Abstract: Embodiments of a physical access control system may grant authorized portal entry upon receiving a physical access request by generating a temporal credential based on the elapsed time from a prior access request. The controller processes multiple physical access requests from various mobile application devices. For each mobile application device, embodiments may authenticate an initial (predecessor) access request. For subsequent (successor) access requests, embodiments may use monotonic nonces to advance the range of temporal code matches. Entry code generation is decentralized to distributed application devices and remains unpredictable until a subsequent (successor) access request is initiated by the same mobile application device.

Abstract: A physical access control system enables acceptable portal entry codes upon receiving each physical access request by operating on the elapsed time from a previous physical access request to generate a temporal credential. The controller receives a plurality of physical access requests from a plurality of mobile application devices. Upon authenticating the first access request, the controller eliminates repetition from the space of acceptable successor requests from each mobile application device. Monotonic nonces advance the range of temporal code matches. Entry code generation is decentralized to distributed application devices and is inherently unknowable until a successor access request is initiated by the same application device.

Abstract: A physical access control system enables acceptable portal entry codes upon receiving each physical access request by operating on the elapsed time from a previous physical access request to generate a temporal credential. The controller receives a plurality of physical access requests from a plurality of mobile application devices. Upon authenticating the first access request, the controller eliminates repetition from the space of acceptable successor requests from each mobile application device. Monotonic nonces advance the range of temporal code matches. Entry code generation is decentralized to distributed application devices and is inherently unknowable until a successor access request is initiated by the same application device.

Abstract: A single credential capture event enables a plurality of persons to transit a physical access control portal. A cohort is determined when each of a plurality of persons is found within an identity indicia store. When a credential for any one of the cohort is validated, a physical access control actuator is enabled. A video stream of the plurality of persons is transformed to a plurality of best face images. When each one of the best face images is correlated with an entry in the identity indicia store above a threshold, a potential validation window is opened for the cohort. When a credential event for any of the plurality of persons occurs within the validation window, admittance is enabled through the physical access control portal. A cohort is a contiguous sequence of persons which begins with a first correlated best face and is terminated before the first uncorrelated best face.

Abstract: A door opens for an authenticated user by being tapped by a communication device. A physical access control system actuates upon receiving a wireless request triggered by a pattern of indicia in the vicinity of a portal. A hand-held communication device transmits a portal access control signal when it recognizes a pattern of bursts in signal amplitude. A mobile device has a sensor package, communication circuits, and a processor. Upon determining proximity to a controlled portal, the sensor package enables a pattern recognition circuit. Upon receiving a success indicia from the pattern recognition circuit, the communication circuits authenticate with the controlled portal, e.g. causing a door to open. A sensor package may be enabled by accelerations from bumping the device; tapping the device against a door, wall, or table. A pattern may be related to a number, or a sequence, or combination of slows, pauses, and quicks, or a single acceleration.

Abstract: A server is coupled to a network controlling door actuators at physical geo-locations. The server receives through a wireless communication network a request to enable physical access at a portal using a secure channel and a geo-location estimate from a mobile device. A circuit of the mobile device receives radio signal magnitude, phase, and power from at least one transmitter and authentication input from a user interface. Dual secured communications paths protect the server on its separately provisioned request channel and actuator command channel. Each legacy electronically controlled access portal is enabled to support smartphones without installing a replacement multi-band radio frequency reader at the geo-location.