WO2023052659A1 - Procedimiento y sistema de control de acceso - Google Patents
Procedimiento y sistema de control de acceso Download PDFInfo
- Publication number
- WO2023052659A1 WO2023052659A1 PCT/ES2022/070472 ES2022070472W WO2023052659A1 WO 2023052659 A1 WO2023052659 A1 WO 2023052659A1 ES 2022070472 W ES2022070472 W ES 2022070472W WO 2023052659 A1 WO2023052659 A1 WO 2023052659A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- sensor
- mobile device
- validation server
- automatic access
- validation
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00896—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys specially adapted for particular uses
- G07C9/00904—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys specially adapted for particular uses for hotels, motels, office buildings or the like
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00571—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by interacting with a central unit
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/10—Movable barriers with registering means
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/20—Individual registration on entry or exit involving the use of a pass
- G07C9/21—Individual registration on entry or exit involving the use of a pass having a variable access code
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/20—Individual registration on entry or exit involving the use of a pass
- G07C9/215—Individual registration on entry or exit involving the use of a pass the system having a variable access-code, e.g. varied as a function of time
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/20—Individual registration on entry or exit involving the use of a pass
- G07C9/22—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/20—Individual registration on entry or exit involving the use of a pass
- G07C9/27—Individual registration on entry or exit involving the use of a pass with central registration
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
- H04W4/02—Services making use of location information
- H04W4/021—Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07B—TICKET-ISSUING APPARATUS; FARE-REGISTERING APPARATUS; FRANKING APPARATUS
- G07B15/00—Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points
- G07B15/02—Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points taking into account a variable factor such as distance or time, e.g. for passenger transport, parking systems or car rental systems
- G07B15/04—Arrangements or apparatus for collecting fares, tolls or entrance fees at one or more control points taking into account a variable factor such as distance or time, e.g. for passenger transport, parking systems or car rental systems comprising devices to free a barrier, turnstile, or the like
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
- G07C2009/0042—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks the transmitted data signal containing a code which is changed
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
- G07C2009/00555—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks comprising means to detect or avoid relay attacks
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C2209/00—Indexing scheme relating to groups G07C9/00 - G07C9/38
- G07C2209/08—With time considerations, e.g. temporary activation, valid time window or time limitations
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C2209/00—Indexing scheme relating to groups G07C9/00 - G07C9/38
- G07C2209/60—Indexing scheme relating to groups G07C9/00174 - G07C9/00944
- G07C2209/63—Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle
Definitions
- a first object of the present invention is a method designed to securely control access to facilities, for example in the context of a sporting or musical event or any type of show.
- a second object of the invention is a system particularly designed to carry out the above procedure.
- the tickets began to have electronic support.
- the viewer purchases the ticket through a web page and the ticket is downloaded, which similarly to the previous case has a QR code or the like.
- the spectator shows the ticket through the mobile phone screen, so that the code is read by the reader located at the entrance to the Installation to allow or deny access.
- This access control system is essentially equivalent to the previous one, although It has the advantage that the purchase of the ticket does not require a physical ticket office. However, as in the previous case, making couplets from the input may be enough to fraudulently access the event.
- a system in which the spectator buys the ticket through a certain application installed on his mobile phone is also known.
- the application When the purchase is made, the application generates a code that includes some data directly related to the mobile phone from which the purchase is made, such as the telephone number or similar.
- the access control system server that is in communication with the entrance turnstiles generates a code in the same way.
- the turnstile checks both codes to allow or deny access.
- the application calculates successive versions of the input code, each of which has a predetermined duration. This can be done, for example, by adding a timestamp to the code, according to a known procedure in this field. So, for example, the app could calculate a new version of the input code every 20 seconds.
- the code calculated by the application that the viewer displays to the input lathe will be the same as the one calculated by the server at that specific moment, and therefore the input is validated.
- this fraud could work if they send the entry code quickly enough to a person simultaneously located at another door. from the same facility.
- the present invention solves the previous problems thanks to an access control procedure and system that uses an entry code that, in addition to being dependent on the When it is generated thanks to the addition of a timestamp, it is also dependent on the place where it is generated.
- a set of symbols or characters that directly depend on some physical variable present in the place where the code is generated is added to the entry code, for example next to the access door to the facilities where the viewer is at that moment.
- the ticket code that the viewer shows when accessing the facilities has been validly calculated by the ticket purchase and management application at the same time and place, completely avoiding the possibility of fraud through copies, printing or sending a valid code from some remote location away from the facility.
- Event Any type of sporting, musical or artistic event for which it is necessary to control access to a certain Facility.
- Installation Physical place and controlled access in which the event takes place, such as a stadium, a theater, a concert hall, or others.
- Mobile device Any type of device on which a specific application can be installed to purchase tickets for sporting, musical or artistic events. It includes not only mobile phones, but also tablets, smartwatches, and any other known similar device. A mobile device of any of these types has a plurality of embedded sensors capable of detecting various physical variables.
