EP1336937A1 - Access control system, access control method and devices suitable therefore - Google Patents

Abstract

A mobile communication terminal (2) transmits access rights data comprising an access control device identification to access control devices (1,1'). An access control module (13) checks the data received from the mobile communication terminal, with the predetermined access rights data, based on which user's access right is approved. Independent claims are also included for the following: (1) access control method; (2) computer program product for performing access control; and (3) access control device.

Description

Technical area

The present invention relates to an access control system Access control method and devices suitable for this purpose. The invention relates in particular an access control system and an access control method, in which in at least one mobile communication terminal an access code is stored, in which in several access control devices, respectively an access code associated with the access control device in question is stored, and in which the mobile communication terminal and the Access control devices Communication means for exchanging Data between the mobile communication terminal and one of the access control devices include.

State of the art

Access control systems with multiple access control devices, which control the access to access-controlled objects, for example Access controlled areas such as buildings, rooms or grounds are known and are used for example in hotels, corporate and government buildings. In these known access control systems are the users, for example Hotel guests or employees, code carriers handed out in which a secret access code or identification code is stored. The Code carriers are, for example, punched cards, magnetic cards, induction cards or chip cards running the access code stored thereon, respectively the identification code, via a contact interface (mechanical or electrically) or via a contactless interface (by radio or Transmit infrared waves) to the access control device to be passed. In the access control device to be passed becomes the received access code with a secret access code stored in the access control device is compared, respectively, the received identification code through the access control device for access authorization check to a Access control center transmitted. To the secret access codes in the access control devices to be able to change flexibly and dynamically, respectively to centralize the access authorization of an identification code, and to other access conditions, such as authorized access time, legitimate Check access day and / or authorized access date of the user, are the access control devices in the known access control systems Connected to an access control center via fixed communication links. A disadvantage of these known access control systems is that that users are always given a code carrier or delivered must be, with the delivery brings a security risk and therefore usually not practiced. For a code change must the user a new code carrier to be passed or already handed out Code carrier must be changed by the user for the code change Department. It also exists in the known Access control systems have the disadvantage that the management of access rights of the Users and / or the delivery of the access code to the users always on an access control center is bound. In the known Access control systems, it is consequently not possible to manage the Access rights of users to certain access-controlled objects in several independent access control centers and / or the delivery of the access code for that particular access controlled objects to the users of several, from each other independent access control centers.

In the patent application WO 01/63425 an access control system described for a hotel in which a user for a reserved Hotel room a secret access code via a mobile network to his mobile phone transmitted and stored there. According to WO 01/63425 the secret access code from an access control center for the reserved Time to the access control device of the reserved hotel room transfer. To open the door, the stored in the mobile phone Access code via a wireless device interface to the access control device of the reserved hotel room. In the access control device is the received access code with the stored there Access code compared and the electromechanical door lock of the room door open at a match. In the access control system according to WO 01/63425 the access control device is networked with the access control center, which on the one hand is associated with a large amount of cabling, which increases the installation time and cost of the access control system, and what on the other hand, in each access control device a corresponding communication module requires what increases the system cost.

Presentation of the invention

It is an object of the present invention to provide an access control system and propose an access control procedure which does not address the Disadvantages of the prior art.

According to the present invention, these objects become particular achieved by the elements of the independent claims. Further advantageous Embodiments are further subject to the dependent claims and the description.

The access control system comprises several access control devices, in which one of the respective access control device associated Access code is stored, and at least one mobile communication terminal, in which an access code is stored. The mobile communication terminal and the access control devices include communication means for exchanging data between the mobile communication terminal and one of the access control devices.

The above objects are achieved by the invention in particular achieved in that the access control devices each have an identification module for transmitting a stored in the access control device Access control device identification to the mobile communication terminal and that the mobile communication terminal is an access authorization module includes in which access control device identifications and access codes of several of the access control devices stored, wherein the access code for a respective access control device respectively the access control device identification of those concerned Access control device is stored assigned. This will allow that the mobile communication terminal as a code carrier for access can be used in several access-controlled areas, whereby the Access control devices that control access to one area are different Access codes can be assigned, and where in the mobile Communication terminal due to the to be passed from the access control device received access control device identification dynamically determines the access code for the access control device to be passed can be. Advantageously, therefore, the access of a user be controlled to several access-controlled objects without that the access control devices network with an access control center and without giving users one or more code carriers must be handed out.

