EP2085934B1

EP2085934B1 - Method and system of registering a mobile unit used as an electronic access key

Info

Publication number: EP2085934B1
Application number: EP20080388005
Authority: EP
Inventors: Morten Nielsen; Ebbe Andersen; Ole Nielsen
Original assignee: Bekey AS
Current assignee: Bekey AS
Priority date: 2008-01-31
Filing date: 2008-01-31
Publication date: 2013-07-17
Anticipated expiration: 2028-01-31
Also published as: EP2085934A1; DK2085934T3

Description

Field of the invention

This invention generally relates to registering a mobile unit adapted to be used as storage device for an electronic key. More particularly, the invention relates to a method of registering a mobile unit adapted to be used as storage device for an electronic key, which is used to obtain access to a location.
Further described herein are examples of a method of controlling access to a location secured by a lock mechanism. More particularly, further described herein is a method of controlling access to a location controlled by a lock control unit comprising means for wireless communication with a mobile unit.

Background of the invention

WO 01/40605 describes a method and a system for controlling access to a location secured by a lock mechanism controlled by a lock control unit, which may provide a high degree of flexibility and a high level of security; the method comprises the steps of storing a first access code in the lock control unit; the first access code being indicative of a predetermined access right to the location; storing a second access code in a second storage means; using an electronic key device for requesting access to the location by initiating transmitting the access code from the second storage means to the lock control unit; comparing the transmitted second access code with the first access code; and if the first access code corresponds to the second access code, initiating operating the lock mechanism; this document further relates to a method of managing a predetermined access right to a location.
JP2004088339 describes a system, where a program and electronic keys to a vehicle are downloaded from a server after authentification. The server captures a registration ID from a mobile telephone via public line network, and if a personal authentification result is correct, the server allows the mobile telephone to download a program, a sub ID and a time stamp. When the mobile telephone downloades the sub ID, the sub ID acts like a key. When the connection between the mobile telephone and the vehicle is established and a collation result of the sub ID of the mobile telephone indicates coincidence, the mobile telephone performs various operations of the vehicle.
US20030208386 describes a hotel-booking system, where a person can book/reserve a hotel room by use of a mobile telephone. The system downloads a key to the mobile phone, and the key is transferred via Bluetooth technology to the door lock at the hotel, when the person arrives. The booking/reservation is based on typical web-applications, e.g. Java or wireless application control (WAP), whereby access to the internet is obtained via the mobile telephone.
WO 2005/024553 describes a device, method, system and computer readable medium which allows for using a short-range address, such as a BluetoothTM address, to identify a cellular device and authenticate cellular messages to the cellular device.
WO 2007/069906 describes a method and a server for transferring digital data from a hand-held communication device to a central across at least one communications network. The method includes receiving an initiating message form the communication device at the central, the initiating message having been transferred from the communications device across a communications network. The method is characterized in that it comprises sending a second message from the central to the communication device, the second message including a program providing an interface on the communication device for entering said data on the communication device; and receiving the digital data at the central from the interface on the communications device, the data having been transferred through an SMS connection or mobile internet. A server for carrying out the method is also described.
US20030151493 describes an access control system, which uses a mobile-unit. Access-data is downloaded from a central-unit to the mobile-unit via a mobile telephone communications network.
US20030016828 , US20020031228 and US20060170533 describe systems, where keys are downloaded to a mobile-unit via a mobile communications network, and the mobile-units exchanges keys to door-units via Bluetooth.
EP1720296 relates to adjustment of transmission power of Bluetooth-units from a security point-of-view.
It remains a problem to improve security when using electronic keys to obtain access to locations.

Summary

The above problem is addressed by the method of independent claim 1 and the system of independent claim 23.
Further described herein are examples of a method of controlling access to a location secured by a lock mechanism controlled by a lock control unit comprising means for wireless communication with a mobile unit, the method comprising the step of:

storing an electronic key in a mobile unit, the electronic key being indicative of a predetermined access right to the location;
wherein the method further comprises the steps of:
- using the mobile unit for automatically searching for the lock control unit of the location, when the mobile unit is in a distance from the lock control unit, where wireless communication between the mobile unit and the lock control unit is established;
- using the mobile unit for automatically establishing connection to the lock control unit and for automatically transmitting the electronic key wirelessly to the lock control unit; and
- operating the lock mechanism controlled by the lock control unit, whereby access to the location is obtained.

