HK40077964A - Universal smart interface for electronic locks - Google Patents

Universal smart interface for electronic locks Download PDF

Info

Publication number
HK40077964A
HK40077964A HK42023066783.4A HK42023066783A HK40077964A HK 40077964 A HK40077964 A HK 40077964A HK 42023066783 A HK42023066783 A HK 42023066783A HK 40077964 A HK40077964 A HK 40077964A
Authority
HK
Hong Kong
Prior art keywords
electronic locking
locking device
cause
action
firmware
Prior art date
Application number
HK42023066783.4A
Other languages
Chinese (zh)
Inventor
迈克尔·布莱恩·琼斯
卢克·安德鲁·舍恩费尔德
莎拉·玛格丽特·普利斯
约翰·托马斯·雅各布森
尤安·斯科特·福斯特·亚伯拉罕
塞奇·赖特
特蕾西·范迪克
蒂姆·斯托尼莱克
安娜·彼得鲁奇尼克
Original Assignee
拉奇系统股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 拉奇系统股份有限公司 filed Critical 拉奇系统股份有限公司
Publication of HK40077964A publication Critical patent/HK40077964A/en

Links

Description

Universal intelligent interface for electronic lock
Cross Reference to Related Applications
Priority is given to U.S. provisional application No.62/962,365, filed on 17.1.2020, which is hereby incorporated by reference in its entirety.
Background
Conventional locking devices, such as deadbolts, must be manually controlled. Often, users replace these locking devices with more modern electronic devices. However, in order to enable "smart functionality" on these electronic devices, a given manufacturer must design these systems in their entirety, including circuit boards, firmware, communication interfaces, and the like. Furthermore, in arrangements in which a plurality of different types of electronic locking devices are implemented, these devices must be replaced with similar types of electronic locking devices. In other words, one type of electronic locking device cannot replace all of the different types of electronic locking devices in these arrangements without significant modification to, or replacement of, the door and frame.
Disclosure of Invention
In one aspect, an intelligent module configured to control an electronic locking device includes a plurality of wireless interfaces, wherein each of the plurality of wireless interfaces is configured to operate according to at least one of a plurality of wireless protocols. The smart module also includes a communication interface including a plurality of pins coupled to a switch of the electronically-controlled locking device, the motor, and/or the power source. The intelligent module also includes a touch display. The smart module further includes processing circuitry coupled with the plurality of wireless interfaces, the touch display, and the communication interface. The smart module further includes a memory coupled with the plurality of wireless interfaces, the processing circuitry, the communication interface, and the touch display, the memory including instructions that, when executed by the processing circuitry, cause the processing circuitry to: the method further includes receiving, via the touch display or one of the plurality of wireless interfaces, a request to cause an action on the electronic locking device and sending, via the communication interface, a command to the electronic locking device to cause the action on the electronic locking device.
Drawings
To readily identify the discussion of any particular element or act, the most significant digit or digits in a reference number refer to the figure number in which that element is first introduced.
FIG. 1A illustrates an aspect of the subject matter in accordance with one embodiment.
FIG. 1B illustrates an aspect of the subject matter in accordance with one embodiment.
FIG. 1C illustrates an aspect of the subject matter in accordance with one embodiment.
FIG. 1D illustrates an aspect of the subject matter in accordance with one embodiment.
FIG. 2 illustrates an aspect of the subject matter in accordance with one embodiment.
FIG. 3 illustrates an aspect of the subject matter in accordance with one embodiment.
FIG. 4 illustrates a routine 400 according to one embodiment.
FIG. 5 illustrates a routine 500 according to one embodiment.
FIG. 6 illustrates a routine 600 according to one embodiment.
FIG. 7 illustrates a routine 700 according to one embodiment.
FIG. 8 illustrates a computer architecture 800 according to one embodiment.
Fig. 9 illustrates a communication architecture 900 according to one embodiment.
Detailed Description
Embodiments disclosed herein provide an intelligent module that controls any type of electronic locking device. In some embodiments, the smart module is a self-contained, plug-and-play electronic module having a user interface that enables a user experience with third party locking integration or other electronic access devices (e.g., card reader, electrical panel, switch). The smart module may cooperate with a third party locking mechanism and may provide "smart locks" or "access control" features described throughout this disclosure. In this way, the third party lock manufacturer may provide the smart lock feature without having to design a separate electronic module with a user interface, unlocking and credential authentication support, applications (e.g., smart phone applications, etc.), enterprise device management, backend services, etc.
The disclosed smart module may drive a motor or unlock a magnetic lock via pin code entry and/or via a computing device, and/or via a Near Field Communication (NFC) credential to unlock. For example, the smart module may control the electronic locking device based on commands received via a mobile application utilizing wireless communication on the device, an NFC card, and/or a pin code provided via a mobile application, SMS message, or other electronic delivery means. In some embodiments, the intelligence module may enable internet triggered IP unlocking. While the smart module is designed to operate as a stand-alone device without an external microcontroller or other active electronics, in some embodiments the smart module may also have the capability to communicate with partner electronics via configurable input/output and/or communication buses.
The smart module may include a capacitive touch lens with NFC proximity sensing capability, H-bridge motor control, capacitive touch pad, bluetooth low energy radio, security authentication, Light Emitting Diode (LED) display, digital input (which may sense micro-switch signaling door open/closed status, manual operation, bolt position, etc.), and power conversion circuitry. The smart module may be completely sealed, waterproof, scratch resistant, and tamper resistant.
Referring now to the drawings, in which like numerals are used to refer to like elements throughout. In the following description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding thereof. However, novel embodiments may be practiced without these specific details. In other instances, well-known structures and devices are shown in block diagram form in order to facilitate a description thereof. The intention is to cover all modifications, equivalents, and alternatives consistent with the claimed subject matter.
In the drawings and accompanying description, the designations "a" and "b" and "c" (and similar designations) are intended to refer to any variable that is a positive integer. Thus, for example, if an implementation sets a to a value of 5, the entire set of components 122 illustrated as components 122-1 through 122-a may include components 122-1, 122-2, 122-3, 122-4, and 122-5. The embodiments are not limited in this context.
FIG. 1A illustrates an example smart module 102 (also referred to as a "smart lens") according to one embodiment. It should be noted that the particular coloring/shading/design of the smart module 102 in fig. 1A is for illustrative purposes only, as the smart module 102 may have any coloring/shading/design, such as the coloring/shading/design of the smart module 102 depicted in fig. 1B. The intelligent module 102 may be generally waterproof and corrosion resistant, e.g., IP65 compliant (or larger). The smart module 102 may further have protection against ultraviolet light, saline resistance, and scratch resistance. Advantageously, the smart module 102 is tamper resistant and may meet relevant standards, e.g., UL, ANSI/BHMA, FCC, etc.
