Systems and methods for enabling access control via mobile devices
Described herein are systems and methods for enabling access control via mobile devices. Embodiments of the invention have been particularly developed for allowing a user to gain access to a controlled functionality (for example the unlocking of a door) using a smartphone or the like. These leverage short-range wireless communications, such as Bluetooth Low Energy or Near Field Communications.
1. A method, performed at an access control server, for selectively granting access to a controlled functionality, the method including:
receiving, via networked communications in an access request from a software application on a mobile device, data indicative of (i); an identifier read by the mobile device using short-range wireless communications and (ii) a mobile device identity, wherein the mobile device is configured to monitor the movement of the mobile device relative to the identifier using the short range wireless communications and provide that data in response to performing a direction-of-motion-dependent determination that satisfies predefined requirements, the determination being based on direction of motion of the mobile device relative to either of: (a) a device carrying the identifier; or (b) a location associated with an access control device such that the data is only provided when the mobile device is moving towards (a) or (b) from a predefined direction;
determining, based on the data indicative of the identifier read by the mobile device, a specific access control functionality;
determining, based on at least the data indicative of the mobile device identity, whether or not access to the specific access control functionality is to be granted; and
in the case that the specific access control functionality is to be granted, sending a signal to a network location associated with the specific access control functionality, thereby to control a hardware component that is configured to grant access to the specific access control functionality.
2. A method according to claim 1 further comprising:
additionally receiving, from the mobile device, biometric data captured by the mobile device; and
determining, based on at least the data indicative of the mobile device identity and the biometric data, whether or not access to the specific access control functionality is to be granted.
3. A method according to claim 1 wherein the specific access control functionality is the unlocking of a specific door.
4. A method according to claim 3 wherein the identifier is read from a readable token positioned proximal the specific door.
5. A method according to claim 3 wherein locking/unlocking of the specific door is controlled by an electrical actuator.
6. A method according to claim 5 wherein the electrical actuator is configured to receive a control signal via a network.
7. A method according to claim 5 wherein the electrical actuator is configured to connect to a local wireless network.
8. A method according to claim 1 wherein the identifier is read from a readable token positioned proximal a door, wherein locking of the door is controlled by an electrical actuator, wherein unlocking of the door defines the access control functionality, and wherein the signal causes the electrical actuator to unlock the door.
9. A method according to claim 1 wherein the server is configured to perform an authentication and authorisation process based on the device identity.
10. A method according to claim 1 wherein the identifier read by the mobile device using short-range wireless communications is an identifier read from a Bluetooth Low Energy token using Bluetooth communications.
11. A method according to claim 1 wherein the identifier read by the mobile device using short-range wireless communications is an RFID read from a RFID tag token using RF communications.
12. A non-transitive carrier medium carrying computer executable code that, when executed on a processor, causes the processor to perform a method according to claim 1 .
13. A method, performed by a mobile device, for requesting access to a controlled functionality, the method including:
reading an identifier using short range wireless communications;
performing a direction-of-motion-dependent determination using the short range wireless communications thereby to determine the direction of motion of the mobile device relative to either of: (a) a device carrying the identifier; or (b) a location associated with an access control device;
in the case that the direction-of-motion-dependent determination indicates that the mobile device is moving towards (a) or (b) from a predefined direction, defining an access request, the access request being indicative of (i) the identifier read by the mobile device; and (ii) identity data carried by the mobile device;
transmitting the access request to a specific server device, thereby to request access to a controlled functionality associated with the read identifier.
14. A method according to claim 13 wherein the server device is configured to selectively grant access to the controlled functionality via a signal that is not provided to the mobile device.
15. A method according to claim 13 including determining, based on interaction with a user of the mobile device, biometric data, and wherein the method additionally includes adding the biometric data to the access request.
16. A method according to claim 13 wherein the controlled functionality is the unlocking of a specific door.
17. A method according to claim 16 wherein the identifier is read from a readable token positioned proximal the specific door.
18. A method according to claim 16 wherein the mobile device provides an interface that enables a user to associate a selected default functionality with the reading of a specific identifier.
19. A method according to claim 18 wherein the interface provided by the mobile device enables a user to associate a selected default functionality with reading of a specific identifier in a proximity/motion dependent manner.
20. A method according to claim 13 wherein a software application configured to perform the defining and transmitting of the access request launches automatically in response to the reading of the identifier.
21. A non-transitive carrier medium carrying computer executable code that, when executed on a processor, causes the processor to perform a method according to claim 13 .