Controlling access to an area
Controlling access includes providing a barrier to access that includes a controller that selectively allows access, at least one administration entity generating credentials/proofs, wherein no valid proofs are determinable given only the credentials and values for expired proofs, the controller receiving the credentials/proofs, the controller determining if access is presently authorized, and, if access is presently authorized, the controller allowing access. The credentials/proofs may be in one part or may be in separate parts. There may be a first administration entity that generates the credentials and other administration entities that generate proofs. The first administration entity may also generate proofs or the first administration entity may not generate proofs. The credentials may correspond to a digital certificate that includes a final value that is a result of applying a one way function to a first one of the proofs.
1. A method of controlling access, comprising:
providing a barrier to access that includes a controller that selectively allows access; at least one administration entity generating credentials/proofs, wherein the credentials/proofs include credentials and a plurality of proofs, wherein the plurality of proofs are not determinable as valid given only the credentials and values for expired proofs, wherein the credentials include a final value and the expired proofs are no longer valid, and wherein each of the plurality of proofs is a result of applying a one way function to a subsequent one of the plurality of proofs, and comparing the result with the final value;
the controller receiving the credentials and at least one of the plurality of proofs;
the controller determining if access is presently authorized, wherein the determining includes applying the one way function to the at least one of the plurality of proofs; and
if access is presently authorized, the controller allowing access.
2. The method, according to claim 1 , wherein the credentials and the proofs are generated together in one part.
3. The method, according to claim 1 , wherein the credentials and the proofs are generated separately in multiple parts.
4. The method, according to claim 3 , wherein there is a first administration entity that generates the credentials and other administration entities that generate the proofs.
5. The method, according to claim 4 , wherein the first administration entity also generates the proofs.
6. The method, according to claim 4 , wherein the first administration entity does not generate the proofs.
7. The method, according to claim 1 , wherein the credentials correspond to a digital certificate that includes a final value that is a result of applying the one way function to a first one of the proofs.
8. The method, according to claim 7 , wherein the digital certificate includes an identifier for an electronic device.
9. The method, according to claim 1 , wherein the credentials include a final value that is a result of applying the one way function to a first one of the proofs.
10. The method, according to claim 1 , wherein the credentials include an identifier for a user requesting access.
11. The method, according to claim 1 , wherein the credentials/proofs include a digital signature.
12. The method, according to claim 1 , wherein the barrier to access includes walls and a door.
13. The method, according to claim 12 , further comprising:
providing a door lock coupled to the controller, wherein the controller allowing access includes the controller actuating the door lock to allow the door to open.
14. The method, according to claim 1 , further comprising:
providing a reader coupled to the controller, wherein the controller receives the credentials and the at least one of the plurality of proofs from the reader.
15. The method, according to claim 14 , wherein the credentials and the at least one of the plurality of proofs are provided on a smart card presented by a user.
16. The method, according to claim 1 , further comprising:
providing an external connection to the controller.
17. The method, according to claim 16 , wherein the external connection is intermittent.
18. The method, according to claim 16 , wherein the controller receives at least one of: the credentials and the at least one of the plurality of proofs using the external connection.
19. The method, according to claim 18 , wherein the controller receives the credentials and the at least one of the plurality of proofs using the external connection.
20. The method, according to claim 18 , further comprising:
providing a reader coupled to the controller, wherein the controller receives at least one of: the credentials and the at least one of the plurality of proofs from the reader.
21. The method, according to claim 20 , wherein the at least one of: the credentials and the at least one of the plurality of proofs are provided on a smart card presented by a user.
22. The method, according to claim 1 , wherein the credentials/proofs include a password entered by a user.
23. The method, according to claim 1 , wherein the credentials/proofs include user biometric information.
24. The method, according to claim 1 , wherein the credentials/proofs include a handwritten signature.
25. The method, according to claim 1 , wherein the credentials/proofs include a secret value provided on a card held by a user.
26. The method, according to claim 1 , wherein the credentials/proofs expire at a predetermined time.
27. The method, according to claim 1 , wherein determining if access is presently authorized includes determining if the at least one of the plurality of proofs is valid for a given barrier.
28. The method, according to claim 1 , wherein determining if access is presently authorized includes determining if the at least one of the plurality of proofs is valid for a given role.
29. The method, according to claim 1 , wherein determining if access is presently authorized includes determining if the at least one of the plurality of proofs is valid for a current time and for a given barrier and a given role.