As shown, the smart module 102 includes a touch display 104, which is also referred to as a touch-sensitive display. The touch display 104 is generally configured to provide a touch-sensitive user interface that may include a plurality of user interface elements 106a-n (where n is any positive integer greater than 1), such as interface element 106a and interface element 106 b. The interface element 106a is configured to "enter" an input, for example, to submit a PIN code or other input, such as a command to be executed on the electronic locking device. The interface element 106b corresponds to one of a plurality of numbers displayed on the touch display 104. More generally, the interface elements 106a-n may include numbers 0-9, a return (or delete) interface element (e.g., to delete a previous input), and an enter interface element (e.g., to enter and/or submit an input and/or command). In some embodiments, a user may use interface elements 106a-n to enter a Personal Identification Number (PIN), such as a 7-digit PIN code (e.g., 1234567). The PIN may be for a registered user, e.g., a homeowner/tenant. In some embodiments, the PIN may be a guest PIN created for a service professional, delivery service, or the like. The smart module 102 may generally compare the entered PIN to an access control list stored on the device, and if the comparison matches one or more entries on the access control list, the smart module 102 may be unlocked and the code used referenced with event related metadata for login purposes (e.g., traceability to the code). Once unlocked, the user may use the touch display 104 to input various commands, such as commands to lock an electronic locking device (not depicted), unlock the electronic locking device, and so forth. The electronic locking device may be any type of electronic locking device, such as a deadbolt lock, mortise lock, thumb turn lock, electromagnetic locking device, or the like.
The touch display 104 also includes a plurality of status indicators 108, the status indicators 108 can illuminate to reflect that the smart module 102 is performing an operation, such as receiving input, processing input, sending a command to an electronic locking device coupled to the smart module 102, updating firmware of the smart module 102, and so forth. The status indicator 108 may be used in combination with the interface element 106 to distinguish between PIN code unlocking and NFC unlocking to give a context-specific UI. For example, one or more status indicators 108 may illuminate according to a first predetermined pattern for successful PIN code unlocking, while one or more status indicators 108 may illuminate according to a second predetermined pattern for unsuccessful PIN code unlocking, and so on. As another example of all of the status indicators 106, 108, or some combination, an animation may be played to signal the particular action being performed by the intelligent module 102.
As shown in fig. 1B, the smart module 102 may communicate with the mobile device 116. Mobile device 116 represents any type of mobile computing device, such as a smartphone, tablet computer, smart watch, wearable device, laptop, and so forth. Generally, the mobile device 116 can wirelessly transmit the access credential to the smart module 102 when the mobile device 116 is within a predefined range of the smart module 102. The wireless transmission may be according to a plurality of wireless protocols, such as Near Field Communication (NFC) protocol, 802.11 protocol, Bluetooth Low Energy (BLE) protocol, Radio Frequency Identification (RFID), and the like. Generally, the mobile device 116 can store the access credential, e.g., as a file, and send the access credential to the smart module 102. In some embodiments, the smart module 102 may process the access credential to unlock the touch display 104 and generally allow the smart module 102 to receive commands or other input. In some embodiments, the smart module 102 may utilize capacitive proximity sensing to unlock via a smart card or key fob. In some embodiments, proximity sensing may include detecting a person within a predefined distance of the smart module 102. In other embodiments, the proximity sensing includes NFC-based proximity sensing, e.g., detecting bluetooth and/or NFC enabled devices within a predefined distance of the smart module 102.
When the smart module 102 is dormant or otherwise not receiving user input, as depicted in fig. 1C, the touch display 104 and associated LEDs may be turned off (or otherwise dimmed) to conserve energy. However, when touched, the smart module 102 may illuminate. Similarly, smart module 102 may illuminate when sensing BLE devices, NFC devices, smart cards, etc. in a manner specific to the context (e.g., if the certificate present is invalid, interface element 106 may flash in a predetermined pattern).
Fig. 1D is a rear view of the intelligent module 102. As shown in fig. 1D, the smart module 102 further includes one or more mounting elements 110 and a connector 112. The mounting element 110 may be any suitable element that secures the smart module 102 to an electronic locking device, such as the electronic locking device 120. Connector 112 (also referred to as a communication interface) may include a plurality of pins for communicating with electronic locking device 120. The connector 112 may be IP65 compliant, e.g., water resistant and/or corrosion resistant. The plurality of pins of the connector 112 may be configured based on the type of electronic locking device 120 to which the smart module 102 is connected. The electronic locking device 120 may be any type of locking device that has been modified with an electronic mechanism for control. Examples of such locking devices include, but are not limited to, deadbolts, mortise locks, electromagnetic locking devices, and the like. Further examples of such locking devices include powered locking devices that are permanently powered, and power is the method of control (e.g., power is supplied to a powered lock to lock the device, or power is removed to unlock the device). Thus, the use of an electronic locking device as a reference example should not be considered a limitation of the present disclosure, as the present disclosure applies equally to energized locking devices,
The smart module 102 may be connected to the electronic locking device 120 via a cable 114, the cable 114 including a connector 118a and a connector 118 b. Generally speaking, one end of the cable 114 may be connected to the connector 112 of the smart module 102 via one of the connectors 118a-b, and the other end of the cable 114 may be connected to the electronic locking device 120 via another one of the connectors 118 a-b. In some embodiments, two or more cables 114 may be used to couple the smart module 102 and the electronic locking device 120. In some embodiments, one cable 114 having separate engagement and termination portions may be used to couple the smart module 102 and the electronic locking device 120. For example, one cable 114 may be provided for a front connection and another cable 114 may be provided for a rear connection. In some embodiments, the one or more cables 114 may include at least one ground connection, power connection, communication connection, switched output connection, and/or input connection, such as pin wiring. The connector 112 may be made weatherproof and pluggable so that various cable termination sections may be supported with one module design.
Generally, when an operation is performed on the smart module 102 and/or on the electronic locking device 120 via the smart module 102, one or more records may be stored in an access log in the memory 236. The access log is stored in memory 236 of smart module 102 and may be transmitted to a device, such as mobile device 116, via BLE. The record may include a timestamp, an operation type, a requesting entity, and the like. The access log may be packaged with device debug data monitoring system health (e.g., required motor current). The access time and record of the user may appear in the app on mobile device 116 according to the user's permission level. Generally, users may view their logs and guest logs on their devices 116. The real estate manager can view the logs for all users on a utility device or the like. In some embodiments, the mobile device 116 can send the log to a cloud-based server for storage.
Fig. 2 illustrates a more detailed view of the intelligent module 102, in accordance with various embodiments. As shown, smart module 102 includes touch display 104, connector 112, Printed Circuit Board (PCB)202, capacitive touch component 204, NFC coil 206, and,A wireless charging coil 208, a PCB 210, a battery monitor 212, a power conversion module 214, a motor controller 216, a capacitive touch controller 218, a BLE antenna 220, a processor 222, an NFC component 224, a Qi charger 226, a temperature sensor 228, an LED 230, a cryptographic module 232, one or more light pipes 234, and a memory 236. The components of the smart module 102 may generally include waterproof, sealed, and covered electronics for tamper resistance.
The capacitive touch component 204 may enable touch input to be received via the touch display 104. In one embodiment, the capacitive touch component 204 may be affixed to the back of the touch display 104 to enable touch input to be received via the touch display 104. The NFC coil 206 is an NFC transceiver configured to communicate with other NFC-enabled devices, such as the mobile device 116. In some embodiments, the NFC coil 206 and the Qi coil 208 are integrated into a single coil. The Qi coil 208 is a transceiver configured to receive wireless power and/or transmit wireless power. For example, a Qi charger (e.g., a component of the mobile device 116) may provide power to the smart module 102 via the Qi coil 208, e.g., when one or more batteries (not depicted) of the smart module 102 do not have sufficient power. In another embodiment, the Qi coil 208 is the primary and sole power source for the smart module 102. Conversely, the smart module 102 may provide power to the mobile device 116 to provide the power required to send credentials from the mobile device 116 to the smart module 102, e.g., when the mobile device 116 does not have sufficient power. Although Qi is used as a reference example for one or more wireless charging components, the smart module 102 may include any type of inductive charging component for wireless power transfer.
