IP Library Granted Patent US 9,077,716
Granted Patent B2
US 9,077,716 · App. 13/162,334 · Granted Jul 7, 2015

Wireless device enabled locking system

Inventors: Gary L. Myers (Monee, IL); Ashok Hirpara (Carol Stream, IL); John D. Veleris (Northbrook, IL); Arkadiusz Zimny (South Elgin, IL); Michael Aaron Cohen (Buffalo Grove, IL); Eugene Nakshin (Round Lake, IL)
Assignee: Delphian Systems, LLC
H04L63/10G07C9/00007G07C2009/00412G07C9/00103G07C9/00571H04W12/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,077,716
App. No.
13/162,334
Granted
Jul 7, 2015
Kind
B2
Abstract

An encrypted security system and associated methods for controlling physical access. The system includes a security server configured to receive a request for authentication from a mobile device, the request comprising information identifying the mobile device and a physical access control device. The security server forwards an encryption message comprising a plurality of unique identifiers to the physical access control device via the mobile device. The physical access control device is configured to authenticate the plurality of unique identifiers in the encryption message and operate an access control mechanism.

Claims (73)

1. A method of providing, by a networked server via a Web Portal, security services for managing physical access via commands transmitted wirelessly between a mobile device and a controller for actuating a physical access control device, the method comprising:

receiving, by the networked server via the Web Portal, an authentication request issued by the mobile device, the authentication request comprising an authentication information including:

information identifying the mobile device, and

information identifying the physical access control device;

authenticating, by the networked server, the authentication request issued by the mobile device, and in response to the authenticating:

generating, by the networked server, a response message comprising a first encoded portion and a second encoded portion, wherein:

a first encryption engine generates the first encoded portion based upon a command for the physical access control device, and

a second encryption engine generates the second encoded portion based upon a unique series of a plurality of identifiers stored for the physical access control device; and

forwarding to the mobile device, by the networked server, the response message including the first encoded portion and the second encoded portion so as to enable the controller of the physical access control device to authenticate a command message, from the mobile device, including the first encoded portion and the second encoded portion, prior to completing an access control operation, on the physical access control device, corresponding to the command.

2. The method of claim 1 wherein the physical access control device is selected from the group consisting of: a lock device, a garage door device, and a gate device.

3. The method of claim 1 wherein the unique series of the plurality of identifiers comprises a plurality of encoded shape patterns.

4. The method of claim 3 wherein the shape patterns are geometric shape patterns.

5. The method of claim 1 wherein the response message includes an Advanced Encryption Standard (AES) protocol encryption.

6. The method of claim 1 wherein the first encoded portion comprises one or more encrypted space values.

7. The method of claim 1 wherein the unique series of the plurality of identifiers are used by the controller to authenticate the command message by performing a matching operation to a second unique series of a plurality of identifiers accessible by the controller for the physical access control device.

8. The method of claim 1 wherein the information identifying the physical access control device comprises a Media Access Control (MAC) address and a lock identification number of the physical access control device.

9. The method of claim 1 wherein the controller is configured to communicate, in an online mode, with the networked server via a communications path that does not pass through the mobile device, wherein the method further comprises:

receiving, by the networked server via the communications path that does not pass through the mobile device, a further authentication request from the controller corresponding to a further request from the mobile device, the further authentication request comprising the authentication information including:

information identifying the mobile device, and

information identifying the physical access control device;

further authenticating, by the networked server, the further authentication request, and in response to the further authenticating:

generating, by the networked server in response to the further authenticating, a further response message to the controller; and

forwarding by the networked server, to the controller via the communications path that does not pass through the mobile device, the further response message so as to enable the controller to authenticate the further request from the mobile device, prior to completing an access control operation, on the physical access control device.

10. A method of providing security in a wireless system for a controller and a physical access control device controlling physical access via a command message from a mobile device through a wireless network interface, the method comprising:

establishing a wireless connection between the mobile device and the controller for the physical access control device;

receiving, by the controller, the command message from the mobile device, the command message comprising a first encoded portion and a second encoded portion, wherein:

the first encoded portion is generated by a first encryption engine based upon a command for the physical access control device, and

the second encoded portion is generated by a second encryption engine based upon a unique series of a plurality of identifiers stored for the physical access control device;

authenticating, by the controller decoding the first encoded portion and the second encoded portion, the command message prior to completing the command for the physical access control device; and

causing, by the controller, an operation of physical access control device upon completing the authenticating.

11. The method of claim 10 wherein the physical access control device is selected from the group consisting of: a lock device, a garage door device, and a gate device.

12. The method of claim 10 wherein the unique series of the plurality of identifiers comprises a plurality of encoded shape patterns.

