Electronic lock box proximity access control

Abstract

An electronic lock box system includes a wireless portable transponder that communicates with an electronic lock box using a low power radio link. The portable transponder includes: a wide area network radio to communicate to a central clearinghouse computer, a motion sensor to activate its wide area network radio, and a connector to communicate with a secure memory device. The electronic lock box sends a hail message that is intercepted by the portable transponder; the hail message includes identification information. The portable transponder responds with a message that includes a time sensitive encryption key; the lock box authenticates this response message using its own time sensitive encryption key. If the messages are authenticated, the lock box sends an access event record to the portable transponder, and this access event record is stored in the secure memory device. If a wide area network is available, the portable transponder sends the access event record to the central clearinghouse computer.

What is claimed is: 
     
       1. A method for operating an electronic lock box system, said method comprising:
 (a) providing an electronic lock box having a first processing circuit, a first memory circuit, a first short range wireless communications device transmitter and receiver, a secure compartment having a movable opening element that is under the control of said first processing circuit, and a first user operated data input device circuit: 
 (i) periodically inspecting said first user operated data input device circuit to determine if it has been activated, and if so, determining a first input data value that is entered thereon by a user; 
 (ii) retrieving data stored in said first memory circuit, including a unique to lockbox identifier value; 
 (iii) constructing a hail message from said unique lockbox identifier value and from said first input data value, and transmitting said hail message using said first short range wireless communications device transmitter and receiver; and 
 (b) providing a portable transponder having a second processing circuit, a second memory circuit, and a second short range wireless communications device transmitter and receiver: 
 (i) retrieving data stored in said second memory circuit, including a user identifier data value; and 
 (ii) determining if said second short range wireless communications device transmitter and receiver has received said hail message from said electronic lock box; and if so, based upon said user identifier data value, determining if said hail message contains information corresponding to the identity of said user; 
 (c) if said received hail message corresponds to the identity of said user, then at said portable transponder: 
 (i) retrieving data stored in said second memory circuit, including a second time sensitive encryption key value; 
 (ii) executing a second data encryption routine that uses said second time sensitive encryption key value and applies it to said user identifier data value, thereby creating a second encrypted data message; 
 (iii) transmitting a response message that includes said second encrypted data message, using said second short range wireless communications device transmitter and receiver; and 
 (d) at said electronic lock box: 
 (i) determining if said first short range wireless communications device transmitter and receiver has received said response message from said portable transponder, and if so: 
 (ii) retrieving data stored in said first memory circuit, including a first time sensitive encryption key value; 
 (iii) executing a first data decryption routine that uses said first time sensitive encryption key value and applies it to said response message, thereby generating a first identifier code value; and 
 (iv) comparing said first identifier code value to said first input data value, and if there is a match, then granting access to said secure compartment of the electronic lock box. 
 
     
     
       2. The method of  claim 1 , wherein said hail message is encrypted, and said portable transponder executes a routine to decrypt said hail message to determine said first input data value before it was encrypted by said electronic lock box. 
     
     
       3. The method of  claim 2 , wherein said step of determining if said hail message corresponds to the identity of a user requires said unencrypted first input data value to be equal to said user identifier data value to find a match. 
     
     
       4. The method of  claim 1 , further comprising the steps of: (a) automatically updating, at said electronic lock box, a value of said first time sensitive encryption key value based on the passage of time; and (b) if said second time sensitive encryption key value has been updated on said portable transponder within a predetermined amount of real time, then a value of said second time sensitive encryption key value will sufficiently correlate to a present value of said first time sensitive encryption key value such that, if said first input data value is equal to said user identifier data value, then access to said secure compartment of the electronic lock box will be granted. 
     
     
       5. The method of  claim 4 , further comprising the steps of:
 (a) if access was granted, sending access event data from said electronic lock box to said portable transponder, using said first short range wireless communications device transmitter and receiver and using said second short range wireless communications device transmitter and receiver, and storing said access event data in said second memory circuit. 
 
     
     
       6. The method of  claim 5 , further comprising the steps of:
 (a) providing said portable transponder with a wide area network wireless communications device transmitter and receiver that acts as a first wireless data link; 
 (b) providing a remote central computer that includes a system database and a second wireless data link; and 
 (c) if access was granted to said secure compartment of the electronic lock box, then uploading said access event data from said portable transponder to said central computer, and storing the access event data in said system database. 
 