The battery monitor 212 is generally configured to monitor the charge level of one or more batteries that may power the smart module 102. Doing so may cause a charge level to be sent to the mobile device 116 so that the user may monitor the battery charge. Similarly, when the battery monitor 212 determines that the battery charge is below a predetermined threshold, the smart module 102 may generate a notification and send the notification to the mobile device 116. In some embodiments, the smart module 102 may shut down or otherwise enter a lower power state when the battery charge is below a threshold. However, in some embodiments, the smart module 102 may be powered by a wired power source. In such embodiments, the battery may be omitted and/or included as a backup power source in the event that wired power is not available.
The power conversion module 214 is generally configured to convert power provided to the intelligent module 102. For example, the power conversion module 214 may convert from a range of battery or DC voltages to power for the intelligent module 102. The motor controller 216 is generally configured to drive a motor that can lock or unlock the electronic locking device 120 coupled to the smart module 102. Similarly, the motor controller 216 generally enables locking and/or unlocking of the electronic locking device 120 coupled to the smart module 102. Doing so may transform the electronic locking device 120 into a "smart" locking device. In one embodiment, the motor is a component of the smart module 102. In other embodiments, the motor is a component of the electronic locking device 120.
Capacitive touch controller 218 is generally configured to process touch inputs received via capacitive touch component 204. BLE antenna 220 is a Bluetooth Low Energy (BLE) transceiver that communicates with other Bluetooth Low Energy (BLE) devices, such as mobile device 116. In some embodiments, a Radio Frequency (RF) front end may be implemented in the smart module 102 to extend the power of the BLE antenna 220. In some embodiments, BLE antenna 220 operates in peripheral mode and has the ability to connect to multiple devices for connecting to a Wi-Fi bridge or other compatible devices (such as multiple mobile devices 116). BLE antenna 220 may advertise at variable (e.g., 100ms, 400ms, etc.) intervals over a 30ft range. The frequency of the advertisements ensures a quick time to unlock or lock the electronic locking device 120. By connecting to the Wi-Fi bridge and/or the mobile device 116, the smart module 102 may be remotely controlled, for example, via the internet or a cloud service. For example, using an application on the mobile device 116, an authenticated user may send remote commands to the smart module 102 via the internet. The smart module 102 may then cause the remote command to be executed by the electronic locking device 120. In some embodiments, a client side SSL termination portion is provided for Wi-Fi and/or ethernet integration in the intelligence module 102. In some embodiments, the entire set of Application Programming Interfaces (APIs) for communication may be exposed by the intelligent module 102 for integration of Wi-Fi, ethernet, or other IP protocol support. The entire API may also be provided for cloud-based communication (e.g., for unlocking, credential authentication).
The processor 222 is a processor circuit and may be any type of processor circuit, FPGA, ASIC, or the like. The processor 222 may have a sufficiently secure root mechanism with a root of trust that ensures that the intelligent module 102 is securely booted. After being reset, the firmware is only started if it is verified to be trusted (e.g., based on hash verification of the firmware). The boot loader of the intelligent module 102 may be stored in unalterable flash memory that may be included in the memory 236. To improve security, the smart module 102 may not provide Joint Test Action Group (JTAG) access, e.g., disabling JTAG read, JTAG write, and/or JTAG fusion. Memory 236 is any type of storage medium or device and represents one or more memory storage devices. The NFC component 234 is generally configured to process data to be transmitted and/or received via the NFC coil 206. As stated, the Qi charger 226 may provide power to the smart module 102, where the power may be wirelessly received via the Qi coil 208. Similarly, the Qi charger 226 and/or Qi coil 208 may transmit (or provide) power to other devices, such as the mobile device 116.
The temperature sensor 228 may generally monitor the temperature of the intelligent module 102. If the temperature is outside of a range of acceptable temperature values (e.g., -35 degrees Celsius to 70 degrees Celsius), the smart module 102 may be put to sleep, turned off, or otherwise modified to bring the temperature within an acceptable temperature range, or to modify the behavior of the smart module 102 to accommodate environmental effects on performance. The LEDs 230 represent any number and type of light emitting diodes. In general, the LEDs 230 are configured to illuminate the touch display 104 and display information to a user.
Cryptographic module 232 may be a secure processing and storage element that stores and processes encryption keys, access credentials, and/or other sensitive data. For example, the processor 222 may receive access credentials from the mobile device 116 via bluetooth and/or NFC. Processor 222 may then provide the access credential to cryptographic module 232, and cryptographic module 232 may process the access credential (e.g., attempt to decrypt the access credential) and return a result (e.g., a decryption result, a successful decryption, an unsuccessful decryption, a successful authentication, and/or an unsuccessful authentication). In one example, the cryptographic module 232 may decrypt the access credential and compare the decrypted access credential to one or more valid access credentials stored in the cryptographic module 232. In other embodiments, the access credential is not encrypted, and the cryptographic module 232 may compare the access credential to one or more access credentials in an access control list securely stored in the cryptographic module 232. In other embodiments, the comparison is performed by processor 222, e.g., after decryption by cryptographic module 232. The cryptographic module 232 may generally include hardware acceleration (e.g., a cryptographic processor and/or accelerator) for the processor portion of the cryptographic module 232. Similarly, the cryptographic module 232 may perform encryption and/or decryption operations using the encryption key of the smart module 102. In some embodiments, the smart module 102 may be uniquely identified by an encryption key stored in the cryptographic module 232. In other embodiments, the smart module 102 may be uniquely identified based on a unique identifier (e.g., serial number) assigned to the smart module 102 and stored in the memory 236. The keys stored by crypto module 232 may further include other types of keys, such as tokens, alphanumeric strings, and the like.
In some embodiments, the smart module 102 may utilize cloud-based certificate authentication. For example, if a user enters a PIN code via the touch display 104, the smart module 102 may send the entered PIN code to a cloud server, which performs a comparison of the PIN code with one or more PINs stored in cloud-based storage for the smart module 102. If the comparison results in a match, the cloud server may send a verification indication of the PIN to the smart module 102. In some embodiments, the cloud server may further send commands to the smart module 102 (e.g., unlock commands, lock commands, etc.) for execution on the electronic locking device 120 by the smart module 102 based on the verification of the PIN. Otherwise, the cloud server may send an indication of failed verification of the PIN to the smart module 102. Similarly, the cloud server may include cryptographic module 232 and/or the functionality of cryptographic module 232 described herein. For example, the cloud server may attempt to decrypt the encrypted access credentials received from the smart module 102 and return the results to the smart module 102 (e.g., successful decryption, unsuccessful decryption, successful authentication, and/or unsuccessful authentication). In such embodiments, the cloud server may include an encryption key for causing each smart module 102 to perform cryptographic operations. If the decryption is successful, the cloud server may further send a command to the smart module 102 (e.g., an unlock command, a lock command, etc.) to execute on the electronic locking device 120 based on the successful decryption. In some embodiments, the mobile device 116, a base station, or other device with an internet connection may facilitate communication between the smart module 102 and the cloud server.
In some embodiments, the firmware may provide different access permissions or privileges based on the requesting device and/or the user account. For example, a key associated with the manufacturer of the smart module 102 may have full access privileges to access all components and/or data of the smart module 102. Similarly, the key associated with the purchaser of the smart module 102 may have a more limited set of privileges relative to the privileges of the manufacturer. Still further, keys assigned to third party users (such as maintainers) may have a more limited set of privileges relative to the purchaser and/or manufacturer.
