EP0935041A1 - Apparatus and method for physical or logical access control - Google Patents

Abstract

There are access members (1-3) for physical or logical locking by determining a first random code that includes the code elements and the state of the command mechanism. The device also includes a central unit (5,50) to which the first code is transmitted in order to release a second random code, which is then transmitted back to the access means to allow the unlocking process. An Independent claim is made for a process for unlocking a physical or logical lock. The first stage is determination of a first random code from the lock (3) by insertion of a housing (1) with a keypad and display into an interface (2) in the lock, by which a first code is determined. This is transmitted to a central command unit (5,50) and a second corresponding encryption or opening code is transmitted back to allow the lock to be opened.

Description

The present invention relates to a device and a method for physical or logical access control allowing in particular to activate electromechanical locking and unlocking elements for example a lock.

• serrure électrique autonome à code, dont l'ouverture est conditionnée par la reconnaissance d'un code d'accès.
• serrure électrique autonome dont l'ouverture est conditionnée par la lecture d'un badge d'identification avec ou sans contact.
• serrure électrique autonome utilisant un mélange des deux techniques précédentes.

There are currently many models of autonomous electric locks on the market, such as:

• autonomous electric code lock, the opening of which is conditioned by the recognition of an access code.
• autonomous electric lock, the opening of which is conditioned by the reading of an identification badge with or without contact.
• autonomous electric lock using a mixture of the two previous techniques.

In all the cases mentioned above, the user is a person only one who tries to identify himself to gain access and this without control of a higher authority responsible for overseeing the operation.

Patent application No. 2728613 shows an example of a lock requiring no external sources of energy and whose opening is conditioned by the recognition of an access code. In a version improved, the system is associated with a non-volatile memory carrying a code identification of the lock to be protected which can be read by the circuit electronic and compared with its preset code.

Also in application WO 96/03563 the applicant has drawn up a electronic lock matching the identification codes of the electronic key and lock and allowing the door to open.

Both of the above locks have a major defect in case of loss of key since requiring replacement of the elements of the device and especially their reprogramming.

In addition, these systems have the major drawback of not being able to authenticate the operator, in particular in the event of theft of the electronic key.

Only the contribution of a third control element can generate operator authentication.

The object of the present invention is to overcome the drawbacks of the art by proposing for the first purpose a device particularly simple and inexpensive and with a higher level of security than systems electronics fitted with transmitters.

This first object is achieved by the fact that the control device physical or logical access is characterized in that it comprises means physical or logical locking control that develop a first random code carrying identifiers and the status of these means of control, the device also comprising means intended to receive the first random code to develop a second random code transmitted to the control means to authorize physical or logical access, the transmissions of random codes being carried out without physical links.

According to another particular feature, the locking control means include a first electronic circuit mounted in an integral shoe a lock and a second electronic circuit mounted in a housing shaped to connect the two circuits when the housing is inserted in the shoe, each electronic circuit comprising storage means intended to store respectively the identifier of the case and the shoe as well as the state of means locking physical access, one of the circuits includes a program prerecorded which elaborates the first code as soon as the two circuits are connected.

According to another particular feature, the means receiving the first code primary include a computer system including a program of decryption allowing to extract the identifiers and the states carried by the first code, and allowing the development of the second random code after verification of the validity of the data extracted from the first code by through the consultation of a database included in the computer system.

According to another particularity, one of the electronic circuits comprises a program comprising an authentication module to control the consistency of the second code with the encryption method of the primary code (21), and authorize access, if the two codes are consistent with the encryption method.

According to another particular feature, the receiving shoe ensures the transfer of data and energy between the dialog box and the lock.

A second object of the invention consists in proposing a method of physical or logical access control.

• une étape d'élaboration, par des moyens de commande de verrouillage d'accès, d'un premier code aléatoire porteur des identifiants et de l'état des moyens de commande de verrouillage d'accès,
• une étape de transmission sans liaison physique du premier code primaire vers un centre de commande,
• une étape d'extraction puis d'authentification des identifiants et des états des moyens de commande de verrouillage d'accès, par le centre de commande,
• une étape d'élaboration d'un deuxième code aléatoire, par le centre de commande,
• une étape de transmission sans liaison physique du deuxième code aléatoire vers les moyens de commande de verrouillage d'accès,
• une étape de vérification de contrôle de l'authenticité du deuxième code aléatoire reçu par les moyens de commande de verrouillage d'accès.
• une étape d'activation des moyens de commande de verrouillage pour autoriser l'accès.