In the access authorization module, access authorization data are preferably each stored associated with an access control device identification, which access rights data the access rights of the user of the mobile Define communication terminal for the access control device, the determined by the access control device identification in question. By storing access rights in the mobile communication terminal it is unnecessary to store access rights in the access control device, respectively the query of these access rights by the access control device via a communication link in an access control center. The verification of the access rights can be done directly in the mobile communication terminal or after their prior transmission, from the mobile communication terminal to the access control device, in the access control device be made. Advantageously, therefore, specific Access rights of a user, such as authorized access times, authorized Access days and / or authorized access calendar data, for several access control devices be controlled without the access control devices need to be networked with an access control center.

Preferably, the mobile communication terminal comprises a request module for providing an access control device to be passed to a request document to be transmitted, which request document a digital Certificate and the access rights data, the user's access rights for the to define to be passed access control device, wherein the digital Certificate generated by the request module based on the access code is assigned to the access control device to be passed. Thereby on the one hand ensures that the access code for the to be passed Access control device is not transmitted in unencrypted, transparent form on the other hand it is ensured that the access rights of the User for the access control device to be passed through the passing access control device can be checked.

Preferably, the access control devices each comprise one Access control module for generating a second digital certificate from the in the received request document contained access right data and the access code, stored in the access control device to be passed, for Comparing the second digital certificate with that in the received request document contained digital certificate, for checking the received access rights data and for enabling the access in case of digital conformity Certificates and sufficient access rights. In this preferred embodiment is the digital generated in the mobile communication terminal Certificate by the request module also from the access code and from generates the access rights data of the user. Consequently, in the access control device not only valid on the basis of the second digital certificate of the access code, but also the match of the mobile Communication terminal open transmitted access right data with the the mobile communication terminal for the generation of the digital certificate used access rights data are checked, allowing a manipulation the open transmitted access right data can be detected.

In an embodiment variant, the access control devices comprise one time determination module each for determining current times, such as the time of day, the day of the week and / or the date, and an access control module to compare the specific current time information with access rights data about authorized access times from the mobile communication terminal be received. This allows the specific, time-limited Access rights of a user directly in the access control devices be controlled without the access control devices with a Time center must be replaced.

Preferably, the access control system comprises an access control center for the transmission of access control device identifications and associated with these access control device identifiers Access codes and access rights data, the access rights of the user of the mobile Define communication terminal for an access control device, via a mobile network to the mobile communication terminal. That's it Provide access authorization module such that it detects the received access control device identifiers, Access codes and access rights data each other assigned accordingly stores. In an advantageous manner can thereby the access rights for users are managed centrally, current access rights and access codes dynamically on code carriers, ie mobile communication terminals, the user will be loaded without having code carrier in be presented to a department, handed over or sent by post need and without having the access control devices with an access control center need to be networked. In particular, the mobile networks for the mobile telephony via exchanges and public switched On the one hand the access networks can be networked worldwide and access rights data to users worldwide and otherwise in the access control center the access codes and access right data for Access control devices in different buildings, cities and countries to get managed. It is also possible that the access control system has several includes such access control centers that are independent of each other, so that the administration of the access rights of the users to certain Access-controlled objects in multiple, independent Access control centers can be carried out and / or that the delivery the access code for these particular access-controlled objects of several independent access control centers to the users can be transmitted.

In addition to an access control system and an access control procedure The present invention also relates to a suitable computer program product for controlling a processor of a mobile communication terminal and a suitable access control device.

Brief description of the drawings

Figur 1 zeigt ein Blockdiagramm, welches schematisch ein Zutrittskontrollsystem mit einer Zutrittskontrollzentrale, einem mobilen Kommunikationsendgerät und mehreren Zutrittskontrollvorrichtungen illustriert.

Figur 2 zeigt ein Flussdiagramm, welches schematisch die Schrittfolge bei der Zutrittskontrolle und den diesbezüglichen Datenaustausch zwischen einem mobilen Kommunikationsendgerät und einer Zutrittskontrollvorrichtung illustriert.

