Wireless firmware updates

Patent metadata

Field	Value
Publication number	US-10581850-B2
Application number	US-201815894357-A
Country	US
Kind code	B2
Filing date	Feb 12, 2018
Priority date	Jul 30, 2014
Publication date	Mar 3, 2020
Grant date	Mar 3, 2020

Abstract

A method includes transmitting, by a user device, an encrypted user profile to a locking device, the encrypted user profile including a user key and encrypted by a server using a lock key; decrypting, by the locking device, the encrypted user profile using the lock key to generate a decrypted user profile and obtain the user key from the decrypted user profile; generating, by the user device, an encrypted firmware update command, the encrypted firmware update command encrypted using the user key of the user profile; transmitting, by the user device, the encrypted firmware update command to the locking device; decrypting, by the locking device, the encrypted firmware update command using the user key to generate a decrypted firmware update command; and installing, by the locking device, a firmware update in accordance with the decrypted firmware update command in response to successfully decrypting the encrypted firmware update command.

First claim

The invention claimed is:

1. A method, comprising:
transmitting, by a user device, an encrypted user profile to a locking device, the encrypted user profile including a user key and encrypted by a server using a lock key;
decrypting, by the locking device, the encrypted user profile using the lock key to generate a decrypted user profile and obtain the user key from the decrypted user profile;
generating, by the user device, an encrypted firmware update command, the encrypted firmware update command encrypted using the user key;
transmitting, by the user device, the encrypted firmware update command to the locking device;
decrypting, by the locking device, the encrypted firmware update command using the user key to generate a decrypted firmware update command; and
installing, by the locking device, a firmware update in accordance with the decrypted firmware update command in response to successfully decrypting the encrypted firmware update command.

2. The method of claim 1 , further comprising receiving, by the user device, one or more firmware update packets from the server, wherein the one or more firmware update packets are included with the encrypted firmware update command sent to the locking device.

3. The method of claim 2 , wherein the one or more firmware update packets are encrypted by the server using the lock key.

4. The method of claim 3 , further comprising:
decrypting, by the locking device, the one or more encrypted firmware update packets using the lock key; and
installing, by the locking device, the firmware update in response to successfully decrypting the encrypted firmware update command and the one or more encrypted firmware update packets.

5. The method of claim 2 , further comprising notifying, by the server, the user device associated with the user profile that the firmware update is available for the locking device.

6. The method of claim 5 , further comprising:
transmitting, by the user device, a request for the firmware update to the server, wherein the server is a first server;
relaying, by the first server, the request to a second server;
transmitting, by the second server, the one or more firmware update packets to the first server responsive to the request; and
relaying, by the first server, the one or more firmware update packets to the user device.

7. The method of claim 6 , wherein the one or more firmware update packets are encrypted by the first server or the second server using the lock key.

8. The method of claim 1 , further comprising:
determining, by at least one of the user device or the locking device, whether the user device is within a predetermined proximity of the locking device; and
installing, by the locking device, the firmware update when the user device is within the predetermined proximity.

9. The method of claim 1 , further comprising:
receiving, by the user device, a lock identifier from the locking device, the lock identifier associated with the locking device; and
determining, by the user device, that the lock identifier is associated with the user profile on the user device by comparing the lock identifier to a set of lock identifiers on the user device.

10. The method of claim 1 , wherein the lock key is stored on the server and the locking device, but is not stored on the user device.

11. The method of claim 1 , further comprising pulling, by the user device, an audit trail from the locking device prior to installation of the firmware update, the audit trail comprising historical data indicating one or more prior actions performed by the locking device.

12. A non-transitory computer-readable storage medium having instructions stored thereon that, when executed by a processor of a user device, cause the processor to:
transmit an encrypted user profile to a locking device, the encrypted user profile including a user key and encrypted by a server using a lock key, the locking device configured to decrypt the encrypted user profile using the lock key to generate a decrypted user profile and obtain the user key from the decrypted user profile;
generate an encrypted firmware update command, the encrypted firmware update command encrypted using the user key;
transmit the encrypted firmware update command to the locking device, the locking device configured to decrypt the encrypted firmware update command using the user key extracted from the decrypted user profile to generate a decrypted firmware update command and install a firmware update in accordance with the decrypted firmware update command in response to successfully decrypting the encrypted firmware update command.

13. The non-transitory computer-readable storage medium of claim 12 , wherein the instructions further cause the processor to receive one or more firmware update packets from the server, wherein the one or more firmware update packets are included with the encrypted firmware update command sent to the locking device.

14. The non-transitory computer-readable storage medium of claim 13 , wherein the one or more firmware update packets are encrypted by the server using the lock key, and wherein the locking device is configured to decrypt the one or more encrypted firmware update packets using the lock key and install the firmware update in response to successfully decrypting the encrypted firmware update command and the one or more encrypted firmware update packets.

15. The non-transitory computer-readable storage medium of claim 12 , wherein the instructions further cause the processor to receive a security code from the locking device, wherein generating the encrypted firmware update command comprises using the security code to generate the encrypted firmware update command.

16. The non-transitory computer-readable storage medium of claim 12 , wherein the instructions further cause the processor to at least one of:
(i) pull an audit trail from the locking device prior to installation of the firmware update, the audit trail comprising historical data indicating one or more prior actions performed by the locking device; or
(ii) prevent a user from accessing the locking device during the firmware update.

17. An electronic locking device, comprising:
a wireless transceiver;
a memory;
an electronically controllable locking mechanism; and
a processing circuit configured to:
store a lock key in the memory;
receive an encrypted user profile from a user device, the encrypted user profile including a user key and encrypted by a server using the lock key;
decrypt the encrypted user profile using the lock key to generate a decrypted user profile and obtain the user key from the decrypted user profile
receive an encrypted firmware update command from the user device, wherein the encrypted firmware update command is encrypted using the user key;
decrypt the encrypted firmware update command using the user key to generate a decrypted firmware update command; and
install a firmware update in accordance with the decrypted firmware update command in response to successfully decrypting the encrypted firmware update command.

18. The electronic locking device of claim 17 , wherein the processing circuit is further configured to receive one or more firmware update packets with the encrypted firmware update command received from the user device.

19. The electronic locking device of claim 18 , wherein the one or more firmware update packets are encrypted by the server using the lock key, and wherein the processing circuit is further configured to:
decrypt the one or more encrypted firmware update pa

Assignees

• Master Lock Co

Inventors

• Conrad Nathan

Classifications

• H04L2209/80

  Wireless · CPC title

• G07C9/00309

  operated with bidirectional data transmission between data carrier and locks · CPC title

• H04L63/102

  Entity profiles · CPC title

• G07C2009/00825

  remotely by lines or wireless communication · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title