The one or more light pipes 234 provide a passage from the LEDs 230 to the touch display 104. In some embodiments, touch display 104 and/or PCB 202 may be a predefined distance from PCB 210. Doing so may act as a light guide, e.g., via light pipe 234, and also act as a spacer between PCB 202 and PCB 210. Advantageously, the spacing also allows the PCB 202 to be mounted to the touch display 104.
In some embodiments, sufficient integration with mobile applications executing on the mobile device 116 for end users, build managers, and backend software with subscription services is provided via the smart module 102. In some embodiments, the smart module 102 does not need to connect to the internet to allow unlocking. For example, the smart module 102 may connect to the user's mobile device 116 via bluetooth and use the mobile device's 116 internet connection (e.g., cellular and/or Wi-Fi) to authenticate an unlock attempt or update its access credentials. In some embodiments, configurable parameters of the firmware may be adjusted in the app executing on the mobile device 116 (e.g., turning on or off the buzzer feature may be done in factory firmware, selected in an application on the mobile device 116, or both done in factory firmware and selected in an application on the mobile device 116).
In some embodiments, certain parameters of the intelligent module 102 may not be configurable, such as reset behavior, disturb behavior, and the like. Similarly, other parameters of the smart module 102 may be configurable, e.g., via the mobile device 116 application, the touch display 104, and so on. Doing so isolates the mechanism-specific code path, reduces complexity in the authentication phase, and provides the ability to deliver a single firmware for the intelligent module 102 that supports a wide range of electronic locking devices 120.
In some embodiments, the intelligent module 102 may be configured for third party applications. A step-by-step bootstrap for factory configuration of the intelligent module 102 for a particular application may be provided to a third party to configure the intelligent module 102 with a particular electronic locking device 120. This may include programming the smart module 102 to any setting for a third party application that operates as desired, including enabling or disabling the interface, motor settings, setting modes and polarities for sensors and switches, and power configuration.
FIG. 3 is a diagram 300 illustrating an example configuration of a plurality of pins 302a-302b of connector 112, according to one embodiment. Although 14 pins 302a-302b are depicted, in other embodiments, the connector 112 may include any number of pins. Generally, the firmware of the smart module 102 may be stored in the memory 236. The firmware of the smart module 102 may support a number of different pin configurations based on the type of electronic locking device 120 to which the smart module 102 is connected. For example, the schematic diagram 300 depicts one example configuration based on the example electronic locking device 120. Generally, the configuration of the plurality of pins 302a-302b depends on the corresponding pins of the electronic locking device 120. Thus, the firmware of the smart module 102 may map or assign each of the pins 302a-302b based on the pins of the electronic locking device 120. As such, pins 302a-302b may be mapped to different electronic locking devices 120 in different configurations. Advantageously, the firmware of the smart module 102 allows the smart module 102 to control any type of electronic locking device 120 based on the configuration of the plurality of pins of the connector 112. The smart module 102 may thus be "plug-and-play" in that minimal configuration is required to control the different electronic locking devices 120 using the smart module 102.
For example, as shown, pin 302a corresponds to a first motor pin for controlling the motor of electronic locking device 120, and pin 302b corresponds to a fifth input pin. Although five example input pins are depicted, any number of pins may be assigned to receive input from electronic locking device 120. The input may be driven high to power an external sensor of the electronic locking device 120. Generally, the input pins may include pins for sensing a position (or state) of a deadbolt (or other locking mechanism) of the electronic lock 120, a thumb turn movement of the electronic lock 120, a key turn of the electronic lock 120, a door position switch, and the like. The pins 302a-302b may further include pins for data communication, debugging, communication bus, power management, and the like.
In one example, the five input pins may include one input pin driven high to power a magnetic sensor of the electronic locking device 120, one input pin configured to sense a magnet of the electronic locking device 120, one input pin configured to sense a key turn of the electronic locking device 120, and two pins configured to receive inputs from two micro switches sensing a position of a deadbolt of the electronic locking device 120. Other possible input pin configurations include an external thumb turn lock state, an internal thumb turn unlock command, a manual key operation, a door position switch, an engagement security and/or tamper mode, an exit request, an internal thumb turn part lock state, an external thumb turn unlock command, an external thumb turn part lock state, an internal lever actuation, an external lever actuation, an enable/disable private mode, an enable/disable pass through mode, a wake up command for the smart module 102 in a sleep state, a motor lock state, and a motor part lock state. Collectively, input pins 302 may receive input from electronic locking device 120 that may reflect whether an operation was performed successfully and/or unsuccessfully. For example, the deadbolt sensor may return a response indicating whether the deadbolt is locked or unlocked. This may allow the intelligent module 102 to determine whether the command was successfully implemented by the electronic locking device 120.
Exemplary logic for implementing the above-described embodiments is next described in conjunction with fig. 4-7. The exemplary logic may be implemented in hardware, software, or a combination of hardware and software (e.g., at least partially in hardware).
Fig. 4 is a flow diagram depicting an exemplary logic routine 400 executed by a system or system component, such as one or more intelligent modules 102, as described above. Logic 400 may be implemented as digital logic, which may be implemented at least partially in hardware, containing instructions for causing a processor circuit to perform the steps described below. Although fig. 4 depicts a particular arrangement of elements in a particular order, it is understood that the configuration depicted in fig. 4 is merely one example. In other embodiments, more elements may be provided, and/or some elements may be omitted, some elements may be performed in parallel, and/or elements may be performed in a different order.
In block 402, the routine 400 receives, by the processor 222 of the smart module 102, access credentials via the touch display 104 of the smart module 102. The access credentials may include a PIN code, such as a series of digits. At block 404, the routine 400 verifies, via the intelligence module 102, the access credential received at block 402. For example, processor 222 may provide the received input to cryptographic module 232, and cryptographic module 232 may compare the input to one or more stored access credentials (e.g., a plurality of stored PIN numbers in an access control list). If the comparison results match, the access credential is verified. Otherwise, the access credential is not verified and the intelligent module 102 may signal that the credential is invalid. In some embodiments, the smart module 102 determines a further response based on determining that the certificate is invalid. For example, if the number of received invalid and/or incorrect credentials exceeds a threshold number, the intelligent module 102 may enter a rate limiting mode or denial of service mode, e.g., where further input cannot be provided within a predetermined period of time. In block 406, the routine 400 receives a request via the touch display 104 of the smart module 102e to cause an action on the electronic locking device 120 controlled by the smart module. For example, the action may specify unlocking the electronic locking device 120. In block 408, the routine 400 determines, by the processor 222, a first pin of the plurality of pins of the connector 112 of the smart module 102 corresponding to the action based on the verification of the access credential. Continuing with the previous example, the intelligence module 102 may determine which of the pins 302a-b of the connector 112 corresponds to the pin used to send the unlock command. In block 410, the routine 400 sends a command by the processor via the first pin of the communication interface to cause the action on the electronic locking device 120 (e.g., power the motor drive circuit to operate the motor at the preconfigured voltage and duty cycle for the preconfigured amount of time). This may cause the electronic locking device 120 to perform an unlocking operation. In response, the status indicator 108 of the intelligent module 102 may illuminate to reflect the performance of the requested operation.
Fig. 5 is a flow diagram depicting an example logic routine 500 executed by a system or system components, such as one or more intelligent modules 102 and one or more mobile devices 116, as described above. Logic 500 may be implemented as digital logic, which may be implemented at least partially in hardware, containing instructions for causing a processor circuit to perform the steps described below. Although fig. 5 depicts a particular arrangement of elements in a particular order, it is understood that the configuration depicted in fig. 5 is merely one example. In other embodiments, more elements may be provided, and/or some elements may be omitted, some elements may be performed in parallel, and/or elements may be performed in a different order.
