Granted Patent B2

US 12,283,143 · App. 18/649,346 · Granted Apr 22, 2025

Inventors: Hans-Juergen Pirch (Gratwein Strassengel, AT); Jan Steffl (Senomaty, CZ); Sylvain Jacques Prevost (Austin, TX); Fredrik Carl Stefan Einberg (Huddinge, SE)

Assignee: ASSA ABLOY AB

G07C9/00309G07C9/22H04B1/69H04W12/06H04W76/10G07C2009/00412

Abstract

Claims (60)

1. A method of operating a seamless physical access control system, the method comprising:

establishing a secure out-of-band (OOB) communication channel between a smart ultra-wide band (UWB) capable device and a reader device;

storing service profile information of multiple UWB enabled applications of the smart UWB capable device;

registering the service profile information with a host process of the reader device using the secure OOB communication channel;

establishing a secure UWB communication channel between the smart UWB capable device and the reader device and transferring ranging information to the reader device for a first UWB enabled application using the secure UWB communication channel when the registered service-profile information indicates the first UWB enabled application uses secure ranging; and

transferring ranging information for a second UWB enabled application to the reader device using an unsecured communication channel when the registered service-profile information indicates the second UWB enabled application uses unsecured ranging.

2. The method of claim 1 , including:

transferring credential information from a secure component of the smart UWB enabled device using the secure UWB communication channel for the first UWB enabled application when the registered service-profile information indicates the first UWB enabled application uses secure credentialing; and

transferring credential information using the unsecured communication channel for the second UWB enabled application when the registered service-profile information indicates the second UWB enabled application uses unsecured credentialing.

3. The method of claim 1 , including:

transferring ranging information using the secure UWB communication channel for a third UWB enabled application when the registered service-profile information indicates the third UWB enabled application uses secure ranging; and

transferring credential information from outside a secure component of the smart UWB enabled device using the secure UWB communication channel for the third UWB enabled application when the registered service-profile information indicates the third UWB enabled application uses secure credentialing.

4. The method of claim 1 , including

transferring credential information from a secure component of the smart UWB enabled device using the secure UWB communication channel for the first UWB enabled application when the registered service-profile information indicates the first UWB enabled application uses secure credentialing; and

transferring credential information from a secure UWB service using the secure UWB communication channel for a third UWB enabled application when the registered service-profile information indicates the first UWB enabled application uses secure credentialing.

5. The method of claim 1 , including:

transferring credential information using an unsecured OOB communication channel for the second UWB enabled application when the registered service-profile information indicates the second UWB enabled application has a gaming service profile.

6. The method of claim 1 , including the host process of the reader device transferring profile application programming interface (API) information to the first and second UWB enabled applications of the smart UWB capable device via GOB messaging in response to the registering of the service profile information.

7. The method of claim 1 , including:

transferring credential information from a secure component of the smart UWB enabled device using a secure UWB communication channel for the first UWB enabled application when the registered service-profile information indicates the first UWB enabled application uses secure credentialing;

authenticating the first UWB enabled application using the credential information; and

terminating the OOB communication channel and transferring ranging information to the reader device using the secure UWB communication channel for the first UWB enabled application when the first UWB enabled application is authenticated.

8. The method of claim 1 , including:

transferring credential information from the smart UWB enabled device using the secure GOB communication channel when the registered service-profile information indicates the first UWB enabled application uses secure credentialing;

authenticating the first UWB enabled application using the credential information; and

sending a temporary session key from the reader device to the smart UWB enabled device when the smart UWB enabled device is authenticated to transfer the secure ranging information using the secure UWB channel.

9. The method of claim 1 , wherein the establishing the OOB communication channel includes establishing a Bluetooth Low Energy (BLE) communication channel between the UWB capable device and the reader device.

