WO2021160965A1

WO2021160965A1 - Methods for controlling access and system implementing said methods

Info

Publication number: WO2021160965A1
Application number: PCT/FR2021/050237
Authority: WO
Inventors: Arthur AUBIN; Christine BATTENDIER; Stephanie Huerre; Julien BIARD; Cyril BOSSELUT; Killian NGUYEN NGOC THOAI; Benjamin RAYMOND
Original assignee: C3A
Priority date: 2020-02-11
Filing date: 2021-02-10
Publication date: 2021-08-19
Also published as: EP4104479A1; FR3107153A1; FR3107153B1

Abstract

A system for controlling access comprising at least one electronic access control box (2) and a remote access control server (3). The access control box (2) includes security keys in a memory, including a valid security key. The remote access control server is adapted to communicate with multi-function mobile units (4) that have downloaded a local access control application (APP) and that also have security keys in a memory. A method for controlling access implemented in said box and adapted to communicate with the multi-function mobile units (4). The method for controlling access comprises a step of updating the valid security key of the box, the instruction of which is addressed by an active multi-function mobile unit (4). A method for periodically updating a valid security key for the method for controlling access implemented in the remote access control server.

Description

Title of the invention: Access control methods and system implementing said methods

The present invention relates to the control of access to a closed space.

In particular, it relates on the one hand to an access control method and an access control electronic box implementing said access control method. It also relates to a method for updating a valid security key as well as to a remote access control server implementing said updating method. Finally, it relates to an access control system comprising at least one electronic access control unit and at least one remote access control server.

The present invention finds its application for any closed space whose access can be controlled. Indeed, the problem of access control can arise in various fields and situations. By way of nonlimiting examples, the closed space to which access is to be controlled can be a place such as a parking lot or a house, an area or part of a place such as a box in a parking lot or a room in a house, an object such as a car or a trunk, etc.

In this context, access control systems are known in the prior art using radio frequency remote controls, magnetic badges, or even access codes (digicodes). This type of access control system, although functional, has its limits since it requires an access tool (badge, remote control, etc.) specially dedicated to each person and / or does not allow access to be limited in time. . Indeed, a person in possession of the badge, the remote control or the code can reuse it at any time to access the closed space. However, it may be desirable to authorize access only for a given time, for example to one person, or even to several people, other than the usual user of the access control system. A security problem also arises in the event, for example, of loss of the access tool or knowledge by third parties of the access code. Access control systems are also known using GSM boxes, recognition means (license plate recognition in the case of a parking lot, for example), or even means of interaction between machines (machine to machine in English abbreviated as M2M) connected. Although these types of systems provide better security, they require more expensive technology.

Document US 2002 0135461 describes for example an access control method and an access control box to a parking space implementing said method. This unit is controlled by a device installed in a vehicle and is also connected to a computer device making it possible to manage and store the access codes. The case of this document as constituted is particularly expensive and complicated to manufacture since it requires, in addition to a control device, a computer device and means of connection to said computer device for the management of access codes.

The object of the present invention is to solve at least one of the aforementioned drawbacks.

According to a first aspect, the invention relates to an access control method implemented in an electronic access control unit suitable for communicating with multifunction mobiles, comprising the following steps:

- reception of a security key addressed by one of said multifunction mobiles;

comparison of said security key received with a valid security key stored in said electronic access control unit; and

transmission of an access authorization signal when said received security key is identical to said valid security key.

According to the invention, said access control method comprises a step of updating said valid security key, comprising the following sub-steps:

acquisition of an update instruction sent by an active multifunction mobile, said instruction including a new security key; - Substitution of said valid security key by a second security key stored in said electronic access control unit;

- storage of said new security key as a second security key in said electronic access control unit; and

- sending an update confirmation message to the active multifunction mobile phone.

Thanks to the method of the invention, the electronic access control unit can be updated easily and only using a multifunction mobile. The multifunction mobile is not only suitable for controlling the box but also for updating it. The solution thus proposed saves the use of additional computing device for the update.

