WO2006061550A1

WO2006061550A1 - System for linking the access to a predetermined area to the disabling of selected mobile device functionality

Info

Publication number: WO2006061550A1
Application number: PCT/GB2005/003818
Authority: WO
Inventors: Kristian Woodsend; Danilo Melandri
Original assignee: Matsushita Electric Industrial Co. Ltd.
Priority date: 2004-12-08
Filing date: 2005-10-06
Publication date: 2006-06-15
Also published as: GB0426865D0; GB2421108A

Abstract

An access control system comprising a barrier, such as a turnstile (A), for controlling access of a user carrying a mobile device (D) to a pre-determined area (O). In order to gain access to that area (O) at least some functionality of the mobile device (D) has to be disarmed, such as the ring tone or camera/video functionality. In the event that the functionality is disabled, access through the turnstile (A) and into the pre-determined area (O) is allowed.

Description

SYSTEM FOR LINKING THE ACCESS TO A PREDETERMINED AREA TO THE DISABLING OF SELECT

ED MOBILE DEVICE FUNCTIONALITY

The present invention relates to access control for restricting the functionality of mobile devices in certain environments. In particular, the present invention relates to 5 a system and method for disabling the functionality of mobile devices in a controlled environment and a mobile telephone adapted to interact with such a system.

Mobile devices, such as mobile telephones are widely available. The features and functionalities included in these devices are becoming increasingly sophisticated,

10 with many now including cameras and video recorders. Whilst these features are desirable to many consumers, in some circumstances they can be problematic. For example, in many business or secure environments, such devices are viewed as a security risk. There are also environments where audio and video capture is not allowed, for instance entertainment venues, such as cinemas and concert halls.

15 Hence, some companies or entertainment organisers are banning the use of mobile devices on their premises. This is inconvenient, because whilst some of the more complex add-ons may be a risk, the more basic features of mobile devices remain useful and indeed essential in the modern world.

20 According to one aspect of the present invention, there is provided an access control system comprising a barrier or access point for controlling access to a predetermined area; means for disabling at least some functionality of a mobile device and means for allowing access through the barrier or access point in the event that the mobile device functionality is disabled.

25

By linking access to the disabling of selected mobile device functionality, there is provided a simple and effective mechanism for maintaining some form of control in a secure area without having to confiscate a user's device.

30 Included in the mobile device may be a ticket that is associated with the barrier access means, the ticket being indicative of the functionality of the mobile device that has to be disabled. Preferably, means for disabling the functionality of the mobile device are operable to use the ticket to determine which device functionality has to be disabled.

The means for disabling at least some functionality of a mobile device may comprise a removable module that is operable to co-operate with the mobile device to control the device functionality.

According to another aspect of the invention there is provided a mobile device that is operable to disable at least some of its functionality in response to a command from an access control system that is operable to control access to a pre-determined area. The mobile device may include a ticket manager, a ticket store and a function controller, the ticket store being for storing one or more tickets that include access control information and device control information.

According to yet another aspect of the invention, there is provided a device or card, for example a smart card or other removable memory device, for use in cooperation with a multi-function mobile device, the device or card being operable to disable at least some of the functionality of the multi-function mobile device in response to a command from an access control system.

The device or card may include a ticket store and a function controller, the ticket store being for storing one or more tickets that include device control information, wherein the function controller is operable to use the device control information to determine the functions that are to be disabled.

According to another aspect of the invention, there is provided an access control method for controlling a mobile device that is to be taken into a secure or controlled environment, the method involving preventing access through a barrier or access means until one or more mobile device functions is securely disabled.

The method may further involve accessing on the mobile device a ticket that is associated with the barrier or access means, the ticket being indicative of the functionality of the mobile device that has to be disabled, and disabling the functionality identified on the ticket. The method may further involve authenticating the ticket and in response to this disabling the functionality of the device.

According to still another aspect of the invention, there is provided an access control system for controlling functionality of a mobile device being moved into a pre-determined area, the system comprising a barrier or access means for controlling access to the pre-determined area, a transmitter for sending a signal to the mobile device, which signal is operable to cause one or more features of the device to be disabled and a receiver for receiving confirmation from the mobile device that the functionality is disabled, wherein the barrier or access means are operable to selectively allow access to the pre-determined area in response to confirmation that the mobile device functionality is disabled.

The barrier or access means may be associated with an identifier that is also associated with a ticket being indicative of the functionality of the mobile device that has to be disabled.

Means may be provided for authenticating the ticket and in response to this cause the one or more features of the device to be disabled.

The barrier or access means are operable to communicate with the mobile device via a wireless communications link.

According to still a further aspect of the invention, there is provided a mobile device that is operable automatically to disable at least some of its functionality in the event that a predetermined time is reached or has elapsed.

