WO2018048956A1 - Methods and systems for access control and awareness management - Google Patents
Methods and systems for access control and awareness management Download PDFInfo
- Publication number
- WO2018048956A1 WO2018048956A1 PCT/US2017/050353 US2017050353W WO2018048956A1 WO 2018048956 A1 WO2018048956 A1 WO 2018048956A1 US 2017050353 W US2017050353 W US 2017050353W WO 2018048956 A1 WO2018048956 A1 WO 2018048956A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- access control
- user
- mobile device
- control device
- access
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00571—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by interacting with a central unit
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00896—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys specially adapted for particular uses
- G07C9/00904—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys specially adapted for particular uses for hotels, motels, office buildings or the like
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/08—Access security
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
- G07C2009/00388—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks code verification carried out according to the challenge/response method
- G07C2009/00396—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks code verification carried out according to the challenge/response method starting with prompting the keyless data carrier
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C2009/00634—Power supply for the lock
- G07C2009/00642—Power supply for the lock by battery
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C2009/00753—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys
- G07C2009/00769—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by wireless means
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C2209/00—Indexing scheme relating to groups G07C9/00 - G07C9/38
- G07C2209/08—With time considerations, e.g. temporary activation, valid time window or time limitations
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C2209/00—Indexing scheme relating to groups G07C9/00 - G07C9/38
- G07C2209/60—Indexing scheme relating to groups G07C9/00174 - G07C9/00944
- G07C2209/63—Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle
- G07C2209/64—Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle using a proximity sensor
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00658—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by passive electrical keys
- G07C9/00674—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by passive electrical keys with switch-buttons
- G07C9/0069—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by passive electrical keys with switch-buttons actuated in a predetermined sequence
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/40—Security arrangements using identity modules
- H04W12/43—Security arrangements using identity modules using shared identity modules, e.g. SIM sharing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W84/00—Network topologies
- H04W84/18—Self-organising networks, e.g. ad-hoc networks or sensor networks
Definitions
- the present invention relates to systems and methods for access control management designed for multi-unit buildings.
- RFID radio frequency identification
- Other prior art systems provide digital access control management through radio frequency identification (RFID) or other types of magnetic or electronic keys that are centrally controlled by a management interface.
- RFID radio frequency identification
- Such prior art systems allow door control and management to take place from a central server, while users can authenticate and get access through the use of "numeric keypads" and “card readers” on-site.
- These systems require locally-deployed management hardware, which creates security risks. For example, numeric keypads often become insecure when numeric codes are shared between authorized and non-authorized parties as a form of convenience.
- biometric identifiers for authentication purposes is an alternative to access control PIN codes or badges.
- biometric locks can be hard to administer in a multi-unit context. For example, it can be complicated to collect biometric data, such as, fingerprints, and store and program them into the access control system.
- biometric data such as, fingerprints
- the storage of biometric data can be cost-prohibitive for typical building owners.
- users may become uncomfortable when they are required to provide biometric data for authentication and storage.
- Bluetooth is another communication standard employed in some prior art systems to provide tracking suitable for following users inside a defined space using a Bluetooth- enabled device.
- Bluetooth communication is merely used to track a user to create a timeline of activity for the user through silent and imperceptible handshakes between a user's device and hardware installed within a geographic area.
- Other prior art systems utilize Bluetooth technology to distribute and manage keys, however they require that access control points be centrally updated with new information to update new keys and users being added to the system.
- Bluetooth-enabled prior art systems use rotating authentication credentials that don't require updates from a central server;
- Systems and methods for secure access control management include access control points, mobile devices, a local mesh network, and a unified credential system.
- an exemplary access control management system can include a plurality of access control devices, each comprising a wireless transceiver and a wireless transmitter.
- Each access control device can communicate with a mobile device when the mobile device is in range of the access control device and control a locking mechanism, in response to wireless signals received from the mobile device.
- the access control devices and mobile devices in range of any access control device in the system can form a local mesh network.
- the access control devices can communicate with mobile devices and with other access control devices in the system.
- the mobile devices can store credentials that can control access to one or more access control devices and can unlock the locking mechanisms controlled by the one or more access control devices.
- mobile devices of other approved users can receive credentials to their mobile devices that can also grant permission to unlock the locking mechanisms controlled by the one or more access control devices.
- the mobile devices can also store a system update and can be configured to transmit the system update to access control devices in range through wireless signals.
- the access control devices can transmit the received system update to other access control devices in range through the local mesh network.
- an exemplary method for access control management can include providing a plurality of access control devices, each comprising a wireless transceiver and a wireless transmitter, each capable of communicating with a mobile device when the mobile device is in range of the access control device and controlling a locking mechanism, in response to wireless signals received from the mobile device.
- the method can also include forming a local mesh network by coupling access control devices in range of each other and mobile devices in range of any access control device in the system.
- the method can also include storing, by the mobile device, credentials that can control access to one or more access control devices and unlock the locking mechanisms controlled by the one or more access control devices, in response to wireless signals transmitted by the mobile device.
- the method can also include providing credentials to mobile devices of other approved users that are given permission to unlock the locking mechanisms controlled by the one or more access control devices.
- the method can also include storing, by the mobile device, a system update and transmitting the system update to access control devices in range of the mobile device through wireless signals.
- the method can also transmitting, by the access control device, the received system update to other access control devices in range through the local mesh network.
- a mobile device for providing access control management can be configured to communicate with a plurality of access control devices, each comprising a wireless transceiver and a wireless transmitter, when the mobile device is in range of the access control device.
- the mobile device can also be configured to control a locking mechanism in one or more access control devices in range through wireless signals sent from the mobile device.
- the mobile device can also be configured to enter a local mesh network of access control devices in range of each other and in range of other mobile devices.
- the mobile device can also be configured to store credentials that can control access to one or more access control devices and unlock the locking mechanisms controlled by the one or more access control devices.
- the mobile device can also be configured to provide credentials to mobile devices of other approved users that are given permission to unlock the locking mechanisms controlled by the one or more access control devices.
- the mobile device can also be configured to store a system update and transmit the system update to access control devices in range of the mobile device through wireless signals.
- FIG. 1 A illustrates an exemplary access control management system, according to embodiments of the present invention.
- FIG. IB illustrates an exemplary system architecture for an access control management system, according to embodiments of the present invention.
- FIG. 2 illustrates an exemplary access control device, according to embodiments of the present invention.
- FIG. 3 illustrates an exemplary method for providing guest access to a multi-unit building, according to embodiments of the present invention.
- FIG. 4 illustrates an exemplary method for setting security levels for access control management, according to embodiments of the present invention.