This second object is achieved by the fact that the physical or logical access control method is characterized in that it comprises:

• a step of developing, by means of access locking control means, a first random code carrying identifiers and the state of the access locking control means,
• a step of transmission without physical link of the first primary code to a command center,
• a step of extracting then authenticating the identifiers and the states of the access locking control means, by the command center,
• a step of developing a second random code, by the command center,
• a step of transmission without physical link of the second random code to the access locking control means,
• a step of verifying the authenticity of the second random code received by the access locking control means.
• a step of activating the locking control means to authorize access.

According to another particularity, the method comprises step of elaboration a discharge by the access locking control means after the step activation when access is again locked by means of access lock command, this quitus then being transmitted without physical link to the command center.

• la figure 1 représente un schéma de principe du dispositif selon l'invention pour un verrouillage d'accès physique,
• les figures 2A et 2B représentent les méthodes d'élaboration des codes aléatoires.

Other features and advantages of the present invention will appear more clearly on reading the description below made with reference to the appended drawings in which:

• FIG. 1 represents a block diagram of the device according to the invention for locking physical access,
• FIGS. 2A and 2B represent the methods for developing random codes.

The device according to the invention will now be described with reference to Figures 1 and 2A and 2B. The device according to the invention comprises, for example, a door locked by a lock (3) actuable by a mechanism electromechanical of the type of those of the prior art. The mechanism of locking of the lock is connected to a first electronic circuit, by example, contained in a shoe (2) integral with the door. This first circuit electronics includes a microprocessor which performs a prerecorded program capable of carrying out a diagnostic of the mechanism. In other words the first circuit can collect data on the state of the lock (3) and / or on the state of external elements such as contained objects in the trunk closed by the lock (3). The status of the lock is recorded on the storage means associated with the microprocessor. By condition of the lock, it should be understood, for example, opening or closing, alarm triggered. This diagnosis is, for example, carried out via a connection between a plurality of sensors and the microprocessor of the first circuit electronic. Each sensor emits signals representative of the state of the lock (3). Likewise, the storage means store a series of alphanumeric characters, hereinafter called lock identifier, to uniquely identify the first electronic circuit and therefore the lock (3).

The device also includes a second electronic circuit autonomous from the first electronic circuit and, for example, content in a housing (1). The second electronic circuit also includes a microprocessor and storage means. The means of memorization are in particular intended to store a series of characters constituting a unique identification of the second electronic circuit and therefore of the case. The second electronic circuit is also connected to means display (11) of the display type and an alphanumeric keyboard (12) mounted in the housing (1). The housing (1) is shaped so that it can be inserted into the door shoe (2), so that the two electronic circuits located respectively in the housing (1) and in the shoe (2) can be connected to establish a connection with or without contact between the two microprocessors. The two electronic circuits also include reading means of stored data. By contactless connection, it is necessary to understand a communication using magnetic, or capacitive, or optical, or radio.

The insertion of the housing (1) in the shoe (2) of the lock causes in first, reading by the first and second electronic circuits the identifier of the second and first electronic circuit and the reading of the state of the lock by the reading means of the first and second circuits electronic. Secondly, the second and the first circuit electronics elaborates, by means of a module (20) for encryption of a prerecorded program operating according to the flow diagram of FIG. 2A, a code (21) called primary from the identifiers (22, 23) of the housing and the lock and the condition (24) of the lock. This code (21) is by definition generated from randomly. Once calculated, this primary code (21) is displayed on the display means (11) of the housing (1) via the microprocessor of the housing (1).

The primary code (21) is, for example, composed of eight alphanumeric characters, composed of numbers and letters from which are excluded those likely to present an ambiguity, that is to say 32 possible values for a character. The primary code (21) defined can take 32 ⁸ possible values, each value of which characterizes the lock (3) box (1) torque resulting from the connection between the two electronic circuits, in a given state.

As, moreover, it is imperative to diversify the values as much as possible of the primary code (21), in order to protect against replay, it contains a evolving and random diversifying element corresponding to an encryption key. By replay, you must understand the fraudulent use of a code used previously.

However, this primary code (21) is not sufficient to unlock the lock (3). Unlocking the lock (3) is only possible with obtaining a second code (25), said opening code which, in association with the primary code (21), allows the opening of the lock (3). This code is actually a complementary code to the primary and coherent code with the encryption method used to develop the primary code.

