U.S. patent application number 17/167996 was filed with the patent office on 2021-08-19 for transmitter for transmitting a secure access signal.
The applicant listed for this patent is CPC Patent Technologies Pty Ltd.. Invention is credited to Christopher John Burke.
Application Number | 20210256530 17/167996 |
Document ID | / |
Family ID | 1000005568049 |
Filed Date | 2021-08-19 |
United States Patent
Application |
20210256530 |
Kind Code |
A1 |
Burke; Christopher John |
August 19, 2021 |
TRANSMITTER FOR TRANSMITTING A SECURE ACCESS SIGNAL
Abstract
A transmitter for transmitting a secure access signal to a
system for providing secure access to a controlled item is
disclosed. The access is dependent on information contained in the
secure access signal. The transmitter comprises a biometric sensor
for receiving a biometric signal and a processor for matching the
biometric signal against members of a database of biometric
signatures. The transmitter comprises enabling means for enabling
an inductive circuit, based on the matching of the biometric
signal, to transmit the secure access signal conveying the
information to the system upon the inductive circuit being placed
within range of a radio frequency field emitted by the system.
Inventors: |
Burke; Christopher John;
(Hurstville, AU) |
|
Applicant: |
Name |
City |
State |
Country |
Type |
CPC Patent Technologies Pty Ltd. |
Surfers Paradise |
|
AU |
|
|
Family ID: |
1000005568049 |
Appl. No.: |
17/167996 |
Filed: |
February 4, 2021 |
Related U.S. Patent Documents
|
|
|
|
|
|
Application
Number |
Filing Date |
Patent Number |
|
|
16717270 |
Dec 17, 2019 |
10949849 |
|
|
17167996 |
|
|
|
|
15213661 |
Jul 19, 2016 |
10685353 |
|
|
16717270 |
|
|
|
|
14308091 |
Jun 18, 2014 |
|
|
|
15213661 |
|
|
|
|
12738663 |
Apr 22, 2010 |
|
|
|
PCT/AU2008/001490 |
Oct 8, 2008 |
|
|
|
14308091 |
|
|
|
|
Current U.S.
Class: |
1/1 |
Current CPC
Class: |
G07C 9/257 20200101;
H04L 9/3247 20130101; G07C 9/26 20200101; G06Q 20/354 20130101;
G07F 7/0893 20130101; G06Q 20/40145 20130101; H04L 9/0861 20130101;
H04L 9/3231 20130101; G07C 9/00182 20130101; H04L 2209/805
20130101; G06Q 20/352 20130101; G06Q 20/3278 20130101; H04L 9/0631
20130101; G06K 9/00885 20130101; H04L 2463/102 20130101; G07C
9/00563 20130101; H04L 9/302 20130101; H04L 2209/56 20130101; H04L
9/0625 20130101 |
International
Class: |
G06Q 20/40 20060101
G06Q020/40; H04L 9/32 20060101 H04L009/32; G06Q 20/32 20060101
G06Q020/32; G07F 7/08 20060101 G07F007/08; G06Q 20/34 20060101
G06Q020/34; G06K 9/00 20060101 G06K009/00; G07C 9/25 20060101
G07C009/25; H04L 9/06 20060101 H04L009/06; H04L 9/08 20060101
H04L009/08; H04L 9/30 20060101 H04L009/30 |
Foreign Application Data
Date |
Code |
Application Number |
Oct 22, 2007 |
AU |
2007905760 |
Feb 13, 2008 |
AU |
2008900672 |
Claims
1. A cellular telephone configured to transmit a secure signal to a
system for performing a secure transaction, the cellular telephone
comprising: a biometric sensor; a display; a selector through which
a user input is received; a switch; at least one proximity circuit
coupled to the switch; a controller configured to: present data
representative of a plurality of financial accounts on the display;
receive, via the selector, user input indicative of a selected
financial account selected from the plurality of financial accounts
presented; present, via the display, feedback indicating the
selected financial account; prompt input of a biometric signal via
the biometric sensor; receive, via the biometric sensor, the
biometric signal; perform a matching process, thereby to seek
matching of the received biometric signal with a biometric
signature contained in memory of the cellular telephone; in the
case that the matching is successful, configure the proximity
circuit to transmit a secure signal conveying information to the
system when the proximity circuit is placed within range of a radio
frequency field emitted by the system; wherein the secure
transaction is performed based on the information conveyed within
the transmitted secure signal in order to adjust a financial
account associated with the matched signature by an amount provided
by the system; wherein the database of biometric signatures is
maintained using the cellular telephone by a user corresponding to
the biometric signature contained in memory of the cellular
telephone; and wherein the biometric sensor of the cellular
telephone was used to biometric signature contained in memory of
the cellular telephone.