Hereinafter, an embodiment of the present invention will be described by way of example. The example of the embodiment is illustrated by the following attached figures:

FIG. 1 shows a block diagram which schematically illustrates an access control system with an access control center, a mobile communication terminal and a plurality of access control devices.

FIG. 2 shows a flowchart which schematically illustrates the sequence of steps in the access control and the related data exchange between a mobile communication terminal and an access control device.

Ways to carry out the invention

In FIG. 1, the reference numeral 1 refers to an access control device, the access of a user to controlled areas denied or unlocked by the access door 3 opens or closed holds. For this purpose, the access control device 1 with the electromechanical Lock 15 connected. As indicated in FIG the access control system several access control devices 1, 1 ', the Check access doors 3, 3 ', with only the access control device 1 in detail is shown. At this point it should be clearly stated that the invention Access control system, respectively access control procedures, not only used for the control of access to areas through access doors but also for access control and access control, respectively. to other objects, such as machines, personal computers or PCs other technical devices and systems can be used. In the latter applications, the activation of the access, respectively Access, by the access control devices 1 typically not through Opening an electromechanical lock 15 but by unlocking a programmed software program or software switch or by Set a corresponding identifier.

The access control device 1 comprises a communication module 11 for data communication over short distances (e.g., in one area from one to a few meters) with external communication terminals 2 outside the access device 1. The communication module 11 preferably comprises a transmitter / receiver for wireless data communication by means of electromagnetic waves, in particular radio or infrared waves, For example, an IrDA infrared interface (Infrared Data Association) or a Bluetooth wireless interface or other device interface.

The access control device 1 also includes an identification module 12 comprising a data store in which an access control device identification is stored. The access control device identification is preferably hierarchically structured and includes, for example a region code (e.g., four bytes), a building code (e.g., five bytes), and a device code (e.g., four bytes). The identification module 12 comprises In addition, a programmed software module that includes a processor of the access control device 1 so controls that the stored access control device identification is broadcast via the communication module 11, when the presence of an external communication terminal 2 by the Communication module 11 is detected.

The access control device 1 further includes a time determination module 14 for determining current times, such as current Time of day, day of the week and date. The timing module 14 is programmed Software module or executed as a hardware circuit and is for example clocked by a quartz.

The access control device 1 further comprises an access control module 13, the programmed software modules and / or corresponding hardware circuits includes, for generating a cryptographic, digital certificate from a secret stored in the access control device 1 Access code and from data received via the communication module 11 be used to compare the generated digital certificate with a via the Communication module 11 received digital certificate to verify of access right data received via the communication module 11 and to unlock the access in case of digital compliance Certificates and sufficient access rights. When checking the Access rights data are in particular the specified access rights the current time information determined by the time determination module 14 compared. The access control module 13 also includes hardware and / or software components to generate a random number. At this point should be mentioned be that in the access control device 1 more secret access codes can be stored, each with a validity period or an expiration date is assigned, whereby the currently valid access code in the Access control device 1 can be automatically changed without to a network with the access control center 4 is necessary.

Optionally, the access control device 1 does not include one illustrated log module, preferably as programmed software modules is executed and includes a log file in which programmed Software functions of the log module Data about access, respectively Access attempts to the relevant access control device 1 stores, such as will be described in more detail later.

The mobile communication terminal 2 is, for example, a mobile phone or a laptop or palmtop computer, each with cellular components for communication over the mobile network 5 include. The Mobile network 5 is for example a GSM (Global System for Mobile Communications) or UMTS network (Universal Mobile Telephone System) or a other, for example satellite-based mobile network. The mobile communication terminal 2 also includes a communication module 11 corresponding Communication module 21 for data exchange with the access control devices 1.

As shown schematically in FIG. 1, the mobile comprises Communication terminal 2 a processor 223, an access authorization module 221 and a request module 222. The processor 223, the access authorization module 221 and / or the request module 222 are for example on one Chip card 22 executed. The smart card 22 is preferably a SIM card (Subscriber Identification Module), which is removable with the mobile communication terminal 2 is connected.