- FIG. 5 illustrates an exemplary method for providing access to a multi-unit building, according to embodiments of the present invention.
- FIG. 6 illustrates an exemplary method for updating components of an access control management system, according to embodiments of the present invention.
- FIG. 7 illustrates an exemplary device communication encryption flow, according to embodiments of the present invention.
- FIG. 8 illustrates exemplary method for tracking information of building utilization, according to embodiments of the present invention.
- FIG. 9 illustrates an exemplary method for configuring an access control management system, according to embodiments of the present invention.
- FIGS. 10-12 illustrate exemplary screenshots of an application running on a mobile device for providing access control management, according to embodiments of the present invention.
- FIGS. 13A-13C illustrate an exemplary access control management system, according to embodiments of the present invention.
- FIG. 14 illustrates an exemplary method for providing access to an area, according to embodiments of the present invention.
- FIGS. 15A-15B illustrate an exemplary access control management system, according to embodiments of the present invention.
- FIGS. 16-17 illustrate exemplary access control management systems, according to embodiments of the present invention.
- FIG. 18 illustrates an exemplary method for managing access to an area, according to embodiments of the present invention.
- FIG. 19 illustrates an exemplary access and awareness control method, according to embodiments of the present invention.
- An exemplary system can use mobile devices, a local mesh network, installed access control hardware, communication standards, and a credentialing layer to displace physical key management systems.
- the disclosed systems can eliminate the need for physical key or access cards, and rekeying requirements faced by many operators in the multi-unit real estate management industry.
- Fig. 1 A illustrates an exemplary access control management system.
- system 100 can include one or more access control devices (102, 104, and 106), at least one mobile device 108 that is configured to communicate with the access control devices through wireless communication protocol 110, and a local mesh network constructed by the access control devices (102, 104, and 106) and the mobile device 108.
- Access control devices can communicate with other access control devices in range, for example, through wireless communication protocol 112, which can be the same of the same type as wireless
- the local mesh network can be a dynamic network with mobile devices becoming part of the network as they get within range of access control devices and leaving the network as they go out of range from all access control devices in the network.
- the access control devices (102, 104, and 106) can be of-the-shelf, customized, or retro-fitted hardware devices, e.g., wireless sensors added to existing hardware or bolt on attachments for existing mechanical locks, that can be installed in various access points in a multi-unit building, including but not limited to the building entrance door, auxiliary entrance doors, auxiliary service doors, common room area doors, exercise room doors, individual unit doors, doors within units, and other relevant entrance points.
- Mobile device 108 can include smartphones, tablets, phablets, or other customized wireless communication-enabled devices that can communicate with access control devices (102, 104, and 106) through a wireless local communication protocol 110, such as Bluetooth, Z-Wave, ZigBee, Thread, or other radio frequency (RF) communication network.
- a wireless local communication protocol 110 such as Bluetooth, Z-Wave, ZigBee, Thread, or other radio frequency (RF) communication network.
- RF radio frequency
- a credential can be a digital file of lines of encrypted code.
- the credential can provide authentication and grant access to the user when it is paired with the user mobile device.
- access control device 102 can grant access to a unit that can be owned or rented by a tenant that carries mobile device 108 and stores the appropriate credential.
- access control device 102 and user mobile device 108 can wirelessly communicate to grant the user access, e.g., unlock the door, to the unit.
- a single credential can grant the user access to all buildings and establishments that implement the disclosed system.
- the user can use the credential stored in their mobile device to access their office, their gym, their private club, or any area that has installed access control devices that can control access to secure areas.
- the user can conveniently manage all of their access, guest and service provider provisioning through the same interface, e.g., an app running on their mobile phone or a website.
- Fig. IB shows server 152 in communication with database 154, and also in communication with building manager device 156, user mobile device 158, guest mobile device 160, and service provider device 162.
- Server 152 can generate and manage credentials that can be stored in database 154.
- a building manager using device 156 for example, a computer, tablet, or cell phone, can request from server 152 to generate a credential for a user, for example, a new building tenant, according to access provisions specific for the user.
- the building manager can specify the access provisions, e.g., granting access to user unit, granting access to building gym, etc., for the particular user when requesting the credential generation.
- the building manager can modify the access provisions at any time, for example, when the user gym membership has expired, the building manager can request from server 152 a new credential for the user through an interface running on building manager device 156.
- the user can receive from server 152 and can store the credential in mobile device 158.
- Server can allow different permissions to users, according to provisions specified by the building manager. For example, the server can enable the user to grant to their guests access to their building.
- a user can request using an application running on mobile device 158 from server 152 to generate a credential for their guest with mobile device 160. For example, the user can send to the guest an invitation to an event taking place in their building using the access control management app.
- the credential can be requested automatically Once server 152 generates the credential, it can send it to guest mobile device 160.
- the guest mobile device 160 and the generated credential will be paired and, can provide authentication of the guest.
- the guest can access the building and unit using their mobile device 160.
- the server can enable the user to grant to their guests access to their building.
- the user can also request using the application running on mobile device 158 from server 152 to generate a credential for a service provider with mobile device 162.
- the service provider mobile device 162 and the generated credential will be paired and, can provide authentication of the service provider.
- Mobile devices are enabled by the use of mobile devices and more specifically by the particular characteristics of mobile devices and how people interact with their mobile devices. For example, people carry a mobile device with them all the time. Mobile devices are most of the time turned on and can passively communicate with sensors in their environment without requiring the user's active engagement. Moreover, mobile devices have a wide variety of radio frequency communication capabilities, through built-in hardware, that make them ideal for communicating through different types of communication standards. Mobile devices can install and run applications or apps that enable functionality not available through a web browser operating on a computer, for example, by utilizing the device unique hardware attributes, such as radios, cameras, and secure biometric identifying sensors. In addition, mobile devices can be automatically updated in the background to provide updated secure keys, instructions, and permissions without requiring active user engagement.
- the local mesh network obviates the need for a persistent internet connection.
- the disclosed system can link access control devices with mobile devices through a local mesh network.
- the mobile devices can provide a bridge to the internet for the entire mesh network. This allows operation of the access control system at low cost and with minimal power requirements, compared, for example, to a system that requires a persistent internet connection to operate and update the access control devices.
- the access control devices can be connected to each other and the system can utilize the handshakes performed between user devices and access control devices to pass any system updates to the access control devices.
- User devices typically have internet connections and sufficient capacity to passively pass system update packets through the required handshake procedures with the installed access control hardware. Therefore, there is no additional requirement for a persistent internet connection installation just for the access control devices.