- Server Electronic device capable of communication, processing and storage of data. It can be a single physical device or it can be divided into several separate physical devices that communicate with each other. For example, it can be formed by a first physical device that carries out processing tasks plus a second physical device that constitutes a database. It is also possible that, for legal or commercial reasons unrelated to the Invention, the server is divided into several separate physical devices, each of which performs a particular part of the tasks defined herein.
- Automatic access door' Any type of door, turnstile, barrier, or similar configured to automatically allow or deny access to the Facility where the event takes place by opening or closing an obstacle that physically prevents the passage of the spectator.
- the automatic access door has a means of communication with the mobile device, for example a QR code reader, as well as a means of communication with the server.
- the automatic access door is configured to read the QR code of the viewer's entrance, send said code to the server, and allow or deny access to the facility based on receipt of an order to grant or deny access. by the server.
- Application' Any type of program or set of code that can be installed and/or run on the mobile device to make it carry out a certain series of operations.
- it is an application for purchasing and managing tickets for sporting, musical or artistic events that communicates through web software with other entities involved in the purchase process.
- the application contains a time limited entry code generation algorithm.
- Code Any set of symbols or characters, whether textual or visual, used to control access to the facility where the event takes place. For example, an alphanumeric code, a barcode, a QR code, or any other can be used.
- Timestamp Temporary stamp, also known as a time stamp, timestamp, or time stamp, which generally consists of a sequence of characters denoting the date and/or time an access code is generated. It is used for generating codes that change as a function of time, ie for generating a succession of codes of limited time duration.
- a first aspect of the present invention describes a procedure for controlling the access of a viewer to a facility.
- a viewer's mobile device has installed an application configured to communicate with a server validation which, in turn, is configured to communicate with automatic access doors to the facility.
- This procedure basically comprises the following steps:
- One of the mobile device application and the validation server generates a seed constituting a first part of an input code, and sends said seed to the other of the mobile device application and the validation server.
- the viewer first installs a ticket purchase and management application on his mobile device and then carries out a process to purchase a ticket.
- the mobile device or the validation server generates a seed that will constitute a first part of the entry code.
- the first part of the input code can be directly the seed itself, or else some data obtained from it by means of a known predetermined algorithm or procedure.
- the generated seed is sent to the other entity between the mobile device and the validation server, that is, to that entity of the two that has not generated it.
- the seed is known to both entities.
- the mobile device sends the validation server data identifying the mobile device itself.
- this data may be, for example, one or more of the telephone number (N), the International Mobile Subscriber Identity (I MSI) and/or the International Mobile Equipment Identity (IMEI).
- N the telephone number
- I MSI International Mobile Subscriber Identity
- IMEI International Mobile Equipment Identity
- This step does not need to be after the step described above, but can be done simultaneously or even in advance.
- data from the mobile device can be sent to the server during the installation operations of the ticket management and purchase application on the mobile device, and therefore prior to the generation of the seed itself that is would occur later during the ticket purchase process.
- the mobile device data can be sent to the server simultaneously with the seed.
- the end result of these first two steps of the procedure is that the seed and the identification data of the mobile device on which the ticket management and purchase application is installed are known to both the validation server and the installed application. on the mobile phone.
- the mobile device application calculates an input code of limited time duration that includes the seed, identification data of the mobile device and at least a first measurement of a physical variable in the environment of the mobile device obtained at that moment by means of a sensor embedded in said device. mobile. Note that it is not Required that the input code include only a single measurement of a physical variable, but could include several different physical variable measurements.
- the physical variable of the environment of the mobile device can be any as long as it can be obtained by means of one of the conventionally embedded sensors in current mobile devices such as smartphones and the like. This includes detectable parameters that go beyond what is strictly understood by the term "physical variable", such as number of identified Wi-Fis or others.
- the physical variable of the device's environment mobile is chosen from the following: identified Wi-Fi, signal strength emitted by a radio device, signal strength emitted by a Bluetooth device, signal strength emitted by a Bluetooth Low Energy device, cell ID of a cell tower rover, GPS positioning coordinates, GPS positioning quadrant, visible satellites used in GPS positioning, atmospheric pressure, wind speed, temperature, humidity, air conductivity, air salinity, gravity, altitude, acoustic intensity, biometrics, orientation, luminosity, infrared spectrum, air quality, and vibrations.
- this third step of the procedure of the invention takes place when the spectator is going to access the installation where the event takes place.
- the viewer opens the application to obtain the entry code, for example a QR code that will be shown to an optical reader connected or embedded in the automatic access door.
- Said entry code that will be shown to the automatic access door is automatically generated at that moment by the application, and includes the seed (or data obtained from it), identification data of the mobile device, and at least a first measure. of a predetermined physical variable of the environment of the mobile device obtained by a sensor of the mobile device itself.
- the algorithm used to generate said entry code is embedded in the mobile phone application itself or, in any case, has been transmitted in advance to the mobile phone from the server.
- the input code further includes a timestamp which is obtained periodically at known and predetermined time intervals.
- the timestamp Included in the input code may change every 10 or 20 seconds, thus providing enough time for the system to perform all the necessary steps for validation.
- the duration time of the entry code can be adjusted to ensure correct operation of the Invention.