The access authorization module 221 comprises a data memory, in which access control device identifications of multiple access control devices 1 are stored. In the data memory of the access authorization module 221 are the access control device identification of an access control device 1, the access code (e.g., twelve bytes) for each access control device 1 concerned and access rights data, the access rights the user of the mobile communication terminal 2 for the relevant Define access control device 1, stored assigned. The access rights data Define time ranges during which the user has access to the controlled by the access control device 1 concerned Object can be granted. Time ranges are for example by a Start time and an end time (e.g., two bytes each), a day of the week (e.g. one byte) and / or a date (e.g., three bytes). The access rights data also includes an expiration date (e.g., three bytes) after which the user access should be denied. In the data memory of the access authorization module 221 can also be a PIN code (Personal Identification Number, e.g. four bytes), a user identification (e.g., seven bytes), and a company code (e.g., six bytes). The in the data memory of the access authorization module 221 stored data are write-protected and can not be changed by the user, besides the access codes and the PIN code is not readable by the user.

The request module 222 is preferably a programmed software module executed, the processor 223 of the mobile communication terminal 2 controls so that it activates the communication module 21 and a Request document for transmission to the access control device to be passed 1 provides. The activation of the communication module 21 and the Provision of the request slip is made on command from the user, for example by pressing a defined function key of the controls 23. When activated by the communication module 21 electromagnetic Waves emitted, either according to the activation procedure according to the standard regulations of the device interface used or by periodically sending fixed data packets. To increase security can be the activation of the communication module 21 and the provision of the request document only after the correct entry of the above mentioned PIN codes take place. The request document includes a cryptographic, digital certificate generated by the request module 22 from the access rights data and the access code for the access control device 1 to be passed as well as the access right data for the access control device to be passed 1.

As shown schematically in FIG. 1, the access control system comprises an access control center 4 with an access rights database 41. In the access rights database 41, the users are each given a user identification, a company code, a telephone number of their mobile communication terminal 2 and access rights data for the access control devices 1, to which they have access rights assigned. Are the user identification, the company code or the access right data of a user in the access rights database 41 newly entered or changed, then a corresponding Update of the access authorization module 221 in the mobile Communication terminal 2 of the user. Thereby the current access control device identifications become with the assigned access codes and Access right data from the access control center 4 via the mobile network 5 transmitted to the mobile communication terminal 2, for example by means of SMS messages (Short Message Services). In the mobile communication terminal 2, the current data is accessed by the access authorization module 221 received and, as described above, in the data memory of the access authorization module 221 stored.

One skilled in the art will understand that programmed software modules, The mentioned in the description are also completely or partially hardware can be executed.

The following sections describe the access control procedure Referring to Figure 2 described.

In step S1, as above in connection with the request module 222, the communication module 21 has been mentioned by the user of the mobile communication terminal 2 in the vicinity of the access control device to be passed 1 activated.

In step S2, the activated communication module 21 emitted electromagnetic waves in the access control device to be passed 1 are detected.

In step S3, in the access control device 1 by the access control module 13 generates a random number (e.g., eight bytes) and in the access control device 1 cached.

In step 4, the generated random number and the access control device identification the access control device 1 by means of the communication module 11 transmitted to the mobile communication terminal 2 and received there by the communication module 21 and cached.

In step S5, the request module 222 in the access authorization module 221 determines the access code and the access right data that associated with the access control device identification received in step S4 are.

In step S6, the request module 222 generates from the received, cached random number, from the particular access code, from the certain access rights data and from the mobile communication terminal 2 stored user identification and the company code a cryptographic, digital certificate.

In step S7, the generated digital certificate is determined Access rights data as well as the user identification and the company code by means of of the communication module 21 is transmitted to the access control device 1 and taken there by the communication module 21 and cached.

In step S8, the access right data received in step S7 is obtained checked by the access control module 13. It is examined whether the current time information determined by the time determination module 14 in are the time ranges defined by the received access right data, during which the user to the by the access control device. 1 controlled object has access. If the user at the current time no Has access rights, the access control ends by the access control device in step S14.

In step S9, in the access control device 1 by the access control module 13 from the random number generated in step S3, from the in the access control device 1 stored access code and from the im Step S7 received access right data, user identification and company code generates a second cryptographic, digital certificate.