- access control device 200 can include a wireless communications module 202 configured to communicate with user mobile devices and other access control devices in its proximity, through a wireless transmitter and a wireless receiver.
- the communication from the user device can relate to granting the user of the mobile device access to a particular area or unit.
- the communication from the user device and other access control devices can also relate to system updates.
- Access control device 200 can also include a long-life battery 204 and a handle 206 to move latch 208 and unlock the door's passage lock, deadbolt, or other locking mechanisms, for example, to a user's unit.
- Access control device 200 can also include a digital display 210 to provide the user with information. Persons of skill in the art would understand that the access control device of Fig. 2 is for illustration purposes only and that other types of access control devices can be used.
- each access control device can have a unique identification (ID) that can identify them in the system.
- IDs can be based on the MAC address of the access control device radio.
- Server 152 can maintain a table of cryptographic keys that can be indexed by the access control device ID.
- Each credential associated with an access control device ID can be configured during installation into the appropriate lock.
- the appropriate credential is transmitted securely to an application running on a mobile device, for example, using a secure transport such as SSL/TLS and can be stored in the mobile device.
- the credential can be used to generate an authenticated unlock request, for example using an unlock protocol.
- the server can determine the appropriate credential to send to the guest or service provider.
- the server determines the appropriate credential based on the authenticated user who is requesting them.
- the user can be authenticated in the system through user account authentication, e.g., by providing user details when setting up an account with the system.
- the disclosed access control device can have pre-installed keys, e.g., authentication information.
- These pre-installed keys can be pre-installed at the access control device from the factory, can be stored at the access control device during installation, or can be periodically or sporadically updated.
- These keys can also be mirrored in a server, that can generate credentials for a user or a guest. This can enable the use of the access control system, even when the access control device is intermittently connected or not connected to the internet or a local area network.
- the mirrored keys on the server can generate the appropriate credentials that can grant access to an area that is controlled by the access control device, based on the stored keys in the access control device.
- the systems and methods described herein negate the need for physical key management.
- the system enables building managers to create account holders within a given multi-unit building, irrespective of physical key issuance. Once a user-tenant has an account, they are responsible for managing their own keys, whether that takes the form of a mobile device or a supplied third party piece of radio frequency capable hardware. Accordingly, building managers may no longer be burdened, for example, with guest access management, because the disclosed system can make user-tenants accountable for all aspects of guest access management.
- Fig. 3 This is illustrated in Fig. 3, generally at 300.
- a guest of a unit owner/tenant in a multi-unit building arrives at the building, he can request access to the unit (step 302).
- the guest and the owner then can enter a transaction (step 304), for example, through a mobile device application or app.
- the request for access from the guest can appear as a notification from an app running on a user mobile device.
- the owner can then determine whether to grant access to the guest or not (steps 308 and 310). If the owner decides to grant access to the guest, the owner can optionally specify a time period during which the guest will have access to the unit (step 312).
- the guest receives the necessary credentials for the building (step 314), which would authorize a guest's mobile device to provide access to the building and all necessary access points until the user unit (step 316).
- the access control point sensor can detect the guest device (step 320), which would allow the guest access to the unit (step 322). Since the user can receive the notification and grant access to a guest through an application running on a mobile device, the user can grant access to the guest from anywhere without being necessary for the user to be present in the unit.
- guests can be granted access by the tenant even before they arrive at the building and that access can by automatically granted, for example, in the case of an authorized delivery or repair.
- users can provision access credentials to their guests with appropriate restrictions, allowing them to delineate which facilities the guest can access across the entire building, with time limitations, and other restrictive
- the system can be viewed and administered through a specialized and secure portal to a server on any number of devices, including computers, mobile devices, and other interfaces.
- a specialized and secure portal to a server on any number of devices, including computers, mobile devices, and other interfaces.
- building managers and users with appropriate privileges can provide, remove, or modify privileges and access to guests and service providers through a webpage or application that is securely connected to the server.
- This flexible security capacity can be activated on a building wide basis by the manager or by an individual user when setting their own preferences and preferences for their guests.
- Fig. 4 illustrates this tiered authentication system.
- Fig. 4 shows an exemplary method 400 for setting security levels for access control management.
- a user can access security preferences, for example, through an app running on a mobile device or a webpage (step 402).
- the user can then select the security level for particular guests or service providers (step 404).
- the user can select a single level authentication 406, which can require authentication only through proximity 412.
- a guest with a mobile device that has received the proper credentials can be granted access to the unit (414), when the mobile device and the access control device are within an appropriate distance.
- the user can select a two-level authentication 408, which can require authentication through proximity 416 and through entry of a PIN 418.
- a guest with a mobile device that has received the proper credentials can be granted access to the unit (420) when the mobile device and the access control device are within an appropriate distance and after the guest enters the PIN, for example, in a prompt on the mobile device.
- the PIN can be provided to the guest by the user.
- users can set individual pins for each guest, such that a particular guest mobile device is paired with a unique PIN for increased security.
- Access control device 200 can also include a digital display 210 to provide the user with information and an input method to communicate with the device.
- the user can select a three-level authentication 410, which can require authentication through proximity 422, through entry of a PIN 424, and through the use of biometric identification.
- a guest with a mobile device that has received the proper credentials can be granted access to the unit (428) when the mobile device and the access control device are within an appropriate distance, after the guest enters the PIN, for example, in a prompt on the mobile device, and after the guest identifies himself through the use of biometric identification, for example, on the mobile device.
- access credentials can easily be extended to service personnel to perform routine functions when the user is away.
- Large waiting windows typically provided by service providers, for example, cable company technicians, have been a major source of user frustration.
- the disclosed systems can reduce the time burden placed on the consumers of these services.
- a user can request service from a particular service provider, receive an approximate time window for that service to be performed, and accordingly provision access for that period without the need for the user to remain in their unit.
- This can be valuable to a wide variety of service providers, for example, housekeeping service providers, grocery delivery services, and other sensitive package delivery services. All of these service providers would ideally have access to the secured area assigned to a particular user for purposes of performing their service function, and the disclosed system can dramatically increase the ease with which they could perform their service.
- the system can incorporate an application programming interface (API) suitable for auto-provisioning access in accordance with relevant purchases.
- API application programming interface
- the API can automatically provide access to their building, their apartment, and even appropriate rooms at check out to facilitate the delivery of their perishable groceries directly to their cold storage as part of the checkout process.
- the API can also have significant application within the hospitality management industry, with users being able to secure access to their rented rooms, for example, via AirBNB or similar services, and hotel rooms at checkout, eliminating the present hassle associated with key procurement and exchange between renter and owner.