In block 502, the routine 500 receives, via the processor 222 of the smart module 102, an access credential from the mobile device 116. For example, the mobile device 116 can send the access credential via NFC, bluetooth, or the like. At block 504, the routine 500 verifies, via the processor 222 of the intelligence module 102, the access credential received at block 502. For example, the processor 222 may provide the access credential to the cryptographic module 232, and the cryptographic module 232 may compare the access credential to one or more stored access credentials (e.g., a plurality of stored access credentials). If the comparison results in a match, the access credential is verified. Otherwise, the access credential is not verified, the smart module 102 does not wake up, or otherwise process the subsequent command. In block 506, the routine 500 receives a request via the mobile device 116 to cause an action on the electronic locking device 120 controlled by the smart module 102. An application executing on the mobile device 116 may generate and/or send commands to the smart module 102. The application may be associated with the manufacturer of the intelligent module 102. For example, the action may specify locking the electronic locking device 120. In block 508, the routine 500 determines, by the processor, a first pin of the plurality of pins of the connector 112 of the smart module 102 corresponding to the action based on the verification of the access credential. Continuing with the previous example, the intelligence module 102 may determine which of the pins 302a-b of the connector 112 corresponds to the pin used to send the lock command. In block 510, the routine 500 sends a command by the processor 222 via the first pin of the connector 112 to cause the action on the electronic locking device 120. This may cause the electronic locking device 120 to perform a locking operation. In response, the status indicator 108 of the intelligent module 102 may illuminate to reflect the performance of the requested operation. In block 512, the processor 222 may send a confirmation result to the mobile device 116 indicating that the requested operation has been performed. Doing so may cause mobile device 116 to output a notification reflecting that the requested operation has been performed.
Fig. 6 is a flow diagram depicting an example logic routine 600 executed by a system or system components, such as one or more intelligent modules 102 and one or more mobile devices 116, as described above. Logic 600 may be implemented as digital logic, which may be implemented at least partially in hardware, containing instructions for causing a processor circuit to perform the steps described below. Although fig. 6 depicts a particular arrangement of elements in a particular order, it is understood that the configuration depicted in fig. 6 is merely one example. In other embodiments, more elements may be provided, and/or some elements may be omitted, some elements may be performed in parallel, and/or elements may be performed in a different order.
In block 602, the routine 600 receives, by the processor 222 of the smart module 102, access credentials from an application executing on the mobile device 116. For example, an application executing on mobile device 116 may send access credentials via NFC, bluetooth, etc. At block 604, the routine 600 verifies the received access credentials via the intelligence module 102. For example, processor 222 may provide the access credential to cryptographic module 232, and cryptographic module 232 may compare the access credential to one or more stored access credentials (e.g., a plurality of stored access credentials). If the comparison results match, the access credential is verified. Otherwise, the access credentials are not verified, no further action is taken by the smart module 102, and future behavior may be modified based on, for example, history in an access log in the smart module 102. For example, if the access log indicates that a number of invalid access credentials received within a predetermined period of time (including the access credentials received at block 602) exceeds a threshold number of invalid access credentials, the smart module 102 may "lock" itself from processing subsequent inputs for the predetermined period of time, e.g., by entering a rate-limiting mode and/or a denial of service mode.
In block 606, the routine 600 receives, via the mobile device, a request to modify a parameter value of the intelligent module 102. For example, the request may specify disabling a remote (or cloud-based) command, or configuring the lock to remain unlocked for a specified period of time (aka pass-through mode). As another example, the request may specify a duration (e.g., from 2 seconds to 5 seconds) for which the modification status indicator 108 is illuminated after the operation is performed. At block 608, routine 600, through processor 222, updates the parameters of intelligent module 102 based on the values specified in the request (e.g., changes the duration that status indicator 108 is illuminated from 2 seconds to 5 seconds) based on the verification of the access credential. At block 612, the processor 222 may send a confirmation result to the mobile device 116 indicating that the requested operation has been performed. This may cause mobile device 116 to output a notification that the requested parameter values have been updated.
Fig. 7 is a flow diagram depicting an example logic routine 700 executed by a system or system components, such as one or more intelligent modules 102 and one or more mobile devices 116, as described above. Logic 00 may be implemented as digital logic, which may be implemented at least partially in hardware, containing instructions for causing a processor circuit to perform the steps described below. Although fig. 7 depicts a particular arrangement of elements in a particular order, it is understood that the configuration depicted in fig. 7 is merely one example. In other embodiments, more elements may be provided, and/or some elements may be omitted, some elements may be performed in parallel, and/or elements may be performed in a different order.
In block 702, the routine 700 receives, by the processor 222 of the smart module 102, access credentials from an application executing on the mobile device 116. For example, an application executing on mobile device 116 can send an access credential via NFC, bluetooth, or the like. At block 704, the routine 700 verifies the access credentials via the processor 222 of the intelligent module 102. For example, if the access credential is encrypted, the processor 222 may provide the access credential to the cryptographic module 232, and the cryptographic module 232 may attempt to decrypt the access credential. If the decryption is successful, the cryptographic module 232 may verify the access credential. If the decryption is not successful, the cryptographic module 232 may invalidate the access credential. In some embodiments, the cryptographic module 232 and/or the processor 222 may compare the decrypted access credential to one or more stored access credentials (e.g., a plurality of stored access credentials). If the comparison results match, the access credential is verified. Otherwise, the access credential is not verified and the smart module 102 does not wake up or otherwise process subsequent commands. In block 706, the routine 700 receives a data packet for a firmware update via the mobile device 116. In block 708, the processor 222 updates the firmware of the intelligent module 102 based on the verification of the access credential. In block 710, the processor 222 may send an acknowledgement to the mobile device 116 indicating that the firmware of the smart module 102 has been updated.
FIG. 8 illustrates an embodiment of an exemplary computer architecture 800 suitable for implementing various embodiments as previously described. In one embodiment, the computer architecture 800 may include or be implemented as part of the intelligent module 102.
As used in this application, the terms "system" and "component" are intended to refer to a computer-related entity, either hardware, a combination of hardware and software, or software in execution, examples of which are provided by the exemplary computer architecture 800. For example, a component may be, but is not limited to being, a process running on a processor, a hard disk drive, multiple storage drives (of optical and/or magnetic storage medium), an object, an executable, a thread of execution, a program, and/or a computer. By way of illustration, both an application running on a server and the server can be a component. One or more components may reside within a process and/or thread of execution and a component may be localized on one computer and/or distributed between two or more computers. Further, the components may be communicatively coupled to each other by various types of communications media to coordinate operations. Coordination may involve the unidirectional or bidirectional exchange of information. For example, a component may communicate information in the form of signals communicated over the communications media. Information may be implemented as signals assigned to various signal lines. In such an assignment, each message is a signal. However, further embodiments may alternatively employ data messages. Such data messages may be sent over various connections. Exemplary connections include parallel interfaces, serial interfaces, and bus interfaces. One example bus interface is an RS232 bus that may be routed from the smart module 102 to the electronic locking device 120 for extended I/O, status communication, sensing, and the like.
The computing architecture 800 includes various common computing elements, such as one or more processors, multi-core processors, co-processors, memory units, chipsets, controllers, peripherals, interfaces, oscillators, timing devices, video cards, audio cards, multimedia input/output (I/O) components, power supplies, and so forth. However, embodiments are not limited to implementation by the computing architecture 800.