     
     
       7. The method of  claim 6 , further comprising the steps of:
 (a) providing said portable transponder with a display for showing visible information to said user; 
 (b) determining, by said central computer, if there is existing data stored at the central computer that is to be shared with said user, in which said existing data corresponds to a property where said electronic lock box is sited; and 
 (c) if so, transmitting said existing data to said portable transponder, and showing said existing data on said display. 
 
     
     
       8. The method of  claim 5 , wherein said second memory circuit comprises a portable secure memory device circuit that is removable from said portable transponder. 
     
     
       9. The method of  claim 1 , further comprising the steps of:
 (a) automatically updating, at said electronic lock box, a value of said first time sensitive encryption key value based on the passage of time; and (b) if said second time sensitive encryption key value has not been updated on said portable transponder within a predetermined amount of time, then a value of said second time sensitive encryption key value will not sufficiently correlate to a present value of said first time sensitive encryption key value such that, even if said first input data value is equal to said stored user identifier data value, access to said secure compartment of the electronic lock box will not be granted. 
 
     
     
       10. The method of  claim 9 , further comprising the steps of:
 (a) providing said portable transponder with a wide area network wireless communications device transmitter and receiver that acts as a first wireless data link; 
 (b) providing a remote central computer that includes a system database and a second wireless data link; 
 (c) if access was not granted to said secure compartment of the electronic lock box, then transmitting an update request from said portable transponder to said central computer, and downloading an updated encryption key from said central computer to said portable transponder, in real time; and 
 (d) using the received updated encryption key as said second time sensitive encryption key value, so as to obtain access to said secure compartment of the electronic lock box. 
 
     
     
       11. A method for operating an electronic lock box system, said method comprising: (a) providing a central computer that includes a first processing circuit, a first memory circuit, a system database, and a first wireless data link; and (b) providing a portable transponder having a second processing circuit, a second memory circuit, a motion sensor, and a wide area network wireless communications device transmitter and receiver that acts as a second wireless data link; (i) maintaining said wide area network wireless communications device transmitter and receiver in a low power state during inactive periods when a user is not handling said portable transponder; (ii) activating said wide area network wireless communications device transmitter and receiver if said motion sensor provides an input state indicating that said portable transponder is being handled by said user; and (iii) determining if said portable transponder has a need to communicate with said central computer, and if so, transmitting identification data to said central computer using said wide area network wireless communications device transmitter and receiver;
 wherein said step of determining if said portable transponder has a need to communicate with said central computer occurs if at least one of the following states exists: (a) said portable transponder requires an updated time sensitive encryption key; (b) said second memory circuit of the portable transponder contains at least one access event data set pertaining to a system electronic lock box that is to be stored in said database of the central computer; and (c) said second memory circuit of the portable transponder contains at least one feedback response data set pertaining to a system electronic lock box that is to be stored in said database of the central computer. 
 
     
     
       12. The method of  claim 11 , further comprising the steps of:
 (a) determining, by said central computer, if there is existing data stored at the central computer that is to be downloaded to said portable transponder, in which said existing data pertains to a property, or pertains to system electronic lock box; and if so 
 (b) transmitting said existing data to at least one of:
 (i) said portable transponder, using said first wireless data link; and 
 (ii) said user, using electronic mail. 
 
 
     
     
       13. The method of  claim 12 , wherein said existing data comprises at least one of:
 (a) an updating time sensitive encryption key value; 
 (b) a feedback request; 
 (c) a local alarm system code; 
 (d) sales information pertaining to said property; 
 (e) medical information about an occupant in said property; and 
 (f) special instructions for a caregiver at said property. 
 
     
     
