IP Library Granted Patent US 11,368,845
Granted Patent B2
US 11,368,845 · App. 16/190,245 · Granted Jun 21, 2022

Secure seamless access control

Inventors: Adam Kuenzi (Silverton, OR); Adam Purdue (Salem, OR)
Assignee: CARRIER CORPORATION
H04W12/084G07C9/00309H04L63/0861H04W4/02H04W12/065H04W12/068H04W12/121H04W76/10B60R25/245G07C2009/00357G07C2009/00555G07C2209/63
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,368,845
App. No.
16/190,245
Granted
Jun 21, 2022
Kind
B2
Abstract

A method of secure access through a wireless connection is provided. The method includes detecting availability of an access control wirelessly by a mobile device. A predicted intent is determined of a user of the mobile device to have the access control open a lock. The method determines whether a relay attack is detected. Based on detection of the relay attack, a prompt to confirm an intent of the user of the mobile device to have the access control open a lock is determined. Based on non-detection of the relay attack, a lock actuator is activated through the access control to open the lock responsive to a credential based on affirmatively confirming the intent or the predicted intent.

Claims (59)

1. A method of providing secure access through a wireless connection, the method comprising:

detecting availability of an access control wirelessly by a mobile device;

predicting that a user of the mobile device seeks to have the access control open a lock without requesting a response from the user through the mobile device;

confirming physical proximity of the access control to the mobile device by verifying detection of at least two different signal power levels at the mobile device as transmitted by the access control and confirming that a communication address of the access control matches an expected address value by the mobile device;

when the physical proximity between the access control to the mobile device is confirmed, determining whether a relay attack is detected;

based on detection of the relay attack:

outputting a prompt through the mobile device;

confirming that the user of the mobile device seeks to have the access control open the lock based on a detected response of the user to the prompt; and

activating a lock actuator through the access control to open the lock responsive to a credential based on affirmatively confirming; and

based on non-detection of the relay attack, activating the lock actuator through the access control to open the lock responsive to the credential based on the predicting.

2. The method of claim 1 , wherein determining whether the relay attack is detected comprises:

verifying whether a round-trip communication latency between the mobile device and the access control is at or below a predetermined latency limit.

3. The method of claim 1 , wherein determining whether the relay attack is detected comprises:

comparing a current location of the access control to an expected location of the access control.

4. The method of claim 3 , wherein the expected location of the access control is determined based on one or more of: a position signal and a last known location of the access control.

5. The method of claim 1 , wherein determining whether the relay attack is detected comprises:

verifying that an expected audio signal output by the access control is detected by a microphone of the mobile device.

6. The method of claim 1 , wherein determining whether the relay attack is detected comprises:

determining a received signal strength indicator at the mobile device; and

verifying whether the receive signal strength indicator at the mobile device matches a received signal strength indicator of the access control within a signal level tolerance.

7. The method of claim 1 , wherein determining whether the relay attack is detected comprises:

receiving a biometric indicator from the access control of a person seeking access; and

confirming whether the biometric indicator matches the user of the mobile device.

8. The method of claim 1 , wherein determining whether the relay attack is detected comprises:

utilizing multiple communication channels having different communication range distances to confirm proximity and transmit data.

9. The method of claim 1 , wherein the access control is a component of a vehicle and further comprising:

verifying whether a location of the mobile device and a location of the vehicle remain aligned as the vehicle moves;

performing a periodic re-authentication as the vehicle moves; and

periodically confirming whether communication between the vehicle and the mobile device remains active.

10. An access control system comprising:

an access control operable to control a lock actuator to open a lock; and

a mobile device application executable by a mobile device and configured to:

detect availability of the access control wirelessly by the mobile device;

predict that of a user of the mobile device seeks to have the access control open the lock without requesting a response from the user through the mobile device;

confirm physical proximity of the access control to the mobile device by verifying detection of at least two different signal power levels at the mobile device as transmitted by the access control and confirming that a communication address of the access control matches an expected address value by the mobile device;

when the physical proximity between the access control to the mobile device is confirmed, determine whether a relay attack is detected;

based on detection of the relay attack:

output a prompt through the mobile device;

confirm that the user of the mobile device seeks to have the access control open the lock based on a detected response of the user to the prompt; and

activate the lock actuator through the access control to open the lock responsive to a credential based on affirmatively confirming; and

based on non-detection of the relay attack, activate the lock actuator through the access control to open the lock responsive to the credential based on the prediction.

11. The access control system of claim 10 , wherein determination of whether the relay attack is detected comprises:

verifying whether a round-trip communication latency between the mobile device and the access control is at or below a predetermined latency limit.

12. The access control system of claim 10 , wherein determination of whether the relay attack is detected comprises:

comparing a current location of the access control to an expected location of the access control, wherein the expected location of the access control is determined based on one or more of: a position signal and a last known location of the access control.

13. The access control system of claim 10 , wherein determination of whether the relay attack is detected comprises:

verifying that an expected audio signal output by the access control is detected by a microphone of the mobile device.

14. The access control system of claim 10 , wherein determination of whether the relay attack is detected comprises:

determining a received signal strength indicator at the mobile device; and

verifying whether the receive signal strength indicator at the mobile device matches a received signal strength indicator of the access control within a signal level tolerance.

15. The access control system of claim 10 , wherein determination of whether the relay attack is detected comprises:

receiving a biometric indicator from the access control of a person seeking access; and

confirming whether the biometric indicator matches the user of the mobile device.

16. The access control system of claim 10 , wherein determination of whether the relay attack is detected comprises:

utilizing multiple communication channels having different communication range distances to confirm proximity and transmit data.

17. The access control system of claim 10 , wherein the access control is a component of a vehicle and the mobile device application executable by the mobile device is configured to:

verify whether a location of the mobile device and a location of the vehicle remain aligned as the vehicle moves;

perform a periodic re-authentication as the vehicle moves; and

periodically confirm whether communication between the vehicle and the mobile device remains active.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 11, 2024
From: CARRIER CORPORATION
To: HONEYWELL INTERNATIONAL INC.
Reel/Frame 069175/0204 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 14, 2018
From: KUENZI, ADAM; PURDUE, ADAM
To: CARRIER CORPORATION
Reel/Frame 047493/0339 →
Cited By (1)
US 12,608,990