Various aspects of the invention will now be described by way of example only and with reference to the accompanying drawings, of which:

Figure 1 is a block diagram of a secure access system; Figure 2 is an illustration of a ticket for use in the system of Figure 1, and Figure 3 is a schematic view of data flow paths in the system of Figure 1.

Figure 1 shows an access control system that has a turnstile A for selectively allowing access to secure premises O. The turnstile A is operable to cause one or more functions of a multi-function wireless, mobile device D to be disabled as a precondition of entry into the secure area. The turnstile A is typically provided on the perimeter of the secure premises O. For example, the turnstile A may be a door entry system in an office or an automatic gateway allowing access to platforms in a transport system. For the purposes of identification, each turnstile A contains a unique identification number.

Both the turnstile A and the multi-function device D include a communication port N for implementing a common method of communication over which they can communicate using a standard protocol C. Preferably, the communication channel is wireless, for example radio or infra-red, but other direct connection communication means may be used.

Included in the turnstile A is a processor (not shown) that is operable to send and receive signals via the communication port and send control signals to the turnstile barrier mechanism to allow or prevent movement thereof (by for example opening/releasing a lock or latch mechanism), thereby to open the barrier to an authorised user or indeed prevent entry to an unauthorised user.

Included in the mobile device D is a ticket controller M that is operable to communicate with a function controller L. Connected to the function controller is a plurality of functional modules, for example a camera E, a video, i.e. moving picture, recorder F, a voice recorder G, plus other functions, indicated by H. The functional controller L is operable to selectively disable, and subsequently re-enable, one or more of these modules as and when desired. More specifically, the functional controller L is an agent that all drivers for the various functions must refer to for permission before they are allowed to operate. In this way the function controller L may restrict the level of functionality of any particular device contained in the multi-function device. The function controller L can apply any set of rules. To determine which functions are to be disabled, a ticket store P is provided for storing tickets. These can be downloaded into the mobile device when, for example, a user buys a concert ticket or when the user wants to access a secure area. Alternatively, the ticket may be permanently stored on the mobile device. In any case, the ticket has to be stored in a secure or tamper proof memory or some other form of secure environment. Each ticket contains ticket information I, access information J and device control information K.

As shown in Figure 2, the access information identifies what access rights are allowed. For example, it describes which turnstiles can be accessed, times at which access is allowed, and additional entry requirements etc. The access information also indicates at what point the device control information may be rescinded, for example this could be when passing back out through the turnstile or could be a relative or absolute time. The device control information K is a set of rules associated with the access information that must be obeyed every time that access information is invoked. It may include enabling and disabling devices, or may restrict the level of functionality of a device, for example, only allow low resolution still images to be taken. Optionally, the ticket may also store extra content information, such as ticket specific data, for example graphics for printing tickets, a sample audio clip, a serial number etc.

The mobile device is able to store any number of tickets bearing different sets of access control information and device control information. Each different ticket applies to different rights of access to different secure areas.

When wishing to enter the secure premises O through the turnstile A, the user activates the communications channel N. Then, a mutual authentication is performed, and both the turnstile A and the mobile device D identify themselves to each other and indicate that they both support the ticketing functionality. The ticket controller M is then activated. It searches the ticket store P for a ticket I that matches the identification of the turnstile A as identified in the mutual authentication phase. If no such ticket exists, this is indicated to the turnstile A over the communications link N. The turnstile then refuses entry. If a ticket I does exist, then entry can be allowed to the secure premises O. For this to happen, the ticket controller M must first pass the device control information K to the function controller L. The controller L then up-dates a permissions table to indicate that the functionality identified by the device control information K is to be disabled.

In the event that the user subsequently tries to activate that functionality, say a camera application, as shown in Figure 3, this signal is captured by a capture manager, which passes the activation command to the function controller L. The controller L checks its permissions table, hi the event that the permissions table indicates that the camera application may not be activated, then the function controller L does not pass on the activation command to the camera module E, thereby preventing use of that application. Hence, the function controller L uses the ticket information to disable any functions that are disallowed according to the issuer of the ticket. Li contrast, if the permissions table indicates that the camera application can be used, then the activation signal is passed to that application and the user can access and use that functionality.

Once the function controller L is provided with the relevant device control information from the ticket, the ticket controller M sends an acknowledgement signal over the communications channel C to the turnstile A. On receipt of this, the turnstile allows entry to the secure premises. Typically, this would involve the release of a lock or latch mechanism, so that the turnstile can be rotated. At the same time the turnstile uses an audible or visual indicator B to inform any observers that the functionality rules have been applied for that device. When the user subsequently leaves the secure area through the turnstile, communication with it causes the function controller L to re-enable all functionality.