The invention is particularly well suited to a system in which the electronic access control unit is not connected to a remote computing device.

The update helps to ensure better security. Indeed, a person in possession of a valid security key at an instant t, will be able to control access by means of the access box for a given period, but once an update of the box is carried out, the security key in his possession will no longer be valid, preventing him from controlling access. The security key can thus be renewed for security for the usual user or to give temporary access to an authorized person other than the usual user.

The method according to the invention also makes it possible to grant access authorization to several people. This can be useful, for example, if you want to allow access to a car park for several people but for a fixed period only.

According to one characteristic, the step of acquiring an update instruction is implemented after said steps of receiving and comparing a security key addressed by said active multifunction mobile, when said received security key is different from said valid security key. Thus, as soon as the security key received is different from the valid security key, an update of the access control electronic unit is carried out so as to authorize access by means of the second security key which has become a key. valid security. The box then subsequently emits an access authorization signal if a multifunction mobile sends it the second security key which has become a valid security key.

According to one characteristic, the step of updating the valid security key further comprises, when said received security key is different from said valid security key, a prior sub-step of comparing said received security key with said second stored security key, the acquisition, substitution, storage and sending sub-steps being performed when said received security key is identical to said second stored security key.

In other words, the update is started only if the user has the correct access code, namely here the second security key. This avoids having to update the box even if the user does not have or no longer has a code or security key allowing him access.

The invention also relates, according to a second aspect, to an electronic access control box comprising means for bidirectional communication with multifunction mobiles, means for storing a valid security key and a second security key and means. processing adapted to implement the access control method described above.

The box thus produced is less complex to manufacture, uses only two-way communication means and is thus less expensive.

According to one characteristic, the box comprises means for connection to means for controlling the opening of an access using an electronic lock with a predefined alphanumeric code, or a radiofrequency transmitter-receiver pair or a transmitter-receiver pair by technology. magnetic. The box can thus be mounted in parallel with an existing access control system using said access opening control means. In this way, an authorized person other than the usual user can also obtain an access authorization. The usual user can for example have the access authorization via the existing access control system and the authorized person can have the access authorization via the box. This use is all the more interesting as the access authorization of the authorized person can be limited in time.

The box can be used alone or in combination with an existing system.

According to one characteristic, the two-way communication means implement a link by UHF radio waves, and preferably the Bluetooth standard.

The invention also relates, according to a third aspect, to a method for periodically updating a valid security key for the access control method described above, implemented in a remote access control server adapted to communicate. with multifunction mobiles that have downloaded a local access control application.

The periodic update process includes the following steps

sending to said multifunction mobiles a new security key to be stored as a future security key in said downloaded local application;

sending to said multifunction mobiles an instruction to update an access control electronic unit;

- receipt of an update confirmation message sent by a multifunction mobile active among said multifunction mobile; and

- sending a message to delete the update instruction from said electronic access control unit to said multifunction mobiles.

By carrying out periodic updates, this makes it possible to limit access to the unit over time, thus responding on the one hand to problems temporary access and on the other hand to improve the security of access control to the box.

In addition, once the update of the box is carried out by the active multifunction mobile, the server is notified and sends the deletion message to all the multifunction mobiles. This prevents an update instruction from being sent to the box when the box is already up to date.

According to one characteristic, the method of periodically updating a security key valid for the access control method is reiterated between every day and every 10 days, and preferably between every 2 days and every 5 days. days.

According to a fourth aspect, the invention also relates to a remote access control server suitable for communicating with multifunction mobiles which have downloaded a local access control application. Said server is suitable for implementing the method of periodically updating a valid security key described above.