Thus disclosed herein are examples of a method of controlling access to a location, where access to the location is restricted by a lock mechanism. Further disclosed is an access control system which allows suppliers of goods or services to access a location, which would otherwise prevent delivery of the goods or the services.
Particularly in blocks of flats or companies it is common that a number of outer or front doors or intermediate doors must be passed before getting to a point of service, such as an apartment door, a mailbox, a service station or a meter for appliances, an area to be cleaned, etc. For example in case of delivery of newspapers, the delivery man often has to gain access to a stairway in order to be able to deliver the newspapers at the locked private doors or put them into the letter boxes. It frequently causes great difficulties to the delivery men to find the correct keys in a large bundle of keys, and the locks are frequently exchanged without the delivery company being informed of this. For reasons of security it is also more and more common to lock doors or gates to backyards, residential areas or company properties, where for example refuse containers may be placed, so that the refuse collection firms have a problem quite similar to the firms which deliver newspapers. It will be appreciated that similar problems are faced by: postmen, cleaning companies, emergency physicians, home help and other care workers, policemen, firemen, artisans, caretakers/superintendents, and others.
Some of the above service providers require access on a daily basis, such as postmen, some may require access at certain time periods, such as on certain weekdays or at certain times of the day, for example a newspaper delivery man may require access between 6 a.m. and 9 a.m.
Furthermore, different services/deliveries may require different access rights, for example firemen, security companies or police may require access to all facilities, while a mailman only requires access to a mailbox.
Thus an objective is to provide an efficient method and a system for controlling access to a location secured by a lock mechanism controlled by a lock control unit, which may provide a high degree of flexibility and a high level of security.
The mobile unit and the lock control unit each comprise a device for wireless communication.
Furthermore, the access to the location, e.g. a door, is obtained automatically by means of a wireless communication/interaction between the mobile unit, which the delivery man carries, and a lock control unit at the location. Due to that the electronic keys is transmitted via wireless data communication from the mobile unit to the lock control unit, a fast and convenient communication between the mobile unit and the lock control unit is provided without the need of physical contact. Thus the delivery man shall not perform any actions, neither with the mobile unit nor with the lock control unit. The delivery man shall not type any passwords, codes, messages or the like on the mobile unit or on the lock control unit.
The method may be implemented with standard mobile communications devices for mobile communications, which may be used for regular communications purposes.
A location according to the invention may be a physical location, such as a building, an area, or some other residential, industrial, commercial or office facility, where access to the location is controlled by a lock mechanism, such as a physical lock at a door, a window, a gate or the like. Access to the location may be controlled at a single point of entry or at a plurality of access points. Furthermore, a location may also be a part of a building, area, etc., and, according to the invention, access to different parts of a location may be controlled individually, such as at an outer gate, a front door, within an elevator granting access at all or selected floors, at doors to individual apartments, offices, sections, rooms, storage facilities, such as drawers, safes, etc. The location may be stationary, such as a building, or mobile such as a vehicle, a container, a ship, or the like.
Furthermore, the location may also be an installation, such as a control unit of industrial facility, an electric meter, a computer system or the like, where access to the location is controlled by a lock mechanism, such as a lock at a control box, or an electronic lock, such as a hardware lock of a computer. The term access to a location may also comprise user access to a computer or computer program where access is controlled by a software lock mechanism restricting access to a software application, to stored data, communications facilities, or the like.
An access right according to the invention may be the right to interact with a location. Examples of access rights include the right to enter a building, an area, a facility, etc., the right to operate a machine, a device, a vehicle, a computer, etc., the right to open or close a door, a window, a container, a box, etc., and the right to receive or deliver goods, data information, etc., as long as the access right can be controlled by a lock mechanism.
In one embodiment the method further comprises the steps of:

searching for all devices for wireless communication;
building a list of the detected devices for wireless communication in the mobile unit;
performing a service search in the list of the detected devices for wireless communication;
establishing connection to a detected device for wireless communication, if the mobile unit recognises the service number of a device for wireless communication of a lock control unit;
checking whether the mobile unit has a correct electronic key to the detected lock control unit;
exchanging the correct electronic key if it is verified that the mobile unit has the correct electronic key; and
transmitting a signal from the lock control unit to a lock mechanism of the door when the lock control unit has received the correct electronic key.

In one embodiment the method further comprises the steps of: disconnecting the connection between the mobile unit and the lock control unit; and repeating the process at a next lock control unit.
In one embodiment the method further comprises the step of storing in a storage means information about attempts to access the location.
In one embodiment the predetermined access right has a validity period and the electronic key comprises information about the validity period.
An access right may have certain attributes specifying properties of the access right. Examples of such properties include one or more validity periods, a security level, a number of times the access right is valid, or any other attribute specifying a property of the access right.
In one embodiment the wireless communication is personal area network communication.
It is an advantage of this embodiment that the communication is fast and does not need to involve a communications network provider.
In one embodiment the wireless communication is short range communication.
In one embodiment the wireless communication is radio frequency communication.
In one embodiment the radio frequency communication is a Bluetooth communication.
It is an advantage of this embodiment that the communication is based upon reliable standard components which are available as part of many devices, such as mobile phones, personal digital assistants, or the like.
In one embodiment the distance is a predefined distance.
It is an advantage that the wireless communication may be obtained at a predefined distance, since this way it may be controlled how close the delivery should be before the lock control unit is operated. The predefined distance may be determined by means of the transmission power of the device for wireless communication in the mobile unit and e.g. of the device for wireless communication in the lock control unit.
In one non-claimed embodiment a lock control unit for use in a system according to the method is disclosed. The lock control unit comprises:

first wireless communications means adapted to communicate with wireless communication means of a mobile unit, and
control means adapted to initiate operating a lock mechanism depending on the result of the verification of the electronic key.

Disclosed is a method of registering a mobile unit adapted to be used as storage device for the electronic key, which is used to obtain access to the location is disclosed. This method comprises the steps of:

registering the telephone number of the mobile unit in an administration unit;
sending a message to the mobile unit from the administration unit, the message containing a link to a program;
activating the link whereby the program is installed in the mobile unit;
initiating the program whereby the unique ID address of a device for wireless communication is read, the device for wireless communication is arranged in the mobile unit;
sending a message from the mobile unit to the administration unit with the information about the unique ID address of the device for wireless communication;
wherein the method further comprises the step of:
- coupling the unique ID address of the device for wireless communication and the telephone number of the mobile unit together.

It is an advantage of this embodiment that the ID of the mobile unit is coupled together with the ID of the device for wireless communication in the mobile unit, since the electronic keys cannot be transferred from the mobile unit to a second mobile unit. This provides a high level of security.
In one embodiment the device for wireless communication is a device for personal area network communication.
In one embodiment the device for wireless communication is a device for short range communication.
In one embodiment the device for wireless communication is a device for radio frequency communication.
In one embodiment the device for wireless communication is a Bluetooth device, whereby the unique ID address of the device is the Bluetooth ID address.
In one embodiment the message is a Short Message Service (SMS).
In one embodiment the program is a Java program.
It is an advantage to use a Java program, since the mobile unit supports Java applications. Alternatively, the program may be any program, which is supported by the mobile unit.
In one embodiment a method of transferring electronic keys to a mobile unit for obtaining access to locations is disclosed, where an electronic key is indicative of a predetermined access right to a location. The method comprises the steps of:

starting a program on the mobile unit whereby the administration unit is called;
requesting permission from the administration unit to run the program, the request being performed by the mobile unit;
registering the request in the administration unit;
granting the mobile unit to run the program, if the mobile unit is registered in the administration unit as being allowed to run the program;
calling the administration unit after registering the grant in the mobile unit and requesting if there are any electronic keys for the mobile unit;
registering the request and sending the electronic keys to the mobile unit from the administration unit, if there are any electronic keys for the mobile unit;
wherein the method further comprises the step of:
- generating the program specifically to the ID address of the device for wireless communication in the mobile unit.