       14. An electronic lock box system, comprising:
 (a) an electronic lock box having a first processing circuit, a first memory circuit, a first short range wireless communications device transmitter and receiver, a secure compartment having a movable opening element that is under the control of said first processing circuit, and a first user operated data input device circuit, wherein said electronic lock box is configured to generally maintains maintain said first short range wireless communications device transmitter and receiver in a sleep mode until becoming activated by user manipulation of said first user operated data input device circuit, and once activated, said first short range wireless communications device transmits transmitter and receiver is configured to transmit a hail message; and 
 (b) a portable transponder having a second processing circuit, a second memory circuit, a second short range wireless communications device transmitter and receiver, a second user operated data input device circuit for use by said user, and a motion sensor, wherein said portable transponder is configured to generally maintains maintain said second short range wireless communications device transmitter and receiver in a sleep mode until becoming activated by said motion sensor undergoing a change in state indicating that said portable transponder is being handled by said user, and once activated, said second short range wireless communications device receives transmitter and receiver is configured to receive said hail message and acts upon it; 
 (c) an attachable/detachable portable secure memory device circuit having a plurality of memory elements; 
 (d) mounted to said electronic lock box, a first data interface for communicating circuit is configured to communicate with said plurality of memory elements of the portable secure memory device circuit, if said portable secure memory device circuit is attached to said electronic lock box; and 
 (e) mounted to said portable transponder, a second data interface for communicating circuit is configured to communicate with said plurality of memory elements of the portable secure memory device circuit, if said portable secure memory device circuit is attached to said portable transponder. 
 
     
     
       15. The electronic lock box system of  claim 14 , wherein said a second memory circuit includes a removable portable secure memory device circuit that includes a plurality of memory elements for storing data, including time-sensitive data. 
     
     
       16. The electronic lock box system of  claim 14 , wherein said second processing circuit is configured:
 (a) to determine if said hail message was received from a correct user of said electronic lock box, and if so; 
 (b) to transmit, using said second short range wireless communications device transmitter and receiver, a response message that contains a second user identification value and a second time sensitive encryption key value. 
 
     
     
       17. The electronic lock box system of  claim 16 , wherein said first processing circuit is configured:
 (a) to retrieve a first user identification value from said first user operated data input device circuit, and a first time sensitive encryption key value that is current with respect to real time; 
 (b) to determine if said response message contains a proper said second user identification value and a proper second time sensitive encryption key value, by using said first user identification value and using said first time sensitive encryption key value; and 
 (c) if the response message contains proper data, then to grant access to said secure compartment. 
 
     
     
       18. The electronic lock box system of  claim 17 , wherein if access was granted, then said first processing circuit is further configured: (a) to generate access event data; and (b) to transmit, using said first short range wireless communications device transmitter and receiver, said access event data to said portable transponder. 
     
     
       19. The electronic lock box system of  claim 18 , further comprising:
 (a) at said portable transponder, a wide area network wireless communications device transmitter and receiver that acts as a first wireless data link; and 
 (b) a remotely located central computer that includes a system database and a second wireless data link; 
 wherein: 
 (c) said second processing circuit is configured to upload said access event data from said portable transponder to said central computer, by use of said wide area network wireless communications device transmitter and receiver; and 
 (d) said central computer is configured to store the access event data in said system database. 
 
     
     
       20. The electronic lock box system of  claim 19 , wherein:
 (a) if access was not granted, then said second processing circuit is further configured to transmit an update request from said portable transponder to said central computer; and 
 (b) said central computer is configured to download an updated encryption key from said central computer to said portable transponder, in real time; and 
 (c) said second processing circuit is further configured to transmit the received updated encryption key as said second time sensitive encryption key value, so as to obtain access to said secure compartment of the electronic lock box. 
 
     
     
       21. An electronic lock box system, comprising:
 (a) a first electronic lock box having a first processing circuit, a first memory circuit, a first short range wireless communications device transmitter and receiver, and a secure compartment having a movable opening element that is under the control of said first processing circuit, wherein once said first electronic lock box becomes activated, said first short range wireless communications device transmits transmitter and receiver is configured to transmit a first hail message; and 
 (b) a portable transponder having a second processing circuit, a second memory circuit, and a second short range wireless communications device transmitter and receiver, wherein once said second short range wireless communications device transmitter and receiver receives said first hail message, said portable transponder sends is configured to send a response message to authenticate itself to said first electronic lock box; 
 (c) after said first electronic lock box receives said response message, and verifies that it said first electronic lock box is configured to verify that said response message is authentic, and if so, said first short range wireless communications device begins transmitter and receiver is configured to begin to periodically transmit a PROMPT message at predetermined intervals; 
 (d) if said portable transponder is within range, said second short range wireless communications device transmits transmitter and receiver is configured to transmit an ACK message each time said portable transponder receives said periodic PROMPT message; 
 (e) thereafter, said portable transponder, under control of said second processing circuit, waits is configured to wait for N seconds, and if no further periodic PROMPT message is received during said N seconds waiting interval, then said second processing circuit determines is configured to determine that a “missing PROMPT” status is in effect; and 
 (f) said first electronic lock box, under control of said first processing circuit, waits is configured to wait for M seconds, and if no ACK message is received during said M seconds waiting interval, then said first processing circuit determines is configured to determine that a “missing ACK” status is in effect. 
 