2. The cellular telephone according to claim 1, wherein the
biometric sensor is configured to receive a biometric signal in one
of the following forms: retinal pattern, iris pattern, face
pattern, and palm configuration.
3. The cellular telephone of claim 1, wherein the proximity circuit
is further configured to unlock an automobile.
4. The cellular telephone of claim 1, further comprising at least
one light emitting diode (LED).
5. The cellular telephone of claim 1, further comprising a second
proximity circuit including at least one coil.
6. The cellular telephone of claim 5, wherein said second proximity
circuit further comprises an inductor and a capacitor.
7. The cellular telephone of claim 1, wherein said first proximity
circuit is configured to activate an automobile engine.
8. The cellular telephone of claim 1, wherein said biometric sensor
is further configured to allow the user to gain access to an
application.
9. The cellular telephone of claim 1, further comprising a
processor configured to generate passwords for use by the user.
10. The cellular telephone of claim 1, wherein said encrypted
information identifying the financial account associated with the
user comprises the number of the financial account associated with
the user.
11. The cellular telephone of claim 1, wherein said encrypted
information identifying the financial account associated with the
user comprises a token generated by the cellular telephone.
12. The cellular telephone of claim 1, wherein said second
proximity circuit is configured to communicate with a magnetic
stripe card reader.
13. The cellular telephone of claim 1, further comprising at least
infrared emitter.
14. The cellular telephone of claim 1, wherein the at least one
proximity circuit is configured to provide functionality of a
plurality of distinct proximity circuits corresponding to
respective financial accounts.
15. A method for operating a cellular telephone to transmit a
secure signal to a system for performing a secure transaction, the
method including: presenting on a display unit of the cellular
telephone data representative of a plurality of financial accounts;
receiving, via a selector of the cellular telephone through which
used input is received, user input indicative of a selected
financial account selected from the plurality of financial accounts
presented; presenting, via the display, feedback indicating the
selected financial account; prompt input of a biometric signal via
a biometric sensor provided via hardware of the cellular telephone;
receiving, via the biometric sensor, the biometric signal;
performing a matching process, thereby to seek matching of the
received biometric signal with a biometric signature contained in
physical memory of the cellular telephone; and in the case that the
matching is successful, configuring a proximity circuit provided by
the cellular telephone to transmit a secure signal conveying
information to the system when the proximity circuit is placed
within range of a radio frequency field emitted by the system;
wherein the secure transaction is performed based on the
information conveyed within the transmitted secure signal in order
to adjust a financial account associated with the matched signature
by an amount provided by the system; wherein the database of
biometric signatures is maintained using the cellular telephone by
a user corresponding to the biometric signature contained in memory
of the cellular telephone; and wherein the biometric sensor of the
cellular telephone was used to biometric signature contained in
memory of the cellular telephone.
16. The method of claim 15, wherein the biometric sensor is
configured to receive a biometric signal in one of the following
forms: retinal pattern, iris pattern, face pattern, and palm
configuration.
17. The method of claim 15, wherein the proximity circuit is
further configured to unlock an automobile.
18. The method of claim 15, wherein the proximity circuit is
further configured to activate an automobile engine.
19. The method of claim 15, wherein said biometric sensor is
further configured to allow the user to gain access to an
application.
20. The method of claim 15, wherein said encrypted information
identifying the financial account associated with the user
comprises the number of the financial account associated with the
user.
21. The method of claim 15, wherein said encrypted information
identifying the financial account associated with the user
comprises a token generated by the cellular telephone.