It is an advantage that method of downloading electronic keys from an administration unit to a mobile unit ensures secure encryption of the transfer of electronic keys. This is obtained because the ID of the device for wireless communication in the mobile unit, e.g. the Bluetooth ID of the mobile unit, is registered in the administration unit. The invention provides secure transfer of electronic keys to mobile units by means of mobile telephone communications technology, such as e.g. Bluetooth.
It is an advantage of the invention that the access right profile of individual mobile units and lock control units may be changed on short notice or in regular or random time intervals in order to increase the security of the access control.
When the method further comprises the step of transmitting, via a communications network, at least one electronic key from an administration system to one of the mobile units, electronic keys may be generated and maintained at a central computer system and transmitted to the mobile units. It is another advantage of the invention that the use of electronic keys may be supervised and tracked by a central administration system.
It is a further advantage of the invention that information about mobile units, electronic keys, access right grantees, lock control units, the use of electronic keys, etc, may be acquired and maintained at a central service to provide optimal transparency and security to the access right owner.
In one embodiment the method further comprises the step of storing a plurality of electronic keys for a plurality of respective locations in the mobile unit.
When the method further comprises the step of storing a plurality of electronic keys for a plurality of respective locations in the mobile unit, one mobile unit may be used for a plurality of locations without reducing the level of security.
In one embodiment the application is a Java application.
In one embodiment the communication between the mobile phone and the administration unit is performed via GPRS.
In one non-claimed embodiment a system comprises computer means including:

third storage means adapted to store a plurality of electronic keys corresponding to respective predetermined access rights;
first communications means adapted to transmit at least one electronic key to a selected one of the mobile units;
the selected one of the mobile unit comprises second communications means adapted to receive the transmitted at least one electronic key;
the selected one of the mobile unit further comprises third communications means adapted to transmit a signal;
a selected one of the lock control unit comprises third communications means adapted to receive the transmitted signal from the mobile unit.

Consequently, it is an advantage that a plurality of different electronic keys to different buildings may be stored and related to one or more mobile units, providing a flexible way of customising an access right profile for each mobile unit.
In one non-claimed embodiment the mobile unit further comprises fourth communications means for transmitting, to the computer means, an information signal indicative of information about the corresponding transmitted request for granting the requested access right.
In one embodiment the requested access right has a validity period and the first electronic key comprises information about the validity period.
In one non-claimed embodiment a mobile unit for use in a system of the invention is disclosed. The mobile unit comprises:

first storage means adapted to store electronic keys identifying a plurality of predetermined access rights, and
first wireless communication means adapted to communicate an electronic keys to wireless communication means of a unlock control unit.

The features of the method described above may be implemented in software and carried out on a data processing system or other processing means caused by the execution of computer-executable instructions. The instructions may be program code means loaded in a memory, such as a RAM, from a storage medium or from another computer via a computer network. Alternatively, the described features may be implemented by hardwired circuitry instead of software or in combination with software.
According to another non-claimed aspect a computer program comprising program code means for causing a data processing system to perform the method is disclosed, when said computer program is executed on the data processing system.
According to a further non-claimed aspect a data processing system comprising program code means for causing the data processing system to perform the method is disclosed.

Brief description of the drawings

The above and/or additional objects, features and advantages of the present invention, will be further elucidated by the following illustrative and nonlimiting detailed description, with reference to the appended drawings, wherein:

Fig. 1 shows how electronic keys are transferred to a mobile unit
Fig. 2 shows how access may be obtained to a lock control unit.