According to a fifth aspect, the invention also relates to an access control system comprising at least one electronic access control unit, and a remote access control server having the preceding characteristics. Other features and advantages of the invention will become apparent in the description below with reference to the appended drawings, given by way of non-limiting examples:

- Figure 1 is a schematic block diagram of an access control system for implementing one or more embodiments of the invention;

- Figure 2 is a schematic block diagram of an access control box according to one embodiment of the invention;

FIG. 3 is a schematic block diagram of an access control box according to another embodiment of the invention; FIG. 4 diagrammatically represents the steps of an access control method implemented in the box; and FIG. 5 schematically represents the steps of a periodic updating method implemented in a server for said access control method.

FIG. 1 illustrates, in a schematic block diagram, an exemplary embodiment of an access control system 1 comprising an access control electronic box 2 and a remote access control server 3. The control system access 1 is configured so as to allow or deny access to a closed space to a user. The access control system 1 also comprises at least one multifunction mobile 4. Said at least one multifunction mobile 4 is connected on the one hand to the box 2 and on the other hand to the server 3. A single multifunction mobile 4 is illustrated for the example of Figure 1, but of course the number of multifunction mobile 4 can vary.

The access control electronic box 2, also referred to hereinafter as box 2, is shown more precisely in Figure 2.

The box is powered, for example by cables allowing a power supply between 9 and 36 VDC. This is shown schematically in the block diagram by power supply 20.

The box 2 comprises bidirectional communication means 21, 22. The bidirectional communication means here comprise an antenna 21 and a module 22. The bidirectional communication means are adapted to implement a link by radio waves so as to receive and send. signals to multifunctional mobiles 4. In this case, the antenna 21 is suitable for implementing a link by UHF radio waves, for example the Bluetooth standard. The module 22 is suitable for processing the signal received and sent via the antenna 21.

The box 2 further comprises storage means and processing means. The memorization means are suitable for memorizing security keys. In particular, in the embodiment described, the storage means are suitable for storing a valid security key and a second security key. The second security key is considered a future valid security key, i.e. the next security key to be authorized access. The processing means are suitable for implementing an access control method described below according to one embodiment of the invention. In the exemplary embodiment shown schematically, the box 2 comprises a microcontroller 23 integrating the storage means and the processing means. Of course, the storage means and the processing means can be designed differently.

The microcontroller 23 is connected to the module 22 which is itself connected to the antenna 21. The microprocessor 23 emits a discrete output signal (all or nothing) as shown diagrammatically in FIGS. 2, 3. Thanks to the discrete output signal, the box 2 may or may not allow access to a closed space.

In an exemplary embodiment shown schematically in Figure 3, the housing 2 is mounted in parallel with an existing system. For example, the box comprises means for connecting the microprocessor 23 to control means 24 for opening access to the existing system. The access opening control means can implement an electronic lock with a predefined alphanumeric code, or a radiofrequency transmitter-receiver pair, or even a transmitter-receiver pair by magnetic technology. In this example, the connection means send the digital output signal to the control means, which makes it possible to control access. Thus, box 2 can be used alone to control access as shown in Figure 2, or in conjunction with an existing system as shown in Figure 3.

The remote access control server 3 or server 3 can be of any known type, responding to requests from computer devices. In the exemplary embodiment described, the server 3 responds to requests from multifunction mobiles 4.

The multifunction mobiles 4 include an access control APP application allowing connection to the box 2 and to the server 3. The connection is made by network connection, for example of the WIFI type. The APP application is suitable for memorizing security keys. In particular, the application APP is suitable for memorizing two security keys addressed by the server 3; a first security key and a second security key stored as a future security key.

Figure 4 shows schematically the general operation of the box 2, by means of the connection with the multifunctional mobiles 4 to control access to a closed space.

The left part of FIG. 4 illustrates the box 2 at an instant t0 before being controlled by a multifunction mobile 4. The storage means of the box 2 include in memory a valid security key V1 and a second security key V2. A valid security key is understood to mean the security key used to control access. The second V2 security key is the future valid security key allowing access.