- the use of time-limited input codes by adding timestamps is already known in this field, and for that reason its use is not described in detail. Presentation of the entry code on the access door
- the automatic access gate When the mobile device communicates the entry code to the automatic access gate, the automatic access gate sends a validation request including said entry code to the validation server.
- the automatic access door upon receiving the entry code, the automatic access door triggers the start of the process described below for the validation of said entry code.
- a sensor located in the installation performs a second measurement of the physical variable and communicates it. to the validation server.
- the purpose of acquiring this second measure of the physical variable is to allow subsequent verification of the validity of the entry codes shown by the spectators to the automatic access doors in the manner described in detail below. In particular, access will only be allowed when, among other considerations, both measures coincide.
- a single common sensor for the entire installation to which access is sought could be used, regardless of the number of automatic access doors.
- a physical variable such as temperature or atmospheric pressure
- its value will be constant at all points of the installation where the access doors to a football stadium are located. That is, the value of the first measurement of the temperature or pressure taken by the viewer's mobile device in the environment of a certain automatic access door will coincide with the value of the second measurement of the temperature or pressure taken by the sensor located at any other point in the facility.
- a single sensor would suffice to check the validity of the entry codes displayed through all the automatic access doors to the facility.
- the environment of a door can cover a maximum distance from the access door of a few meters, preferably less than 10 meters, more preferably less than 5 meters, and even more preferably less than 2 meters. This ensures that, in the case of certain physical variables of limited scope, the second measurement obtained by the sensor corresponding to an automatic access door when the spectator shows the entry code to the door matches the first measurement made by the mobile device. of the spectator located next to said automatic access door when opening the application a few seconds before.
- both the physical variable and the degree of precision of the measurement will be selected in such a way as to ensure the coincidence between both measurements when these are taken from points that are not further apart. of a few meters.
- the calculation by the application of successive input codes of limited time duration ensures that the code shown to the door has not been generated long before, and therefore that the viewer was close to the door when it was generated.
- the cell ID of a mobile telephony antenna, or parameters related to GPS tracking are considered as variables, it is possible that their value is not constant at all data points. Installation, and therefore there are variations between some automatic access doors and others.
- specific sensors could be arranged for each door or set of doors so that, during the validation process, the validity of each entry code is checked taking into account the second measurement acquired by the sensor corresponding specifically to the door. automatic access to which said entry code was displayed.
- the senor or sensors could in principle be connected to any of the entities described or to other entities or intermediate elements as long as the measurements acquired can be communicated to the validation server directly or indirectly.
- the sensor could be connected to the validation server.
- the sensor could be connected to, or embedded in, the automatic access door, in which case it would send the value of the second measurement of the physical variable to the validation server.
- the underlying concept is to send the value of said second measurement of the physical variable to the validation server, either directly (if the sensor is directly connected to the validation server) or indirectly (if the sensor is connected to the automatic access door).
- this second measurement of the physical variable is taken essentially at the same moment that the viewer shows the entry code to the automatic access door and is physically close to said automatic access door (understanding by "close” a separation normally not greater than the maximum dimensions of the installation, be it a stadium, a theater, etc.).
- the second measurement obtained by the sensor present in the installation whether it is a single sensor for the entire installation or a dedicated sensor for each door, will only coincide with the first measurement obtained by the user's mobile device if both have been taken in the same installation (in the case of a single sensor) or more specifically in the environment of the same automatic access door (in the case of dedicated sensors for each door).
- the validation server calculates, in the same way that the application of the mobile device calculated the entry code, a validation code corresponding to the Time Interval in which it receives the validation request.
- This validation code comprises the seed, the identifying data of the mobile device, and the second measurement of the physical variable.
- the expression "in the same way as the application of the mobile device calculated the input code” related to the calculation of the validation code means that the validation server performs the calculation of the validation code using the same algorithm as the one used by the mobile device to calculate the entry code.
- This algorithm therefore, is included from the start both in the application that is installed on the mobile device and in the validation server.
- the algorithm can be part of the data of the ticket purchase and management application itself that is installed on the viewer's mobile device.
- the server starts from the same initial data the result of the calculation should have a validation code identical to the input code generated by the application.
- both the mobile device and the server use are synchronized so that the validation code generated by the validation server includes the same mark of time that the application included in the entry code.
- the input code and the validation code preferably include each time stamp obtained in a synchronized manner by the application of the mobile device and by the validation server.
- the validation server calculates the validation code starting from the same data used by the application, since the validation server has from the first step of this procedure both the seed as well as the identification data of the mobile device. Therefore, the only difference in the starting data is the measurement of the physical variable, which in this case is a second measurement taken by the sensor instead of the first measurement taken by the mobile phone. Both measurements will only match if the mobile device was sufficiently close to the sensor at the time the access code was generated, and therefore in the environment of the facility to which access is desired.
- the calculated validation code will only be Identical to the entry code if the mobile device displaying the ticket to the automatic access gate was next to the gate at the time the access code was generated.
- the validation server checks if there is a match between the input code received from the automatic access door and the validation code calculated by the validation server itself. If so, the validation server sends the automatic access gate an access grant command. In the negative case, the validation server sends an access denial order to the automatic access door.