To obtain this opening code (25), the operator, i.e. the user of the box (1), must first call by communication phonic (4), for example using a telephone or a transceiver, a command or remote monitoring center (5). The center (5) of remote monitoring is equipped with a computer system (50) comprising a database in which all lock identifiers are stored (3) and boxes (1) managed by the monitoring center (5) as well as a description of each lock (3) and case (). This description includes including the location of the lock, the type of lock, the name of the case owner, the type of case. The computer system (50) also includes a program executing the decryption function, inverse of the encryption performed by the first or second electronic circuit. When calling the central station (5), the operator proceeds, by example, upon authentication, and then provides an operator at the center (5) with remote monitoring the primary code (21) displayed on the housing (1).

• le numéro et le lieu de situation de la serrure (3) ;
• le numéro du boítier (1) ;
• le nom de l'exploitant ;

The operator of the remote monitoring center (5) enters the primary code on the computer system (50) which then performs the decryption of this code to obtain the housing identifier numbers (1) and the lock (3) and l status of the lock, then from the database gets the following information:

• the number and location of the lock (3);
• the case number (1);
• the name of the operator;

• l'état physique de la serrure (verrouillée ou déverrouillée, alarme agression),
• l'état d'éléments externes, c'est-à-dire, par exemple, si le contenu du coffre verrouillé par la serrure est présent.

Similarly, thanks to the state of the lock (3), the operator of the monitoring center also knows:

• the physical state of the lock (locked or unlocked, assault alarm),
• the state of external elements, that is to say, for example, if the contents of the trunk locked by the lock are present.

Having this information, the operator of the center (5) remote monitoring remains in control of its decision whether or not to issue the code opening (25). Thus, if the state of the lock (3) reveals, for example, the triggering of an alarm, or if the identification number of the box (1) does not does not correspond to the identifier number expected to open the lock (3) identified, the operator does not provide the opening code (25), and therefore it is not possible to unlock the lock by this route.

After checking with the operator and if the situation under control is correct, the central station operator validates the code (21) primary. This validation causes the development, by a program of computer system (50) of the remote monitoring center (5), of a code opening (25) according to the method shown in Figure 2A. This code is also generated from the identification numbers (22, 23) of the housing and the lock and the condition of the lock (24) and using an encryption key (30) complementary to the encryption key used to develop the primary code (21). This code, calculated by the program is a unique and random code calculated each use of the housing (1) and the lock (3) and this for the purpose of absolute security against replay.

The primary code encryption module (20) and the encryption key (30) opening code include for example a hazard generator introducing random information according to the encryption law used.

As soon as the opening code (25) is calculated, the center operator (5) of remote monitoring transmits to the operator, by the same phonic communication (4), this opening code. This code is entered on the keyboard of the dialog box then memorized by the second or the first electric circuit. When the entry of the opening code is validated, the second and the first electronic circuit develops a code, through a prerecorded program operating according to the same method as the program of the monitoring center (5) calculating the opening code. Then, the second and the first electronic circuit performs a control of consistency between the opening code (25) entered and the primary code (21) in depending on the encryption method of the primary code. If the opening code is consistent with the primary code, that is, if the opening code is complementary to the primary code according to the code encryption method primary, the second electronic circuit transmits a signal to the first circuit electronic to activate the locking mechanism of the lock immediately or after a delay. Information about the opening after delay is in this case encrypted in the code opening hours.

After the intervention on site, the operator locks the lock (3) by closing the door and can place again, the housing (1) in the shoe (2). The reinsertion of the housing (1) in the shoe (2), after closing the door, causes the development of a new code, called the end of operation code, by the first and second electronic circuit, and following the same method as for the development of the primary code. The operator transmits this end of operation code by the same communication channels (4), to the remote monitoring center (5). AT from this code, the program of the computer system (50) of the center generates a discharge.

This discharge allows the operator of the monitoring center to check the condition of the lock (3) and that the operations are completed, since as for the primary code, the end of operation code includes, in the form encrypted, the state of the lock.

This discharge is, for example, used to validate an authorization to reuse of the housing (1). Thus, if the housing (1) is not reinserted at the end of operation in the shoe (2) into which it was introduced at the start of the operation, the electronic circuit of the housing (1) triggers a neutralization of the housing (1). By cons, if the discharge is obtained, the housing (1) could be operational for another intervention on another lock (3).

The shoe (2) of the lock (3) can be installed in places not connected to the wired electric and telephone network. In this case the energy necessary for the two electronic circuits to carry out the different operations is provided by a battery mounted either in the case (1) either in the shoe (2) of the lock (3).

The device according to the invention can easily be adapted to other existing locking systems, electromechanical and mechanical and logic.

It is understood that according to the invention, the preservation of confidentiality access codes are no longer necessary, since the codes exchanged are single use and instant. Thus, the replay of a code, i.e. its fraudulent re-use is almost impossible. In addition, there is no physical link between the lock and the central station, which prevents any interception of codes or information relating to the calculation of random codes.