Detailed description

In the following description, reference is made to the accompanying figures, which show by way of illustration how the invention may be practiced.
Fig. 1 shows how electronic keys are transferred to a mobile unit. The figure shows using the delivery of newspapers as an example. The invention is, however, not restricted to the delivery of newspapers.
A newspaper company 101 has a number of subscribers who are to have their newspaper delivered to their respective residence. Information on the subscribers may be kept in a database at the newspaper company 101.
The information on subscribers may comprise their residence address, when they should receive a newspaper etc.
The system comprises 3 units which are developed to work as an interconnected system. The 3 units are: an administration unit 102, a mobile unit 103 and a lock control unit (see fig. 2). The lock control unit may also be referred to as a door unit.
A mobile unit 103 can be used by a newspaper delivery man to gain access to a locked stairway in a building, where subscribers have their residence.
Before the mobile unit 103 can be used as electronic key to lock control units, it must be registered in the administration unit 102 as follows. The telephone number of the mobile unit 103 is set up in the administration unit 102. The telephone number may be related to the SIM card which is inserted in the mobile unit 103 and which is mandatory in GMS devices.
From the administration-unit an SMS (Short Message Service) may be send 104 to the mobile unit 103, where the SMS may contain a link to a program, which can be installed on the mobile unit 103. When the link is activated, the programme is installed. The program is initiated, and the unique 48-bit Bluetooth address, i.e. the identification (ID) of the Bluetooth device in the mobile unit 103, is read.
From the mobile unit 103 an SMS is send 104 to the administration unit 102 with information about the Bluetooth address of the Bluetooth device in the mobile unit 103 and with information about the telephone number of the mobile unit 103. The administration unit 102 may then couple the information about the Bluetooth address and the telephone number of the mobile unit 103 together into a unique unit/entity.
This process may be performed before a mobile unit 103 is used for the first time as an electronic key for obtaining access to lock control units. When the mobile unit 103 has been registered according to the above, the mobile unit 103 does not need to be registered again in the future before being used as an electronic key.
The administration unit 102 may obtain information from an newspaper company or access right owner 101 about which doors a delivery man shall have access to on a given day and in a given time period.
The administration unit 102 may select which mobile unit 103 that should be given access to which doors.
Each time the mobile unit 103 should be used as an electronic key device for obtaining access to a number of doors, a number of steps may be performed in order to install the electronic keys in the mobile unit 103 for the respective lock control units. The function of an electronic key may be compared to the function of an access code, and may be data items. The steps may be as follows: The mobile unit 103 starts the application, and thereby calls the administration unit 102, whereby the mobile unit 103 requests the administration unit 102 about permission to run the application. The application may be a Java application. The call from the mobile unit 103 to the administration unit 102 may be performed via GPRS 104. The administration unit 102 registers the request from the mobile unit 103 about running the application, and the administration unit 102 may reply to this request either by granting the mobile unit 103 to run the application or by refusing to allow the mobile unit 103 to run the application, e.g. by replying positively or negatively, e.g. by replying with "yes" or "no". If the administration unit 102 grants the mobile unit 103 to run the application, the application can be run on this mobile unit 103. If the administration unit 102 refuses that the mobile unit 103 can run the application, the application cannot be run from this mobile unit 103. This communication between the mobile unit 103 and the administration unit 102 may take place via GPRS 104. The application is generated specifically to the Bluetooth ID of this mobile unit 103, since this ensures that the encryption of the subsequent transfer of keys is secure.
The application and communications software components may be transmitted by means of GPRS 104 as mentioned above. Alternatively the transmission and communication may be performed by means of e.g. the Internet, docking stations, mobile telecommunication (OTA), radio based communication, local radio based networks such as Bluetooth, or other means of data communication.
If the mobile unit 103 has been granted to run the application, the mobile unit 103 registers the grant. The mobile unit 103 may then call the administration unit 102 to request if there are any keys for it. The administration unit 102 registers the request from the mobile unit 103 about keys, and if there are any keys for the mobile unit 103, these keys may be sent to the mobile unit 103 via GPRS 104. If there are not any keys for the mobile unit 103, the application may close down in this mobile unit 103.
The application software may further comprise encryption features.
The electronic keys, which are send to the mobile unit 103 from the administration unit 102, may thus be received in the mobile unit as encrypted keys.
If keys have been sent to the mobile unit 103, the mobile unit 103 registers this information and installs the electronic keys in the memory of the mobile unit 103. Alternatively, the electronic keys may be stored in the memory of a SIM card in the mobile phone. The electronic keys may give access in a predetermined time period to the specific doors which the delivery man is to deliver newspapers at. Typically, the delivery man has a fixed and regular route which he always follows, and he therefore knows which doors he shall deliver newspapers at. Alternatively and/or additionally, the delivery man may receive information before starting his route about which doors the newspapers should be delivered at. This information may be present in the application which the delivery man can view on his mobile unit, and/or this information may be sent to the delivery man via an SMS, and/or the delivery man may receive this information as a printed list, as a voice mail and/or any other suitable form of receiving this information in.
If there is a problem with a specific door unit, the delivery may receive information about this. Typically, the delivery may receive such information via an SMS. Alternatively, this information may be provided to the delivery man via the software application on the mobile phone, as a voice mail and/or in any other suitable form.
The mobile unit 103 carrying the electronic keys may support WAP. If there is a wireless communications network along the route, which the delivery man is following, when delivering newspapers, it may be an advantage to use WAP. Alternatively and/or additionally, the on-line communication between the mobile unit 103 and the administration unit 102 may utilise another communications channel, such as SMS.
Fig. 2 shows how access may be obtained to a lock control unit.
A number of electronic keys are installed in the memory of the mobile unit 203 according to fig. 1. When the newspaper delivery man is on his route, the mobile unit 203 will automatically search for all devices, including lock control units 205, with a Bluetooth device 206. A list of the detected devices including lock control units 205 equipped with a Bluetooth communication port 206 is built in the mobile unit 203. Subsequently, the mobile unit 203 performs a service search on the detected Bluetooth devices 206 by searching for the service number(s) in the service records on the Bluetooth server. If the mobile unit 203 recognises a service number among the found Bluetooth devices 206, the mobile unit 203 establishes connection 207 to this lock control unit 205 with the recognised service number. The connection 207 between the mobile unit 203 and the lock control unit 205 is a Bluetooth connection between the Bluetooth device 208 of mobile unit 203 and the Bluetooth device 206 of the lock control unit 205. It is checked whether the mobile unit 203 has a correct key to the lock control unit 205. If the mobile unit 204 has a correct key to the lock control unit 205, a key exchange takes place by means of Bluetooth communication 207. As a result of the key exchange, a lock activation unit 209 of the lock control unit 205 generates a control signal 210 which is sent to the lock mechanism 211 of the door and initiates operation of the lock mechanism 211.
The connection 207 is then disconnected, and the process is repeated at the next lock control unit.