- the automatic access door opens or remains closed depending on the order received from the validation server.
- the procedure also comprises the step of emitting, from a beacon arranged in the Installation, a detectable signal in the vicinity of all the automatic access doors to the Installation.
- a beacon arranged in the Installation
- a detectable signal in the vicinity of all the automatic access doors to the Installation.
- it can be a Wi-Fi, radio, Bluetooth or Bluetooth Low Energy signal emitted from a suitable point in the installation with sufficient power so that it can be detected at all access doors.
- This signal will constitute the physical variable used in the procedure of the invention, so that it can be ensured that the first measurement acquired by the viewer's mobile device and the second measurement acquired by the installation's sensor will only coincide when the viewer is inside. of the range of reach of said specific dedicated signal, that is, when you are physically in the installation to which you intend to access.
- the procedure also comprises the step of emitting, from a plurality of beacons respectively arranged around the automatic access doors, signals that can only be detected in the environment of an automatic access door or in the environment of several automatic access doors located in the same area of the Facility.
- the beacons generate a physical variable (Wifi, radio, Bluetooth or Bluetooth Low Energy signal or others) whose range is calculated so that it is only detectable in the environment of a particular automatic access door. or in the environment of a particular subset of doors among all the doors of the Facility.
- the range, number and position of the beacons the number of signals received at each access door would be different, which would make it possible to uniquely identify the access door where the viewer is located.
- each beacon could emit a different signal from the signals emitted by the rest of the beacons.
- the signal emitted by each beacon could be unique and known, and its range could be calculated to reach only a single access door or a subset of automatic access doors.
- the sensor of a viewer's mobile device captures a certain signal, this necessarily implies that said mobile phone is next to the automatic access door corresponding to the beacon that emits that signal.
- This configuration is particularly advantageous because it further reduces the likelihood of access control fraud, albeit at the cost of increased complexity and installation time.
- a second aspect of the present invention is directed to a system for controlling a viewer's access to a facility.
- This system includes a validation server and automatic access doors to the facility.
- the validation server is configured to communicate with an application installed on a viewer's mobile device, while the validation server is configured to communicate with automatic access gates.
- the system of the present invention differs in that it also comprises a sensor of a physical variable that is located in the Installation. As will be described in detail later in this document, this sensor will be directly or indirectly connected to the validation server.
- validation server and the automatic access doors are configured to carry out the following operations:
- One of the mobile device application and the validation server generates a seed constituting a first part of an input code, and sends said seed to the other of the mobile device application and the validation server.
- the mobile device sends the identification data of the mobile device to the validation server.
- the mobile device application calculates an input code of limited time duration, where the input code comprises the seed, identification data of the mobile device and at least a first measurement of a physical variable in the environment of the mobile device obtained at that moment. through a sensor embedded in said mobile device.
- the automatic access door sends a validation request to the validation server that includes said entry code
- the sensor located in the installation makes a second measurement of the physical variable and communicates it to the validation server.
- the validation server calculates, in the same way that the mobile device application calculated the entry code, a validation code corresponding to the time interval in which it receives the validation request, which includes the seed, the identification data of the device mobile, and the second measure of the physical variable.
- the validation server checks if there is a match between the input code received from the automatic access door and the validation code calculated by the validation server itself and, if so, the automatic access door sends a grant order access, while in the negative case it sends an access denial order to the automatic access door.
- the system of the invention could comprise a single sensor located at any point of the facility to which access is sought, regardless of the number of automatic access doors.
- the neighborhood of a door refers to a distance around said door within which the viewer predictably opens the mobile device application to display the code to the door when accessing the facility.
- the environment of a door can cover a maximum distance from the access door of a few meters, preferably less than 10 meters, more preferably less than 5 meters, and even more preferably less than 2 meters.
- the senor could be connected to the validation server.
- the sensor could be connected to, or even more preferably embedded in, the automatic access door, in which case the latter would send the value of the second measurement of the physical variable to the validation server.
- the underlying concept consists of sending the value of said second measurement of the physical variable to the validation server, either directly (if the sensor is directly connected to the validation server) or indirectly (if the sensor is connected to the validation server). connected to the automatic access door).
- the senor comprises at least one of the following: a WiFi range receiver, a radio signal receiver, a Bluetooth range receiver, a Bluetooth Low Energy range receiver, a mobile phone signal, a GPS positioning sensor, an atmospheric pressure sensor, a wind speed sensor, a temperature sensor, a humidity sensor, an air conductivity sensor, an air salinity sensor, a of gravity, an altitude sensor, an acoustic intensity sensor, a bloometric sensor, an orientation sensor, a luminosity sensor, an infrared spectrum sensor, an air quality sensor, and a vibration sensor.
- the method also comprises the step of emitting, from a beacon arranged in the Installation, a detectable signal in the vicinity of all the automatic access doors to the installation.
- a detectable signal in the vicinity of all the automatic access doors to the installation.
- it can be a Wi-Fi, radio, Bluetooth or Bluetooth Low Energy signal emitted from a suitable point in the installation with sufficient power so that it can be detected at all access doors.