The above description relates to the use of the device for authorize physical access to a sensitive site or premises. It is possible to adapt the device according to the invention for securing the logical access, for example, to computer data or to authorize the use of computer equipment such as a computer. In this case, the principle of the invention remains identical, that is to say, it involves a remote monitoring center which, from a primary code calculated by the computer system and supplied by the user, returns an additional code to authorize access to data or else authorize the use of the computer. However, the material elements are modified. Indeed, it is no longer necessary to use two electronic circuits separate, nor to provide a physical link between these two circuits. Indeed, the set of functions performed by the two circuits is in this new use provided by a program, or the computer system on which are stored the data to which the user wishes to access, i.e. the computer the user wants to use. Likewise, the identifiers used are, for example, the serial number of the computer and the serial number of the program. Thus, this program develops the primary code then, after input and validation by the user of the opening or access code returned by the center of remote monitoring, develops its own opening code and compares it with the one entered to authorize access to data or to authorize use from a computer. The program also includes a clock for trigger the access validation procedure at a specific frequency or use. So, periodically, the program asks the user to enter an access code which will be provided by the central monitoring station exchange of a primary code and after verification of the access authorization. So, in this case, the access control is only held by the center that chooses whether or not to provide the opening code.

In the case where, for example, a computer, for example, laptop, equipped with the device according to the invention is stolen, the owner informs the center of remote monitoring of this flight. So when the central station receives an access authorization request for a computer whose number identification number corresponds to the identification number of the stolen computer, the monitoring station will not provide the access code, making it unusable computer.

In order to enhance the effectiveness of this system for application to the protection of a computer, the program according to the principle of the invention is stored in a memory area of the computer inaccessible to the user.

It is clear that other modifications within the reach of those skilled in the art are within the scope of the invention.

Claims (8)

Physical or logical access control device characterized by what it includes means (1, 2, 3) for controlling physical locking or logic that develop a first random code carrying identifiers and the state of these control means, the device also comprising means (5, 50) for receiving the first random code to generate a second random code transmitted to the means (1, 2, 3) for controlling locking to allow physical or logical access, transmissions of random codes being performed without physical links. Physical or logical access control device depending on the claim 1, characterized in that the means (1, 2, 3) for controlling locking include a first electronic circuit mounted in a shoe (2) integral with a lock (3) and a second mounted electronic circuit in a case (1) shaped to connect the two circuits when it is inserted in the shoe (2), each electronic circuit comprising means for memorization intended to store respectively the identifier of the case (1) and the shoe (2) as well as the state of means (3) locking the physical access, one of the circuits includes a prerecorded program which develops the first code as soon as that the two circuits are connected. Physical or logical access control device depending on the claim 1 or 2, characterized in that the means (5, 50) receiving the first primary code includes a computer system (50) comprising a decryption program allowing to extract the identifiers and the states carried by the first random code, and used to develop the second code random after checking the validity of the data extracted from the first code through the consultation of a database included in the computer system (50). Physical or logical access control device depending on the claim 2 or 3, characterized in that one of the electronic circuits includes a program with an authentication module for check the consistency of the second code with the encryption method of the primary code (21), and authorize access, if the two codes are consistent vis-à-vis of the encryption method. Physical or logical access control device depending on the claim 2 to 4, characterized in that the receiving shoe (2) ensures the transfer of data and energy between the dialog box (1) and the lock (3). Physical or logical access control device depending on the claim 2 to 4, characterized in that the dialog box (1) ensures the transfer of data and energy between the receiving shoe (2) and the lock (3). A physical or logical access control method characterized in that it comprises: a step of developing, by means (1, 2, 3) for controlling access locking, a first random code carrying identifiers and the state of the means (1, 2, 3) for controlling access lock, a step of transmission without physical link of the first primary code to one (5) command center, a step of extraction and then authentication of the identifiers and of the states of the access locking control means (1, 2, 3), by the control center (5), a step of developing a second random code, by the command center (5), a step of transmitting without a physical link the second random code to the means (1, 2, 3) for controlling access locking, a step of verifying the authenticity of the second random code received by the means (1, 2, 3) for controlling access locking, a step of activating the locking control means (1, 2, 3) to authorize access. Physical or logical access control method depending on the claim 7 characterized in that it comprises a step of developing a exit by means (1, 2, 3) of access locking control after the activation step when the access is again locked by the means (1, 2, 3) access lock control, this discharge being then transmitted to the command center (5).

Images