In step S10, the digital certificate received in step S7 is obtained compared with the digital certificate generated in step S9. If the two digital certificates do not match, the user will not be granted access and the access control by the access control device 1 ends in Step S14.

In step S11, the user is enabled access and in present example, the electromechanical lock 15 of the access door 3 is opened.

In step S12, the access control ends by the access control device 1, cached data will be deleted, it will be a positive An acknowledgment message is generated and optionally the one received in step S7 User identification and the company code together with a positive identifier stored in a log file of the access control device 1.

In step 13, the positive acknowledgment message is sent by means of the Communication module 11 is transmitted to the mobile communication terminal 2, where they are received by the communication module 21 and is displayed on the display 24.

In step S14, the access control ends by the access control device 1, cached data will be deleted, it will be a negative Acknowledgment message is generated and optionally becomes the step S7 received user identification and the company code together with a negative identifier stored in a log file of the access control device 1.

In step S15, the negative acknowledgment message is sent by means of the Communication module 11 is transmitted to the mobile communication terminal 2, where they are received by the communication module 21 and is displayed on the display 24.

In step S16, the request ends by the mobile communication terminal 2 after receipt of an acknowledgment message or after expiry of a defined Period of time from the transmission of the request document in step S7 and cached Data is deleted.

Industrial Applicability

The present invention enables access, respectively access, to buildings, rooms, grounds, or machines, personal computers (PCs) and other technical devices and systems.

Legend of the reference numbers

1

Access control device

2

mobile communication terminal

3

access door

4

Access control panel

5

mobile network

11

communication module

12

identification module

13

Access control module

14

Timing module

21

communication module

22

Chip card (SIM card)

23

controls

24

display

221

Access authorization module

222

request module

223

processor

S1

Interface activation

S2

Emission of electromagnetic waves

S3

Generation of a random number

S4

Transmission of the random number and the Access control device identification

S5

Determination of access code and access rights data

S6

Generation of a digital certificate

S7

Transmission of the digital certificate

S8

Verification of access rights

S9

Generating a second digital certificate

S10

Compare the digital certificates

S11

Activation of the access

S12

End of access control

S13

Transmission of a positive acknowledgment message

S14

End of access control

S15

Transmission of a negative acknowledgment message

S16

End of the request

Claims (17)