     
     
       22. The electronic lock box system of  claim 21 , wherein said first electronic lock box tracks is configured to track a number of times said periodic PROMPT message is sent until said missing ACK status is in effect, and stores to store that number in said first memory circuit. 
     
     
       23. The electronic lock box system of  claim 22 , wherein after said first processing circuit determines that a missing ACK status is in effect, said first short range wireless communications device discontinues transmitter and receiver is configured to discontinue transmitting said periodic PROMPT message. 
     
     
       24. The electronic lock box system of  claim 21 , wherein said portable transponder tracks is configured to track a number of times said periodic PROMPT message is received until said missing PROMPT status is in effect, and stores to store that number in said second memory circuit. 
     
     
       25. The electronic lock box system of  claim 21 , further comprising a first timing clock at said first electronic lock box, which determines is configured to determine a first timing value when said first short range wireless communications device transmitter and receiver begins to transmit said periodic PROMPT message, and determines to determine a second timing value when said first processing circuit determines that a missing ACK status is in effect, and determines to determine a first difference between said first and second timing values and stores to store said first difference in said first memory circuit. 
     
     
       26. The electronic lock box system of  claim 25 , wherein after said first processing circuit determines that a missing ACK status is in effect, said first short range wireless communications device discontinues transmitter and receiver is configured to discontinue transmitting said periodic PROMPT message. 
     
     
       27. The electronic lock box system of  claim 21 , further comprising a second timing clock at said portable transponder, which determines is configured to determine a third timing value when said second short range wireless communications device transmitter and receiver begins to receive said periodic PROMPT message, and determines to determine a fourth timing value when said second processing circuit determines that a missing PROMPT status is in effect, and determines to determine a second difference between said third and fourth timing values and stores to store said second difference in said second memory circuit. 
     
     
       28. The electronic lock box system of  claim 21 , further comprising a second electronic lock box having a third processing circuit, a third memory circuit, a third short range wireless communications device transmitter and receiver, and a second secure compartment having a movable opening element that is under the control of said third processing circuit, wherein once said second electronic lock box becomes activated, said third short range wireless communications device transmits transmitter and receiver is configured to transmit a second hail message;
 if said portable transponder receives said second hail message, then said portable transponder terminates is configured to terminate sending further ACK messages to said first electronic lock box, even if said portable transponder is still receiving said periodic PROMPT message from said first electronic lock box, and instead said portable transponder sends is configured to send a second response message to authenticate itself to said second electronic lock box. 
 
     
     
       29. An electronic lock box system, comprising:
 (a) a first electronic lock box having a first processing circuit, a first memory circuit, a first short range wireless communications transmitter and receiver, and a secure compartment having a movable opening element that is under the control of said first processing circuit, wherein once said first electronic lock box becomes activated, said first short range wireless communications transmitter and receiver is configured to transmit a first hail message; and   (b) a portable transponder having a second processing circuit, a second memory circuit, and a second short range wireless communications transmitter and receiver, wherein once said second short range wireless communications transmitter and receiver receives said first hail message, said portable transponder is configured to send a response message to authenticate itself to said first electronic lock box;   (c) after said first electronic lock box receives said response message, said first electronic lock box is configured to verify that said response message is authentic, and if so, said first short range wireless communications transmitter and receiver is configured to begin to periodically transmit a PROMPT message at predetermined intervals;   (d) if said portable transponder is within range, said second short range wireless communications transmitter and receiver of said portable transponder is configured to receive said periodic PROMPT message;   (e) thereafter, said portable transponder, under control of said second processing circuit, is configured to wait for N seconds, and if no further periodic PROMPT message is received during said N seconds waiting interval, then said second processing circuit is configured to determine that a “missing PROMPT” status is in effect.    
     
     
       30. The electronic lock box system of claim 29, wherein said portable transponder is configured to track a number of times said periodic PROMPT message is received until said missing PROMPT status is in effect, and to store that number in said second memory circuit.  
     
     
       31. The electronic lock box system of claim 29, wherein after said second processing circuit determines that a “missing PROMPT” status is in effect, said portable transponder is configured to store that missing PROMPT status in said second memory circuit.  
     