22. A cellular telephone comprising: a display configured to
display information concerning at least one financial account
associated with a user; a transmitter subsystem comprising a
biometric sensor configured to authenticate the user in a database
based upon information received from the biometric sensor; a
proximity circuit including at least one coil, wherein said first
proximity circuit is configured, upon authentication of the user by
the biometric sensor, to generate a radio frequency field including
encrypted information identifying the financial account associated
with the user when the proximity circuit is placed within range of
a point-of-sale device.
23. The cellular telephone of claim 22, wherein said first
proximity circuit is further configured to unlock an
automobile.
24. The cellular telephone of claim 22, further comprising at least
one light emitting diode (LED).
25. The cellular telephone of claim 22, further comprising a second
proximity circuit including at least one coil.
26. The cellular telephone of claim 25, wherein said second
proximity circuit further comprises an inductor and a
capacitor.
27. The cellular telephone of claim 22, wherein said first
proximity circuit is configured to activate an automobile
engine.
28. The cellular telephone of claim 22, wherein said transmitter
subsystem is further configured to allow a user to gain access to
an application stored on the cellular telephone based on
information from the biometric sensor.
29. The cellular telephone of claim 22, further comprising a
processor configured to generate passwords for use by the user.
30. The cellular telephone of claim 22, further comprising at least
infrared emitter.
Description
CROSS-REFERENCE TO RELATED APPLICATIONS
[0001] This application is a continuation of U.S. patent
application Ser. No. 16/717,270, filed Dec. 17, 2019, which is a
continuation application of U.S. patent application Ser. No.
15/213,661, filed Jul. 19, 2016, now U.S. Pat. No. 10,685,353,
issued Jun. 16, 2020, which is a continuation application of U.S.
patent application Ser. No. 14/308,091, filed Jun. 18, 2014,
abandoned, which is a continuation application of U.S. patent
application Ser. No. 12/738,663, filed Apr. 22, 2010, abandoned,
which is a national stage entry of PCT/AU2008/001490, filed Oct. 8,
2008, which claims priority to AU2007905760, filed Oct. 22, 2007,
and also claims priority to AU2008900672, filed Feb. 13, 2008, the
disclosure of each of which is hereby incorporated herein in its
entirety by this reference.
TECHNICAL FIELD
[0002] The present disclosure relates to secure access systems and,
in particular, to systems for remote entry access.
BACKGROUND
[0003] FIG. 1 shows a conventional arrangement 400 for providing
secure access. A user 401 makes a request 402, as depicted by an
arrow, directed to a code entry module 403. The code entry module
403 is typically mounted on the external jamb of a secure door. The
request 402 is typically a secure code of some type that is
compatible with the code entry module 403. Thus, for example, the
request 402 can be a card number stored within a conventional
proximity card used to direct the request 402 to a code entry
module 403, e.g., a card reader. Alternatively, the request 402 can
be a sequence of secret numbers directed to a code entry module
403, i.e., a keypad. The request 402 can also be a biometric signal
from the user 401 directed to a code entry module 403, e.g., a
corresponding biometric sensor. One example of a biometric signal
is a fingerprint. Other physical attributes that can be used to
provide biometric signals include voice, retinal or iris pattern,
face pattern, palm configuration and so on.
[0004] The code entry module 403 conveys the request 402 by sending
a corresponding signal 404, as depicted by an arrow, to a
controller 405, which is typically situated in a remote or
inaccessible place. The controller 405 authenticates the security
information provided by the user 401 by interrogating a database
407 with signal 406, as depicted by an arrow. If the user 401 is
authenticated, and has the appropriate access privileges, then the
controller 405 sends an access signal 408, as depicted by an arrow,
to a device 409 in order to provide the desired access. The device
409 can, for example, be the locking mechanism of a secure door, or
can be an electronic lock on a personal computer (PC) that the user
401 desires to access.
[0005] Current systems as depicted in FIG. 1 utilize a
communication protocol called "Wiegand" for communication between
the code entry module 403 and the controller 405. The Wiegand
protocol is a simple one-way data protocol that can be modified by
increasing or decreasing the bit count to ensure uniqueness of the
protocol among different security companies, The Wiegand protocol
does not secure the information being sent between the code entry
module 403 and the controller 405.
