access rights of an electronic accesskey (10) for gaining access to open an electronically controlled physical lock(8), the reader device (1) supporting a plurality of electronic access keyprotocols and the reader device (1) comprising: a near ﬁeld radio frequency communication device (3) arranged to readconﬁguration data (20) from an electronic configuration key (11) ; a controller (4) arranged to inactivate at least one electronic access keyprotocol in the reader device based on the conﬁguration data (20); wherein the near ﬁeld radio frequency communication device (3) isfurther arranged to read access data (26) from an electronic access key (10);and the reader device is arranged to send the access data (26) to a controllerunit for determining whether the electronic access key (10) is eligible to open the electronically controlled physical lock (8).

2. The reader device (1) according to claim 1, wherein the reader device (1)is only responsive to conﬁguration data during a conﬁguration period, theconﬁguration period ending a conﬁguration duration after when the reader device (1) is powered up.

3. The reader device (1) according to any one of the preceding claims,wherein the conﬁguration data (20) comprises a communication control command section (21) and a communication control parameter section (22).

4. The reader device (1) according to any one of the preceding claims,wherein the controller (4) is further arranged to apply an installation specificconﬁguration for at least one electronic access key protocol, based on the conﬁguration data (20).

5. The reader device (1) according to any one of the preceding claims,wherein the near ﬁeld radio frequency communication device (3) is furtherarranged to read reset data from an electronic reset key (12) ; and the controller (4) is arranged to reset the reader device based on the reset data, to thereby enable all of the supported plurality of electronic access key protocols in the reader device.

6. The reader device (1) according to claim 5, wherein the electronic resetkey (12) supports an electronic access key protocol which is supported by the reader device (1) and which has not been inactivated.

7. The reader device (1) according to any one of the preceding claims,wherein the near ﬁeld radio frequency communication device (3) is operable around a centre frequency of 13.56 MHZ.

8. A method for conﬁguring a reader device ( 1) for reading access rights ofan electronic access key (10) for gaining access to open an electronicallycontrolled physical lock (8), the method being performed in a reader device(1) supporting a plurality of electronic access key protocols, the methodcomprising the steps of: reading (50) conﬁguration data (20) from an electronic conﬁgurationkey (11): inactivating (52) at least one electronic access key protocol in the readerdevice based on the conﬁguration data (20); reading (54) access data (26) from an electronic access key (10); and sending (56) the access data (26) to a controller unit for determiningwhether the electronic access key (10) is eligible to open the electronically controlled physical lock (8).

9. The method according to claim 8, further comprising the step of ending(53) a conﬁguration period at a time being a conﬁguration duration afterwhen the reader device (1) is powered up; and wherein the step of inactivating (52) is only performed during the conﬁguration period.

10. The method according claim 8 or 9, wherein the conﬁguration data (20)comprises a communication control command section (21) and a communication control parameter section (22). 16

11. The method according to any one of claims 8 to 10, further comprisingthe step, after the step of reading the configuration data, of:applying (51) an installation speciﬁc conﬁguration for at least one electronic access key protocol, based on the conﬁguration data (20).

12. The method according to any one of claims 8 to 11, further comprisingthe steps of: reading (58) reset data from an electronic reset key (12); and resetting (60) the reader device (1) based on the reset data, to therebyenable all of the supported plurality of electronic access key protocols in the reader device.

13. The method according to claim 12, wherein the step of reading (58) thereset data comprises using an electronic access key protocol which is supported by the reader device (1) and which has not been inactivated.

14. The method according to any one of claims 8 to 13, wherein the step ofreading the conﬁguration data (50) and the step of reading the data (54) comprises reading around a centre frequency of 13.56 MHZ.