- the disclosed system can also provide real time updates to all concerned parties regarding the behavior of all guests during their time on the building premises.
- a user can register with a service provider (step 502), for example, through a service access provider website for a service to be performed, such as cable service installation.
- a service provider website for a service to be performed, such as cable service installation.
- the user can configure particular instructions for the service provider (step 504).
- the user can register delivery or other instructions in either a proprietary application with the service provider directly, or via an API relationship between the disclosed system and the service provider.
- the user can schedule the service and can grant access to the provider via a digital credentialing mechanism, according to the scheduled time (step 506).
- the user can use an application running on a mobile device to decide what type of credentials to provide and to set the appropriate restrictions around these credentials.
- Types of available credentials can include a Bluetooth based credential, a digital copy of a physical key (KeyMe), an alphanumeric password, or even a pre-programmed digital radio frequency credential.
- the disclosed system then can synchronize the digital credentials and instructions to appropriate service provider mobile devices (step 508). Subsequently, the service provider mobile devices can receive appropriate instructions and credentials that will provide access to the user unit (step 510).
- the service provider can receive a password over the phone, a digital credential downloaded to a proprietary piece of hardware, e.g., a UPS handheld device, a digital credential downloaded to a service provided smartphone, a text message, or an email with instructions.
- a proprietary piece of hardware e.g., a UPS handheld device
- a digital credential downloaded to a service provided smartphone e.g., a text message, or an email with instructions.
- the user devices can optionally receive notifications, such as push notifications, emails, texts, or calls, informing them that the appropriate credentials for the service provider have been received by the service provider devices (step 512).
- notifications such as push notifications, emails, texts, or calls
- other appropriate connected devices for example, access control devices for the building entrance and the user unit, can also receive the appropriate instructions and credentials to allow for the service provisions (step 514).
- the credentials can be matched through a set of pre-programmed parameters on a connected device or via a message from a network.
- the user's presence in the unit is not required, therefore the user can leave their location once service provision is scheduled and credentials and instructions have been distributed (step 516).
- the service provider can arrive at the location to provide service and can utilize the credentials and instructions for getting access into the user unit (step 518).
- the credentials from the service provider devices can grant access to the service provider, according to the actions specified by the user (step 520).
- the access control devices can performs functions like unlocking, locking, turning off a thermostat, turning on a video recording system, or activating additional sensors.
- the access control devices can also notify the user of the service provider activity and activate other devices and services on location in response to that activity (step 522).
- the access control devices can further ensure appropriate service provider behavior, for example, through monitoring (step 524). Abnormal or suspicious behavior can be reported to the user, law enforcement, or other service providers as appropriate.
- the disclosed systems and methods can provide unique advantages to operators of multi-unit buildings, for example, tenant activity tracking around various amenities, entrance tracking for insurance and security purposes, access management for service and delivery personnel, behavior-tracking that may help assist operators in retaining or acquiring new tenants, secure communications and local services in instances of natural disaster.
- the disclosed systems can provide a real-time view to building management of all guests expected to visit and all guests currently visiting through individual users' guest logs and instructions. This can be especially important in multi-unit buildings, whereby the disclosed system can track which doors the user and the user's guests have accessed and which path they have taken within the building for the purposes of providing the highest degree of security to the user and other guests on premises.
- the access control devices can have nearly permanent access to internet connectivity through the handshakes with the user mobile devices. This can eliminate the need for the system to have a dedicated internet connection and creates a system of connectivity that can be insulated from service outages.
- the users' devices in the system will likely be provided through a host of different service providers, therefore creating redundancy in case one service provider fails to provide access at any given moment.
- the disclosed systems and methods can robustly manage access even during prolonged periods of no internet connectivity. For example, keys or mobile devices can be provisioned and sent to guests or service providers without the need to update or notify the access control devices. If for some reason the system does not access a network connection between the time of key provision and guest arrival, the guest's mobile device can actually supply the update packet to the access control device and the network when utilizing their key on-site.
- FIG. 6 An exemplary method 600 for updating components of an access control management system is illustrated in Fig. 6.
- the system can make available software updates for connected devices, for example, access control devices (step 602), when these devices require or would benefit from a software update to improve or enhance their functionality.
- a software update becomes available, when user, guest, or service provider mobile devices are connected to the internet, they can be notified of the software updates by the system (step 604).
- the mobile devices can download the software update for the connected devices (step 606) and can store the update in their memory (step 608).
- the downloading and storing process can happen on the background and users and service providers can perform their normal activities (step 610) without requiring any special user action to update the devices.
- the mobile devices When the mobile devices are within an appropriate distance from an access control device, they can determine whether the particular access control device requires a software update (step 612). In that case, the mobile devices can send the stored software update to the access control device (step 614) and the access control device can receive the update (step 616). Once the access control device receives the update, it can transmit the software update to other access control devices in its proximity that also require the update (step 618). In this manner other connected devices can receive and install the required software updates (step 620).
- this data transfer would take place in a way that is completely transparent to the user, with update packets being embedded in the handshakes already required for entering the building or performing other functions.
- update packets would be handled appropriately throughout the entirety of the mesh network, with all access control and other system elements being updated through the network connection provided by any user's device interacting with any other part of the system.
- a user mobile device 108 can communicate with access control device 102 for access control or other purposes.
- Access control device 102 can validate the handshake and receive a secure update packet in the same handshake from a remote management server via the user's network connection.
- Access control device 102 can then pass that update to access control device 104 for distribution to another access control device 106 on the same mesh network. In this way, an interaction with any piece of the network can update the entire network.
- This functionality can be important for guest management, general operational efficiency, and also for preventing any issues associated with lost or missing authentication devices.
- a mobile device and an access control device can either be in a central/master mode or a
- a device in a central/master mode can send software updates to other devices in peripheral/slave mode within range. Once a device in peripheral/slave mode receives the software update, then it can switch to a central/master mode. The devices are able to switch between central and peripheral mode as necessary to receive and send updates.
- the disclosed system can mitigate the negative impact that the theft or misplacement of a mobile device or other authenticator would have on the operation of the system.
- a user can report the event to a central server, for example, through an internet interface, a cellular interface, or in-person.
- the central server can push a system update to the impacted network to modify or delete the access credentials afforded to the misplaced or stolen device. This update can be transmitted via the methods described above.
- Fig. 7 illustrates an exemplary device communication encryption flow for a device that can either be connected or disconnected to the mesh network.
- a connected or disconnected device can be pre-programmed with an encryption key (step 702).
- an access control device can be programmed at the factory or at setup with security keys, which can be updated as necessary.