As shown in fig. 8, the computing architecture 800 includes a processor 812, a system memory 804, and a system bus 806. The processor 812 can be any of various commercially available processors.
The system bus 806 provides an interface for system components including, but not limited to, the system memory 804 to the processor 812. The system bus 806 may be any of several types of bus structure that may further interconnect to a memory bus (with or without a memory controller), a peripheral bus, and a local bus using any of a variety of commercially available bus architectures. The interface adapter may be connected to the system bus 808 via a slotted architecture. Example slot architectures may include, but are not limited to, Accelerated Graphics Port (AGP), card bus, (extended) industry Standard architecture ((E) ISA), Micro Channel Architecture (MCA), NuBus, peripheral component interconnect (extended) (PCI (X)), PCI Express, Personal Computer Memory Card International Association (PCMCIA), and the like.
The computing architecture 800 may comprise or implement a variety of articles of manufacture. An article of manufacture may comprise a computer-readable storage medium to store logic. Examples of a computer readable storage medium may include any tangible medium capable of storing electronic data, including volatile memory or non-volatile memory, removable or non-removable memory, erasable or non-erasable memory, writeable or re-writeable memory, and so forth. Examples of logic may include executable computer program instructions implemented using any suitable type of code, such as source code, compiled code, interpreted code, executable code, static code, dynamic code, object-oriented code, visual code, and the like. Embodiments may also be implemented, at least in part, as instructions contained in or on a non-transitory computer-readable medium, which may be read and executed by one or more processors to enable performance of the operations described herein.
The system memory 804 may include various types of computer readable storage media in the form of one or more higher speed memory units, such as Read Only Memory (ROM), Random Access Memory (RAM), Dynamic RAM (DRAM), double data rate DRAM (DDRAM), Synchronous DRAM (SDRAM), Static RAM (SRAM), Programmable ROM (PROM), Erasable Programmable ROM (EPROM), Electrically Erasable Programmable ROM (EEPROM), flash memory, polymer memory (such as ferroelectric polymer memory), ovonic memory, phase change or ferroelectric memory, silicon-oxide-nitride-oxide-silicon (SONOS) memory, magnetic or optical cards, device arrays (such as Redundant Array of Independent Disks (RAID) drives), solid state memory devices (e.g., USB memory, Solid State Drives (SSDs)), and any other type of storage medium suitable for storing information. In the illustrated embodiment shown in FIG. 8, the system memory 804 may include non-volatile 808 and/or volatile 810. A basic input/output system (BIOS) may be stored in the non-volatile 808.
The computer 802 may include various types of computer-readable storage media in the form of one or more lower-speed memory units, including an internal (or external) hard disk drive 830, a magnetic disk drive 816 that reads from or writes to a removable magnetic disk 820, and an optical disk drive 828 that reads from or writes to a removable optical disk 832 (e.g., a CD-ROM or DVD). The hard disk drive 830, magnetic disk drive 816, and optical disk drive 828 may be connected to the system bus 806 by a HDD interface 814, a FDD interface 818, and an optical drive interface 834, respectively. The HDD interface 814 for external drive implementations can include at least one or both of Universal Serial Bus (USB) and IEEE 1394 interface technologies.
The drives and the associated computer-readable media provide volatile and/or nonvolatile storage of data, data structures, computer-executable instructions, and so forth. For example, a number of program modules can be stored in the drives, nonvolatile 808 and volatile 810, including an operating system 822, one or more applications 842, other program modules 824, and program data 826. In one embodiment, the one or more applications 842, other program modules 824, and program data 826 can include various applications and/or components of the intelligent module 102, for example.
A user can enter commands and information into the computer 802 through one or more wired/wireless input devices, e.g., a keyboard 850 and a pointing device, such as a mouse 852. Other input devices may include a microphone, an Infrared (IR) remote control, a Radio Frequency (RF) remote control, a game pad, a stylus pen, a card reader, a dongle, a fingerprint reader, gloves, a graphics tablet, a joystick, a keyboard, a retinal reader, a touch screen (e.g., capacitive, resistive, etc.), a trackball, a trackpad, a sensor, a stylus, and so forth. These and their input devices are often connected to the processor 812 through an input device interface 836 that is coupled to the system bus 806, but can be connected by other interfaces, such as a parallel port, an IEEE 1394 serial port, a game port, a USB port, an IR interface, etc.
A monitor 844 or other type of display device is also connected to the system bus 806 via an interface, such as a video adapter 846. The monitor 844 may be internal or external to the computer 802. In addition to the monitor 844, a computer typically includes other peripheral output devices, such as speakers, printers, and so forth.
The computer 802 may operate in a networked environment using logical connections via wired/wireless communications to one or more remote computers, such as a remote computer(s) 848. The remote computer(s) 848 can be a workstation, a server computer, a router, a personal computer, portable computer, microprocessor-based entertainment appliance, a peer device or other common network node, and typically includes many or all of the elements described relative to the computer 802, although, for purposes of brevity, only a memory and/or storage device 858 is illustrated. The logical connections depicted include wired/wireless connectivity to the local network 856 and/or larger networks (e.g., the wide area network 854). Such LAN and WAN networking environments are commonplace in offices and companies, and facilitate enterprise-wide computer networks, such as intranets, all of which may connect to a global communication network, e.g., the Internet.
When used in a LAN 856 networking environment, the computer 802 is connected to the LAN 856 via a wired and/or wireless communication network interface or network adapter 318. The network adaptor 838 can facilitate wired and/or wireless communication with the local network 856, which may also include a wireless access point disposed thereon for communicating with the wireless functionality of the network adaptor 838.
When used in a networking environment over wide area network 854, the computer 802 includes a modem 840, or is connected to a communications server on the wide area network 854, or has other means for establishing communications over the wide area network 854, such as by way of the Internet. The modem 840, which can be internal or external to a wired and/or wireless device, is connected to the system bus 806 via the input device interface 836. In a networked environment, program modules depicted relative to the computer 802, or portions thereof, may be stored in the remote memory and/or storage device 858. It will be appreciated that the network connections shown are exemplary and other means of establishing a communications link between the computers may be used.
The computer 802 is operable to communicate with wired and wireless devices or entities using the IEEE 802 family of standards, such as wireless devices operatively disposed in wireless communication (e.g., IEEE 802.11 over-the-air modulation techniques). This includes at least Wi-Fi (or Wireless Fidelity), WiMax, and Bluetooth, among others TMWireless technology. Thus, the communication may be a predefined structure as with a conventional network or simply a peer-to-peer communication between at least two devices. Wi-Fi networks use radio technologies called IEEE 802.118(a, b, g, n, etc.) to provide secure, reliable, fast wireless connectivity. A Wi-Fi network can be used to connect computers to each other, to the Internet, and to wired networks (which use IEEE 802.3-related media and functions).
The various elements of the apparatus as previously described with reference to fig. 1A-7 may comprise various hardware elements, software elements, or a combination of both. Examples of hardware elements may include devices, logic devices, components, processors, microprocessors, circuits, processors, circuit elements (e.g., transistors, resistors, capacitors, inductors, and so forth), integrated circuits, Application Specific Integrated Circuits (ASIC), Programmable Logic Devices (PLD), Digital Signal Processors (DSP), Field Programmable Gate Array (FPGA), memory units, logic gates, registers, semiconductor device, chips, microchips, chip sets, and so forth. Examples of software elements may include software components, programs, applications, computer programs, application programs, system programs, software developers, machine programs, operating system software, middleware, firmware, software modules, routines, subroutines, functions, methods, procedures, software interfaces, Application Program Interfaces (API), instruction sets, computing code, computer code, code segments, computer code segments, words, values, symbols, or any combination thereof. However, determining whether an embodiment is implemented using hardware elements and/or software elements may vary in accordance with any number of factors, such as desired computational rate, power levels, heat tolerances, processing cycle budget, input data rates, output data rates, memory resources, data bus speeds and other design or performance constraints, as desired for a given implementation.