The key exchange is performed automatically, and the delivery man shall not type anything on any keyboard or keypad, neither on the mobile unit 203 or at the lock control unit 205, and the delivery man shall not use any display, neither on the mobile unit 203 nor on the lock control unit 205 for obtaining the key exchange. Thus, the delivery man shall not perform any acts in order for the key exchange to take place, since the mobile unit 203 and the lock control unit 205 communicate automatically with each other by means of Bluetooth communication 207.
For example, every 5 minutes the mobile unit 203 may send 212 a log file to the administration unit 202 with information/data about which doors it has gained access to. The log file may comprise information about the date and the time at which the mobile unit 203 obtained access to the respective lock control units.
The log file comprising information about which doors the mobile unit 203 has unlocked by means of electronic keys, and the time of each unlocking.
Alternatively, a log file may be send such as every 7 minutes, or ever 10 minutes, or every 20 minutes and/or the like. It may be controlled how often the log file should be send, and the period with which a log file should be send may be determined based on the delivery man, the route, the subscribers, which newspaper/material that is being delivered, weather conditions etc. Alternatively, the log file may be send when the delivery man has travelled a predefined distance, or when the delivery man has covered a predefined part of the route, or when the delivery man has delivered a predefined number of newspapers and/or the like.
Furthermore, at each log which the mobile unit 203 provides to the administration unit 202, the mobile unit 203 may request the administration unit 203 of permission to run the application and ask if there are still keys.
The program is run on the mobile unit 203 all the time when the delivery man is on his route. Mobile phones may today, as opposed to previously, have enough power to be able to run a program for many hours. Thus, a mobile phone may have power enough to run the program for the entire time period, which the delivery man spends on delivering all the newspapers on his route.
As an additional advantage of the system , the newspaper company can see whether the delivery man has unlocked the door to the stairway, e.g. in the event of a complaint of non-delivery of the newspaper.
The log file comprising information about which doors the mobile unit has unlocked by means of electronic keys, and the time of each unlocking, may also be of interest in the case, where e.g. an insurance company, e.g. in case of a burglary report, needs a proof of whether e.g. a door has been unlocked due to the use of electronic keys, whereby a burglar can have gained access to the door.
Many mobile phones have a standardised Java interface, which may be used for the Java application. Thus it may be unnecessary to perform any kind of changes or to enhance or upgrade a mobile phone for using it in accordance with the invention. Therefore a standard mobile phone without any extra features may be suitable.
A standard Java interface on a mobile phone may provide access to use the Bluetooth device of the mobile phone. Thus it is an advantage to use the Bluetooth ID of the mobile phone as identification, when running a Java program on the mobile phone, instead of using e.g. only the mobile phone ID. In order to provide access to the mobile phone ID, a specific program may be needed for each brand of mobile phones. Therefore, it is an advantage to use the Bluetooth ID of the mobile phone as identification, since then the same standard Java interface on a majority of mobile phones may be used for running the application.
The lock control unit can be a separate control module/device which may be added to an existing lock system at the door, but connected external of e.g. an entry telephone. The control module/device includes a Bluetooth receiver 206, and the only additional input and output may be an electrical power input, and an output for controlling opening of the lock. The lock control unit may thus be added to an existing electrical system, which is otherwise used to perform unlocking of the door from a telephone in a flat which is connected to the entry telephone. The lock control unit may thus work in parallel with an entry telephone. Since entry telephones are already installed at many doors which give access to flats, it may be easy, fast and non-expensive to provide a control module to these existing lock systems, where the control module may comprise a Bluetooth receiver, an electrical power input and an output for controlling the opening of the lock.
Bluetooth is an industrial specification for wireless personal area networks. Bluetooth provides a way to connect and exchange information between devices, which comprise a Bluetooth chip or device, over a short-range radio frequency. Bluetooth devices may communicate over distances such as 5-100 meters. The distance may be adjusted by means of the transmission power of the Bluetooth device which sends information to another Bluetooth device which receives this information.
The length of the time period for which the door is unlocked after the two Bluetooth devices 206, 208 have communicated with each other, may be calibrated in order to find a suitable length in which the door should be unlocked.
Every Bluetooth device has a unique identity, the Bluetooth ID. In relation to this invention, it is the Bluetooth IDs of the Bluetooth device 208 in the mobile unit 203 and of the Bluetooth device 206 in the lock control unit 205, which are compared in order to perform a verification of an access request. In relation to this invention, it is the mobile unit 203 comprising Bluetooth communications means 208 which is searching for other Bluetooth devices in the surroundings.
With regard to security, it is an advantage to use a mobile unit as a carrier of electronic keys, since no physical keys are necessary with this system. This means that the disadvantage of using physical keys, where keys are easily lost and difficult to find in a large bundle of keys is overcome with this system. Furthermore, it is very easy to prohibit access to a lock control unit, when the key to this lock control unit is an electronic key, because the access request for obtaining access with an electronic is easy to deny.
In addition to this security issue, it may furthermore not be possible to copy an electronic key in the system of this invention. Since the Bluetooth ID and the mobile phone number of the mobile unit are coupled together by the administration unit to form a unique entity/unit, it is not possible to copy the electronic keys
Typical or conventional electronic keys can possibly also be copied to a second mobile unit from a first mobile unit, if only the SIM card in the mobile unit is used by the administration unit for transferring and storing the electronic keys. The SIM card may be removed from the first mobile unit and inserted in the second mobile unit, whereby the electronic keys also may be transferred from the first to the second mobile unit. If the second mobile unit does not belong to a person which the administration unit has accepted and granted as user, this person possessing the second mobile unit may obtain access to doors, e.g. with a possibly harmful intention.
Therefore, by coupling together the Bluetooth ID and the mobile phone number of the mobile unit to a unique entity/unit, and using this unique entity/unit when handling the electronic keys, it may not be possible to copy the electronic keys, and misuse of the electronic keys may be made impossible.
One company may manage the entire system, or the system may also form the basis for several different companies.
Again taking newspapers as an example, the different roles of the various companies and the corresponding data flow can be described as follows. The first company involved may be the one that prints and delivers the newspaper and, therefore, it requires access to the subscriber's residence. As an access right grantee, the first company receives access codes from the access code administrator, a second company, organisation or person, who may manage the electronic key system and who may operate as a service provider for the delivery of a number of different goods and services. The administrator may also manage information about the different lock control units which control the locks in the subscriber's residence. The administrator may also supply the access right grantee with the mobile units and with information about the subscriber's residences. This may happen under control of the administrator. Alternatively or additionally, a third company may be involved, which owns mobile units, or which may be a network operator transmitting electronic key information to mobile units. A fourth company may own the building or have a business agreement with the owner of the building to administer access to the building, and thus the fourth company may be the access right owner, who agrees with the administrator about the installation of the lock control unit, and who defines the respective access rights for the different access right holders. An electronic control unit may be owned and installed by the administrator, the access right owner, the access right grantee or a fifth company. The administrator may also provide value added services, such as performance statistics to the access right grantee or the access right owner, based on access data acquired from the lock control unit. Additionally, these services may be self-service functions, physical services, time and material services or plain information services.