- a user or service provider mobile device can be programmed with the ability to relay encrypted packets or other credentials (step 704). Users or service providers can download an application that can be pre-programmed or updated with appropriate credentials.
- a user or service provider mobile device can receive a credential, for example, an encrypted packet and set of instructions from a server, for example server 152, or other device, granting certain privileges and denoting certain access restrictions (step 706).
- the downloaded application can be updated via invitations to interact with other devices and can receive different capabilities based on the preferences of the user sharing the invitation.
- the mobile device After the mobile device receives the encrypted packet, it can store the encrypted packet for later use (step 708), e.g., when the mobile device comes in contact with an associated connected device.
- the user or service provider device can sense a connected or disconnected device in proximity (step 710) and provide the encrypted packet or instructions (step 712). Then the device can process encrypted packet and can perform the required function without the need to connect to the network to gain additional information (step 714).
- the disclosed system can also track the amenities and facilities utilization across a multi-unit building. Building managers can spend significant portions of their budgets on amenity spending to retain users.
- the disclosed system can quantify amenity usage across an entire building, groups of buildings, or an entire real estate portfolio through handshake tracking between users' devices and local systems. By positioning access control devices and other sensors within the larger envisioned system architecture, a complete record of building utilization can be generated. This information can be used to determine, for example, how many users in a particular building utilize the on-site gym facilities for purposes of assessing the relative value of that service or other such purposes that can be useful. Building managers can find this desirable in ascertaining how to retain current or attract new users, manage amenities, and spend their resources.
- the complete record of building utilization can be facilitated by background handshaking with installed hardware throughout the building, with the user's activity remaining wholly uninterrupted by these background processes.
- the system can detect if credentials are being used in a suspicious manner. For example, the system can detect that a particular user arrived and stayed at their unit, and then use this information to tag the attempted use of the user's credentials at one of the building's other access points. If this is determined to be suspicious, the system can alert the building manager.
- the system can overcome the security risks created by other systems that are reliant on non- traceable or non-associated access credentials.
- By tying authentication to a user's mobile device it becomes far less likely that users will share their access privileges through any other means aside from those prescribed by the building management system. This tight connection between users and authentication devices creates a better audit trail for building managers.
- the tracking information of building utilization can also have significant benefits for users of the building, as they would be able to view utilization data in real time to make decisions about when to use certain amenities. For example, a user can use their mobile device to access information from the local mesh network about how many people are using the on-site laundry facility at that given moment. This can enable the user to improve their amenity utilization experience by timing it such that they avoid wait times and other issues associated with over use of certain resources at certain times.
- An exemplary method 800 of tracking information of building utilization is illustrated in Fig. 8.
- Users can perform their regular activities in the building, for example, visit the lounge area, the terrace, the gym, the laundry room, while carrying their mobile devices (step 802).
- the access control devices located throughout the building can track active and passive activities of users across the building (step 804).
- an active activity can be accessing the laundry room.
- Passive activities can include, for example, the presence of five tenants in the gym area of a building, the presence of ten tenants on the roof deck of the building, or the presence of three tenants in the lobby of the building, who can be identified by the unique signature of their phone.
- the system can generate an active and passive activity log and can transmit the log to a server, for example, via a user's mobile device (step 806).
- the activity log can be analyzed, anonymized as appropriate, and made available to the building managers and the users (step 808). For example, the users can see the activity log on their mobile device (step 810). Based on the information, they can make appropriate decisions, for example, avoid wait times at busy locations in the building (step 812). In addition, user behavior can be provided to building management to improve building operations (step 814).
- Building management can change amenities to adapt to the analyzed data (step 816).
- this information can be utilized when designing new buildings and or proposing renovations to existing buildings (step 818).
- the user can also set smart triggers to notify them about building events or to notify them about the user's guests behavior in the building. For example, a notification can be provided when a guest enters the building's front door, arrives at the individual unit door, or when they access other facilities within the building.
- These smart triggers can be activated within the envisioned platform or through incorporation with other services, for example the "if this then that" (IFTTT) protocol.
- the disclosed system can provide key functionality through the local mesh network by pushing updates to users' devices via the building's network.
- the disclosed system can also track the location of building occupants in real time for rescue purposes.
- the local network can potentially search and locate building occupants by looking for their radio- frequency identifier. This capacity can allow rescue workers and building managers to ascertain if there are individuals left behind in a particular building and engage them through their devices.
- the local network communications capacity of the system can also be leveraged to provide communications between tenants in the building without the need for a persistent network connection. This can provide many capacities to a building operator or user, such as local social networks, advertising, and promotional communications. For example, a user can receive a message from another user via the local network, allowing both parties to know that the other is co-located on premises. This localized network can extend an existing network's functionality and create new functionality over time. [0071] Persons skilled in the art would understand that the disclosed system can be installed in existing buildings, as well as new buildings. Fig. 9 illustrates an exemplary method for installing and configuring the disclosed system.
- Access control devices are first installed at one or more locations of the building (step 902) and are registered to a central server (step 904). Then, the central server can assigns ownership and credentials over access control devices based on instructions from the building manager, for example, through a user interface (step 906). Subsequently, users can be assigned by the building manager as owners of the access control devices (step 908). Users can delegate credentials and instructions to their mobile devices and to other user and service provider devices (step 910). As discussed above, credentials and instructions can be sent to guest or service provider mobile devices via some digital means of transmission (step 912) and mobile devices can download and store the credentials for future use.
- Figs. 10-12 illustrate exemplary screenshots of an application running on a mobile device for providing access control management.
- Fig. 10 shows exemplary screenshots 1002 and 1004 that can provide tracking information to the user of the mobile device.
- screenshot 1002 provides access information 1008, for example, when the user accessed an access control device.
- the application can provide information relevant to the "Front Door,” the "Gym,” and the "Garage” access control points 1006.
- Screenshot 1004 provides, specific access information 1012 relevant only to the "Front Door” access control point.
- FIG. 11 shows exemplary screenshots 1102 and 1104 that can provide information to the user of the mobile device about a scheduled event 1106.
- screenshot 1102 can provide instructions 1108 about the date of the party, the access control devices that need to be accessed for the event, and the people invited to the event.
- Screenshot 1104 provides a list of the events associated with the user of the mobile device 1110 and a list of the invited guests.
- FIG. 12 shows exemplary screenshot for granting by a user access to a guest.
- Screenshot 1200 is a screenshot of an application running on a user mobile device.
- the user can select a particular guest 1206 and can specify, using the app, particular access control devices and associated time windows 1208 for granting to the guest access to these access control devices.
- the application can request from the server to generate the appropriate credentials for the guest, and the server can send the credentials to the guest's mobile device.