     
       32. The electronic lock box system of claim 29, wherein said portable transponder is configured to track a number of times said periodic PROMPT message is received until said missing PROMPT status is in effect, and to convert that tracked number into units of real time.  
     
     
       33. The electronic lock box system of claim 29, wherein said portable transponder is configured to track a number of times said periodic PROMPT message is received until said missing PROMPT status is in effect, and said tracked number represents a visitation time during a showing of a property at which said first electronic lock box is sited.  
     
     
       34. The electronic lock box system of claim 29, further comprising a motion sensor with said portable transponder, said motion sensor being used to help said portable transponder define with greater precision an amount of time for a showing during the interval between: (a) said reception of a first periodic PROMPT message received from said first electronic lock box, and (b) said missing PROMPT status is in effect.  
     
     
       35. An electronic lock box system, comprising:
 (a) a first electronic lock box having a first processing circuit, a first memory circuit, a first input/output interface circuit, a first short range wireless communications transmitter and receiver, and a secure compartment having a movable opening element that is under the control of said first processing circuit, said first input/output interface circuit providing signal pathways between at least two of said first processing circuit, said first memory circuit, said first short range wireless communications transmitter and receiver, and said movable opening element of the secure compartment;   characterized in that, once said first electronic lock box becomes activated, said first short range wireless communications transmitter and receiver is configured to transmit a first hail message; and   (b) a portable transponder having a second processing circuit, a second memory circuit, a second input/output interface circuit, and a second short range wireless communications transmitter and receiver, said second input/output interface circuit providing signal pathways between at least two of said second processing circuit, said second memory circuit and said second short range wireless communications transmitter and receiver;   characterized in that, once said second short range wireless communications transmitter and receiver receives said first hail message, said portable transponder is configured to send a response message to authenticate itself to said first electronic lock box;   (c) after said first electronic lock box receives said response message, said first electronic lock box is configured to verify that said response message is authentic, and if so, said first short range wireless communications transmitter and receiver is configured to begin to periodically transmit a PROMPT message at predetermined intervals;   (d) if said portable transponder is within range, said second short range wireless communications transmitter and receiver of said portable transponder is configured to receive said periodic PROMPT message;   (e) thereafter, said portable transponder, under control of said second processing circuit, is configured to wait for N seconds, and if no further periodic PROMPT message is received during said N seconds waiting interval, then said second processing circuit is configured to determine that a “missing PROMPT” status is in effect.    
     
     
       36. The electronic lock box system of claim 35, wherein said portable transponder is configured to track a number of times said periodic PROMPT message is received until said missing PROMPT status is in effect, and said tracked number represents a visitation time during a showing of a property at which said first electronic lock box is sited.  
     
     
       37. A method for operating an electronic lock box system, said method comprising:
 (a) providing a first electronic lock box having a first processing circuit, a first memory circuit, a first input/output interface circuit, a first short range wireless communications transmitter and receiver, and a secure compartment having a movable opening element that is under the control of said first processing circuit:
 (i) activating said first electronic lock; and 
 (ii) transmitting a first hail message, using said first short range wireless communications transmitter and receiver; 
   (b) providing a portable transponder having a second processing circuit, a second memory circuit, a second input/output interface circuit, and a second short range wireless communications transmitter and receiver:
 (i) receiving said first hail message at said second short range wireless communications transmitter and receiver; and 
 (ii) sending, by said portable transponder, a response message to authenticate itself to said first electronic lock box; 
   (c) at said first electronic lock box:
 (i) receiving said response message; 
 (ii) verifying that said response message is authentic; and if so 
 (iii) periodically transmit a PROMPT message at predetermined intervals, using said first short range wireless communications transmitter and receiver; and 
   (d) at said portable transponder:
 (i) if said portable transponder is within range, receiving said periodic PROMPT message, using said second short range wireless communications transmitter and receiver; and 
 (ii) thereafter, waiting for N seconds, and if no further periodic PROMPT message is received during said N seconds waiting interval; then 
 (iii) determining that a “missing PROMPT” status is in effect.  
   
     
     
       38. The method of claim 37, further comprising the steps of:
 (a) tracking a number of times said periodic PROMPT message is received at said portable transponder until said missing PROMPT status is in effect; and   (b) using said tracked number, determining a visitation time during a showing of a property at which said first electronic lock box is sited.