Schlage Lock Company LLC

Delphi Technologies, Inc.

Allegion, Inc.

Joseph W Baumgarte

John Robert Ahearn

Gabriel Daniel Focke

Michael Scott Henney

Matthew Dexter

Ryan C Kincaid

Robert Martens

Robert Prostko

Jeffrey Scott Neafsey

Benjamin J Hopkins

Daniel Langenberg

Todd Eberwine

Joshua A Long

Brian Christopher Eickhoff

Andrew Setter

John Evenson

Dennis Troy Anfield

Scott Baxter

Jonathan R Everson

James D Ohl

Michael Patrick Hogan

Timothy Noonan Comerford

David Studt

Aaron J Schlicht

Brian Sherman

Jeremy Earles

John Luif

Ed Harrold

Rockwood Theodore Roberts, Iii

Kevin P Oehler

Dakoda Johnson

Keith R Broerman

Seth Kaufman

Roger Barrett

Richard A White

Scott Daub

Patrick GrandPre

Frank Kasper

Autumn A Groleski

Mitchell T Barbon

Brady Plummer

Zachary P Boomer

Devin A Love

John Charles Carpenter

Dan Pfunder

Garett Madole

Gregory Ross

Nathanael L Thomas

Paul Avgerinos

John D Goodwin

Jason Kornaker

Steve J Kottlowski

Matthew Barr

Jacob Scheib

Nelson Henry

Alex Lammers

Eric Halvorson

Jason Beck

Frederick Holt

Nick Heitzman

Kristin Day

Martin Madsen

Michael P Hogan

Abdul Khadar Jailani Mannanayak

Justin D Seacat

Lakshmi Santhanakrishnan

Lee Odess

Terry Small

Drew Locketz

Brian Gilchrist

Sean Neal

Manfred E Steffes

Justin K Robinson

Justin W Fox

David O'Neill

George R Zechman, Iii

Christopher Bauer

Christopher Eubel

Jonathan Coyle

Ethan Harmon

Christopher J Rohaly

Phillip W Kelly

Mark Duckworth

Charles N Elwood

Dakota Johnson

Robert C Martens

Robert S Prostko

Steven J Kottlowski

Brian C Eickhoff

A method for leveraging an access control architecture for detecting secure data copied between devices according to an embodiment includes, by a credential system, generating an authentication diversified key based on a master key and a first key diversification input, generating an encryption diversified key based on the master key and a second key diversification input, generating a credential blob including an encrypted credential for a mobile device and a portion of the second key diversification input, and transmitting the credential blob to the mobile device, and by a reader device, receiving credential data from the mobile device including an encrypted version of the credential blob, generating the encryption diversified key based on the master key and the second key diversification input, validating the credential data based on the encryption diversified key, and extracting the credential for use in an access control decision.

Access control architecture for detecting secure data copied between devices

A cover plate according to certain embodiments is configured for use with a mounting plate and a control system, and has a front side and a rear side opposite the front side. The cover plate includes a support substrate, a cover plate coupler, and an electronic device. The support substrate includes an opening sized and shaped to receive a spindle of a door hardware apparatus associated with the rose assembly. The cover plate coupler is configured to releasably couple with a mounting plate coupler of the mounting plate. The electronic device is mounted to the support substrate, and includes a first electrical connector accessible from the rear side of the cover plate and configured for electrical connection with a second electrical connector of the control system, and an electronic component electrically connected with the first electrical connector.

Interchangeable functional rose insert

A method of authenticating a mobile device over Bluetooth advertisements according to one embodiment includes broadcasting, by an access control device, a first Bluetooth advertisement including a challenge message generated by the access control device, receiving, by the mobile device, the first Bluetooth advertisement including the challenge message, broadcasting, by the mobile device, a second Bluetooth advertisement including a challenge response message generated by the mobile device based on the challenge message, receiving, by the access control device, the second Bluetooth advertisement including the challenge response message, and determining, by the access control device, whether the mobile device is authorized to perform an action with respect to the access control device by verifying the challenge response message.

Bluetooth device authentication over bluetooth advertisements

A method for leveraging a universal credential in an access control system according to one embodiment includes generating, by a cloud system, a CBOR web token for user access to at least one electronic lock, wherein the CBOR web token includes a group tag associated with a set of access rights for a group of users and a cryptographic signature, transmitting the CBOR web token to a user mobile device, receiving, by a first electronic lock, the CBOR web token from the user mobile device for access to a passageway secured by the first electronic lock, verifying an authenticity of the cryptographic signature of the CBOR web token and that the group tag of the CBOR web token is associated with a group authorized to access the passageway secured by the first electronic lock, and unlocking a lock mechanism in response to the verifications.