The right part of FIG. 4 illustrates a multifunction mobile 4 in which the application APP has been downloaded beforehand. The APP application here includes in memory two security keys addressed by the server; the first security key Va1 and the second security key Va2.

The access control method implemented in the box 2 is such that the multifunction mobile firstly addresses a security key, in particular here the first security key Va1, to the box 2. The box 2 receives thanks to the bidirectional communication means and compares, thanks to the storage and processing means, the received security key Va1 with the valid security key V1 stored in said box 2.

When the received security key Va1 is identical to the valid security key V1, box 2 then emits an access authorization signal, in particular via the digital output signal.

When the received security key Va1 is different from the valid security key V1, box 2 does not emit an access authorization signal.

As explained later with reference to FIG. 5, in this case, the received security key Va1 can be compared with the second security key V2 and an update instruction (Update) can be sent by the mobile. multifunction 4 to the box 2 possibly allowing access by means of another security key, in particular the second security key V2.

In order to improve the security of access control, and for example to prevent a security key from remaining valid for too long a period of time, update steps are provided for, on the one hand, by the server 3 in the multifunction mobiles 4, and on the other hand by multifunction mobiles 4 in the box 2. These steps make it possible to update the valid security key allowing access to be authorized.

In particular, an update step is carried out periodically by the server 3 in the multifunction mobiles 4 connected to said server 3. The periodic update can be repeated between every day and every 10 days. Preferably, the periodic update is repeated between every two days and every five days.

When the connection is broken for any reason between a multifunction mobile 4 and the server 3, the periodic update can be performed as soon as the connection is reestablished.

This periodic update step is shown schematically in FIG. 5. It is implemented here for three multifunction mobiles 4. Of course, the number of multifunction mobiles 4 can be different.

In the example of this figure, at an initial instant t0 before any update, the server 3, the box 2 and the multifunction mobiles 4 all include in memory two security keys, the valid security key V1, and a second V2 security key (or future valid security key).

The server 3 firstly sends the multifunction mobiles 4 a new security key V3 to be stored as a future security key in the application APP.

Secondly or at the same time, the server 3 also sends the multifunction mobiles 4 an instruction to update the box 2.

On receipt of the new security key V3, the APP application of multifunction mobiles 4 replaces the valid security key V1 with the second key security key V2, and stores the new security key V3 as a new second security key or future valid security key.

At this stage, all the multifunction mobiles 4 connected to the server 3 are updated, that is to say in this example, they have V2 in memory as a valid security key and V3 as a second security key.

In addition, all multifunction mobiles 4 connected to server 3 have in memory the unit 2 update instruction sent by server 3.

If a multifunction mobile 4 is not connected to the server 3 at the time of the update step, the multifunction mobile 4 receives the new key V3 and the instruction to update the unit 2 as soon as the connection with server 3 is restored.

Insofar as the access control in the box 2 is carried out one by one, a multifunction mobile 4 among the multifunction mobiles 4, here among the three multifunction mobiles 4, is active first. In this case, by active multifunction mobile 4 is meant a multifunction mobile 4 connected to the box 2 in order to try to obtain access.

The active multifunction mobile 4 having been updated by server 3, said active multifunction mobile 4 addresses the security key V2 or valid security key stored by the multifunction mobile 4. This security key V2 is at this stage different from the key valid security V1 stored in box 2.

Thus, when the active multifunction mobile 4 addresses the security key V2, the box 2 does not allow access since the received security key V2 is different from the valid security key V1 of the box 2.

In the embodiment described, the box 2 then compares in this case the received security key V2 with the second security key stored in the box 2. When the security key addressed by the multifunction mobile, here V2, is identical to the second security key stored in the box, a step of updating the box 2 is then performed.

The multifunction mobile 4 then sends the new security key V3 stored in the mobile 4 as a future valid security key. The valid security key V1 stored in unit 2 is replaced by the second security key V2 stored in unit 2. Unit 2 also stores the new security key V3 as second security key or future valid security key.