- This signal would constitute the physical variable used in the system, which would make it possible to ensure that the first measurement acquired by the viewer's mobile device and the second measurement acquired by the installation's sensor will only coincide when the viewer is within the range of the said specific dedicated signal, that is, when you are physically in the facility to which you intend to access.
- the procedure also comprises the step of emitting, from a plurality of beacons respectively arranged around the automatic access doors, signals that can only be detected in the environment of an automatic access door or in the environment of several automatic access doors located in the same area of the Facility.
- the beacons generate a physical variable (Wifi, radio, Bluetooth or Bluetooth Low Energy signal or others) whose range is calculated so that it is only detectable in the environment of a particular automatic access door. or in the environment of a particular subset of doors among all the doors of the Facility.
- a physical variable Wi, radio, Bluetooth or Bluetooth Low Energy signal or others
- each beacon could emit a different signal from the signals emitted by the rest of the beacons.
- the signal emitted by each beacon would be unique and known, and its range would be calculated to reach only a single access door or a subset of automatic access doors.
- the sensor of a viewer's mobile device captures a certain signal, this necessarily implies that said mobile phone is next to the automatic access door corresponding to the beacon that emits that signal.
- FIG. 1 shows a schematic view of the elements that make up an access control system according to the present invention.
- the Flg. 2 shows a schematic view of an automatic access door according to the present invention.
- Figs. 3A-3E schematically show some steps of the access control procedure according to the present invention.
- Fig. 4 shows a schematic schedule of the access control procedure of the present invention.
- Fig. 1 schematically shows an access control system installed in a football stadium to control access to a football match.
- This stadium has eight gates, in each of which there is an automatic access gate installed (3).
- a sensor (4) is installed, in this example a temperature and humidity sensor.
- each automatic access door (3) is in this example a lathe that has three bars fixed to a rotating part, so that operating the rotating part at a predetermined angle causes a displacement of the bars that allow a single person to clear the way.
- This lathe (3) also has an optical reader (31) for reading QR codes. It is, therefore, a completely conventional turnstile (3) of the type currently used to control the entrance to many stadiums.
- a validation server (2) in communication with the lathes (3) and connected to the temperature and humidity sensor (4) is located in a remote location.
- the validation server (2) may not be a single physical element, but may be divided into several parts due to technical or commercial reasons.
- the validation server (2) can be made up of a first sub-server belonging to a first entity in communication with a second sub-server. server belonging to a second entity.
- Each of such sub-servers can have other additional elements connected to it, such as databases or other elements for specific use.
- the connections between the different elements that make up the validation server (2), as well as between the validation server (2) and the lathes (3) will be carried out using any means of communication, wired or wireless, known in the art. .
- the set of elements described operates in a coordinated manner to carry out the operations described in this document, and for reasons of conciseness they are simply referred to as "validation server (2)".
- Fig. 1 also shows a mobile device (1), which in this case is a mobile phone.
- the mobile phone (1) will have a specific application installed for the purchase and management of tickets.
- This application can be downloaded conventionally in existing application stores.
- the application is configured to make the mobile phone (1) carry out the different operations described in this document, as will be described in greater detail later.
- the application includes the algorithm that the mobile phone (1) will use later to generate the entry code (CE) to the stadium.
- CE entry code
- the mobile phone (1) sends the validation server (2) identifying data of said mobile phone, such as the phone number itself (N), the IMSI, the IM The , or any combination thereof.
- the mobile device (1) will naturally also have at least one temperature sensor and one humidity sensor.
- Fig. 3A the viewer purchases a ticket through the application installed on the mobile phone (1). To do this, the viewer first performs an authentication process to access the purchase area of the application and then selects the seat and makes the corresponding payment.
- the validation server (2) uses a predetermined algorithm to generate a seed (S) which it sends to the mobile phone (1).
- the mobile phone (1) and the validation server (2) both have stored both the seed (S) and identification data (N, IMSI and/or IM El) of said mobile phone (1) .
- the mobile phone application (1) uses the aforementioned algorithm to perform calculation of an input code (CE) on the basis of the seed (S), the data ( N, IMSI and/or IMEI) identifying the mobile phone (1), and a first measurement (VF 1 ) of the aforementioned physical variables that is carried out at that moment using one of the sensors embedded in the mobile phone (1) .
- the physical variables used to generate the entry code (CE) are the temperature and humidity at that specific time and in that specific place.
- the entry code (CE) can, for example, look like the following:
- the entry code (CE) appears on the screen and the viewer shows it to the optical reader (31) of the access turnstile (3). As shown in Fig. 3D, once the entry code (CE) has been read, the lathe (3) sends said entry code (CE) to the validation server (2).
- the time elapsed between the generation of the entry code (CE) and the moment in which it is read by the access turnstile (3) is only a few seconds.
- the process of calculating successive time-limited input codes (CEs) by adding timestamps will ensure that the code that is finally displayed to the viewer lathe (3) has not been generated earlier than the duration of each code in seconds, and therefore the first measurement (VF 1 ) of the physical variable has been made near lathe (3).
