Mobile access control system and method

This application is a continuation of and claims the benefit of the filing date of U.S. application Ser. No. 14/152,342 filed Jan. 10, 2014.

The field relates to secured areas and, more particularly, to methods of accessing secured areas.

Security systems used for the protection of secured areas are known. Such systems typically rely upon a fence or barrier around a secured area with one or more portals (e.g., doors, windows, etc.) that allow access by authorized persons into the secured area.

Each of the portals may have a sensor (e.g., a limit switch) connected to the door or window that detects opening of the door or window by an intruder. Sensors may be monitored by a local control panel. Upon activation of one of the sensors, the control panel may activate a local alarm that notifies persons within the secured area of a threat.

The control panel may include a user interface that controls arming and disarming of a security system. The user interface may be located on the control panel or near an entrance to the secured area.

In order to avoid false alarms, the control panel may have a built-in delay that begins after detection of opening of the door or window and before activation of the alarm. This delay may be used by an authorized person to disarm the security system through the user interface.

In more sophisticated security systems, the authorized user may use an access card in conjunction with a card reader to both open the door and deactivate the security system. However, access cards may be duplicated and card readers are subject to damage by criminals. Accordingly, better methods are needed to allow access into secured areas by authorized persons.

FIG. 1 is a block diagram of a security system shown generally in accordance with an illustrated embodiment;

FIG. 2 is a block diagram of a door of the system of FIG. 1 ; and

FIG. 3 is a flow chart of steps that may be used by the system of FIG. 1 .

While embodiments can take many different forms, specific embodiments thereof are shown in the drawings and will be described herein in detail with the understanding that the present disclosure is to be considered as an exemplification of the principles hereof as well as the best mode of practicing the same. No limitation to the specific embodiment illustrated is intended.

FIG. 1 is a security system 10 shown generally in accordance with an illustrated embodiment. Included within the security system may be a number of sensors 14 , 16 that protect a secured area 12 .

Located along a periphery of the secured area may be one or more doors 18 that provide access into and egress from the secured area by authorized persons. The doors may be monitored by one or more of the sensors.

The sensors may be monitored by a control (or alarm) panel 20 . Upon activation of one of the sensors, the control panel may send an alarm message to a central monitoring station 32 . The central monitoring station may respond by summoning the police.

Included within the control panel may be one or more processor apparatuses (processors) 22 , 24 each operating under control of one or more computer programs 26 , 28 loaded from a non-transient computer readable medium (memory) 30 . As used herein, reference to a step of a program is also reference to the processor that executed that step.

During normal operation, one or more alarm processors of the alarm panel may monitor the status of each of the sensors. Upon activation of the one of the sensors, the alarm processor may compose the alarm message including an identifier of the one of the sensors activated, an identifier of the security system, and a time of activation. The composed message, in turn, is sent to the central monitoring station.

The alarm panel may also control access by authorized persons into the secured area via the doors. An access processor of the alarm panel (or one of the doors) may control one or more access control subsystems 34 located on or associated with the one or of the doors. One of the features of the access control subsystem is a transceiver near the one of the doors that detects a portable wireless device 46 carried by an authorized person. The access processor may receive information through the transceiver of the subsystem from the wireless device that confirms the identity of the authorized person and the one of the doors. Upon confirming the identity, the access processor may activate an electrically operated lock on the one of the doors in order to open the one of the doors. The access processor may also cancel any alarm activated by opening of the one of the doors.

FIG. 2 is a simplified block diagram of a door and an access control subsystem. The access control subsystem may include a local field control panel 36 , a door sense switch 38 , an exit button 40 , an electronic strike lock control 42 , an NFC tag 44 , an NFC mobile 46 , and a wireless access point 48 . In this regard, the field control panel 36 may be incorporated into the alarm panel 20 of FIG. 1 or may be a separate panel as shown in FIG. 2 . Similarly, the door sense switch 38 detects opening of the door and may be a separate sensor or may be one of the group of sensors 14 , 16 shown in FIG. 1 .

The electronic strike lock control may be an electrically operated lock. Activation of the electronic strike lock control allows persons to enter (or exit) a secured area.

The exit button may be located inside the secured area and may be used by authorized persons inside the secured area in order to exit. Activation of the exit button may activate the electrically operated lock.

