Restricted area access control system

Patent metadata

Field	Value
Publication number	US-9589402-B2
Application number	US-201514828825-A
Country	US
Kind code	B2
Filing date	Aug 18, 2015
Priority date	Aug 25, 2014
Publication date	Mar 7, 2017
Grant date	Mar 7, 2017

Abstract

An access control system controls access to a restricted area. A mobile device exchanges messages with a backend server to validate a user and to control an actuator for a physical barrier responsive to validation. Beacon-based unique identifiers are calculated at validation time for the current location to facilitate the validation.

First claim

What is claimed is:

1. An access control system to validate access to a restricted area, the system comprising:
at least one electronically-controlled movable physical barrier and respective actuator drive circuit to control actuation of the at least one electronically-controlled movable physical barrier, wherein the at least one electronically-controlled movable physical barrier is located in a sub-location of a plurality of sub-locations of an access control area associated with the restricted area;
a beacon for each sub-location, wherein each beacon broadcasts a signal in its sub-location and the broadcasted signal include a beacon identifier specific to an associated sub-location; and
a server including at least one processor to:
receive a mobile device identifier from a mobile device, wherein the mobile device identifier is calculated by the mobile device based on the beacon identifier included in the broadcasted signal;
determine a proximity of the mobile device to a sub-location of the plurality of sub-locations;
determine whether the mobile device is in a sub-location of the plurality of sub-locations based on the determined proximity of the mobile device to the sub-location;
in response to a determination that the mobile device is in the sub-location, determine whether a user associated with the mobile device is validated to access the restricted area; and
in response to determining the user is validated, invoke opening the physical barrier for the sub-location by sending a validation signal to at least one of the mobile device and the respective actuator driver circuit.

2. The access control system of claim 1 , wherein the mobile device detects when it is in the sub-location and enters into an activation mode to send location information for the sub-location and user validation information to the server.

3. The access control system of claim 2 , wherein the mobile device sends the user validation information to the server in response to a determination that the mobile device is in the activation mode.

4. The access control system of claim 1 , wherein the server sends the validation signal to the mobile device to invoke opening of the physical barrier, and the mobile device sends a signal to the respective actuator driver circuit to open the physical barrier.

5. The access control system of claim 1 , wherein the mobile device identifier is unique to the sub-location when compared to identifiers for other sub-locations of the plurality of sub-locations.

6. The access control system of claim 1 , wherein the at least one processor uses one or more encryption keys to securely transmit messages to the mobile device in response to determining the mobile device is in the sub-location.

7. The access control system of claim 1 , wherein the at least one processor is to authenticate the mobile device based on a token received from the mobile device before validating the user.

8. The access control system of claim 7 , wherein the mobile device sends the token for authentication, user credentials for the user, and the mobile device identifier to the server in a single message, and the at least one processor is to authenticate the mobile device and validate the user in a single message exchange with the mobile device.

9. The access control system of claim 1 , wherein to determine whether a user associated with the mobile device is validated, the at least one processor is to determine whether a request is received to validate the user and another user associated with the user, and
in response to determining that the request to validate the user and another user is received, including a special command in the validation signal to invoke opening the physical barrier to allow the user and the another user to pass together through the sub-location into the restricted area.

10. The access control system of claim 1 , wherein a fare associated with accessing the restricted area is paid from a user account to validate the user.

11. A non-transitory computer readable medium of an access control server controlling access to a restricted area, wherein the non-transitory computer readable medium stores machine readable instructions executable by at least one processor of the access control server, to:
receive a mobile device identifier from a mobile device, wherein the mobile device identifier is calculated by the mobile device based on information received from at least one beacon, the at least one beacon being associated with a sub-location of a plurality of sub-locations within the restricted area;
determine a proximity of the mobile device to a sub-location of the plurality of sub-locations;
determine whether the mobile device is in a sub-location of the plurality of sub-locations based on the determined proximity of the mobile device to the sub-location;
in response to a determination that the mobile device is in the sub-location, determine whether a user associated with the mobile device is validated to access the restricted area; and
in response to determining the user is validated, send a validation signal to at least one of an actuator driver circuit and the mobile device to invoke opening a physical barrier associated with the sub-location.

12. The non-transitory computer readable medium of claim 11 , wherein the access control server sends the validation signal to the actuator driver circuit to open the physical barrier.

13. The non-transitory computer readable medium of claim 11 , wherein the mobile device identifier is unique to the sub-location when compared to identifiers for other sub-locations of the plurality of sub-locations.

14. The non-transitory computer readable medium of claim 11 , wherein the at least one processor uses one or more encryption keys to securely transmit messages to the mobile device in response to determining the mobile device is in the sub-location.

15. The non-transitory computer readable medium of claim 14 , wherein the securely transmitted messages authenticate the mobile device and the access control server, and
if the mobile device is authenticated, the securely transmitted messages include the validation signal.

16. The non-transitory computer readable medium of claim 11 , wherein the mobile device detects when it is in the sub-location and enters into an activation mode to send location information for the sub-location and user validation information to the access control server.

17. The non-transitory computer readable medium of claim 16 , wherein the mobile device sends the user validation information to the access control server in response to a determination that the mobile device is in the activation mode.

18. A mobile device comprising:
at least one short-distance communication interface to receive a beacon identifier from at least one beacon;
a data storage to store an operating system and an access control application; and
a processor to execute the operating system, wherein the operating system determines whether the received beacon identifier is a registered beacon identifier, and in response to a determination that the received beacon identifier is a registered beacon identifier, the processor launches the access control application stored on the mobile device, wherein
the access control application, in response to being launched, is executed by the processor, and the access control application determines whether the mobile device is at a sub-location of an access control area associated with a restricted area, wherein the access control area includes a plurality of sub-locations,
wherein in response to

Assignees

• Accenture Global Services Ltd

Inventors

• Raina Sunil
• Somani Avishek
• Cuddihey Alden
• Butler Scott Thomas
• Archibald Douglas Arthur Michael

Classifications

• H04W12/00

  Security arrangements; Authentication; Protecting privacy or anonymity · CPC title

• H04W4/021 Primary

  Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences · CPC title

• H04W88/02

  Terminal devices · CPC title

• G07C9/15

  with arrangements to prevent the passage of more than one individual at a time · CPC title

• G07C9/00309

  operated with bidirectional data transmission between data carrier and locks · CPC title