- the sensor (4) receives an order to carry out a second measurement (VF 2 ) of the same physical variables, that is, of the temperature and humidity at that moment.
- VF 2 the second measurement of the same physical variables
- the time elapsed since the mobile phone application (1) took the first measurement (VF 1 ) of the variable The physical distance is only a few seconds, so the distance between the place where the viewer was at that moment and the sensor (4) is assumed to be small enough so that there are no significant variations in temperature and humidity for that reason.
- the second temperature and humidity measurement (VF 2 ) carried out by the sensor (4) located somewhere in the stadium will yield the same result as the first measurement (VF 1 ) carried out by the mobile phone application.
- the temperature and humidity sensor (4) is connected to the validation server (2), the temperature and humidity data immediately reach said validation server (2).
- the validation server (2) has stored the seed (S), the identification data (N, IMSI, and/or IMEI) of the viewer's mobile phone (1), and the value of the measurement of temperature and humidity obtained by the sensor (4).
- the validation server (2) also knows the algorithm for calculating the entry code (CE).
- Fig. 3E schematically shows, using this algorithm, the seed (S), the data (N, IMSI, and/or IMEI) of the mobile phone (1), and the second measurement (VF 2 ) of temperature and humidity, the validation server (2) calculates a validation code (CV).
- This validation code (CV) will match the input code (CE) only if the second measurement (VF 2 ) of temperature and humidity is the same as the first measurement (VF 1 ) of temperature and humidity, that is, if and only if the spectator was close enough to the stadium, for example next to the turnstile (3), when the entry code (CE) was generated by the application.
- the validation server (2) then compares the input code (CE) with the validation code (CV). If they are the same, send an opening order to the lathe (3) to allow the spectator to pass through. If they are not equal, send an order to the lathe (3) to keep the spectator's way closed.
- Fig. 4 is a schematic schedule that shows the different communications that take place between the different elements of the system when the procedure described in the previous paragraphs is carried out.
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Selective Calling Equipment (AREA)
- Mobile Radio Communication Systems (AREA)
- Devices For Checking Fares Or Tickets At Control Points (AREA)
- Time Recorders, Dirve Recorders, Access Control (AREA)
- Telephonic Communication Services (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Communication Control (AREA)
- Control Of Position, Course, Altitude, Or Attitude Of Moving Bodies (AREA)
Abstract
Description
Claims
Priority Applications (10)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202280031797.4A CN117916780A (zh) | 2021-09-28 | 2022-07-19 | 入场控制方法及系统 |
| US18/272,431 US12217563B2 (en) | 2021-09-28 | 2022-07-19 | Access control method and system |
| EP22875236.6A EP4411678A4 (en) | 2021-09-28 | 2022-07-19 | METHOD AND SYSTEM FOR ACCESS CONTROL |
| MX2023011443A MX2023011443A (es) | 2021-09-28 | 2022-07-19 | Procedimiento y sistema de control de acceso. |
| AU2022354611A AU2022354611A1 (en) | 2021-09-28 | 2022-07-19 | Access control method and system |
| JP2023546488A JP2024538471A (ja) | 2021-09-28 | 2022-07-19 | アクセス制御方法及びシステム |
| MA63061A MA63061B1 (fr) | 2021-09-28 | 2022-07-19 | Procédé et système de commande d’accès |
| GB2311961.3A GB2619426A (en) | 2021-09-28 | 2022-07-19 | Access control method and system |
| BR112023023056A BR112023023056A2 (pt) | 2021-09-28 | 2022-07-19 | Procedimento e sistema de controle de acesso |
| CA3209957A CA3209957A1 (en) | 2021-09-28 | 2022-07-19 | Access control method and system |
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| ES202130906A ES2937716B2 (es) | 2021-09-28 | 2021-09-28 | Procedimiento y sistema de control de acceso |
| ESP202130906 | 2021-09-28 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| WO2023052659A1 true WO2023052659A1 (es) | 2023-04-06 |
Family
ID=85723993
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/ES2022/070472 Ceased WO2023052659A1 (es) | 2021-09-28 | 2022-07-19 | Procedimiento y sistema de control de acceso |
Country Status (12)
| Country | Link |
|---|---|
| US (1) | US12217563B2 (es) |
| EP (1) | EP4411678A4 (es) |
| JP (1) | JP2024538471A (es) |
| CN (1) | CN117916780A (es) |
| AU (1) | AU2022354611A1 (es) |
| BR (1) | BR112023023056A2 (es) |