The NFC tag may be a near field communication (NFC) tag as defined by the NFC forum. Alternatively, the NFC tag may be a radio frequency identification (RFID) tag. Alternatively, the NFC tag may be an RFID card that uses an NFC protocol. The NFC tag may be embedded or otherwise hidden within a door frame or other location proximate the door.

The NFC tag contains a data file including a coded identifier of the door and of a security system. The identifier of the security system may be an IP address. The data file is encrypted using one or more public and private keys.

The NFC mobile may be any portable wireless device capable of activating the NFC tag. The NFC mobile may be a cellphone, smartphone, PDA, or portable computer.

Under the illustrated embodiment, the portable wireless device includes an access program executing on an access request processor within the portable wireless device. The access program (processor) operates to exchange information with the access control subsystem in order to gain access to the secured area. To initiate access into the secured area, a user may activate an access button shown on a screen of the portable device.

In response, the portable wireless device transmits a wireless entry request message or signal 46 to the NFC tag (card). The wireless signal may include an identifier of the portable wireless device or an identifier of the portable wireless device and the security system. The signal is received by the NFC card and provides power to the NFC card. In one preferred embodiment, the NFC card simply transmits the encrypted data file back to the portable wireless device. Under a more preferred embodiment, a processor within the NFC card compares the identifier of the security system or the identifier of the security system and the user with one or more authorized identifiers. If the identifier(s) match, then the NFC card transmits the encrypted data file back to the portable wireless device.

Under one particularly preferred embodiment, the portable wireless device operates under a reader/writer mode as defined by the NFC forum. Under this embodiment, the entry request message and return of the encrypted data file may occur under a predetermined NFC protocol of request and response messages defined by the specifications of the NFC forum.

Located within the portable wireless device is a file containing the one or more public and private keys that may be used by the access request processor or a separate decoding processor within the portable wireless device to decode the received encrypted data file. The access request processor decrypts the data file using the one or more public and private keys to recover the identifier of the door and the identifier of the security system.

Once the access request processor has the identifier of the door and the identifier of the security system, a communication processor of the portable wireless device composes an access request including the identifier of the user, the identifier of the door, and the identifier of the security system. The portable wireless device transmits the access request to a corresponding access verification processor of the local field control panel 36 (or 20 ) through the wireless access point.

The access verification processor may decode the access request and first confirm that the identifier of the security system received from the portable wireless device matches that of the security system and that the identifier of the user corresponds to an authorized user of the security system. The access verification processor may do this by comparing the identifier of the user with a list of authorized persons located within a memory of the access verification processor. The access verification processor may also confirm that the door identified by the identifier of the door is part of the security system by matching the identifier of the door with a list of door identifiers.

Upon confirming the identifiers of the security system and the door and that the user of the portable wireless device is the authorized user, the access verification processor may compose and send an activating message to the strike lock control 42 . Upon receipt of the activating message, the strike lock control may open the door, and the user may enter the secured area.

In general, the system includes an access door of a secured area, a lock that controls access into the secured area through the door, a controller coupled to the lock, and a portable wireless device proximate the door, wherein the portable wireless device wirelessly retrieves an identifier from the door and wirelessly transfers the identifier of the door and a personal identifier of a person carrying the portable wireless device to the controller, and wherein the controller compares the received personal identifier with a list of identifiers of persons authorized to enter the secured area, determines that the received personal identifier matches an identifier of the list of identifiers, and activates the lock, thereby allowing physical entry by the person into the secured area.

Alternatively, the system includes a security system that protects a secured area, an access door of the secured area, a lock that controls access into the secured area through the door, a controller coupled to the lock, a radio frequency identification (RFID) card permanently located near the access door containing an identifier of the door, a portable wireless device, and a wireless access port, wherein the portable wireless device wirelessly recovers the identifier of the door directly from the RFID card, wherein the portable wireless device wirelessly transfers the identifier of the door and a personal identifier of a person carrying the portable wireless device to the controller through the wireless access port, and wherein the controller compares the received personal identifier with a list of identifiers of persons authorized to enter the secured area, determines that the received personal identifier matches an identifier of the list of identifiers, and activates the lock, thereby allowing physical entry by the person into the secured area.

From the foregoing, it will be observed that numerous variations and modifications may be effected without departing from the spirit and scope hereof. It is to be understood that no limitation with respect to the specific apparatus illustrated herein is intended or should be inferred. It is, of course, intended to cover by the appended claims all such modifications as fall within the scope of the claims.