10. A smart ultra-wide band (UWB) enabled device, the device including:

a UWB communication port;

an out-of-band (OOB) communication port;

memory to store multiple UWB enabled applications and service profile information for the multiple UWB enabled applications; and

an application processor configured to:

establish a secure OOB communication channel with a separate device and register the service profile information with the separate device using the secure OOB communication channel;

establish a secure UWB communication channel with the separate device and transfer ranging information to the separate device using the secure UWB communication channel when a first UWB enabled application communicates with the separate device and the service profile information of the first UWB enabled application indicates the first UWB enabled application uses secure ranging; and

establish an unsecured communication channel with the separate device and transfer ranging information to the separate device using the unsecured communication channel when a second UWB enabled application communicates with the separate device and the service profile information of the second UWB enabled application indicates the first UWB enabled application uses unsecured ranging.

11. The device of claim 10 , including:

a secure component; and

wherein the application processor is configured to:

transfer credential information for the first UWB enabled application from the secure component to the separate device using the secure UWB communication channel when the service-profile information indicates the first UWB enabled application uses secure credentialing; and

transfer credential information using the unsecured communication channel for the second UWB enabled application when the registered service-profile information indicates the second UWB enabled application uses unsecured credentialing.

12. The device of claim 11 , wherein the application processor is configured to transfer credential information from a secure UWB service using the secure UWB communication channel for a third UWB enabled application when the registered service-profile information indicates the first UWB enabled application uses secure credentialing.

13. The device of claim 11 , wherein the application processor is configured to:

transfer ranging information for a third UWB enabled application using the secure UWB communication channel when the registered service-profile information indicates the third UWB enabled application uses secure ranging; and

transfer credential information for the third UWB enabled application from outside the secure component using the secure UWB communication channel when the registered service-profile information indicates the third UWB enabled application uses secure credentialing.

14. The device of claim 11 , wherein the application processor is configured to transfer credential information using an unsecured OOB communication channel for the second UWB enabled application when the registered service-profile information indicates the second UWB enabled application has a gaming service profile.

15. The device of claim 11 , wherein the application processor is configured to read profile application programming interface (API) information of the separate device in response to registering the service profile information.

16. The device of claim 11 , wherein the application processor is configured to:

transfer credential information for the first UWB enabled application from the secure component to the separate device using the secure UWB communication channel when the first UWB enabled application communicates with the separate device and the registered service-profile information indicates the first UWB enabled application uses secure credentialing; and

terminate the OOB channel and transfer the ranging information for the first UWB enabled application to the reader device using the secure UWB communication channel in response to the first UWB enabled application being authenticated.

17. The device of claim 11 , including:

transfer credential information for the first UWB enabled application from the secure component to the separate device using the secure OOB communication channel when the first UWB enabled application communicates with the separate device and the registered service-profile information indicates the first UWB enabled application uses secure credentialing; and

decode a temporary session key received from the separate device in response to the smart UWB enabled device being authenticated to establish the secure UWB channel.

18. The device of claim 10 , wherein the OOB communication port is a Bluetooth Low Energy (BLE) communication port.

19. The device of claim 10 , wherein the application processor is configured to implement a service application layer configured to aggregate and expose service profiles of multiple UWB enabled applications to register the service profiles with the separate device.

20. A non-transitory machine-readable storage medium including instructions that, when performed using an application processor of a smart ultra-wide band (UWB) enabled device, cause the smart UWB enabled device to perform acts comprising:

establishing a secure out-of-band (OOB) communication channel with a reader device;

registering service profile information of multiple UWB enabled applications of the smart UWB capable device with the reader device using the secure OOB communication channel;

establishing a secure UWB communication channel between the smart UWB capable device and the reader device;

transferring ranging information to the reader device using the secure UWB communication channel for a first UWB enabled application when the registered service-profile information indicates the first UWB enabled application uses secure ranging; and

transferring ranging information from a second UWB enabled application to the reader device using an unsecured communication channel when the registered service-profile information indicates the second UWB enabled application uses unsecured ranging.

Assignments (1)

Continuity (3)

References Cited (119)