An access control system which comprises a plurality of access control devices (1, 1 ') in which an access code assigned to the respective access control device (1, 1') is stored, and which comprises at least one mobile communication terminal (2) in which an access code is stored; wherein the mobile communication terminal (2) and the access control devices (1,1 ') comprise communication means (11, 21) for exchanging data between the mobile communication terminal (2) and one of the access control devices (1, 1'), characterized in that the Access control devices (1, 1 ') each comprise an identification module (12) for transmitting an access control device identification stored in the access control device (1, 1') to the mobile communication terminal (2), and
that the mobile communication terminal (2) comprises an access authorization module (221) 'are stored, wherein the access code for a respective access control device (1, 1 in which access control device identifications and access codes from a plurality of access control devices (1,1)') each of the access control device identifying these relevant Access control device (1, 1 ') associated with stored. The access control system according to claim 1, characterized in that in the access authorization module (221) each access right data associated access control device identification are stored, which access rights data define the access rights of the user of the mobile communication terminal (2) for the access control device (1, 1 ') by the relevant Access control device identification is determined. The access control system according to claim 2, characterized in that the mobile communication terminal (2) comprises a request module (222) for providing a request slip to be transmitted to an access control device (1, 1 ') to be transmitted, which request receipt is a digital certificate and the access right data define the access rights of the user for the access control device (1, 1 ') to be passed, wherein the digital certificate is generated by the request module (222) based on the access code associated with the access control device (1, 1') to be passed. The access control system according to claim 3, characterized in that the access control devices (1, 1 ') each comprise an access control module (13) for generating a second digital certificate from the access right data contained in the received request document and the access code in the access control device (1 , 1 '), for comparing the second digital certificate with the digital certificate contained in the received request document, for checking the received access right data and for enabling access in case of matching of the digital certificates and sufficient access rights. The access control system according to claim 1, characterized in that the access control devices (1, 1 ') each comprise a time determination module (14) for determining current time information and each comprising an access control module (13) for comparing the determined current time information with access right data authorized access times received by the mobile communication terminal (2). The access control system according to claim 1, characterized in that it comprises an access control center (4) for transmitting access control device identifications and access control device IDs respectively associated access codes and access right data defining access rights of the user of the mobile communication terminal (2) to an access control device (1,1 ') , via a mobile network (5) to the mobile communication terminal (2), and that the access authorization module (221) is adapted to store the received access control device identifications, access codes and access right data associated with each other. An access control method in which an access code is assigned to an access control device (1) and stored in the access control device (1) in which an access code is stored in a mobile communication terminal (2), and in which data between the mobile communication terminal (2) and the Access control device (1) are exchanged, characterized by ,
Transmission of an access control device identification stored in the access control device (1) from the access control device (1) to the mobile communication terminal (2),
Determining the access code for the access control device (1) in the mobile communication terminal (2) by determining the access code, which is stored in the mobile communication terminal (2) associated with the received access control device identification. The access control method according to claim 7, characterized in that in the mobile communication terminal (2) a digital certificate based on the specific access code is generated and that the generated digital certificate from the mobile communication terminal (2) together with access right data in the mobile communication terminal (2) of the received access control device identification are assigned and define the access rights of the user for the access control device (1) is transmitted to the access control device (1). The access control method according to claim 8, characterized in that in the access control device (1) from the received access right data and the access code stored in the access control device (1), a second digital certificate is generated that the second digital certificate with the received digital certificate is compared, that the received access rights data are checked and that the access is activated upon compliance of the digital certificates and sufficient access rights. The access control method according to claim 7, characterized in that current time information is determined in the access control device (1) and that the determined current time information is compared with access right data about authorized access times received from the mobile communication terminal (2). The access control method according to claim 7, characterized in that access control device identifications and access control device identifications respectively assigned access codes and access right data define the access rights of the user of the mobile communication terminal (2) for an access control device (1) via a mobile network to the mobile communication terminal (2 ) and that the received access control device identifications, access codes and access right data are stored in the mobile communication terminal (2) correspondingly associated with each other. A computer program product (22) comprising: a computer readable medium having computer program code means therein for controlling a processor (223) of a mobile communication terminal (2) comprising communication means (21) for exchanging data with an access control device (1),
in the mobile communication terminal (2), an access control device identification, which is transmitted by an access control device (1) to be passed, is received and accepted
and that in the mobile communication terminal (2) an access code for the access control device (1) to be passed is determined by determining the access code stored in the mobile communication terminal (2) associated with the received access control device identification. The computer program product (22) according to claim 12, characterized in that it comprises further computer program code means which control the processor (223) of the mobile communication terminal (2) such that a digital certificate based on the determined access code is generated in the mobile communication terminal (2) and that the generated digital certificate is stored by the mobile communication terminal (2) together with access right data associated with the received access control device identification in the mobile communication terminal (2) and defines the access rights of the user for the access control device (1) to be passed to the access control device to be passed ( 1) is transmitted. The computer program product (22) according to claim 12, characterized in that it comprises further computer program code means controlling the processor (223) of the mobile communication terminal (2) such that in the mobile communication terminal (2) access control device identifications and access control data respectively associated with access control device identifications, define the access rights of the user of the mobile communication terminal (2) for an access control device (1), receive it from an access control center (4) and store it in the mobile communication terminal (2) in accordance with each other. An access control device (1) in which an access code is stored and which communication means (11) for exchanging data with a mobile communication terminal (2), characterized in that it comprises an identification module (12) for transmitting a message stored in the access control device (1 ) comprises access control device identification stored on the mobile communication terminal (2). The access control device (1) according to claim 15, characterized in that it comprises an access control module (13) for generating a digital certificate from access rights data received from the mobile communication terminal (2) and from the access code stored in the access control device (1). is stored, for comparing the generated digital certificate with a digital certificate that has been received from the mobile communication terminal (2), for checking the received access right data and to unlock the access in case of compliance of the digital certificates and sufficient access rights. The access control device (1) according to claim 15, characterized in that it comprises a time determination module (14) for determining current time information and that it comprises an access control module (13) for comparing the determined current time data with access right data about authorized access times provided by the mobile communication terminal (2) were received.

Images