Universal credential

A method according to one embodiment includes determining, by a server, a location of a door in an architectural drawing and a room function of a room secured by the door based on an analysis of the architectural drawing, determining, by the server, proper access control hardware to be installed on the door based on the room function, a category of access control hardware, and a predictive machine learning model associated with the category of access control hardware, and generating, by the server, a specification based on the determined proper access control hardware.

Automated architectural specification generation and hardware identification

An access control device according to an embodiment includes a lock mechanism, a digital core PCBA including at least one first processor and at least one first memory and is configured to facilitate wireless communications, wherein the at least one first memory is provisioned with a master initialization salt key, and an access core PCBA electrically coupled to the digital core PCBA, that includes at least one second processor and at least one second memory, and is configured to facilitate access control, and wherein the at least one second memory is provisioned with an access core initialization key derived from the master initialization salt key, wherein the digital core PCBA establishes a secure communication channel with the access core PCBA via an electrical connection between the digital core PCBA and the access core PCBA based on the master initialization salt key and the access core initialization key.

Technologies for secure inter-processor communications

An exemplary method includes operating an access control device in a standalone mode, which involves controlling a locked/unlocked state of the access control device locally, and operating a wireless transceiver of the access control device in a lower-power state in which the wireless transceiver is operable to receive a lockdown signal from an external device. The method further includes operating the access control device in a networked lockdown mode in response to receiving the lockdown signal from the external device. Operating the access control device in the networked lockdown mode involves placing the access control device in a locked state, establishing a wireless communication connection with the external device via the wireless transceiver while operating the wireless transceiver in a higher-power state.

Ripple network access control system

A method of commissioning an access control device to an access control system according to one embodiment includes, by the access control system, receiving a public cryptographic key of a cryptographic key pair from a cryptography circuit manufacturer device, wherein at least the private cryptographic key of the public cryptographic key pair is stored in the cryptography circuit of the access control device; generating commissioning data for in-field commissioning of the access control device in response to receiving the public cryptographic key, wherein the commissioning data for the access control device is associated with a unique identifier located on the access control device; receiving a request from a mobile device for the commissioning data in response to the mobile device scanning the unique identifier on the access control device; and transmitting the commissioning data to the mobile device for transmittal to the access control device.

Technologies for using NFC or QR code to commission a device to the cloud

A method includes transmitting, by a handler device associated with a package handler, a message to an access control system requesting access to a secure container secured by an electronic lock mechanism; determining, by the access control system, whether the package handler is authorized to access the secure container based on the received message; transmitting, by the access control system, an unlock command to the secure container in response to a determination that the package handler is authorized to access the secure container; and unlocking the electronic lock mechanism of the secure container in response to successful authentication of the unlock command.

Secure container for package delivery

A method of customized installation of access control hardware according to one embodiment includes capturing, by a camera of a mobile device, at least one image of an installation location for the access control hardware, generating a set of customized installation instructions for the access control hardware at the installation location based on the at least one image, and displaying the customized installation instructions on a graphical user interface of the mobile device.

Technologies for leveraging machine learning for customized installation of access control hardware

A method of using a blockchain in an access control environment according to one embodiment includes transmitting, by a mobile device, a request to access a passageway secured by a lock device to a first node device, wherein a plurality of node devices including the first node device store the blockchain, receiving, by the mobile device, a lock-specific access token from one of the plurality of node devices in response to validation of a blockchain transaction associated with the request received from the mobile device by the plurality of node devices, transmitting, by the mobile device, the lock-specific access token to the lock device, receiving, by the mobile device, a verification message from the lock device in response to successful authentication of the lock-specific access token, and transmitting, by the mobile device, a notification of verification to the first node device to amend the blockchain.

Blockchain for access control

A method according to one embodiment includes receiving audio input by a microphone of an access control device that controls access through a passageway, processing an audio signal associated with the audio input to identify and authenticate a user, determining a command corresponding with the audio signal in response to identification and authentication of the user, and performing at least one action that corresponds with the command.

Audio-based access control

A method according to one embodiment includes receiving, by a gateway device and from an access control device, credential data received by the access control device from a mobile device in response to presentation of the mobile device to the access control device, comparing the credential data to a gateway credential list stored in a memory of the gateway device, the gateway credential list identifying a plurality of credentials associated with the gateway device, and each credential of the plurality of credentials associated with a unique credential index, transmitting, to a server, the unique credential index associated with the credential data in response to determining that the credential data matches a corresponding credential in the gateway credential list, and receiving, from the server, an access control decision associated with the credential data in response to transmitting the unique credential index.

Technologies for access control communications

Growing community of inventors

Carmel, IN, United States of America

Joseph W Baumgarte