Box 2 is thus updated. The two keys stored in box 2 correspond to the two keys stored in the APP application of multifunction mobiles 4.

Finally, the unit 2 sends an update confirmation message to the active multifunction mobile 4. The active multifunction mobile 4 therefore sends the update confirmation message to the server 3. The server 3 then sends a message for deleting the update instruction from the box 2 to the multifunction mobiles 4 connected to said server 3. This is shown schematically in the figure by a dotted arrow.

Thus, once a multifunction mobile 4 of a first user has updated the box 2, another multifunction mobile 4 of another user does not need to update it and can therefore directly have the access as long as he has the valid security key.

In the description given, the multifunction mobiles 4 and the box 2 always have two memorized security keys. On leaving the factory, box 2 may contain only one security key; the valid security key. A blank slot is thus provided in the housing for the second security key. An initialization step of the box 2 and of the multifunction mobiles 4 can therefore be provided. The initialization step firstly comprises a sub-step for sending by the server the valid security key and a second security key to the multifunction mobiles as well as a sub-step for sending a box initialization instruction. An active multifunction mobile 4 can then start the initialization of the box 2. The initialization of the box 2 is carried out according to the following substeps:

- Receipt by box 2 of a security key addressed by said active multifunction mobile;

- Comparison of said security key received with the valid security key stored in the box;

- acquisition of an initialization instruction sent by the active multifunction mobile when said security key received is identical to the valid security key stored in the housing, said instruction including the second security key;

- storage of the second security key in the blank slot in the housing; and

- sending of an initialization confirmation message to said active multifunction mobile.

Finally, the server also receives an initialization confirmation message from the active multifunction mobile. It then sends a message to delete the initialization instruction from the box to the multifunction mobiles.

The box 2 is thus initialized and includes in memory the valid security key and the second security key.

Of course, the present invention is not limited to the embodiments described and illustrated.

The connection, processing and storage means of the box can be of any other known type.

The number of security keys stored in the multifunction mobile application and in the box may be different, and in particular greater than two.

In the example shown in Figure 4 and described above, the multifunction mobile addresses a single security key, here the first security key Va1. In another example not shown, the multifunction mobile can, if the first security key Va1 is refused because it is different from the valid security key V1 and from the second security key V2 of the box 2, then address the second key safety Va2. The second security key Va2 then undergoes the same processing undergone by the first security key Va1. In other words, the second security key Va2 of the multifunction mobile is compared to the valid security key V1 of the box. When the received security key Va2 is different from the valid security key V1, box 2 does not emit an access authorization signal.

In a still different embodiment (not shown), the multifunction mobile can simultaneously address the first security key Va1 and the second security key Va2 to box 2. Box 2 then first compares the first security key Va1 received with the valid security key V1, then possibly with the second security key V2 or future security key valid if the first security key Va1 received is different from said valid security key V1. If the first security key Va1 received is different from the valid security key V1 and from the second security key V2 of the box 2, the box 2 then passes to the comparison of the second security key Va2 received from the multifunction mobile. The box 2 therefore compares the second security key Va2 received with the valid security key V1, then possibly with the second security key V2 or future valid security key if the second security key Va2 received is different from said security key. valid V1.

The comparison of two security keys sent by the multifunction mobile 4 to the security keys stored in the box 2 makes it possible to prevent a multifunction mobile 4 which could not be updated once by the server 3 find for example in the impossibility of controlling access via box 2. Thus, this possibility of using the second security key of the multifunction mobile serves as a sort of spare wheel, if for example the connection had been broken between the server 3 and the multifunction mobile 4 for a certain period, thus leaving the multifunction mobile 4 not updated.

It can also be provided in one embodiment, when a first addressed security key Va1 and a second security key Va2 addressed by a multifunction mobile 4 is different from the valid security key V1 and from the second security key V2 of the box 2, then said multifunction mobile 4 loses the right to attempt access at least momentarily to the box 2. For example, the IP address is blocked for said multifunction mobile. This makes it possible, for example, to prevent a malicious person from trying to control access to box 2 by making several attempts to send security keys (here more than two security keys).