The invention thus means that the use of modern technology can form the basis for new service companies that can make the delivery of goods and services more efficient, and which can guarantee the necessary security systems which the consumers will demand from an electronic key according to the invention.
It will be appreciated that the electronic keys according to the invention may be supplemented with much other information that may be related to the use of the electronic keys. For example, a delivery man can quickly get updated knowledge of changes relating to the subscribers. An emergency physician can get help in finding his way through the locked doors in a large block of flats. The cleaning staff can get updated information on changes concerning current activities.
Preferably, the relationship between the administrator and the access right owner is described in a contract, which preferably describes the terms under which the access right owner grants certain rights to the administrator, such as the right to grant to other persons, for example within the administrator's organisation or third-party staff with whom the administrator may have a contract, the right to access a location or to perform a function in connection with the location.
An access control system according to the invention comprises a mobile unit 203 and a lock activation unit 209 which controls a lock mechanism 211, such as a lock of a door. The mobile unit 203 comprises a communications port, preferably a Bluetooth port 208 complying with a known Bluetooth standard. The mobile unit 201 may be a mobile phone, a PDA (personal digital assistant), a handheld computer, another terminal that can emit a Bluetooth or other radio-based signal 207 or other type of signal which can be received by a lock activation unit 209 controlling access to the location, for example by controlling a lock of a door. A mobile unit may also be mountable on or in a vehicle.
It applies in general to all types of mobile units or electronic key devices that they should be capable of being updated with information on and other information that can identify a lock activation unit 209. The mobile unit 203 is capable of emitting a signal 207 including an electronic key which can activate the lock activation unit 209 wirelessly. Preferably, Bluetooth transmission or other radio transmission is used.
The lock control unit 205 comprises a receiver 206 for receiving the signal 207 with the electronic key transmitted by the communications port 208 of the mobile unit 203. The receiver 206 should be compatible with the communications port 208, and preferably, the receiver 206 is a Bluetooth port. The receiver 206 is further connected to a lock activation unit 209 which is adapted to control a lock mechanism 211. A processing unit may connect the receiver and the lock activation unit. If the received electronic key is valid, the receiving unit 206 may send a control signal to the lock activation unit 209 which causes the lock activation unit 209 to initiate operating the lock mechanism 211 and thereby granting access to the location.
The lock activation unit 209 is connected to a lock mechanism 211, such as a door lock system, a valve control system, or the like. The connection 210 may be an electrical or mechanical connection or a wireless communications link. Alternatively, instead of a separate lock mechanism 211, the lock activation unit 209 itself may contain corresponding electrical, electronic and/or mechanical components, such as an electric engine which could open a valve, or an electric device which could open a door.
The lock mechanism 211 comprises a unit which, for example via an electrical/electronic relay, can activate a lock (not shown) which is for example mounted on a door. The lock mechanism 211 may be connected to an existing door telephone system in a building, or it may be adapted to operate independently, via its own mechanical parts and its own power supply. Preferably, the lock mechanism 211 is capable of receiving from and optionally also emitting a signal to the lock activation unit 209. A verification process may be provided hereby, where the security concerning the access control system according to the invention is enhanced even further.
The mobile unit 203 is equipped with a communications port 208 for transmitting signals 207 to the lock control unit 205. The communication may utilise Bluetooth or other radio communication, or any other suitable communications technology. The communication may follow a proprietary protocol or, preferably, a standard protocol such as Bluetooth, TCP/IP, IrDa, a telephone data protocol, a mobile telephone data protocol, http, sound, etc. The information may be transferred either using a proprietary data format or, preferably, a standard format, such as wml, html, binary code, machine code, AT-commands, voice commands or the like.
The mobile unit 203 is further equipped with a communications interface 213, for example the transmit/receive aerial (antenna) of a mobile phone. Via the communications interface 213 the mobile unit 203 may be connected to an administration system 202. The communication may be a radio-based communication, preferably via a standard communications network 212, for example a standard mobile telephone network. Via the communications link 212 between the mobile unit 203 and the administration system 202, electronic keys may be transmitted from the administration system 202 to the mobile unit 203. Furthermore, log data may be transmitted from the mobile unit 203 to the administration system 202 via the communications link 212 during the delivery of e.g. newspapers. This data transmission 212 may utilise the so-called Short Message Service (SMS) or other higher speed data channels, e.g. GSM data, WAP or various data channels of CDMA transmission systems. Alternatively or additionally, other suitable communications channels using a proprietary or standard protocol such as TCP/IP, http, voice messages, etc. may be used.
Preferably, the administration system 202 is a computer system, preferably comprising one or more standard computers, such as personal computers, workstations, application servers, database and web servers, interconnected via a local area network and with access to the communications network 212, for example via a service provider. The administration system 202 generates and administers the electronic keys. The administration system 202 transmits electronic keys to the mobile unit 203. Additionally, the electronic keys may be transmitted periodically, in order to replace the electronic keys on the mobile units, thereby improving the security of the system. The administration system 202 may also automatically, or upon request, invalidate electronic keys by sending a corresponding control signal to the mobile unit 203.
The lock control unit 205 comprises a Bluetooth device 206. By means of the Bluetooth device 206, the lock control unit 205 is adapted to receive Bluetooth communications signals 207 from the mobile unit 203.
The process of managing access rights according to the invention may be described as follows. Initially, the access right owner defines the access rights to be granted, possibly including a list of possible access right grantees. Then the access right owner authorises the administrator to generate and assign electronic keys. This authorisation may comprise different levels of authority and, preferably, is described in a contract. By means of an administration system, the administrator transforms the access right definition into a set of electronic keys identifying the individual rights or group of rights. The definition and generation of the mobile units may be performed by the administrator on request from the access right owner or in collaboration between the two and possibly a third party. The electronic keys are stored, preferably in a database of the administration system.
Preferably, data about the use of mobile units 203 is logged at the administration system 202. Alternatively or additionally, log data may be stored in the lock control units 205 and/or the mobile units 203. The log data may be transmitted to the administration system 202 at predetermined time intervals, on request, or on-line in connection with an interaction between a mobile unit 203 and a lock control unit 205.
The administrator may provide additional services to be received by the access right owner. Alternatively or additionally, the administrator may provide services to the access right grantee or a third party. Preferably these additional services include providing and/or analysing information to the corresponding access rights, where the information may include information about:

