Owner access point to control the unlocking of an entry

Patent metadata

Field	Value
Publication number	US-9763086-B2
Application number	US-201314011257-A
Country	US
Kind code	B2
Filing date	Aug 27, 2013
Priority date	Aug 27, 2013
Publication date	Sep 12, 2017
Grant date	Sep 12, 2017

Abstract

Disclosed is a method, apparatus, and system to control the unlocking of an entry for a guest having a wireless device by an owner access point. A virtual key for a wireless device and an access control rule associated with the virtual key may be stored at the owner access point. The owner access point may determine whether a virtual key received from a wireless device matches the stored virtual key and whether the access control rule for the stored virtual key is satisfied. If the virtual key matches, and the access control rule for the stored virtual key is satisfied, the owner access point may transmit an open command to the entry.

First claim

What is claimed is:

1. A method to control unlocking an entry for a guest having a wireless device by a wireless local area network (WLAN) access point receiving information from an owner management device comprising:
storing a first virtual key for the wireless device and an access control rule associated with the first virtual key for the wireless device in a memory of the WLAN access point, the first virtual key for the wireless device and the access control rule for the wireless device being received from the owner management device through a local wireless interface of the WLAN access point, the first virtual key being assigned particularly for the wireless device and not the entry;
determining whether a second virtual key received from the wireless device that is stored at the wireless device that is received through the local wireless interface of the WLAN access point matches the stored first virtual key for the wireless device stored in the memory of the WLAN access point and satisfies the access control rule for the stored first virtual key for the wireless device stored in the memory of the WLAN access point, and, if so,
transmitting an open command to the entry from the WLAN access point wirelessly through a wireless link to the entry to command the opening of the entry, the WLAN access point being separate from and located at a different location than the entry, wherein the second virtual key from the wireless device includes a WLAN credential and an authentication credential and the WLAN credential includes an identifier associated with the WLAN access point and the authentication credential includes a password for the wireless device and the second virtual key does not include access control rules.

2. The method of claim 1 wherein, the access control rule for the first virtual key includes a number of times usage.

3. The method of claim 1 wherein, the access control rule for the first virtual key includes a pre-set time period usage.

4. The method of claim 1 wherein, the access control rule for the first virtual key includes a pre-set day and time usage.

5. The method of claim 1 wherein, the second virtual key is transmitted by the wireless device to the WLAN access point, when the wireless device comes within a range of the WLAN access point, without requiring guest user input.

6. The method of claim 1 wherein, the second virtual key is only transmitted from the wireless device to the WLAN access point if a link between the wireless device and the WLAN access point is encrypted.

7. The method of claim 1 further comprising implementing an anti-relay attack function.

8. The method of claim 1 wherein, the second virtual key is used to perform a mutual authentication with the WLAN access point if a link between the wireless device and the WLAN access point is not encrypted.

9. The method of claim 1 wherein, the owner management device assigns and transmits the first virtual key and the access control rule for the first virtual key.

10. The method of claim 1 further comprising, disabling a security system after transmitting the open command to the entry.

11. A wireless local area network (WLAN) access point receiving information from an owner management device, the WLAN access point comprising:
a memory;
a local wireless interface; and
a processor coupled to the memory and the local wireless interface to execute operations including:
storing a first virtual key for a wireless device and an access control rule associated with the first virtual key for the wireless device in the memory, the first virtual key for the wireless device and the access control rule for the wireless device being received through the local wireless interface from the owner management device, the first virtual key being assigned particularly for the wireless device and not an entry;
determining whether a second virtual key received from the wireless device that is stored at the wireless device that is received through the local wireless interface matches the stored first virtual key for the wireless device stored in the memory of the WLAN access point and satisfies the access control rule for the stored first virtual key for the wireless device stored in the memory of the WLAN access point, and, if so,
transmitting an open command to the entry from the WLAN access point wirelessly through a wireless link to the entry to command the opening of the entry, the WLAN access point being separate from and located at a different location than the entry, wherein the second virtual key from the wireless device includes a WLAN credential and an authentication credential and the WLAN credential includes an identifier associated with the WLAN access point and the authentication credential includes a password for the wireless device and the second virtual key does not include access control rules.

12. The WLAN access point of claim 11 wherein, the access control rule for the first virtual key includes a number of times usage.

13. The WLAN access point of claim 11 wherein, the access control rule for the first virtual key includes a pre-set time period usage.

14. The WLAN access point of claim 11 wherein, the access control rule for the first virtual key includes a pre-set day and time usage.

15. The WLAN access point of claim 11 wherein, the second virtual key is transmitted by the wireless device to the WLAN access point, when the wireless device comes within a range of the WLAN access point, without requiring guest user input.

16. The WLAN access point of claim 11 wherein, the second virtual key is only transmitted from the wireless device to the WLAN access point if a link between the wireless device and the WLAN access point is encrypted.

17. The WLAN access point of claim 11 , further comprising implementing an anti-relay attack function.

18. The WLAN access point of claim 11 wherein, the second virtual key is used to perform a mutual authentication with the WLAN access point if a link between the wireless device and the WLAN access point is not encrypted.

19. The WLAN access point of claim 11 wherein, the owner management device assigns and transmits the first virtual key and the access control rule for the first virtual key.

20. The WLAN access point of claim 11 further comprising disabling a security system after transmitting the open command to the entry.

21. A wireless local area network (WLAN) access point receiving information from an owner management device comprising:
means for storing a first virtual key for the wireless device and an access control rule associated with the first virtual key for the wireless device at the WLAN access point, the first virtual key for the wireless device and the access control rule for the wireless device being received through a local wireless interface from the owner management device, the first virtual key being assigned particularly for the wireless device and not an entry;
means for determining whether a second virtual key received from the wireless device that is stored at the wireless device that is received through the local wireless interface matches the stored first virtual key for the wireless device stored at the WLAN access point and satisfies the access control rule for the stored first virtual key for the wireless device stored at the WLAN access point, and, if so,
means for transmitting an open command to the entry from the WLAN access point wirelessly through a wireless link to the entry to command the opening of the entry, the WLAN access point bein

Assignees

• Qualcomm Inc

Inventors

• Benoit Olivier Jean
• Hoerner Fabrice Jean

Classifications

• G07C9/00857

  where the code of the data carrier can be programmed · CPC title

• G07C9/00904

  for hotels, motels, office buildings or the like · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L63/108

  when the policy decisions are valid for a limited amount of time · CPC title

• H04W12/06

  Authentication · CPC title