Fig. 9 is a block diagram depicting an exemplary communication architecture 900 suitable for implementing various embodiments as previously described. The communications architecture 900 includes various common communications elements, such as transmitters, receivers, transceivers, radios, network interfaces, baseband processors, antennas, amplifiers, filters, power supplies, and so forth. However, embodiments are not limited to implementation by the communications architecture 900, and the communications architecture 900 may be consistent with the computer architecture 800.
As shown in fig. 9, the communications architecture 900 includes one or more clients 902 and servers 904. The client(s) 902 and server(s) 904 are operatively connected to one or more respective client data store(s) 906 and server data store(s) 908 that can be employed to store information, such as cookies and/or associated contextual information, locally at the respective client(s) 902 and server(s) 904.
Client(s) 902 and server(s) 904 can communicate information between each other using a communication framework 910. The communications framework 910 may implement any well-known communications techniques and protocols. The communications framework 910 may be implemented as a packet-switched network (e.g., a public network such as the internet, a private network such as an enterprise intranet, etc.), a circuit-switched network (e.g., a public switched telephone network), or a combination of a packet-switched network and a circuit-switched network (with appropriate gateways and translators).
The communications framework 910 may implement various network interfaces arranged to accept, communicate, and connect to communications networks. A network interface may be considered a specialized form of input/output (I/O) interface. The network interface may employ a connection protocol including, but not limited to, a direct connection, an ethernet (e.g., fat, thin, twisted pair 10/100/1000Base T, etc.), a token ring, a wireless network interface, a cellular network interface, an IEEE 802.11a-x network interface, an IEEE 802.16 network interface, an IEEE 802.20 network interface, etc. Further, multiple network interfaces may be used to participate in various communication network types. For example, multiple network interfaces may be used to allow communication over broadcast, multicast, and unicast networks. If processing requirements dictate greater speed and capacity, the distributed network controller cluster architecture can similarly be used to pool, load balance, and otherwise increase the communication bandwidth required by the client(s) 902 and server(s) 904. The communication network may be any one or combination of wired and/or wireless networks including, but not limited to, direct interconnects, secure custom connections, private networks (e.g., corporate intranets), public networks (e.g., the internet), Personal Area Networks (PANs), Local Area Networks (LANs), Metropolitan Area Networks (MANs), operational tasks as nodes on the internet (OMNI), Wide Area Networks (WANs), wireless networks, cellular networks, and other communication networks.
The components and features of the above-described apparatus may be implemented using any combination of discrete circuitry, Application Specific Integrated Circuits (ASICs), logic gates and/or single chip architectures. Furthermore, the features of the described apparatus may be implemented using microcontrollers, programmable logic arrays and/or microprocessors or any combination of the foregoing where suitably appropriate. Note that the hardware, firmware, and/or software elements may be referred to collectively or individually herein as "logic" or "circuitry".
Some embodiments may be described using the expression "one embodiment" or "an embodiment," along with their derivatives. These terms mean that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment. The appearances of the phrase "in one embodiment" in various places in the specification are not necessarily all referring to the same embodiment. Moreover, unless otherwise noted, the above features are recognized as being usable together in any combination. Thus, any features discussed separately may be employed in combination with each other unless indicated as incompatible with each other.
With general reference to the notations and terminology used herein, the detailed description herein may be presented in terms of program processes executing on a computer or network of computers. These process descriptions and representations are used by those skilled in the art to most effectively convey the substance of their work to others skilled in the art.
A process is here, and generally, conceived to be a self-consistent sequence of operations leading to a desired result. The operations are those requiring physical manipulations of physical quantities. Usually, though not necessarily, these quantities take the form of electrical, magnetic, or optical signals capable of being stored, transferred, combined, compared, and otherwise manipulated. It has proven convenient at times, principally for reasons of common usage, to refer to these signals as bits, values, elements, symbols, characters, terms, numbers, or the like. It should be borne in mind, however, that all of these and similar terms are to be associated with the appropriate physical quantities and are merely convenient labels applied to these quantities.
Further, the manipulations performed are often referred to in terms, such as adding and comparing, commonly associated with mental operations performed by a human operator. Such capability of a human operator is not necessary, or desirable in most cases, in any of the operations described herein that form part of one or more exemplary embodiments. Rather, the operation is a machine operation. Machines useful for performing the operations of the various embodiments include general purpose digital computers or similar devices.
Some embodiments may be described using the expression "coupled" and "connected" along with their derivatives. These terms are not necessarily intended as synonyms for each other. For example, some embodiments may be described using the terms "connected" and/or "coupled" to indicate that two or more elements are in direct physical or electrical contact with each other. The term "coupled," however, may also mean that two or more elements are not in direct contact with each other, but yet still co-operate or interact with each other.
Various embodiments are also directed to an apparatus or system for performing these operations. This apparatus may be specially constructed for the required purposes, or it may comprise a general-purpose computer selectively activated or reconfigured by a computer program stored in the computer. The processes presented herein are not inherently related to a particular computer or other apparatus. Various general-purpose machines may be used with programs written in accordance with the teachings herein, or it may prove convenient to construct more specialized apparatus to perform the required method steps. The required structure for a variety of these machines will appear from the description given.
It is emphasized that the abstract of the disclosure is provided to enable the reader to quickly ascertain the nature of the technical disclosure. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims. In addition, in the foregoing detailed description, it can be seen that various features are grouped together in a single embodiment for the purpose of streamlining the disclosure. This method of disclosure is not to be interpreted as reflecting an intention that the claimed embodiments require more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive subject matter lies in less than all features of a single disclosed embodiment. Thus, the following claims are hereby incorporated into the detailed description, with each claim standing on its own as a separate embodiment. In the appended claims, the terms "including" and "in which" are used as the plain-english equivalents of the respective terms "comprising" and "wherein," respectively. Moreover, the terms "first," "second," and "third," etc. are used merely as labels, and are not intended to impose numerical requirements on their objects.
What has been described above includes examples of the disclosed architecture. It is, of course, not possible to describe every conceivable combination of components and/or methodologies, but one of ordinary skill in the art may recognize that many further combinations and permutations are possible. Accordingly, the novel architecture is intended to embrace all such alterations, modifications and variations that fall within the spirit and scope of the appended claims.

Claims (20)

1. An apparatus for electronically controlling a locking device, comprising:
a plurality of wireless interfaces, wherein each of the plurality of wireless interfaces is configured to operate according to at least one of a plurality of wireless protocols;
a communication interface comprising a plurality of pins coupled to a plurality of electronic locking devices, the plurality of electronic locking devices comprising a first electronic locking device;
a touch display;
processing circuitry coupled with the plurality of wireless interfaces, the touch display, and the communication interface; and
a memory coupled with the plurality of wireless interfaces, the processing circuitry, the communication interface, and the touch display, the memory including firmware that, when executed by the processing circuitry, causes the processing circuitry to:
Receiving, via the touch display, a request to cause an action on the first electronic locking device; and is
Based on a configuration for the first electronic locking device specified in the firmware, sending a command to the first electronic locking device via the communication interface to cause the action on the first electronic locking device.