| CA (1) | CA3209957A1 (es) |
| ES (1) | ES2937716B2 (es) |
| GB (1) | GB2619426A (es) |
| MA (1) | MA63061B1 (es) |
| MX (1) | MX2023011443A (es) |
| WO (1) | WO2023052659A1 (es) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20220167676A (ko) * | 2021-06-14 | 2022-12-21 | 삼성전자주식회사 | Uwb 통신을 이용한 트랜잭션 방법 및 장치 |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20070200665A1 (en) * | 2004-01-06 | 2007-08-30 | Kaba Ag | Access control system and method for operating said system |
| US20080290989A1 (en) * | 2007-05-22 | 2008-11-27 | Skidata Ag | Method of controlling access to a sports facility |
| US20120068818A1 (en) * | 2009-04-03 | 2012-03-22 | Inventio Ag | Access control system |
| EP3584769A1 (en) * | 2018-06-20 | 2019-12-25 | Detec AS | Improved access control system and a method thereof controlling access of persons into restricted areas |
Family Cites Families (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20120188054A1 (en) * | 2011-01-21 | 2012-07-26 | Einsteins, Llc | Remote security entrance application |
| US20140229246A1 (en) * | 2013-02-11 | 2014-08-14 | Touraj Ghaffari | RFID Frequency Translator |
| CN104276137A (zh) * | 2014-09-19 | 2015-01-14 | 奇瑞汽车股份有限公司 | 一种基于手机lbs的车辆无钥匙进入系统和方法 |
| EP3289506B1 (en) * | 2015-05-01 | 2021-12-22 | Assa Abloy AB | Using wearable to determine ingress or egress |
| KR101673189B1 (ko) * | 2015-09-09 | 2016-11-07 | 유비벨록스(주) | 출입 인증을 위한 모바일 학생증의 등록 및 사용 방법과 이를 위한 모바일 학생증 서버 |
| CN107305706A (zh) * | 2016-04-20 | 2017-10-31 | 北大方正集团有限公司 | 控锁方法和控锁系统 |
| US10096181B2 (en) * | 2016-11-22 | 2018-10-09 | Cubic Corporation | Hands-free fare gate operation |
| US20180268238A1 (en) * | 2017-03-14 | 2018-09-20 | Mohammad Ayub Khan | System and methods for enhancing license plate and vehicle recognition |
| US11374929B2 (en) * | 2017-03-21 | 2022-06-28 | Global E-Dentity, Inc. | Biometric authentication for an augmented reality or a virtual reality device |
| EP3635707B1 (en) * | 2017-06-05 | 2023-11-08 | Citifyd, Inc. | Parking objects detection system |
| WO2020193578A1 (en) * | 2019-03-25 | 2020-10-01 | Assa Abloy Ab | Physical access control systems with localization-based intent detection |
| US11387978B2 (en) * | 2019-09-23 | 2022-07-12 | Live Nation Entertainment, Inc. | Systems and methods for securing access rights to resources using cryptography and the blockchain |
| KR102333437B1 (ko) * | 2019-12-03 | 2021-12-02 | 주식회사 펀앤뉴 | 모바일 신분증을 활용한 출입 관리 시스템 |
| US11749042B2 (en) * | 2021-11-15 | 2023-09-05 | Kevin DeMattio | Access control smart system |
| US20240194011A1 (en) * | 2022-02-15 | 2024-06-13 | Trinamix Gmbh | Authentication of a user for access |
| KR102498017B1 (ko) * | 2022-03-04 | 2023-02-10 | (주)씨유박스 | 인증방법 및 시스템 |
| JP2024088400A (ja) * | 2022-12-20 | 2024-07-02 | アルプスアルパイン株式会社 | 測位システム、入退場管理システム、及び、測位方法 |
-
2021
- 2021-09-28 ES ES202130906A patent/ES2937716B2/es active Active
-
2022
- 2022-07-19 CA CA3209957A patent/CA3209957A1/en active Pending
- 2022-07-19 BR BR112023023056A patent/BR112023023056A2/pt unknown
- 2022-07-19 JP JP2023546488A patent/JP2024538471A/ja active Pending
- 2022-07-19 WO PCT/ES2022/070472 patent/WO2023052659A1/es not_active Ceased
- 2022-07-19 US US18/272,431 patent/US12217563B2/en active Active
- 2022-07-19 CN CN202280031797.4A patent/CN117916780A/zh active Pending
- 2022-07-19 MA MA63061A patent/MA63061B1/fr unknown
- 2022-07-19 AU AU2022354611A patent/AU2022354611A1/en active Pending
- 2022-07-19 MX MX2023011443A patent/MX2023011443A/es unknown
- 2022-07-19 EP EP22875236.6A patent/EP4411678A4/en active Pending
- 2022-07-19 GB GB2311961.3A patent/GB2619426A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20070200665A1 (en) * | 2004-01-06 | 2007-08-30 | Kaba Ag | Access control system and method for operating said system |
| US20080290989A1 (en) * | 2007-05-22 | 2008-11-27 | Skidata Ag | Method of controlling access to a sports facility |
| US20120068818A1 (en) * | 2009-04-03 | 2012-03-22 | Inventio Ag | Access control system |
| EP3584769A1 (en) * | 2018-06-20 | 2019-12-25 | Detec AS | Improved access control system and a method thereof controlling access of persons into restricted areas |
Non-Patent Citations (1)
| Title |
|---|
| See also references of EP4411678A4 * |
Also Published As
| Publication number | Publication date |
|---|---|
| GB2619426A (en) | 2023-12-06 |
| JP2024538471A (ja) | 2024-10-23 |
| MX2023011443A (es) | 2024-02-27 |
| ES2937716B2 (es) | 2023-07-31 |
| CA3209957A1 (en) | 2023-04-06 |
| GB202311961D0 (en) | 2023-09-20 |
| CN117916780A (zh) | 2024-04-19 |
| EP4411678A1 (en) | 2024-08-07 |
| BR112023023056A2 (pt) | 2024-01-23 |
