Assa Abloy Ab

Stefan Strömberg

Sona Singh

Kenneth Pernyer

Frans Lundberg

Håkan Olsson

Eric Thomsen

Johan Gärde

Poyan Daneshnejad

Niklas Gustafsson

It is presented a method for providing access to a lock for provision of a service. The method comprises the steps of: receiving a request for access to the lock, the request being based on the service consumer ordering a service requiring access to a physical space, the request comprising a first public key associated with a co-ordinator and a second public key associated with a service provider agent; presenting a first consumer query to the service consumer; receiving a first positive consumer response indicating that the service consumer allows the service provider agent to access the physical space; and delegating access to the lock to the co-ordinator, which comprises encrypting at least part of a delegation using the first public key, encrypting at least part of the delegation using the second public key, and electronically signing the delegation, enabling further delegation to the service provider agent.

Providing access to a lock by service consumer device

It is provided a method for managing administration privileges of an electronic lock. The method is performed in the electronic lock and comprises the steps of: receiving a first signal from a first mobile device, the first signal comprising a first code entered by a user to the first mobile device, and an identifier of the first mobile device; determining that the first mobile device has administration privileges to the electronic lock; storing the first code in memory of the electronic lock; receiving a second signal from a second mobile device, the second signal comprising a second code entered by a user to the second mobile device, and an identifier of the second mobile device; and granting administration privileges to the lock for the second mobile device only when the second code matches the first code.

Managing administration privileges of an electronic lock

According to a first aspect, it is provided a method for providing access to a lock for provision of a service. The method comprises the steps of: receiving a request for access to the lock; sending a consumer request to a service consumer device, asking whether to grant access to the lock; receiving a positive consumer response from the service consumer device; determining validity time for a grant token; obtaining a grant token for the service provider, the grant token having the determined validity time; providing the grant token to the service provider; deleting the grant token in the access coordination server; receiving an agent request for access to the lock for a specific service provider agent device, the agent request comprising the grant token; obtaining a credential for the service provider agent device; and providing the credential to the service provider agent device.

Providing access to a lock for a service provider using a grant token and credential

It is provided a method for providing access to a physical space for provision of a service. The method is performed in an access coordinator and comprises the steps of: receiving an approval signal indicating that the service consumer allows a service provider agent of a service provider to open the lock; deriving service provider access data being necessary for the service provider agent to open the lock; transmitting the service provider access data to a service provider server, for storage by the service provider server; deleting the service provider access data from the access coordinator; receiving the service provider access data and a request to assign a service provider agent to open the lock; generating service agent access data; and transmitting the service agent access data to a service provider agent device associated with the service provider agent.

Transmitting service provider access data to a service provider server

It is provided a method for requesting remote unlocking of an electronic lock controlling access to a physical space. The method is performed in a user device and comprises steps of: sending a control message to an access controller, the control message comprising user authentication information, the control message causing the access controller to trigger the electronic lock to emit an alert signal; and sending an unlock message to the access controller comprising the user authentication information, in order to unlock the electronic lock.

Method for remotely unlocking a lock

It is provided a method for controlling access to a physical space. The method is performed in an access control device and comprises the steps of: communicating with an electronic key to obtain an identity of the electronic key; obtaining a plurality of delegations; determining, from one of the delegations, that there is an auxiliary condition, wherein the auxiliary condition is that access is approved for the electronic key by an auxiliary party, authenticated by a digital signature by the auxiliary party; and granting access to the physical space when the plurality of delegations comprises a sequence of delegations covering a delegation path from the access control device to the electronic key such that, in the sequence of delegations, the delegator of the first delegation is the access control device, the receiver of the last delegation is the electronic key, and the auxiliary condition is fulfilled.

Delegation and auxiliary condition for physical access

It is provided a method for providing access to a physical space secured by a lock for provision of a service. The method comprises the steps of: receiving an approval signal from a service consumer device of the service consumer, the approval signal indicating that the service consumer allows a service provider agent of a service provider to open the lock; receiving, from the service provider device, a request to assign a service provider agent to open the lock; communicating with the service provider device to use a private key of a cryptographic key pair accessible to the service provider device, the private key being used to generate service agent access data that is specific for the service provider agent, to allow the service provider agent to open the lock; and transmitting the service agent access data to a service provider agent device associated with the service provider agent.

Growing community of inventors

Stockholm, Sweden

Stefan Strömberg