Distributed one-time-use entry code generation for physical access control method of operation and mobile systems
A physical access control system enables acceptable portal entry codes upon receiving each physical access request by operating on the elapsed time from a previous physical access request to generate a temporal credential. The controller receives a plurality of physical access requests from a plurality of mobile application devices. Upon authenticating the first access request, the controller eliminates repetition from the space of acceptable successor requests from each mobile application device. Monotonic nonces advance the range of temporal code matches. Entry code generation is decentralized to distributed application devices and is inherently unknowable until a successor access request is initiated by the same application device.
1 . A system comprises:
a plurality of mobile application devices (app devices);
a physical access controller (access controller) communicatively coupled to said devices; and
a cloud security service server; wherein said access controller comprises:
a non-transitory store of sequential access codes associated with each user id and credentials verified by the cloud security service server;
a transceiver to receive and acknowledge physical access requests;
a circuit to operate a portal actuator; and
a non-transitory store of security policies.
2 . The system of claim 1 further comprising:
a circuit to verify a physical access request with a stored forward verification code.
3 . The system of claim 1 further comprising:
a circuit to perform a security policy on the condition the verification of a physical access request fails.
4 . The system of claim 1 further comprising:
a circuit to cause app devices and access controllers to advance a system authentication value.
5 . The system of claim 1 further comprising:
a circuit to extract and store a forward verification code from a last successful physical access request.
6 . The system of claim 1 further comprising:
a circuit to determine a forward verification code for a user upon last successful physical access request.