In an exemplary embodiment, provision is made to launch the step of periodically updating the multifunction mobiles only if at the end of the step of previous periodic update, an update confirmation message was sent by a multifunction mobile 4 to the server 3. This prevents the box 2 and the multifunction mobiles 4 from having completely different security keys in memory. The present invention thus proposes a solution for controlling access to a closed space that is simple and employs few technical means. It only requires two-way communication for control of the enclosure. The connection between the multifunction mobiles and the server is only useful during periodic updates of the multifunction mobiles and can therefore be broken in the meantime.

The present invention also allows temporary access, which improves the security of access control and can be useful in various situations: one-off access authorization to a person other than the usual user, access authorization to several people. for the same closed space, etc.

Claims

1. Access control method implemented in an electronic access control unit (2) suitable for communicating with multifunction mobiles (4), comprising the following steps:

- reception of a security key addressed by one of said multifunction mobiles (4);

- comparison of said security key received with a valid security key stored in said electronic access control unit (2); and

- Transmission of an access authorization signal when said received security key is identical to said valid security key, characterized in that it comprises a step of updating said valid security key, comprising the following -following steps :

- acquisition of an update instruction sent by an active multifunction mobile (4), said instruction including a new security key;

- substitution of said valid security key by a second security key stored in said electronic access control unit (2);

- storage of said new security key as a second security key in said electronic access control unit (2); and

- sending an update confirmation message to the active multifunction mobile (4).

2. Access control method according to claim 1, characterized in that the step of acquiring an update instruction is implemented after said steps of receiving and comparing a security key. addressed by said active multifunction mobile (4), when said received security key is different from said valid security key

3. Access control method according to claim 2, characterized in that the step of updating the valid security key comprises in furthermore, when said received security key is different from said valid security key, a preliminary sub-step of comparing said received security key with said second stored security key, the sub-steps of acquisition, substitution, storage and sending being performed when said received security key is identical to said second stored security key.

4. Electronic access control box comprising two-way communication means (21, 22) with multifunction mobiles (4), means for memorizing a valid security key and a second security key and means processing systems suitable for implementing the access control method according to one of claims 1 to 3.

5. Electronic access control unit according to claim 4, characterized in that it comprises means for connection to control means (24) for opening an access implementing an electronic lock with alphanumeric code. predefined, or a radiofrequency transmitter-receiver pair or a transmitter-receiver pair by magnetic technology.

6. Electronic access control unit according to one of claims 4 or 5, characterized in that the two-way communication means (21, 22) implement a link by UHF radio waves, and preferably the Bluetooth standard. .

7. A method of periodically updating a valid security key for the access control method according to one of claims 1 to 3, implemented in a remote access control server adapted to communicate with multifunction mobiles (4) having downloaded a local access control application (APP), characterized in that it comprises the following steps: - Sending to said multifunction mobiles (4) of a new security key to be stored as a future security key in said downloaded local application (APP);

- sending to said multifunction mobiles (4) an instruction to update an electronic access control unit (2);

- receiving an update confirmation message sent by a multifunction mobile active among said multifunction mobile (4); and

- sending a message to delete the update instruction from said electronic access control unit (2) to said multifunction mobiles (4).

8. Method for periodically updating a valid security key for the access control method according to claim 7, characterized in that said periodic updating method is reiterated between every day and every 10 days. , and preferably between every 2 days and every 5 days.

9. Remote access control server suitable for communicating with multifunction mobiles (4) having downloaded a local application (APP) for access control, characterized in that it is suitable for implementing the updating method. periodic update of a valid security key according to one of claims 7 or 8.

10. Access control system comprising at least one electronic access control unit (2) according to one of claims 4 to 6, and a remote access control server (3) according to claim 9 .