- Figs. 13A-13C show an exemplary system 1300 for voice-based authentication, according to embodiments of the present invention. Specifically, Fig. 13A shows user 1302 holding mobile device 1306 approaching door 1304. Door 1304 can be locked and/or unlocked through access control device 1308.
- Access control device 1308 can include a microphone 1310 and a speaker 1312.
- access control device 1308 can sense mobile device 1306 and, in response, can generate a passcode that can be used to unlock door 1304, if the mobile device has credentials that provide permission to the area secured by door 1304.
- access control device 1308 can generate a random numerical passcode or a verbal passcode.
- access control device 1308 can push the passcode to mobile device 1306.
- Mobile device 1306 can receive the passcode and can illustrate it in an application running on the mobile device 1306.
- Mobile device 1306 can also provide instructions to user 1302 to unlock door 1304.
- mobile device 1306 can determine the type of the particular passcode received by access control device 1308, e.g., verbal or numerical passcode, and can appropriately instruct user 1302. As shown in Fig. 13B, an application running on mobile device 1306 instructs the user to "UNLOCK BY SAYING COUNTRY17603" 1314. User 1302 can then speak the passcode
- access control device 1308 can receive verbal input from user 1302, e.g., from microphone 1310, can process it, and determine whether it corresponds to the passcode it pushed to mobile device 1306. If the received verbal input corresponds to the generated passcode (1316), then access control device 1308 can unlock door 1304. Access control device can provide audio instructions or appropriate messages to user 1302, e.g., through speaker 1312, for example, when user 1302 provides a correct passcode (1316) or a wrong passcode. According to alternate embodiments, if the generated passcode is a numerical passcode, an application running on mobile device 1306 can provide a numerical keypad, where user 1302 can enter the passcode.
- mobile device 1306 can transmit a signal to access control device 1308, which in turn can determine whether the received signal corresponds to a correct passcode or not. According to alternate embodiments, if the generated passcode is a numerical passcode, user 1302 can enter the numerical passcode on access control device 1308.
- the access control device can notify the user to speak the passcode another time.
- the access control device can notify the user to enter the passcode using a numeric keypad of the access control device.
- the access control device can authenticate the user.
- the access control device can capture and store data relevant to the access, such as, temperature, time, date, visual data, audio data, motion data, and battery status data.
- the data can be stored locally on the access control device and can be later transmitted to various parties, e.g., a central system that can analyze access patterns and statistics.
- the data can be transmitted to a central system using, for example, a wireless connection with a nearby mobile device that is authorized to receive and transmit data from the access control device either passively or actively. Data transmission can also happen through a connection with another device within proximity of the access control device or through a direct network connection within the access control device.
- FIG. 14 illustrates an exemplary method for providing access to an area, according to embodiments of the present invention.
- a user can approach a door with an access control device while carrying a mobile device that holds credentials that grant permission to the area behind the door 1402.
- the user can receive from the access control device, e.g., on the mobile device, a notification that includes an access code 1404.
- the user can speak the access code or can enter the access code in accordance with the instructs provided in the notification 1406.
- the access control device can receive the access code 1408, can validate it 1410, and can grant access to the area secured by the door it is installed on 1412.
- the access control device can secure the door, e.g., by locking the door, 1414.
- the disclosed methods and systems can provide valuable features beyond capturing and storing access data. For example, people who manage facilities are interested in monitoring the utilization of their facilities and tracking behavior of users and/or tenants of the facilities. Monitoring the number of users or people that pass through a particular access point, e.g., a store or a common area, is valuable.
- a retailer can install the disclosed access control device and track the number of times per day that the access point is utilized as a data point related to sales volume, and, for example, to forecast a longer term trend.
- the access control device can determine how many times the access point was activated, as well as, how many people passed through it, e.g., through one or more sensors and various algorithms. For instance, an access control device installed on a door can be programmed to detect every time the door is opened or closed. It can also be programmed to detect when a door has been opened and the number of subsequent persons that have entered through the door by detecting movement when the door is opened. Similarly, the disclosed access control device can detect when the door is opened and people are exiting through the door.
- the disclosed access control device can detect the presence of other users and their mobile devices.
- the access control device can have a persistent Bluetooth or other wireless communication protocol broadcasting or receiving input from other mobile devices for the purposes of marketing and other notification generation.
- the access control device can tracked mobile devices within range, log interactions with the mobile devices, and store, transmit, and/or utilize the information.
- the detection of specific devices can also be linked to other data sources to discover more about the presence of particular devices and their users.
- the access control device can capture data related with a user's online or other remote interaction with a product or service and then tie that information to the physical proximity of that user's device when they are within a space within range of the access control device. This can allow advertisers to link online or other remote interaction with a specific visit to a particular location, providing tailored notifications to users based on previously gathered data when they enter proximity or providing other notifications post entering proximity based on additional gathered data.
- All of the described various ways of detecting access and awareness of users and devices can be valuable for tracking the ways in which users and devices are interacting with specifically designated spaces in a building.
- One example use case for such an access control device is to manage deliveries to a specific space, e.g., a storage room, at a building. This specific space could be monitored by the access control device, which can regulate the access and limit the access to authorized users only, with their activities within that space tracked, stored, and utilized for future use.
- the access control device can monitor the utilization of specific spaces in buildings for purposes of assessing the usage of these areas.
- This usage data can be used to dynamically price access to a particular area based on demand for that space of amenities within the space.
- predictive models of space utilization can be created to optimize operations and performance of the space and also influence the design of future buildings to account for the appropriate resources in a given space to best maximize the monetization and functional possibilities of a space.
- Figs. 15A and 15B show an exemplary access control management system 1500, that can also provide "awareness" information, e.g., information about people accessing or using particular areas. Technologies that provide awareness information can include, cameras, proximity beacons, motion sensors, WiFi sensors, infrared (TR) sensors, audio sensors, visual sensors, accelerometers, position sensors, and other sensors that can detect a presences of one or more persons.
- Fig. 15A shows one or more users 1502 entering an area secured by door 1504.
- Door 1504 has access control device 1506 that can communicate ,e.g., wirelessly, with cloud service 1510.
- Access control device 1506 can detect the presence and/or identify of one or more of the users 1502 and can send information to cloud service 1510, e.g., information about the identified users.
- the area secured by door 1504 can be a retail shop that can have a counter with computing device 1508, e.g., a computer, a tablet device, a smartphone.
- Computing device 1508 can receive information from the access control device 1506 through cloud service 1510 or directly, e.g., through a local area network, where both control access device 1506 and computing device 1508 are connected to the same network, or a peer-to-peer network, e.g., Bluetooth.