The location of the lock control units.
The access rights and electronic keys specifying the corresponding access right grantee, including a specification of the locations, lock control units, times of allowed access, types of allowed access, etc.
Specification of mobile units which have or have had a given access right assigned to it.
Status information about lock control units, where status may include "locked", "open", "maintenance required", "manual operation", etc.
Status information about the location.
Information about which mobile units have been used in connection with which lock control unit or location, when, how, where, how many times, why, etc.

The above services may also be used where there is a need for supervising the use of the granted access rights. This could be in situations where goods are promised to be delivered at a certain time and at a certain location, and where the administrator may provide information about when, where and how access has been granted to relevant delivery staff.
It is understood that these options may be included in the mobile unit and/or the lock control unit.
The mobile unit 203 may be a standard GSM telephone, as illustrated in fig. 1 and 2. The mobile unit may comprise a removable SIM card (Subscriber Identity Module) (not shown), a transmit/receive aerial 213, a transmit/receive circuit (not shown). The mobile unit further comprises a Bluetooth communications port 208, preferably following the Bluetooth standard. The Bluetooth port is connected to the circuit.
The electronic keys may be stored in the memory of the mobile unit. Alternatively and/or additionally, they may be stored in the memory of the SIM card.
The SIM card comprises a processor or control circuit and a memory. The memory may be divided into a ROM with the SIM operating system and other program code stored on it, and a RAM and/or EPROM for storing data items and for use by the control unit.
When data items comprising electronic keys are received by the aerial 213 from the administration system 202 or a service provider, they are routed via the circuit to the memory of the mobile phone, where the control unit stores the data in the memory.
According to the invention, the control unit is adapted to automatically initiate the transmission of the electronic keys via the circuit and the Bluetooth port 208 to a corresponding Bluetooth port 206 of the lock control unit 205. This may, for example, be achieved by adapting the operating system stored in the memory to allow the application software to control the communications port 208. The application software controlling the storing, retrieval, selection, and transmitting of electronic keys is stored in the memory.
It is an advantage of the Bluetooth communication 207 that it allows a fast transmission of the electronic key to the lock control unit 205 and, therefore, a short response time from when the mobile unit 203 is close enough to the lock control unit 205 for the Bluetooth devices 206, 208 to communicate to the lock control unit 205 operating the lock mechanism 211. Furthermore, the Bluetooth transmission 207 has the advantage that it does not involve costs for using a communications network.
The software of the mobile unit 203 comprises a corresponding electronic key download module adapted to receive the electronic key data transmitted by the administration system 202.
The transmission power of the Bluetooth device 208 in the mobile unit 203 may be adjusted in order to correspond to the surroundings and the environment. If the transmission power of the Bluetooth device 208 is strong, the Bluetooth device 208 in the mobile unit 203 and the Bluetooth device 206 in the lock control unit 205 can communicate with each other when the distance between them is large. On the contrary, if the transmission power of the Bluetooth device/s is/are weak, the Bluetooth device 208 in the mobile unit 203 and the Bluetooth device 206 in the lock control unit 205 can only communicate with each other when the distance between them is small. Therefore, by changing the transmission power of the Bluetooth device 208 in the mobile unit 203, the distance at which the Bluetooth devices 206, 208 can communicate can be adjusted. There may be advantages and disadvantages both by a strong and a weak transmission power. With regard to ensuring that a door is only opened when the delivery man, who has gained access to this door, is close to the door, then it may be an advantage if the transmission power is weak. This ensures that other persons which are not allowed to obtain access cannot open the door when the delivery man is e.g. out of sight. In the case of weak transmission power, the delivery man has to be close to the door, before it can be opened, e.g. such as in the range of a few meters, such as about 2 meters or such as 5 meters. The range may depend on the strength of the Bluetooth unit(s) and/or on the surroundings, such as the thickness and the material which walls and door are made of. The maximal distance, which the Bluetooth devices in a mobile unit and in a door unit typically can communicate over, is in the range of 50 meter.
Furthermore, the door unit may have a lag time from it receives the Bluetooth signal until it activates the lock. This lag time may be a few seconds, such as 8 seconds, or 10 second and/or the like. As a consequence, the distance which the delivery man shall be placed from the door unit before the door unlocks, may therefore be adjusted according to the transmission strength of one or more of the Bluetooth units, the surroundings, the lag time of the door unit etc.
The software of the administration system 202 further comprises a log module which may be adapted to interface with log modules of the mobile unit and the lock control unit, respectively. This software interface preferably utilises the same communications interface as the transmission of electronic keys. It is an advantage of this embodiment that log data may be transmitted on-line from the mobile unit 203 and/or the lock control unit 205 to the administration system 202.
The software of the administration system comprises an electronic key generation module, responsible for generating electronic keys according to the granted access rights. The administration unit may generate new electronic keys each time a request for keys is received at the administration from a mobile unit. The electronic key generation module passes the generated electronic keys to an administration module which is responsible for administering the electronic keys, i.e. storing them in a database together with relevant data about the related mobile units, lock control units, locations, access right owners, access right grantees, etc. The administration module preferably provides suitable user interfaces for inputting and viewing relevant data. Furthermore the administration module may handle additional administrative tasks, such as automatic expiration of electronic keys, initiation of electronic key transmission to mobile units and/or lock control units. The administration module interfaces with an electronic key transmission module which, upon request, handles the transmission of electronic keys to the mobile units, for example by implementing one or more layers of a layered communications protocol used for the communication.
The software of the administration system may further comprise one or more additional service modules which may provide additional services such as statistics about the use of the electronic keys.
Preferably, the administration system provides functionality, which secures full visibility for the access right holder about the stored information about the access rights. To obtain the highest level of security all electronic communication may be encrypted either by a specific protocol or by means of a standard encryption method, e.g. RSA, Digital signatures, public key certificate, etc.
It will be appreciated that, for the management of the electronic keys, a company may make special software for customized management of the key information for several different suppliers. The customized solutions may also have incorporated therein the degree of data security which is necessary for the supplier of goods and services concerned.
The administration system may further comprise one or more interfaces to other systems in order to combine and integrate the administration system with other services.