| EP4411678A4 (en) | 2025-09-24 |
| MA63061B1 (fr) | 2024-06-28 |
| ES2937716A1 (es) | 2023-03-30 |
| US20240331475A1 (en) | 2024-10-03 |
| AU2022354611A1 (en) | 2023-08-24 |
| MA63061A1 (fr) | 2023-11-30 |
| US12217563B2 (en) | 2025-02-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10887766B2 (en) | Access control via a mobile device | |
| US10911946B2 (en) | Local unit for monitoring the maintenance of an item of equipment and method for the validation of a task on the item of equipment | |
| CA2740963C (en) | A portable electronic parking permit tag and a method for using thereof | |
| ES2388140T3 (es) | Sistema de control de acceso | |
| ES2760676T3 (es) | Procedimiento para registrar vehículos estacionados y para calcular tasas de estacionamiento | |
| ES2972659T3 (es) | Sistema de aparcamiento inteligente | |
| US20160241551A1 (en) | System and a method for validating an identification token | |
| US20140088872A1 (en) | System and method for aligning a particular passenger with a unique vehicle | |
| US10673844B2 (en) | Method for providing an access code on a portable device and portable device | |
| US12277819B2 (en) | Credentialing method and apparatus for facility access | |
| ES2937716B2 (es) | Procedimiento y sistema de control de acceso | |
| US20210407230A1 (en) | A system of seamless automated customer id verification at the hotel entrance and releasing the hotel room key | |
| JP2024084775A (ja) | 無人飛行装置、管理装置及び飛行装置管理システム | |
| KR102685115B1 (ko) | 출입자 체크 인과 체크 아웃방법 및 이를 이용한 출입자 체크인 체크아웃 시스템 | |
| ES2971747T3 (es) | Método para poner en marcha un sistema para la identificación de puertas usando huella digital | |
| ES2415556B1 (es) | Método de identificación y registro horario de trabajadores provistos de un dispositivo móvil con cámara fotográfica y posibilidad de navegación por web | |
| WO2016070295A1 (es) | Método de autenticación de dos factores para aumentar la seguridad de las transacciones entre un usuario y un punto o sistema de transacción | |
| JP6700372B2 (ja) | 認証システム、サーバ装置および認証プログラム | |
| ES2825177T3 (es) | Sistema de firma para verificar una firma, y procedimiento de firma correspondiente | |
| JP7209302B2 (ja) | 被認証装置、認証装置、認証要求表示方法、認証方法、及びプログラム | |
| ES2554535T3 (es) | Sistema y procedimiento de votación supervisado | |
| KR20220045702A (ko) | Qr코드를 이용한 출입 관리장치 | |
| JP2011035622A (ja) | 時刻により表示が変化する表示装置を用いた位置通知システム | |
| KR101064223B1 (ko) | 탐방 인증서 발급 시스템 | |
| US10347115B1 (en) | Method for alerting the guest to collect the belongings in safe before checkout |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 22875236 Country of ref document: EP Kind code of ref document: A1 |
|
| WWE | Wipo information: entry into national phase |
Ref document number: 18272431 Country of ref document: US Ref document number: 2022875236 Country of ref document: EP |
|
| ENP | Entry into the national phase |
Ref document number: 2023546488 Country of ref document: JP Kind code of ref document: A |
|
| ENP | Entry into the national phase |
Ref document number: 202311961 Country of ref document: GB Kind code of ref document: A Free format text: PCT FILING DATE = 20220719 |
|
| WWE | Wipo information: entry into national phase |
Ref document number: 2311961.3 Country of ref document: GB |
|
| WWE | Wipo information: entry into national phase |
Ref document number: 3209957 Country of ref document: CA |
|
| ENP | Entry into the national phase |
Ref document number: 2022354611 Country of ref document: AU Date of ref document: 20220719 Kind code of ref document: A |
|
| WWE | Wipo information: entry into national phase |
Ref document number: MX/A/2023/011443 Country of ref document: MX |
|
| WWE | Wipo information: entry into national phase |
Ref document number: 202347072522 Country of ref document: IN |
|
| WWE | Wipo information: entry into national phase |
Ref document number: 202280031797.4 Country of ref document: CN |
|
| REG | Reference to national code |
Ref country code: BR Ref legal event code: B01A Ref document number: 112023023056 Country of ref document: BR |
|
| WWP | Wipo information: published in national office |
Ref document number: 2311961.3 Country of ref document: GB |
|
| ENP | Entry into the national phase |
Ref document number: 112023023056 Country of ref document: BR Kind code of ref document: A2 Effective date: 20231103 |
|
| ENP | Entry into the national phase |
Ref document number: 2022875236 Country of ref document: EP Effective date: 20230714 |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |
|
| WWE | Wipo information: entry into national phase |
Ref document number: 11202402051V Country of ref document: SG |
