Portable electronic door opener device and method for secure door opening

Abstract

A portable computing device for opening a door (an electronic door opener) and a method for its use is disclosed. The computing device has a shared secret key, a standard certificate, means for communicating with the door, and a processor adapted for performing operations with shared secret keys and standard certificates. The door also possesses the same shared secret key. Under normal operation, messages encoded with the shared secret key serve to establish a right to open the door. The portable computing device's standard certificate is used to respond to occasional challenges by the door, and to generate the shared secret key. Biometric capabilities of the portable computing device add an additional layer of security in screening the identity of the user of the device. A security system for controlling access, involving a first plurality of computing devices and a second plurality of doors, and operating based on shared secret keys and occasional challenges is also disclosed.

1 . A device, comprising:
 a memory, wherein the memory comprises a shared secret key and a certificate;   a processor adapted for communicating with a door and being capable of:   sending a device identifier to the door;   attesting possession of the shared secret key;   on random occasions, when challenged by the door, attesting possession of the certificate; and   wherein the device is characterized as being a portable electronic door opener.   
   
   
       2 . The device of  claim 1 , wherein the memory further comprises the device identifier. 
   
   
       3 . The device of  claim 1 , wherein the device identifier is a hash code of the certificate. 
   
   
       4 . The device of  claim 1 , wherein the processor is further adapted to generate the shared secret key, by using the certificate in conjunction with the door. 
   
   
       5 . The device of  claim 1 , wherein the certificate comprises a private key, wherein the private key is encrypted with a first biometric key, wherein the first biometric key pertains to a rightful owner of the device. 
   
   
       6 . The device of  claim 5 , wherein the device further comprises a biometric device, wherein the biometric device is capable of generating a second biometric key pertaining to a user of the computing device, and wherein the second biometric key is used to decrypt the private key.