Upper layer device architecture for ultra-wide band enabled device

1. A method of operating a seamless physical access control system, the method comprising:

transferring communication session information using an out-of-band (OOB) communication channel of a smart ultra-wide band (UWB) capable device;

establishing a secure OOB communication channel between the smart UWB capable device and a reader device using the communication session information;

registering, by a UWB enabled application of the smart UWB capable device, service-profile information for the UWB enabled application with a host processor of the reader device, wherein the service-profile information indicates the UWB enabled application needs secure ranging;

establishing a secure UWB communication channel between the smart UWB capable device and the reader device; and

transferring ranging information from a secure component of the smart UWB capable device to the reader device via the secure UWB communication channel.

2. The method of claim 1 , including transferring access credential information from the smart UWB capable device via the secure OOB communication channel.

3. The method of claim 1 , including:

determining that the UWB enabled application needs secure credentialing; and

transferring access credential information from the secure component of the smart UWB capable device to the reader device via the secure UWB communication channel.

4. The method of claim 1 , including:

determining that another UWB enabled application of the smart UWB capable device uses unsecured credentialing and unsecured ranging;

transferring access credential information from the other UWB enabled application to the reader device using an unsecured OOB communication channel; and

transferring ranging information from the other UWB enabled application to the reader device using an unsecured UWB communication channel.

5. The method of claim 1 , including the host process transferring profile application programming interface (API) information to the UWB enabled application of the smart UWB capable device via OOB messaging in response to the registering.

6. The method of claim 1 , wherein transferring communication session information includes transferring a temporary session key from the secure component of the smart UWB enabled device to a host process of the reader device.

7. A smart ultra-wide band (UWB) enabled device, the device including:

a UWB communication port;

an out-of-band (OOB) communication port;

a UWB enabled application; and

an application processor configured to:

send service-profile information for the UWB enabled application to the second device using an OOB communication channel, wherein the service-profile information for the UWB enabled application indicates the UWB enabled application uses secure ranging;

send communication session information to a second device to establish a secure OOB communication channel;

exchange information with the second device to establish a secure UWB communication channel according to the service-profile information; and

transfer ranging information to the second device using the secure UWB communication channel.

8. The device of claim 7 , including:

memory to store access credential information; and

wherein the application processor is configured to send the access credential information to the second device using the secure OOB communication channel.

9. The device of claim 8 , including:

a secure component, wherein the secure component includes:

memory to store the ranging information; and

an applet configured to transfer the ranging information using the secure UWB channel; and

wherein the application processor includes a secure service configured to transfer the ranging information to the UWB enabled application.

10. The device of claim 7 , including a secure component, wherein the secure component includes:

memory to store access credential information and the ranging information; and

an applet configured to transfer the access credential information from the secure component memory to the second device using the secure UWB communication channel.

11. The device of claim 10 , wherein the applet is configured to transfer a temporary session key to the second device to establish the secure OOB communication channel.

12. The device of claim 7 , including:

memory to store access credential information; and

wherein the application processor is configured to:

send service-profile information for another UWB enabled application to the second device using an OOB communication channel;

transfer, according to the service-profile information, the access credential information using an unsecured OOB communication channel; and

transfer, according to the service-profile information, the ranging information using an unsecured UWB communication channel.

13. The device of claim 7 , wherein the application processor is configured to:

receive profile application programming interface (API) information via the OOB communication port in response to sending the service-profile information; and

transfer ranging information over the secure UWB communication channel according to the profile API.

14. A reader device of a seamless physical access control system; the reader device comprising:

an ultra-wide band (UWB) communication port;

an out-of-band (OOB) communication port; and

a host processor operatively coupled to the UWB communication port and the OOB communication port and configured to:

receive service-profile information via the OOB communication port, the service-profile information indicating that a UWB enabled application of a second device uses secure ranging;

establish, according to the service-profile information, a secure OOB communication channel using communication session information received from the second device;

exchange information with the second device to establish a secure UWB communication channel according to the service-profile information; and

receive ranging information from the second device using the secure UWB communication channel.

15. The reader device of claim 14 , wherein the host processor is configured to:

receive, according to the service-profile information, access credential information from the second device via the secure OOB communication channel; and

authenticate the received access credential information.

16. The reader device of claim 14 , wherein the host processor is configured to:

receive, according to the service-profile information, access credential information from the second device via the secure UWB communication channel; and

authenticate the received access credential information.

17. The reader device of claim 14 , wherein the host processor is configured to receive, according to the service-profile information, access credential information from the second device using an unsecured OOB communication channel and receive the ranging information from the second device using an unsecured UWB communication channel.

18. The reader device of claim 14 , wherein the host processor is configured to:

receive registration information associated with the UWB enabled application via the OOB communication port; and

transfer profile application programming interface (API) information to the UWB enabled application via OOB messaging in response to receiving the registration information.

19. The reader device of claim 14 , wherein the host processor is configured to establish the secure OOB communication channel using a temporary session key received via the OOB communication port from the second device.