Method, apparatus, and system for mobile provisioning of NFC credentials

Patent metadata

Field	Value
Publication number	US-10820203-B2
Application number	US-201414785653-A
Country	US
Kind code	B2
Filing date	Apr 18, 2014
Priority date	Apr 30, 2013
Publication date	Oct 27, 2020
Grant date	Oct 27, 2020

Abstract

A mobile provisioning system, method, and apparatus are provided. The mobile provisioning method is disclosed to enable a first mobile device to provision or write one or more guest identification objects to a second mobile device. The guest identification objects may be written only if the first mobile device has the appropriate permissions and may further be limited in their use as compared to non-guest identification objects.

First claim

What is claimed is:

1. A method, comprising:
establishing a device-to-device connection between a trusted mobile device and a visitor mobile device and during the device-to-device connection, receiving, at the trusted mobile device, at least some information describing the visitor mobile device;
generating at the trusted mobile device a request for a guest credential to be issued to the visitor mobile device, the request containing the at least some information describing the visitor mobile device and sending said request to a credential issuer;
analyzing the request generated by the credential issuer to determine that the trusted mobile device is allowed to provision the visitor mobile device with the guest credential; and
based on the analysis of the request, generating the guest credential, wherein the guest credential is transmittable to, and storable in memory of, the visitor mobile device and is configured for transmission by the visitor mobile device to a physical access control reader that protects a physical asset, thereby enabling a user of the visitor mobile device to access the physical asset.

2. The method of claim 1 , further comprising:
storing the guest credential in the memory of the visitor mobile device as one or more Near Field Communications (NFC) Data Exchange Format (NDEF) records.

3. The method of claim 2 , further comprising:
transmitting the guest credential to the visitor mobile device.

4. The method of claim 3 , wherein the guest credential is transmitted to the visitor mobile device via the trusted mobile device.

5. The method of claim 4 , wherein the trusted mobile device writes the guest credential to the visitor mobile device using Near Field Communications.

6. The method of claim 4 , wherein the trusted mobile device writes the guest credential to the visitor mobile device using Bluetooth.

7. The method of claim 2 , further comprising:
determining that one or more limitations of use are to be placed on the guest credential; and
incorporating the one or more limitations of use in the generated guest credential.

8. The method of claim 7 , wherein the one or more limitations include an escort restriction.

9. The method of claim 2 , wherein determining that the trusted mobile device is allowed to provision the visitor mobile device with the guest credential comprises analyzing information about at least one of the trusted mobile device and a user of the trusted mobile device.

10. The method of claim 9 , wherein a location of the trusted mobile device is used to determine whether the trusted mobile device is allowed to provision the visitor mobile device with the guest credential.

11. The method of claim 9 , wherein a credential provided by the trusted mobile device is analyzed to determine whether the trusted mobile device is allowed to provision the visitor mobile device with the guest credential.

12. A mobile device, comprising:
a mobile device interface enabling the mobile device to establish a device-to-device connection with a visitor mobile device and receive at least some information describing the visitor mobile device; and
a credential request unit that generates and sends a request for the guest credential to a credential issuer on behalf of the visitor mobile device, the request containing the at least some information describing the visitor mobile device, wherein the guest credential is storable in memory of the visitor mobile device and is configured for transmission by the visitor mobile device to an access control reader that protects a physical asset.

13. The mobile device of claim 12 , wherein the credential request unit is further configured to receive the guest credential from the credential issuer and provide the guest credential to the mobile device interface for writing to the visitor mobile device.

14. The mobile device of claim 12 , wherein the mobile device interface comprises a Near Field Communications interface.

15. The mobile device of claim 14 , wherein the Near Field Communications interface is configured to write the guest credential to the visitor mobile device in a transparent writing mode.

Assignees

• Assa Abloy Ab

Inventors

• Robinton Mark

Classifications

• H04W12/0431

  Key distribution or pre-distribution; Key agreement · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04W12/08 Primary

  Access security · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title