Nexkey, Inc.

Actividentity (australia) Pty. Ltd.

Identive Group, Inc.

Matthew Patrick Herscovitch

Jason Hart

Timothy Brian Dingwall

Peter R Russo

Peter Robert Lowe

John F Clark

Carl Sandland

John Boyer

Sooseok Oh

Sotoudeh Hamedi-Hagh

Sotoudeh Hamedi Hagh

Gary Kremen

Some embodiments include a lock cylinder comprising: a plug assembly having a front portion and a back portion; a housing shell within which the plug assembly is rotatably disposed, wherein the housing shell includes a notch; wherein the back portion of the plug assembly comprises: a locking pin that is movably disposed, and wherein the locking pin is configured to prevent a rotation of the plug assembly when the locking pin is engaged in the notch and prevented from retracting by a multi-stable mechanism; and the multi-stable mechanism having at least two stable configurations corresponding to respectively to a locked state and an unlocked state, wherein the multi-stable mechanism can maintain the stable configurations without consuming energy; wherein, at a first stable configuration, the multi-stable mechanism prevents the locking pin from retracting, and, at a second stable configuration, the multi-stable mechanism enables the locking pin to retract.

Energy efficient multi-stable lock cylinder

Some embodiments include a computer server. The computer server can be configured to: add a security system associated with a user account; provision one or more communication devices associated with the security system; configure a cryptographic key to associate at least a communication device amongst the communication devices with the security system; configure an access control file that is cryptographically signed by the computer server and encrypted with the cryptographic key associated with the security system, wherein the access control file contains permissions of the communication devices to the security system; and provide a data payload including the access control file to a first communication device of the communication devices.

Cryptographic key management via a computer server

Some embodiments include a method of operating an identity receiver of a security system to process an authentication request. The method can include detecting an energy signal from a mobile device at the identity receiver using a first communication protocol; generating a handover message at the identity receiver to request a unique characteristic of the mobile device using the first communication protocol, the unique characteristic associated with a second communication protocol; receiving the unique characteristic from the mobile device at the identity receiver; and authorizing access through the security system by matching the unique characteristic to an authorized identity stored in the identity receiver.

Fingerprinting a mobile device through near field communication

Systems are described herein for providing card reader configuration and access control, including a card reader, a remote computing device, and a communications network coupled to the card reader and the remote computing device. The card reader is configured to connect to the remote computing device via the communications network, transmit a request to the remote computing device via the communications network, receive data from the remote computing device via the communications network, and configure operational settings based on the received data. The remote computing device is configured to receive the request from the card reader via the communications network, generate data responsive to the request, and transmit the data to the card reader via the communications network.

RFID access control reader with enhancements

Methods and systems are described herein for providing configuration and access control of a card reader using a secure channel between the card reader and a remote computing device. The card reader transmits a request for service to the remote computing device via a cloud-based communications network. The remote computing device receives the request for service via the cloud-based communications network and generates service instructions based on the received request for service. The remote computing device transmits the service instructions to the card reader via the cloud-based communications network. The card reader receives the service instructions from the remote computing device via the cloud-based communications network and configures operational settings based on the received service instructions.

Cloud secure channel access control

Some embodiments include electronic circuitry for an electronic lock. The electronic circuitry can include: an antenna configured to receive a wireless signal; a communication processor, coupled to the antenna, configured to decode the wireless signal to ascertain a command to lock or unlock the electronic lock and to authenticate a source of the wireless signal; an energy storage configured to store electrical energy; a motor switch configured to drive a motor clockwise or counterclockwise, powered by the energy storage, depending on a control signal, wherein the motor switch is configured to drive the motor for a short burst of time; and a controller, coupled to the energy storage capacitor and the motor switch, configured to monitor electrical charge left in the energy storage and to output the control signal that corresponds to the command to lock or unlock the electronic lock.

NFC or BLE based contactless lock with charge monitoring of its energy storage

A system and method for providing continued access to authentication and encryption services that includes a secure key store communicably coupled to a virtual smart card server. A virtual smart card driver is also provided and is communicably coupled to a virtual smart card secure hardware server. The virtual smart card driver communicates with an authentication client to authenticate a user, and access the user's private key stored in the secure key store when the user's physical smart card is unavailable. Continued access is provided when the user has been authenticated.

Method and system for providing continued access to authentication and encryption services

A method and system for delivering external data to a process running on a virtual machine, the virtual machine running on an operating system. The method includes the steps of executing instructions on the virtual machine that obtain state data related to the process; querying the virtual machine to obtain component data related to the state data; and manipulating the component data to deliver the external data to the process. In one example, the system provides a single sign-on application that passes user credentials to a Java applet running on a Java virtual machine.

Computer program code and method for delivering external data to a process running on a virtual machine

In a computer system including a computer terminal, an operating system installed on said computer terminal, a virtual machine running on the operating system, a server communicatively coupled to the computer terminal and a process including instructions that when executed on a virtual machine define a user interface; a Single Sign On (SSO) system comprising a database of authentication credentials accessible to the computer terminal, and instructions executable on the virtual machine operative to: obtain user interface state data from the process; query the virtual machine to obtain component data related to the user interface state data; and manipulate the component data so as to deliver authentication credentials to the process.

System and method for delivering external data to a process running on a virtual machine

A method and system for providing remote user access to secure financial applications by deployment of SSO software () to client workstations (), including receiving a password for collaborating access to a secure server (); navigating to the secure server () using a web browser () on a remote workstation (); providing user authorization details and the received password to the secure server (); generating a subsequent password at the secure server () upon validation of the user authorization details and received password; downloading an SSO deployment file () to the remote workstation (), said deployment file () including the subsequent password; executing the SSO deployment file () to install an SSO client application () on the remote workstation; reading workstation settings and user credentials from a secure file or data store; and running the SSO client application () on the workstation to employ the user credentials and subsequent password to logon to the secure application.

Method and system for providing user access to a secure application

A method and system for providing remote user access to secure applications by deployment of SSO software to client workstations, including navigating to a secure server using a web browser on a remote workstation; providing user authorization details to the secure server; downloading an SSO deployment file to the remote workstation upon validation of the user authorization details; executing the SSO deployment file to install an SSO client application on the remote workstation; reading workstation settings and user credentials from a secure file or data store; and running the SSO client application on the workstation to employ the user credentials to logon to the secure application.

Growing community of inventors

Fremont, CA, United States of America

Matthew Patrick Herscovitch