13. The method of claim 12 wherein the shape patterns are geometric shape patterns.

14. The method of claim 10 wherein the command message includes an Advanced Encryption Standard (AES) protocol encryption.

15. The method of claim 10 wherein the first encoded portion comprises one or more encrypted space values.

16. The method of claim 10 wherein the unique series of the plurality of identifiers are used by the controller to authenticate the command message by performing a matching operation to a second unique series of a plurality of identifiers accessible by the controller for the physical access control device.

17. A method of providing security in a wireless system for controlling physical access to a physical access control device, the method comprising:

transmitting, by a mobile device to an authenticating server, an authentication request message comprising authentication information including:

information identifying the mobile device, and

information identifying the physical access control device;

receiving, by the mobile device in response to the transmitting, an authentication response message comprising a first encoded portion and a second encoded portion, wherein:

the first encoded portion is generated by a first encryption engine based upon a command for the physical access control device, and

the second encoded portion is generated by a second encryption engine based upon a unique series of a plurality of identifiers stored for the physical access control device; and

transmitting, by the mobile device to a controller for the physical access control device, a command message through a wireless network interface, the command message comprising the first encoded portion and the second encoded portion so as to enable the controller of the physical access control device to authenticate the command message from the mobile device, including the command, prior to completing an access control operation, on the physical access control device, corresponding to the command.

18. The method of claim 17 wherein the unique series of the plurality of identifiers comprises a plurality of encoded shape patterns.

19. The method of claim 18 wherein the shape patterns are geometric shape patterns.

20. The method of claim 17 wherein the authentication response message includes at least one of the first and second portions encrypted using an Advanced Encryption Standard (AES) protocol encryption.

21. The method of claim 17 wherein the first encoded portion comprises one or more encrypted space values.

22. The method of claim 17 wherein the unique series of the plurality of identifiers are used by the controller to authenticate the command message by performing a matching operation to a second unique series of a plurality of identifiers accessible by the controller for the physical access control device.

23. An encrypted security system for controlling physical access and including a security server and a physical access control device

wherein the security server is configured with a server processor and a server non-transitory computer-readable medium including computer-executable instructions for:

receiving, by the security server via a Web Portal, an authentication request issued by a requesting device, the authentication request comprising an authentication information including:

information identifying the requesting device, and

information identifying the physical access control device;

authenticating, by the security server, the authentication request, and in response to the authenticating:

generating a response message comprising a first encoded portion and a second encoded portion, wherein:

a first encryption engine generates the first encoded portion based upon a command for the physical access control device, and

a second encryption engine generates the second encoded portion based upon a unique series of a plurality of identifiers stored for the physical access control device; and

wherein a controller for the physical access control device is configured with a controller processor and a server non-transitory computer-readable medium including computer-executable instructions for:

receiving a command message from the requesting device, the command message comprising the first encoded portion and the second encoded portion, and

authenticating the command message, by decoding the first encoded portion and the second encoded portion, prior to completing the command for the physical access control device.

24. The system of claim 23 wherein the unique series of the plurality of identifiers comprises a plurality of encoded shape patterns.

25. The system of claim 24 wherein the shape patterns are geometric shape patterns.

26. The system of claim 23 wherein the command message includes an Advanced Encryption Standard (AES) protocol encryption.

27. The system of claim 23 wherein the first encoded portion comprises one or more encrypted space values.

28. The system of claim 23 wherein the unique series of the plurality of identifiers are used by the controller to authenticate the command message by performing to a second unique series of a plurality of identifiers stored in the non-transitory computer readable medium.

29. The encrypted security system of claim 23 wherein the controller is configured to communicate, in an online mode, with the security server via a communications path that does not pass through the requesting device, wherein the security server is further configured for:

receiving, by the security server via the communications path that does not pass through the requesting device, a further authentication request from the controller corresponding to a further request from the requesting device, the further authentication request comprising the authentication information including:

information identifying the requesting device, and

information identifying the physical access control device;

further authenticating, by the security server, the further authentication request, and in response to the further authenticating:

generating, by the security server in response to the further authenticating, a further response message to the controller; and

forwarding by the security server, to the controller via the communications path that does not pass through the requesting device, the further response message so as to enable the controller to authenticate the further request from the requesting device, prior to completing an access control operation, on the physical access control device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 12, 2011
From: MYERS, GARY L.; HIRPARA, ASHOK; VELERIS, JOHN D.; ZIMNY, ARKADIUSZ; COHEN, MICHAEL AARON; NAKSHIN, EUGENE
To: DELPHIAN SYSTEMS, LLC
Reel/Frame 026578/0142 →
Continuity (4)
Provisional Application 61355303 · Jun 16, 2010
Provisional Application 61430621 · Jan 7, 2011
Provisional Application 61518240 · Apr 25, 2011
Related Publication 20110311052A1 · Dec 22, 2011