Anonymous decisions in an access control system

Patent metadata

Field	Value
Publication number	US-9860216-B2
Application number	US-201314028236-A
Country	US
Kind code	B2
Filing date	Sep 16, 2013
Priority date	Sep 16, 2013
Publication date	Jan 2, 2018
Grant date	Jan 2, 2018

Abstract

A controller device may correspond to a physical access controller in a distributed physical access control system. The controller device may include logic configured to obtain access to a global database that include access control information for a plurality of controller devices. The logic may be further configured to derive a local access rules table from the global database, wherein the local access rules table relates users to access rules, and wherein the local access rules table is encrypted with a local access rules key; and derive a local credentials table from the global database, wherein the local credentials table relates hashed credentials to users, wherein the local credentials table stores, for a user, the local access rules key encrypted with unhashed credentials associated with the user, wherein the unhashed credentials are not stored in the controller device.

First claim

What is claimed is:

1. A method, performed by a controller device, the method comprising:
accessing, by the controller device, a global database that includes access control information for a plurality of controller devices,
wherein the controller device belongs to a distributed system that includes the plurality of controller devices, and
wherein the global database corresponds to a consensus-based distributed dataset in the distributed system and identifies users and access rules for granting access to a plurality of entities;

deriving, by the controller device, a local access rules table from the global database,
wherein the controller device uses the local access rules table to determine whether or not to grant access to an entity associated with the controller device,
wherein the controller device stores the local access rules table,
wherein the local access rules table lists a plurality of users and associates a rule for each corresponding user to access the entity associated with the controller device, and
wherein the local access rules table is encrypted with a local access rules key;

deriving, by the controller device, a local credentials table from the global database,
wherein the local credentials table relates each of the plurality of users to a corresponding hashed credential, and
wherein the local credentials table stores, for each of the plurality of users, the local access rules key encrypted with the corresponding unhashed credential associated with the corresponding user;

receiving, by the controller device, a credential value from a reader device;
identifying, by the controller device, one of the plurality of users from among the plurality of users listed in the derived local credentials table based on the received credential value, when a hashed credential associated with the one of the plurality of users exists in the derived local credentials table, wherein the corresponding unhashed credential is not stored in the controller device as being associated with the corresponding one of the plurality of users before identifying the one of the plurality of users; and
executing, by the controller device, one or more access rules associated with the identified one of the plurality of users based on the derived local access rules table, when an access rules entry exists for the user in the derived local access rules table.

2. The method of claim 1 , further comprising:
hashing the received credential value;
determining whether a credential entry exists for the hashed credential value in the local credentials table; and
identifying the one of the plurality of users associated with the received credential value in the local credentials table, when the credential entry exists for the hashed credential value in the local credentials table.

3. The method of claim 2 , further comprising:
decrypting the local access rules key, associated with the credential entry, using the received credential value;
decrypting the local access rules table using the decrypted local access rules key; and
determining whether the access rules entry exists in the decrypted local access rules table for the one of the plurality of users.

4. The method of claim 1 , further comprising:
receiving an update to the global database from an administrator device;
distributing the update to other ones of the plurality of controller devices; and
updating the global database using the received update, wherein the global database is updated at the other ones of the plurality of controller devices.

5. The method of claim 1 , further comprising:
storing the global database by the controller device; and
enabling the plurality of controller devices to access the global database.

6. The method of claim 1 , wherein the controller device is not a member of the consensus-based distributed dataset of the global database and the global database is stored in another controller device of the plurality of controller devices, and wherein obtaining access to the global database includes:
accessing the global database at the other controller device.

7. The method of claim 1 , further comprising:
obtaining an update for the global database;
determining that the update is relevant to at least one of the local access rules table or the local credentials table; and
updating the at least one of the local access rules table or the local credentials table using the updated global database, based on determining that the update is relevant to the local access rules table or the local credentials table.

8. The method of claim 7 , wherein the local credentials table is encrypted using a local credentials key, the method further comprising:
decrypting the local credentials table using the local credentials key;
updating a hashed credential value in the local credentials table;
obtaining an unencrypted local access rules key from the global database; and
encrypting the local access rules key with an unhashed credential value, wherein the encrypted local access rules key is associated with the hashed credential value.

9. The method of claim 7 , further comprising:
obtaining an unencrypted local access rules key from the global database;
decrypting the local access rules table using the obtained unencrypted local access rules key;
updating the local access rules table; and
encrypting the updated local access rules table.

10. The method of claim 1 , wherein the local access rules table associates a particular access location with a particular group of users and with a particular set of access rules.

11. The method of claim 1 , further comprising:
deriving a remote local access rules table from the global database for another controller device of the plurality of controller devices;
deriving a remote local credentials table from the global database for the other controller device; and
enabling the other controller device to access the remote local access rules table and the remote local credentials table.

12. The method of claim 1 , wherein a user is associated with a global database row number in the global database, wherein the user is associated with the global database row number in the local access rules table, and wherein the user is associated with the global database row number in the local credentials table.

13. The method of claim 6 , wherein the controller device is located in an area designated as a high risk area and where the other controller device is located outside the area designated as a high risk area.

14. The method of claim 1 , wherein the plurality of controller devices corresponds to a distributed physical access control system, and wherein the controller device corresponds to a physical access control unit.

15. A controller device comprising:
a memory storing instructions; and
a processor configured to execute the instructions to:
access a global database that includes access control information for a plurality of controller devices, wherein the global database identifies users and access rules for granting access to a plurality of entities, and wherein the controller device belongs to a distributed system that includes the plurality of controller devices, and wherein the global database corresponds to a consensus-based distributed dataset in the distributed system;
derive a local access rules table from the global database,
wherein the controller device uses the local access rules table to determine whether or not to grant access to an entity associated with the controller device,
wherein the controller device stores the local access rules table,
wherein the local access rules tab

Assignees

• Axis Ab

Inventors

• Bruce Mathias
• Johansson Marcus

Classifications

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06F9/54 Primary

  Interprogram communication · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title