- Computing device 1508 can use the received information to generate statistics 1512, e.g., foot traffic or revenue numbers, broken down by day, week, or other time periods.
- Figs. 16 and 17 show exemplary access control management systems 1600 and 1700, respectively, that can also provide proximity based notifications.
- Fig. 16 shows door 1602 with access control device 1604.
- Access control device 1604 can detect the presence of different users walking in its proximity, e.g., user 1606.
- access control device 1604 can identify mobile device 1608, e.g., through installed credentials in the mobile device, and can determine to send notifications 1610 to the mobile device, e.g., advertisements, announcements, or alerts.
- notification 1610 (“Get a free iced coffee when you buy a cupcake at Bakehouse") can be shown in a text message, an email, or on mobile device's lock screen.
- the access control device can identify a particular user and send a targeted notification, for example, by identifying their registered mobile device (sensing the mobile device), or by recognizing that a user has used a particular access credential associated with their profile, e.g., the user has used a particular credential to enter a particular area, e.g., a credential that grants access, e.g., to a common area or a gym at a building.
- the access control device can sense the presence of a particular user mobile device, e.g., through Bluetooth®, NFC®, Wi-Fi Direct®, etc.
- the control access device can respond, for example, with a notification on the screen of the access control device, a notification on a screen in communication with the access control device, such as an announcement screen, through a notification on the screen of the mobile device, through an SMS, an email, chat message, and/or other type of communication.
- the disclosed systems and methods can provide targeted advertisement notifications to users, for example, based on relevance to their particular interests, e.g., specified in a user profile, proximity, based on time of day (e.g., notification for lunch deals), time of year (e.g., holiday season), socioeconomic data, previous shopping history, previous internet browsing history, and user physical presence history. Notifications can relate to non-targeted advertisements, e.g., general advertisements about the building or another venue.
- Fig. 17 shows door 1702 with access control device 1704.
- Access control device 1704 can detect the presence of user 1706.
- access control device 1704 can identify mobile device 1708, e.g., through installed credentials in the mobile device, and can determine to send alert 1710 to the mobile device, e.g., an alert related to
- notification 1710 (“TF£E ELEVATOR 'A' IS OUT OF SERVICE”) can be shown in a text message, an email, or on mobile device's lock screen.
- Fig. 18 shows an exemplary access control management system 1800.
- door 1802 can provide access through access control device 1804 to a storage area 1810, e.g., a room to store packages 1812.
- User 1806 can be a manager for the package delivery and can provide credentials, e.g., through mobile device 1814, to a delivery crew 1808.
- delivery crew 1808 can be scheduled to deliver or pick up a package to/from storage area 1810 during a particular time window.
- Mobile device 1810 of a member of delivery crew 1808 can receive the access credentials, e.g., a numeric passcode, which can be entered on a keypad of access control device 1804.
- Fig. 19 shows an exemplary method 1900 for access control and awareness using an access control device.
- a non-credentialed user can approach an area that is controlled by an access control device (step 1902) or multiple access control devices.
- the access control device can detect the user or user device's presence and/or motion (step 1904). Based on the captured information, the access control device can assess the number of users present in the area, and the type or duration of their activity (step 1906).
- the access control device can optionally store the information locally, e.g., at a memory installed in the access control device, and can later send the store information to a central system for aggregate processing (step 1908).
- the access control device can transmit the information to a central system.
- the central system can combine the received information from one or more access control devices and can aggregate the data to generate statistics (step 1910). For example, the system can compare the presence of users (and their mobile devices) to known users (and mobile devices) and can provide relevant data to the system (step 1912). Based on the data, the system can determine whether the user or device can be associated with a previously known advertisement impression or engagement targeting (step 1914).
- the access control device can store historical information about users and their mobile device.
- the mobile devices can store information about the access control devices and then respond when a particular access control device is detected by the mobile device.
- the system can then send relevant notification to all relevant parties about access and awareness at a particular location (step 1916).
- the relevant parties can include, for example, service providers, such as Amazon®, Seamless®, delivery services, such as FedEx® or UPS®, building manages, security companies, insurance providers, and advertisers.
Landscapes
- Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Health & Medical Sciences (AREA)
- Computing Systems (AREA)
- General Health & Medical Sciences (AREA)
- Medical Informatics (AREA)
- Telephonic Communication Services (AREA)
- Telephone Function (AREA)
- Time Recorders, Dirve Recorders, Access Control (AREA)
- Lock And Its Accessories (AREA)
- Selective Calling Equipment (AREA)
Abstract
Description
Claims
Priority Applications (5)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
AU2017324945A AU2017324945A1 (en) | 2016-09-06 | 2017-09-06 | Methods and systems for access control and awareness management |
JP2019533308A JP6970201B2 (en) | 2016-09-06 | 2017-09-06 | Methods and systems for access control and awareness management |
CN201780068142.3A CN109923592B (en) | 2016-09-06 | 2017-09-06 | Method and system for access control and awareness management |
EP17849488.6A EP3510566A4 (en) | 2016-09-06 | 2017-09-06 | Methods and systems for access control and awareness management |
AU2023210587A AU2023210587A1 (en) | 2016-09-06 | 2023-08-02 | Methods and systems for access control and awareness management |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US15/257,750 | 2016-09-06 | ||
US15/257,750 US9666000B1 (en) | 2014-01-04 | 2016-09-06 | Methods and systems for access control and awareness management |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2018048956A1 true WO2018048956A1 (en) | 2018-03-15 |
Family
ID=61562343
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2017/050353 WO2018048956A1 (en) | 2016-09-06 | 2017-09-06 | Methods and systems for access control and awareness management |
Country Status (5)
Country | Link |
---|---|