2. The apparatus of claim 1, the firmware comprising instructions that, when executed by the processing circuitry, cause the processing circuitry to:
determining a first pin of the plurality of pins of the communication interface corresponding to the action; and is
Sending the command via the first pin of the communication interface to cause an action on the first electronic locking device.
3. The apparatus of claim 2, wherein the configuration of the firmware comprises a configuration of the plurality of pins of the communication interface, wherein the configuration of the plurality of pins is based on a type of the first electronic locking device, wherein the plurality of electronic locking devices comprises different types of electronic locking devices.
4. The apparatus of claim 3, the firmware comprising instructions that, when executed by the processing circuitry, cause the processing circuitry to:
Receiving, via the touch display, a second request to cause a second action on a second electronic locking device of the plurality of electronic locking devices;
determining a second pin of the plurality of pins corresponding to the second action based on the type of the second electronic locking device; and is
Sending, via the second pin of the communication interface, a second command to the second electronic locking device to cause the second action on the second electronic locking device.
5. The apparatus of claim 1, the firmware comprising instructions that, when executed by the processing circuitry, cause the processing circuitry to, prior to sending the command to the electronic locking device:
receiving access credentials via the touch display; and is
Comparing the access credential to a list of valid access credentials stored in the memory to validate the access credential.
6. The apparatus of claim 1, the firmware comprising instructions that, when executed by the processing circuitry, cause the processing circuitry to:
receiving a response from the first electronic locking device via the communication interface; and is
Based on the response, determining that the action is performed on the first electronic locking device.
7. The device of claim 1, wherein the plurality of wireless protocols includes a Near Field Communication (NFC) protocol, a Bluetooth Low Energy (BLE) protocol, and an 802.11 protocol, the firmware including instructions that, when executed by the processing circuitry, cause the processing circuitry to:
receiving, via one of the plurality of wireless interfaces, from a mobile device, an access credential and a second request to cause a second action on the first electronic locking device;
verifying the access credential; and is
Sending a second command to the first electronic locking device via the communication interface to cause the second action on the first electronic locking device.
8. The apparatus of claim 1, the firmware comprising instructions that, when executed by the processing circuitry, cause the processing circuitry to:
receiving a firmware update from a mobile device via one of the plurality of wireless interfaces; and is
Updating firmware of the device using the firmware update.
9. The device of claim 1, further comprising a wireless charging component configured to:
Receiving wireless power from a mobile device; and is
The device is powered using the received wireless power.
10. The apparatus of claim 1, further comprising a wireless charging component configured to wirelessly provide power to a mobile device, the firmware comprising instructions that, when executed by the processing circuitry, cause the processing circuitry to:
receiving, from the mobile device via one of the plurality of wireless interfaces, an access credential and a second request to cause a second action on the first electronic locking device;
verifying the access credential; and is
Sending, via the communication interface, a second command to the first electronic locking device to cause the second action on the first electronic locking device.
11. A method, comprising:
receiving, by firmware executing on a processor of a smart module via a touch display of the smart module, a request to cause an action on a first electronic locking device controlled by the smart module, wherein the smart module comprises a plurality of wireless interfaces, wherein each of the plurality of wireless interfaces is configured to operate according to at least one of a plurality of wireless protocols, wherein the smart module further comprises a communication interface comprising a plurality of pins coupled to a plurality of electronic locking devices via a cable, the plurality of electronic locking devices comprising the first electronic locking device; and is
The firmware of the smart module sends a command to the first electronic locking device via the communication interface to cause the action on the first electronic locking device based on a configuration for the first electronic locking device specified in the firmware.
12. The method of claim 11, further comprising:
the firmware determining a first pin of the plurality of pins of the communication interface corresponding to the action; and is provided with
The processor sends the command via the first pin of the communication interface to cause the action on the first electronic locking device.
13. The method of claim 12, wherein the configuration of the firmware comprises a configuration of the plurality of pins of the communication interface, wherein the configuration of the plurality of pins is based on a type of the first electronic locking device, wherein the plurality of electronic locking devices comprises different types of electronic locking devices.
14. The method of claim 13, wherein the firmware is configured to control a plurality of electronic locking devices including the first electronic locking device, wherein the plurality of electronic locking devices includes different types of electronic locking devices, wherein at least one type of electronic locking device includes an electromagnetic locking device, wherein the plurality of wireless protocols includes a Near Field Communication (NFC) protocol, a Bluetooth Low Energy (BLE) protocol, and an 802.11 protocol.
15. The method of claim 14, further comprising:
receiving, via the touch display of the smart module, a second request to cause a second action on a second electronic locking device of the plurality of electronic locking devices;
the firmware determines a second pin of the plurality of pins corresponding to the second action based on a type of the second electronic locking device; and is provided with
The processor sends a second command to the second electronic locking device via the second pin of the communication interface to cause the second action on the second electronic locking device.
16. The method of claim 11, further comprising:
the processor receiving a response from the first electronic locking device via the communication interface; and is
The processor determines that the action is performed on the electronic locking device based on the response.
17. The method of claim 11, further comprising:
the processor receiving, via the plurality of wireless interfaces, from a mobile device, an access credential and a second request to cause a second action on the first electronic locking device;
the cryptographic processor of the intelligent module verifies the access certificate; and is
The processor sends a second command to the first electronic locking device via the communication interface to cause the second action on the first electronic locking device.
18. The method of claim 17, further comprising:
the processor receiving input from the mobile device via one of the plurality of wireless interfaces specifying a modification to a parameter of the smart module; and is provided with
The processor modifies the parameter of the intelligent module based on the received input.
19. The method of claim 11, wherein the intelligent module comprises a wireless charging component, wherein the wireless charging component is configured to:
receiving wireless power from a mobile device; and is provided with
The intelligent module is powered using the received wireless power.
20. The method of claim 11, wherein the intelligent module comprises a wireless charging component, wherein the wireless charging component is configured to:
receiving wireless power from a mobile device; and is
Charging the smart module using the received wireless power.
HK42023066783.4A 2021-01-11 2023-01-10 Universal smart interface for electronic locks HK40077964A (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US17/145,952 2021-01-11

Publications (1)

Publication Number Publication Date
HK40077964A true HK40077964A (en) 2023-03-24

Family

ID=

Similar Documents

Publication Publication Date Title
CN114758431A (en) Universal intelligent interface for electronic lock
US10868815B2 (en) Leveraging flexible distributed tokens in an access control system
CA3076492C (en) Secure real-time clock update in an access control system
US11665151B2 (en) Utilizing caveats for wireless credential access
CN108293045B (en) Single sign-on identity management between local and remote systems
US9451454B2 (en) Mobile device identification for secure device access
US9960912B2 (en) Key management for a rack server system
EP2809046B1 (en) Associating distinct security modes with distinct wireless authenticators
KR101963437B1 (en) System and method for doorlock
CN105531710A (en) Method of authorizing an operation to be performed on a targeted computing device
TW201512879A (en) Mobile communication device and method of operating thereof
EP4027309A1 (en) Universal smart interface for electronic locks
US11436883B2 (en) Secured tethering process between devices
EP4193506B1 (en) Techniques for managing smart home configurations
KR101905294B1 (en) Methods and apparatus for using keys conveyed via physical contact
HK40077964A (en) Universal smart interface for electronic locks
KR102248132B1 (en) Method, apparatus and program of log-in using biometric information
NZ761966B2 (en) Leveraging flexible distributed tokens in an access control system