[0006] More advanced protocols such as RS 485 have been used in
order to overcome the vulnerability of the Wiegand protocol over
long distance routes. RS 485 is a duplex protocol offering
encryption capabilities at both the transmitting and receiving
ends, i.e., the code entry module 403 and the controller 405,
respectively, in the present case. The length of the path of the
signal 404 nonetheless provides an attack point for the
unauthorized person.
[0007] Proximity cards have become a popular means for emitting the
request 402, since proximity cards are cheap, easy to use and
convenient to carry for the user 401. Typically, proximity cards
comprise an inductive circuit including an integrated circuit (IC),
a capacitor, and a coil, which are connected in series within the
card. When a proximity card 410 is placed within range of the code
entry module 403 (or "card reader"), the code entry module 403
presents a field that excites the coil and charges the capacitor,
which in turn energizes the IC on the proximity card 410. The IC
then transmits a card number stored within the IC, via the coil as
transmit antenna, to the code entry module 403. The field emitted
by the code entry module 403 for older proximity cards is typically
around 125 kHz. The field emitted by the code entry module 403 for
newer proximity cards is typically around 13.56 MHz. These newer
proximity cards are typically in the form of contactless RFID
cards, which are also known as "contactless smartcards." Proximity
cards have a communication range of 0-80 mm in most instances,
allowing the user to place the proximity card 410 within 80 mm of
the code entry module 403 in order for the card to be read by the
code entry module 403. The term "communication range" refers, in
the described example, to the distance to within which the
proximity module 126 and the code entry module 130 must be brought
in order for their respective transmit/receive antennas to be able
to achieve satisfactory communications.
[0008] Conventional proximity cards (e.g., 410) used for emitting
the request 402 may be lost by the user 401, and the lost proximity
card 410 may be used by an unauthorized person to gain the desired
access. In fact, there has been a high incidence of such fraudulent
activity with conventional proximity cards where unauthorized
persons steal the cards. As a result many users have looked to
upgrade their proximity card secure access systems with other more
secure systems. However, the cost of such up-grades is high due to
the necessity to re-wire buildings and facilities to implement the
upgrades.
BRIEF SUMMARY
[0009] It is an object of the present disclosure to substantially
overcome, or at least ameliorate, one or more disadvantages of
existing arrangements.
[0010] According to a first aspect of the present disclosure, there
is provided a transmitter for transmitting a secure access signal
to a system for providing secure access to a controlled item, the
access being dependent on information contained in the secure
access signal, the transmitter comprising: [0011] a biometric
sensor for receiving a biometric signal; [0012] a processor for
matching the biometric signal against members of a database of
biometric signatures; and [0013] enabling means for enabling an
inductive circuit, based on the matching of the biometric signal,
to transmit the secure access signal conveying the information to
the system upon the inductive circuit being placed within range of
a radio frequency field emitted by the system.
[0014] According to another aspect of the present disclosure, there
is provided a method of transmitting a secure access signal to a
system for providing secure access to a controlled item, the access
being dependent on information contained in the secure access
signal, the method comprising: [0015] receiving a biometric signal;
[0016] matching the biometric signal against members of a database
of biometric signatures; and [0017] enabling an inductive circuit,
based on the matching of the biometric signal, to transmit the
secure access signal conveying the information to the system upon
the inductive circuit being placed within range of a radio
frequency field emitted by the system.
[0018] According to still another aspect of the present disclosure,
there is provided a computer program product having a computer
readable medium having a computer program recorded therein for
transmitting a secure access signal to a system for providing
secure access to a controlled item, the access being dependent on
information contained in the secure access signal, the program
comprising: [0019] code for receiving a biometric signal; [0020]
code for matching the biometric signal against members of a
database of biometric signatures; and [0021] code for enabling an
inductive circuit, based on the matching of the biometric signal,
to transmit the secure access signal conveying the information to
the system upon the inductive circuit being placed within range of
a radio frequency field emitted by the system.