EP (1) | EP3510566A4 (en) |
JP (1) | JP6970201B2 (en) |
CN (2) | CN113989959A (en) |
AU (2) | AU2017324945A1 (en) |
WO (1) | WO2018048956A1 (en) |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP3828837A1 (en) * | 2019-11-26 | 2021-06-02 | NCR Corporation | Frictionless security processing |
WO2021219492A1 (en) * | 2020-04-29 | 2021-11-04 | Dormakaba Schweiz Ag | Security control module and system |
EP3827420A4 (en) * | 2018-07-24 | 2022-05-04 | Validvoice, Llc | System and method for biometric access control |
EP4020420A1 (en) * | 2020-12-24 | 2022-06-29 | Nagravision Sàrl | Wireless control with location of control device |
US11676432B2 (en) | 2020-03-17 | 2023-06-13 | Sony Group Corporation | Electronic device, an access control device, and related methods |
Families Citing this family (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10977885B1 (en) * | 2019-10-03 | 2021-04-13 | GM Global Technology Operations LLC | Method for digital key misbehavior and sybil attack detection through user profiling |
CN111371770B (en) * | 2020-02-28 | 2020-12-22 | 乐清市川嘉电气科技有限公司 | Intelligent dynamic authorization system and method for foreign visitor |
US11821236B1 (en) | 2021-07-16 | 2023-11-21 | Apad Access, Inc. | Systems, methods, and devices for electronic dynamic lock assembly |
WO2023247061A1 (en) * | 2022-06-20 | 2023-12-28 | Assa Abloy Ab | Changing the communication mode of an access control protocol |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20070146118A1 (en) * | 2004-11-12 | 2007-06-28 | Yan Rodriguez | Networked movable barrier operator system |
US8358197B2 (en) * | 2006-06-12 | 2013-01-22 | Tran Bao Q | Mesh network door lock |
Family Cites Families (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2012023153A1 (en) * | 2010-08-20 | 2012-02-23 | Eknath Ramkrishnamurti Puliadi | A mobile phone operable electro-mechanical lock and a method thereof |
US20130335193A1 (en) * | 2011-11-29 | 2013-12-19 | 1556053 Alberta Ltd. | Electronic wireless lock |
CN202534028U (en) * | 2012-03-21 | 2012-11-14 | 济南大学 | Internet of things authorization identity (ID) and ID card confirmation-based networked access control system |
CN203271342U (en) * | 2013-04-02 | 2013-11-06 | 广州国保科技有限公司 | Internet of Things coded lock |
JP6155817B2 (en) * | 2013-04-30 | 2017-07-05 | 株式会社リコー | Authentication program, authentication device, and authentication system |
CN103236102B (en) * | 2013-05-02 | 2018-08-17 | 上海永天科技股份有限公司 | Ground Connection in Intelligent Building energy management system based on technology of Internet of things |
CN105225305A (en) * | 2015-07-07 | 2016-01-06 | 江苏申辰通信技术有限公司 | A kind of passive smart lock system and method for operating thereof |
-
2017
- 2017-09-06 AU AU2017324945A patent/AU2017324945A1/en not_active Abandoned
- 2017-09-06 CN CN202111209368.5A patent/CN113989959A/en active Pending
- 2017-09-06 CN CN201780068142.3A patent/CN109923592B/en active Active
- 2017-09-06 EP EP17849488.6A patent/EP3510566A4/en not_active Withdrawn
- 2017-09-06 WO PCT/US2017/050353 patent/WO2018048956A1/en unknown
- 2017-09-06 JP JP2019533308A patent/JP6970201B2/en active Active
-
2023
- 2023-08-02 AU AU2023210587A patent/AU2023210587A1/en active Pending
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20070146118A1 (en) * | 2004-11-12 | 2007-06-28 | Yan Rodriguez | Networked movable barrier operator system |
US8358197B2 (en) * | 2006-06-12 | 2013-01-22 | Tran Bao Q | Mesh network door lock |
Cited By (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP3827420A4 (en) * | 2018-07-24 | 2022-05-04 | Validvoice, Llc | System and method for biometric access control |
US11935348B2 (en) | 2018-07-24 | 2024-03-19 | Validvoice, Llc | System and method for biometric access control |
EP3828837A1 (en) * | 2019-11-26 | 2021-06-02 | NCR Corporation | Frictionless security processing |
US11676432B2 (en) | 2020-03-17 | 2023-06-13 | Sony Group Corporation | Electronic device, an access control device, and related methods |
WO2021219492A1 (en) * | 2020-04-29 | 2021-11-04 | Dormakaba Schweiz Ag | Security control module and system |
US11875624B2 (en) | 2020-04-29 | 2024-01-16 | Dormakaba Schweiz Ag | Security control module and system |
EP4375957A1 (en) * | 2020-04-29 | 2024-05-29 | dormakaba Schweiz AG | Security control module and system |
EP4020420A1 (en) * | 2020-12-24 | 2022-06-29 | Nagravision Sàrl | Wireless control with location of control device |
Also Published As
Publication number | Publication date |
---|---|
EP3510566A1 (en) | 2019-07-17 |
AU2023210587A1 (en) | 2023-08-24 |
JP6970201B2 (en) | 2021-11-24 |
CN109923592A (en) | 2019-06-21 |
JP2019536176A (en) | 2019-12-12 |
EP3510566A4 (en) | 2020-04-29 |
CN109923592B (en) | 2021-11-05 |
AU2017324945A1 (en) | 2019-03-28 |
CN113989959A (en) | 2022-01-28 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US11151816B2 (en) | Methods and systems for access control and awareness management | |
US9437063B2 (en) | Methods and systems for multi-unit real estate management | |
AU2023210587A1 (en) | Methods and systems for access control and awareness management | |
US11625965B2 (en) | Smart building integration and device hub | |
US11595777B2 (en) | Electronic location identification and tracking system with beacon clustering | |
CN110168620B (en) | Access control system with message transmission | |
CA2997954C (en) | Device enabled identity authentication | |
US20210082216A1 (en) | Electronic access control and location tracking system | |
CN104517338B (en) | Distance entrance and its implementation based on wireless network | |
US20160049028A1 (en) | Electronic access control and location tracking system | |
US20140019768A1 (en) | System and Method for Shunting Alarms Using Identifying Tokens | |
JP2019520281A (en) | Mobile visitor management | |
US20140002236A1 (en) | Door Lock, System and Method for Remotely Controlled Access | |
US20130214902A1 (en) | Systems and methods for networks using token based location | |
US11594085B2 (en) | Electronic identification, location tracking, communication and notification system with beacon clustering | |
US9741187B2 (en) | Distributed access control | |
CA2976430C (en) | Presence monitoring | |
US20220254212A1 (en) | Systems and techniques to provide smart access capabilities in a smart system environment | |
WO2022063380A1 (en) | Access system with an electronical lock | |
KR20140035543A (en) | Method and apparatus for providing information for safety visit service, and method and apparatus for authenticating call for safety visit service |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 17849488 Country of ref document: EP Kind code of ref document: A1 |
|
ENP | Entry into the national phase |
Ref document number: 2019533308 Country of ref document: JP Kind code of ref document: A |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
ENP | Entry into the national phase |
Ref document number: 2017324945 Country of ref document: AU Date of ref document: 20170906 Kind code of ref document: A |
|
ENP | Entry into the national phase |
Ref document number: 2017849488 Country of ref document: EP Effective date: 20190408 |