Access control system and method for use by an access device
Systems and methods are provided to allow a smart phone or any terminal to activate a door lock using a web site or server computer system. An access control system is provided that includes a server and an access device. The access device includes a processor and a communication module. The process has control of a door lock and is able to receive a reservation certificate presented by a portable terminal through the communication module. The processor activates the door lock when a current reservation certificate has been presented.
1. An access device for use in an access control system, the access device comprising:
a processor ( 16 ) having control of a door lock ( 11 ); and
a communication module ( 17 ) connected to the processor, the processor able to receive a reservation certificate ( 5 ) presented by a portable terminal ( 4 ) through the communication module;
wherein the processor activates the door lock when a current reservation certificate has been presented.
2. The access device of claim 1 wherein the processor activates the door lock for up to a predetermined duration.
3. The access device of claim 2 wherein the predetermined duration is all day.
4. The access device of claim 1 wherein the reservation certificate comprise data representative of a duration and the processor activates the door lock for up to the duration.
5. The access device of claim 1 wherein the processor has access to the current time, the reservation certificate comprises data representative of an interval of the reservation, and the processor activates the door lock during the interval.
6. The access device of claim 5 wherein the interval is specified by a start time and one of an end time and a duration.
7. The access device of claim 1 further comprising:
a memory to which the processor has access, the memory containing a public key for a server authorized to issue the reservation certificate;
wherein at least a portion of the reservation certificate is encrypted by the server using a private key and the processor verifies that the reservation certificate is genuine by decrypting the portion with the public key.
8. The access device of claim 1 further comprising:
a memory to which the processor has access, the memory containing a symmetric key;
wherein at least a portion of the reservation certificate is encrypted by a server using the symmetric key and the processor verifies that the reservation certificate is genuine by decrypting the portion with the symmetric key.
9. The access device of claim 1 wherein the processor verifies that the reservation certificate is genuine.
10. The access device of claim 1 further comprising:
an identification to which the processor has access, the identification corresponding to one of the access device and the door lock, wherein the processor determines that the reservation certificate comprises data representative of the identification.
11. The access device of claim 1 further comprising:
a memory to which the processor has access, the memory containing a private key of the access device;
wherein at least a portion of the reservation certificate is encrypted by a server using a corresponding public key for the access device and the processor decrypts the portion with the private key.
12. The access device of claim 1 wherein the processor has access to a server through the communication module and the processor reports to the server that door lock was activated on the basis of the reservation certificate.
13. A method for use by an access device in an access control system, the method comprising:
a) accepting, by a processor through a communication module, a reservation certificate presented with a portable terminal;
b) determining, by the processor, that the reservation certificate is current; and
c) activating, by the processor on the basis of the reservation certificate being current, a door lock.
14. The method of claim 13 wherein the certificate is current for up to a predetermined duration.
15. The method of claim 14 wherein the predetermined duration is all day.
16. The method of claim 13 wherein the reservation certificate comprises data representative of a duration and the certificate is current for up to the duration.
17. The method of claim 13 wherein the processor has access to the current time and the reservation certificate comprises data representative of an interval of the reservation, and the certificate is current for up to the interval.
18. The method of claim 17 wherein the interval is specified by a start time and one of an end time and a duration.
19. The method of claim 13 wherein at least a portion of the reservation certificate is encrypted by a server using a private key for which the corresponding public key is stored in a memory accessible to the processor, wherein the b) determining by the processor is further that the reservation certificate is genuine on the basis of decrypting the portion with the public key, and the c) activating is on the further basis of the reservation certificate being genuine.
20. The method of claim 13 wherein at least a portion of the reservation certificate is encrypted by a server using a symmetric key stored in a memory accessible to the processor, wherein the b) determining by the processor is further that the reservation certificate is genuine on the basis of decrypting the portion with the symmetric key, and the c) activating is on the further basis of the reservation certificate being genuine.
21. The method of claim 13 wherein the b) determining by the processor is further that the reservation certificate is genuine, and the c) activating is on the further basis of the reservation certificate being genuine.
22. The method of claim 13 wherein the processor has access to an identification, the identification corresponding to one of the access device and the door lock, wherein the b) determining by the processor is further that the reservation certificate comprises data representative of the identification, and the c) activating is on the further basis of the reservation certificate comprising data representative of the identification.
23. The method of claim 13 wherein at least a portion of the reservation certificate is encrypted by a server using a public key for which the corresponding private key is stored in a memory accessible to the processor, the method further comprising the step of:
d) decrypting the portion, by the processor, with the private key.
24. The method of claim 13 wherein the processor has access to a server through the communication module, the method further comprising the step of:
d) reporting to the server that the door lock was activated on the basis of the reservation certificate.