[0022] According to still another aspect of the present disclosure,
there is provided a system for providing secure access to a
controlled item, the system comprising: [0023] a database of
biometric signatures; [0024] a transmitter sub-system comprising:
[0025] a biometric sensor for receiving a biometric signal; [0026]
means for matching the biometric signal against members of the
database of biometric signatures; and [0027] means for enabling an
inductive circuit, based on the matching of the biometric signal,
to transmit a secure access signal conveying information upon the
inductive circuit being placed within range of a radio frequency
field; and [0028] a receiver sub-system comprising; [0029] means
for emitting the radio frequency field; [0030] means for receiving
the transmitted secure access signal upon the radio frequency field
being emitted; and [0031] means for providing conditional access to
the controlled item dependent upon the information.
[0032] According to still another aspect of the present disclosure,
there is provided a transmitter sub-system for operating in a
system for providing secure access to a controlled item, the system
comprising a database of biometric signatures, a receiver
sub-system comprising means for emitting a radio frequency field,
means for receiving a secure access signal transmitted by the
transmitter sub-system, and means for providing conditional access
to the controlled item dependent upon information conveyed in the
secure access signal; wherein the transmitter sub-system comprises:
[0033] a biometric sensor for receiving a biometric signal; [0034]
means for matching the biometric signal against members of the
database of biometric signatures; and [0035] means for enabling an
inductive circuit, based on the matching of the biometric signal,
to transmit a secure access signal conveying the information upon
the inductive circuit being placed within range of the radio
frequency field.
[0036] According to still another aspect of the present disclosure,
there is provided a receiver sub-system for operating in a system
for providing secure access to a controlled item, the system
comprising a database of biometric signatures, a transmitter
sub-system comprising a biometric sensor for receiving a biometric
signal, means for matching the biometric signal against members of
the database of biometric signatures, and means for enabling an
inductive circuit, based on the matching of the biometric signal,
to transmit a secure access signal conveying information; wherein
the receiver sub-system comprises: [0037] means for emitting a
radio frequency field; [0038] means for receiving the transmitted
secure access signal from the transmitter sub-system upon the
inductive circuit being placed within range of a radio frequency
field; and [0039] means for providing conditional access to the
controlled item dependent upon the information.
[0040] According to still another aspect of the present disclosure,
there is provided a system for providing secure access to one of a
plurality of controlled items, the system comprising: [0041] a
database of biometric signatures; [0042] a transmitter sub-system
comprising: [0043] a biometric sensor for receiving a biometric
signal; [0044] means for determining if the received biometric
signal matches a member of the database of biometric signatures;
[0045] a plurality of proximity modules associated with the
plurality of controlled items; [0046] means for selecting one of
the plurality of proximity modules; and [0047] means for enabling,
if the received biometric signal matches a member of the database
of biometric signatures, the selected proximity module, which can
consequently transmit a secure access signal conveying information
stored in the selected proximity module upon the proximity module
being placed within range of a radio-frequency field adapted to
activate the selected proximity module; and [0048] a receiver
sub-system comprising; [0049] means for emitting the radio
frequency field adapted to activate the selected proximity module;
[0050] means for receiving the transmitted secure access signal
upon the radio frequency field being emitted; and [0051] means for
providing conditional access to the selected controlled item
dependent upon the information.
[0052] According to still another aspect of the present disclosure,
there is provided a transmitter for transmitting a secure access
signal to a system for providing secure access to one of a
plurality of controlled items, the access being dependent on
information contained in the secure access signal, the transmitter
comprising: [0053] a biometric sensor for receiving a biometric
signal; [0054] means for determining if the received biometric
signal matches a member of a database of biometric signatures;
[0055] a plurality of proximity modules associated with the
plurality of controlled items; [0056] means for selecting one of
the plurality of proximity modules; and [0057] means for enabling,
if the received biometric signal matches a member of the database
of biometric signatures, the selected proximity module, which can
consequently transmit a secure access signal conveying information
stored in the selected proximity module upon the proximity module
being placed within range of a radio-frequency field adapted to
activate the selected proximity module.