Claims

A method of registering a mobile unit (103, 203) adapted to be used as storage device for an electronic key, which is used to obtain access to a location, the method comprises the steps, performed by an administration unit (102, 202), of:
registering the telephone number of the mobile unit (103, 203) in the administration unit (102, 202);

sending a message to the mobile unit (103, 203) from the administration unit (102, 202), the message containing a link to a program;

causing activation of the link whereby the program is installed in the mobile unit (103, 203);

causing initiation of the program whereby the unique ID address of a device for wireless communication is read, the device for wireless communication is arranged in the mobile unit (103, 203);

causing sending a message from the mobile unit (103, 203) to the administration unit (102, 202) with the information about the unique ID address of the device for wireless communication;

wherein the method further comprises the step, performed by the administration unit (102, 202), of:
coupling the unique ID address of the device for wireless communication and the telephone number of the mobile unit (103, 203) together.
A method according to claim 1, wherein the message, from the administration unit to the mobile unit is a Short Message Service (SMS).
A method according to any one of claims 1 or 2, further comprising controlling access to a location secured by a lock mechanism (211) controlled by a lock control unit (205) comprising means for wireless communication with the mobile unit (103, 203), the further step of controlling access comprising the following steps, performed by the mobile unit (103, 203), of:
storing the electronic key in the mobile unit (103, 203), the electronic key being indicative of a predetermined access right to the location; and

automatically searching for the lock control unit (205) of the location, when the mobile unit (103, 203) is in a distance from the lock control unit (205), where wireless communication between the mobile unit (103, 203) and the lock control unit (205) is established;

automatically establishing a connection to the lock control unit (205);

automatically transmitting the electronic key wirelessly to the lock control unit (205); and

causing operation of the lock mechanism (211) controlled by the lock control unit (205), whereby access to the location is obtained.
A method according to claim 3, wherein the means for wireless communication of the lock control unit (205) comprise a device for wireless communication.
A method according to claim 4, wherein the steps of automatically searching, automatically establishing, automatically transmitting and causing operation further comprise the following steps, performed by the mobile unit (103, 203), of:
searching for all devices for wireless communication;

building a list of the detected devices for wireless communication in the mobile unit (103, 203);

performing a service search in the list of the detected devices for wireless communication;

establishing connection to a detected device for wireless communication, if the mobile unit (103, 203) recognises the service number of a device for wireless communication of a lock control unit (205);

checking whether the mobile unit (103,203) has a correct electronic key to the detected lock control unit (205);

exchanging the correct electronic key with the lock control unit if it is verified that the mobile unit (103, 203) has the correct electronic key; and

causing transmission of a signal from the lock control unit (205) to a lock mechanism (211) of a door when the lock control unit (205) has received the correct electronic key.
A method according to claim 5, further comprising the following steps, performed by the mobile unit (103, 203), of:
disconnecting the connection between the mobile unit (103, 203) and the lock control unit (205); and repeating the steps of claim 5 at the next detected lock control unit.
A method according to any one of claims 3 - 6, further comprising the step of storing in a storage means information about attempts to access the location.
A method according to any one of claims 3 - 7, wherein the wireless communication is a personal area network communication.
A method according to any one of claims 3 - 7, wherein the wireless communication is a short range communication.
A method according to any one of claims 3 - 7, wherein the wireless communication is a radio frequency communication.
A method according to any one of claims 3 - 7, wherein the wireless communication is a Bluetooth communication.
A method according to any one of claims 3 - 11, wherein the distance is a predefined distance.
A method according to claim 12, wherein the predefined distance is determined by means of the transmission power of one or more of the devices for wireless communication.
A method according to any one of claims 1 - 13 further comprising transferring electronic keys to the mobile unit (103, 203) for obtaining access to locations, an electronic key being indicative of a predetermined access right to a location; the further step of transferring electronic keys comprises the steps of:
starting a program on the mobile unit (103, 203) whereby the administration unit (102, 202) is called by the mobile unit (103, 203);

requesting permission by the mobile unit (103, 203) from the administration unit (102, 202) to run the program;

registering the request by the administration unit (102, 202) in the administration unit (102, 202);

granting the mobile unit (103, 203) by the administration unit (102, 202) to run the program, if the mobile unit (103, 203) is registered in the administration unit (102, 202) as being allowed to run the program;

calling the administration unit (102, 202) by the mobile unit (103, 203) after registering the grant in the mobile unit (103, 203) and requesting by the mobile unit (103, 203) if there are any electronic keys for the mobile unit (103, 203);

registering the request by the administration unit (102, 202) and sending the electronic keys to the mobile unit (103, 203) from the administration unit (102, 202), if there are any electronic keys for the mobile unit (103, 203); and

generating the program specifically to the ID address of the device for wireless communication in the mobile unit (103, 203), the generation of the program being performed by the administration unit (102, 202).
A method according to any one of claims 1-8, or any one of claims 12-14, when dependent on any one of claims 1-8, wherein the device for wireless communication is a device for personal area network communication.
A method according to any one of claims 1-7 and 9, or any one of claims 12-14, when dependent on any one of claims 1-7 and 9, wherein the device for wireless communication is a device for short range communication.
A method according to any one of claims 1-7 and 10, or any one of claims 12-14, when dependent on any one of claims 1-7 and 10, wherein the device for wireless communication is a device for radio frequency communication.
A method according to any one of claims 1-7 and 11, or any one of claims 12-14, when dependent on any one of claims 1-7 and 11, wherein the device for wireless communication is a Bluetooth device, whereby the unique ID address of the device is the Bluetooth ID address.
A method according to claim 14, wherein the program started on the mobile unit is a Java program.
A method according to claim 14, further comprising the step of storing a plurality of electronic keys for a plurality of respective locations in the mobile unit (103, 203).
A method according to claim 14, wherein the communication between the mobile unit (103, 203) and the administration unit (102, 202) is performed via GPRS.
A method according to any one of claims 3-21, wherein the predetermined access right has a validity period and wherein the electronic key comprises information about the validity period.
A system for registering a mobile unit (103,203) adapted to be used as storage device for an electronic key, which is used to obtain access to a location.
wherein the system comprises:
an administration unit (102, 202) and a mobile unit (103, 203) that are specifically configured to perform the steps of a method according to any of the claims 1-22.