Access control via a mobile device
Systems, devices, and methods for access control via a mobile device are described herein. One method includes receiving location information associated with a mobile device in a facility, determining that the mobile device is within a particular distance of an area of the facility based on the location information, determining whether a user of the mobile device is allowed access to the area, and allowing access to the area via a relay associated with the area responsive to a determination that the user is allowed access.
1 . A mobile device that has a non-transitory storage medium that stores instructions that when executed by a processor of the mobile device cause the mobile device to:
receive a digital identity from a remote device, wherein the digital identity includes access rights that define whether a particular user assigned to the mobile device has access rights and should be granted access to a designated secure area of a facility, wherein the digital identity automatically expires after a predetermined period of time;
store the received digital identity, including the defined access rights, on the mobile device;
determine that the mobile device is adjacent an access point to the designated secure area of the facility, wherein the access point has an access device that includes an actuating mechanisms that controls a locking device that control access to the designated secure area of the facility, wherein the access device controls the actuating mechanism to unlock the locking device and allow access to the designated secure area of the facility in response to the access device wirelessly receiving an unlock command from the mobile device;
in response to determining that the mobile device is adjacent the access point to the designated secure area of the facility:
the mobile device verifying that the access rights defined by the digital identity and stored on the mobile device grant the particular user access to the designated secure area of the facility;
the mobile device verifying that the digital identity has not yet expired; and
in response to the mobile device verifying that the access rights defined by the digital identity and stored on the mobile device grant the particular user access to the designated secure area of the facility and that the digital identity stored on the mobile device has not yet expired, transmit a control command from the mobile device to the access device that when received by the access device causes the access device to unlock the locking device and allow the particular user access to the designated secure area of the facility.
2 . The mobile device of claim 1 , wherein the instructions that when executed by the processor of the mobile device cause the mobile device to automatically determine that the mobile device is adjacent to the access point to the designated secure area free from user input.
3 . The mobile device of claim 1 , wherein the instructions that when executed by the processor of the mobile device cause the mobile device to:
verify that the mobile device is possessed by the particular user assigned to the mobile device by authenticating the particular user to the mobile device; and
in response to the mobile device verifying that the mobile device is possessed by the particular user assigned to the mobile device, that the access rights defined by the digital identity and stored on the mobile device grant the particular user access to the designated secure area of the facility, and that the digital identity stored on the mobile device has not yet expired, transmit the control command from the mobile device to the access device.
4 . The mobile device of claim 3 , wherein authenticating the particular user to the mobile device comprises receiving one or more inputs made the particular user.
5 . The mobile device of claim 4 , wherein one or more inputs made by the particular user include entry of a personal identifier number (PIN).
6 . The mobile device of claim 3 , wherein authenticating the particular user to the mobile device comprises receiving a biometric input from the particular user.
7 . The mobile device of claim 6 , wherein the biometric input includes one or more of a fingerprint scan and a facial scan.
8 . The mobile device of claim 1 , wherein determining that the mobile device is adjacent the access point to the designated secure area of the facility comprises receiving one or more beacon signals from a beacon located adjacent to the access point.
9 . The mobile device of claim 8 , wherein the beacon is Bluetooth low energy beacon.
10 . The mobile device of claim 1 , wherein determining that the mobile device is adjacent the access point to the designated secure area of the facility comprises reading one or more readable tags adjacent the access point.
11 . The mobile device of claim 1 , wherein determining that the mobile device is adjacent the access point to the designated secure area of the facility comprises using a camera of the mobile device to capture an image of a code that is located adjacent the access point.
12 . The mobile device of claim 1 , wherein the instructions are part of an application program loaded on the mobile device.
13 . A method for access control to a designated secure area of a facility via a mobile device, the method comprising:
the mobile device storing access rights that define whether a particular user that is assigned to the mobile device has access to the designated secure area of the facility;
the mobile device determining that the mobile device is adjacent an access point to the designated secure area of the facility, wherein the access point has an access device that includes an actuating mechanisms that controls a locking device that control access to the designated secure area of the facility, wherein the access device controls the actuating mechanism to unlock the locking device and allow access to the designated secure area of the facility in response to the access device wirelessly receiving an unlock command from the mobile device;
responsive to determining that the mobile device is adjacent the access point to the designated secure area of the facility, an application program running on the mobile device referencing the access rights for the particular user that are stored on the mobile device and determining whether the particular user assigned to the mobile device has access rights and should be granted access to the designated secure area of the facility or not; and
responsive to a determination by the application program running on the mobile device that the particular user assigned to the mobile device has access rights and should be granted access to the designated secure area of the facility, the mobile device transmitting a control command to the access device that when received by the access device causes the access device to unlock the locking device and allow the particular user access to the designated secure area of the facility.
14 . The method of claim 13 , wherein the application program running on the mobile device is configured to verify that the mobile device is possessed by the particular user assigned to the mobile device by authenticating the particular user to the mobile device before allowing the transmission of the control command to the access device.
15 . The method of claim 14 , wherein the application program running on the mobile device is configured to authenticate the particular user to the mobile device by receiving one or more inputs from the particular user.
16 . The method of claim 15 , wherein one or more inputs from the particular user include entry of a personal identifier number (PIN).
17 . The method of claim 14 , wherein the application program running on the mobile device is configured to authenticate the particular user by receiving a biometric input from the particular user.
18 . The method of claim 13 , wherein determining by the application program running on the mobile device whether the particular user assigned to the mobile device has access rights and should be granted access to the designated secure area of the facility comprises:
accessing a digital identity stored on the mobile device that includes the access rights that define whether the particular user that is assigned to the mobile device has access to the designated secure area of the facility, wherein the digital identity automatically expires after a predetermined period of time;
verifying that the access rights defined by the digital identity and stored on the mobile device grant the particular user access to the designated secure area of the facility; and
verifying that the digital identity stored on the mobile device has not yet expired.
19 . A system for controlling access to a designated secure area of a facility, the system comprising:
an access control system for generating a digital identity that includes access rights that define whether a particular user assigned to a mobile device has access to the designated secure area of the facility;
the mobile device storing the digital identify, including the access rights that define whether the particular user assigned to the mobile device has access to the designated secure area of the facility;
the mobile device comprising an application program loaded on the mobile device, the application program when executed by the mobile device causes the mobile device to:
reference the digital identity generated by the access control system and stored on the mobile device;
verify that the mobile device is possessed by the particular user assigned to the mobile device by authenticating the particular user to the mobile device;
verify that the access rights defined by the digital identity and stored on the mobile device grant the particular user access to the designated secure area of the facility;
in response to verifying that the mobile device is possessed by the particular user assigned to the mobile device and that the access rights defined by the digital identity and stored on the mobile device grant the particular user access to the designated secure area of the facility, transmit an unlock control command from the mobile device that grants the particular user access to the designated secure area of the facility;
a locking device for locking and unlocking an entry to the designated secure area of the facility; and
a controller of the locking device operatively coupled to the locking device, the controller configured to:
receive the unlock control command directly from a mobile device that grants the particular user access to the designated secure area of the facility, and in response, unlocks the locking device, which unlocks the entry to the designated secure area and allows the particular user of the mobile device access to the designated secure area.
20 . The system of claim 19 , wherein the digital identity automatically expires after a predetermined period of time, and wherein the application program when executed by the mobile device causes the mobile device to:
verify that the digital identity has not yet expired; and
in response to verifying that the mobile device is possessed by the particular user assigned to the mobile device, that the access rights defined by the digital identity and stored on the mobile device grant the particular user access to the designated secure area of the facility and the digital identity has not yet expired, transmit the unlock control command.