The system in which the invention is embodied provides many advantages. For example, it means that mobile devices can be taken into concerts, workplaces etc. without having to switch them off. This means that the user is able to use some features of the device, whilst the party responsible for the secure area has reassurance that unwelcome functionality cannot be used. The system is also very flexible, so that different rules can be applied to different places, allowing maximum functionality to the user in any given place. Also, where the device carries an electronic ticket it is easy to buy/use tickets in a number of ways. Access to additional content, such as pictures, music, discount vouchers etc, may be provided by the ticket issuer. Furthermore, the invention provides enhanced marketing opportunities. For example, advertising content, e.g. Screensaver, or further enticements to buy, e.g. voucher for money off merchandise could be provided when the ticket is downloaded.

A skilled person will appreciate that variations of the disclosed arrangements are possible without departing from the invention. For example although in the examples described above the function controller for disabling the mobile device functionality is stored permanently within the device, it will be appreciated that it could equally be provided in a secure removable device, such as a smart card or any other removable memory device. An advantage of this is that the removable card/device can be moved between different mobile devices.

As another variation, although the invention has been described primarily with reference to physical access, in some environments, the invention could be applied on a temporal basis. In this case, the function controller would disable one or more functions at a pre-determined time, rather than at a pre-determined location. Of course, entry into a pre-determined area could be allowed only on the condition that the mobile device is adapted to disable its functionality at that pre-determined time.

As yet a further variation, although a turnstile is described, it will be appreciated that any suitable barrier or access mechanism could be used to control access to the secure or controlled environment. Accordingly the above description of the specific embodiment is made by way of example only and not for the purposes of limitation. It will be clear to the skilled person that minor modifications may be made without significant changes to the operation described.

Claims

1. An access control system comprising a barrier or access means for controlling access to a pre-determined area, and disabling means for disabling at least some functionality of a mobile device, wherein the barrier or access mechanism is operable to selectively allow access to the pre-determined area in the event that the mobile device functionality is disabled.

2. An access control system as claimed in claim 1 in which a ticket/identifier that is associated with the barrier or access means is indicative of the functionality of the mobile device that has to be disabled, wherein the disabling means are operable to identify the functions that are to be disabled from the ticket/identifier.

3. An access control system as claimed in claim 2 wherein the barrier or access means are operable to authenticate the ticket/identifier and in response to a positive authentication activate the means for disabling the functionality.

4. An access control system as claimed in any of the preceding claims wherein the disabling means comprise a removable module that is operable to co-operate with the mobile device to control the device functionality.

5. An access control system as claimed in any of the preceding claims wherein the barrier or access means are operable to communicate with the mobile device via a wireless communications link.

6. An access control system as claimed in any of the preceding claims wherein the function controller is operable to cause a confirmation signal to be sent to the barrier or access mechanism to confirm that the desired functionality has been disabled.

7. An access control system as claimed in claim 6 wherein barrier or access means are operable to allow access in response to receipt of the confirmation signal.

8. A multi-function mobile device, such as a PDA or a mobile telephone, that is operable to disable at least some of its functionality in response to a command from an access control system that is operable to control access to a pre-determined area.

9. A mobile device as claimed in claim 8 that includes a store and a function controller, the store being for storing device control information, wherein the function controller is operable to use the device control information to determine which functions are to be disabled.

10. A device or card for use in co-operation with a multi-function mobile device, the device or card being operable to disable at least some of the functionality of the multi-function mobile device in response to a command from an access control system.

11. A device or card as claimed in claim 10 that includes a memory and a function controller, the memory being for storing device control information, wherein the function controller is operable to use the device control information to determine the functions that are to be disabled.

12. An access control method for controlling a mobile device that is to be taken into a secure or controlled environment, the method involving preventing access through a barrier or access means until one or more mobile device functions is securely disabled.

13. A method as claimed in claim 12 further involving accessing on the mobile device information associated with the barrier or access means, the information being indicative of the functionality of the mobile device that has to be disabled, and disabling the functionality identified.

14. A method as claimed in claim 13 further involving authenticating the information and in response to this disabling the functionality of the device.

15. An access control system for controlling functionality of a mobile device being moved into a pre-determined area, the system comprising a barrier or access means for controlling access to the pre-determined area, means for sending a signal to the mobile device, which signal is operable to cause one or more features of the device to be disabled and means for receiving confirmation from the mobile device that the functionality is disabled, wherein the barrier or access means are operable to selectively allow access to the pre-determined area in response to confirmation that the mobile device functionality is disabled.

16. An access control system as claimed in claim 15 wherein the barrier or access means are associated with an identifier that is also associated with information indicative of the functionality of the mobile device that has to be disabled.

17. An access control system as claimed in claim 16 further comprising means for authenticating the information and in response to this causing the one or more features of the device to be disabled.

18. An access control system as claimed in any of claims 15 to 17 wherein the barrier or access means are operable to communicate with the mobile device via a wireless communications link.

19. A mobile device including a function controller for disabling or preventing use of at least some of its functionality until a predetermined time is reached or has elapsed when the functionality becomes re-enabled or usable.