Abstract: A physical access control system enables acceptable portal entry codes upon receiving each physical access request by operating on the elapsed time from a previous physical access request to generate a temporal credential. The controller receives a plurality of physical access requests from a plurality of mobile application devices. Upon authenticating the first access request, the controller eliminates repetition from the space of acceptable successor requests from each mobile application device. Monotonic nonces advance the range of temporal code matches. Entry code generation is decentralized to distributed application devices and is inherently unknowable until a successor access request is initiated by the same application device.

Abstract: A method operates a server that is coupled to a network controlling door actuators at physical geo-locations. The server receives through a wireless communication network a request to enable physical access at a portal using a secure channel and a geo-location estimate from a mobile device. A circuit of the mobile device receives radio signal magnitude, phase, and power from at least one transmitter and authentication input from a user interface. Dual secured communications paths protect the server on its separately provisioned request channel and actuator command channel. Each legacy electronically controlled access portal is enabled to support smartphones without installing a replacement multi-band radio frequency reader at the geo-location.

Abstract: A personal electronic device enables access to and occupancy of a secure space by providing measures of behaviors, personal attributes, history of transactions and movements that are used to validate continuous authentication and authorization of the device's possessor. This addresses the vulnerability of a misplaced, lost, or stolen electronic credential. An anchor point is a physical measurement of personal physical identity such as voice recognition, fingerprint, iris scan, chemistry, or other biometric. Continuity from an anchor point is measured by GPS way points, financial transactions at familiar vendors, outgoing text messages or passphrases, gait analysis, heart rate, EKG rhythm, or transit time. A request for access is presented upon a challenge based on proximity to a portal location. A digital credential is used to encrypt two or more of the continuity milestones and an anchor point which can be matched against a previously stored or dynamically generated expected value.

Abstract: A door opens for an authenticated user by being tapped by a communication device. A physical access control system actuates upon receiving a wireless request triggered by a pattern of indicia in the vicinity of a portal. A hand-held communication device transmits a portal access control signal when it recognizes a pattern of bursts in signal amplitude. A mobile device has a sensor package, communication circuits, and a processor. Upon determining proximity to a controlled portal, the sensor package enables a pattern recognition circuit. Upon receiving a success indicia from the pattern recognition circuit, the communication circuits authenticate with the controlled portal, e.g. causing a door to open. A sensor package may be enabled by accelerations from bumping the device; tapping the device against a door, wall, or table. A pattern may be related to a number, or a sequence, or combination of slows, pauses, and quicks, or a single acceleration.

Abstract: A predictive physical access control and security intervention system includes a credential device, indicia sensors, portal actuators; and a data store of historic and predicted travel events, whereby out of norm behaviors trigger elevated security intervention processes. A system detects, identifies, and measures occupancy and transit patterns of identities within and through a spatial volume. A processor performs statistical calculations of dwell time, movement patterns, path vectors, frequency of entry or exit, and transmission of attribute assertions containing trusted information to subscribers. The method transforms radio signals emitted by personal communications and identity devices into metrics of human traffic patterns, behavior conducive to commercial and security interests, and provides identity attributes containing trusted information to identity service subscribers.

Abstract: A server is coupled to a network controlling door actuators at physical geo-locations. The server receives through a wireless communication network a request to enable physical access at a portal using a secure channel and a geo-location estimate from a mobile device. A circuit of the mobile device receives radio signal magnitude, phase, and power from at least one transmitter and authentication input from a user interface. Dual secured communications paths protect the server on its separately provisioned request channel and actuator command channel. Each legacy electronically controlled access portal is enabled to support smartphones without installing a replacement multi-band radio frequency reader at the geo-location.