[0058] According to still another aspect of the present disclosure,
there is provided a receiver sub-system in a system for providing
secure access to one of a plurality of controlled items, the system
comprising a database of biometric signatures, a transmitter
sub-system comprising a biometric sensor for receiving a biometric
signal, means for determining if the received biometric signal
matches a member of the database of biometric signatures, a
plurality of proximity modules associated with the plurality of
controlled items, means for selecting one of the plurality of
proximity modules, and means for enabling, if the received
biometric signal matches a member of the database of biometric
signatures, the selected proximity module, which can consequently
transmit a secure access signal conveying information stored in the
selected proximity module upon the proximity module being placed
within range of a radio-frequency field adapted to activate the
selected proximity module; the receiver sub-system comprising:
[0059] means for emitting the radio frequency field adapted to
activate the selected proximity module; [0060] means for receiving
the transmitted secure access signal upon the radio frequency field
being emitted; and [0061] means for providing conditional access to
the selected controlled item dependent upon the information.
[0062] According to still another aspect of the present disclosure,
there is provided a system for performing a secure transaction, the
system comprising: [0063] a database of one or more biometric
signatures; [0064] a first subsystem comprising: [0065] a biometric
sensor for receiving a biometric signal; [0066] means for matching
the biometric signal against members of the database of biometric
signatures to thereby determine an authentication signal; and
[0067] means for generating a first password dependent upon the
authentication signal, the password being generated according to an
encryption process based on a dynamic input value, the first
password comprising an encrypted value representing funds
available; and [0068] a second sub-system comprising; [0069] means
for receiving the first password; [0070] means for determining the
funds available based on the received password; and [0071] means
for performing the transaction based on the available funds.
[0072] According to still another aspect of the present disclosure,
there is provided a first sub-system for operating in a system for
performing a secure transaction, the system comprising a database
of biometric signatures, a second sub-system comprising means for
receiving a password, and means for performing the secure
transaction based on available funds dependent upon the password,
the first subsystem comprising: [0073] a biometric sensor for
receiving a biometric signal; [0074] means for matching the
biometric signal against members of the database of biometric
signatures to thereby determine an authentication signal; and
[0075] means for generating the password dependent upon the
authentication signal, wherein the password is generated according
to an encryption process based on a dynamic input value, the first
password comprising an encrypted value representing the funds
available.
[0076] According to still another aspect of the present disclosure,
there is provided a system for performing a secure transaction over
a network using a card, the system comprising: [0077] a database of
one or more biometric signatures; [0078] a first subsystem
comprising: [0079] a biometric sensor for receiving a biometric
signal; [0080] means for matching the biometric signal against
members of the database of biometric signatures to thereby
determine an authentication signal; and [0081] means for generating
a password dependent upon the authentication signal, the password
being generated according to an encryption process based on a
dynamic input value, the first password comprising an encrypted
value representing the magnetic stripe card; and [0082] a second
sub-system comprising; [0083] means for reading the card; [0084]
means for receiving the password; [0085] means for authenticating
the received password based on the card number encrypted within
password; and [0086] means for performing the transaction based on
the authentication.
[0087] According to still another aspect of the present disclosure,
there is provided a method of transmitting a secure access signal
to a system for providing secure access to one of a plurality of
controlled items, the access being dependent on information
contained in the secure access signal, the method comprising the
steps of: [0088] receiving a biometric signal; [0089] matching the
biometric signal to a member of a database of biometric signatures;
[0090] selecting one of a plurality of proximity modules, the
selected proximity module being associated with at least one of the
plurality of controlled items; and [0091] enabling the selected
proximity module, if the received biometric signal matches a member
of the database of biometric signatures, the enabled selected
proximity module being configured for transmitting a secure access
signal conveying information stored in to the selected proximity
module upon the proximity module being placed within range of a
radio-frequency field adapted to activate the selected proximity
module.
[0092] According to still another aspect of the present disclosure,
there is provided a method for performing a secure transaction over
a network using a card, the method comprising: [0093] matching a
biometric signal against members of a database of biometric
signatures to thereby determine an authentication signal; and
[0094] generating a password dependent upon the authentication
signal, the password being generated according to an encryption
process based on a dynamic input value, the password comprising an
encrypted number representing the card; [0095] reading the card to
determine the card number from the card; [0096] authenticating a
received password based on the card number, encrypted within
password; and [0097] performing the transaction based on the
authentication.
[0098] According to still another aspect of the present disclosure,
there is provided a computer program product having a computer
readable medium having a computer program recorded therein for
transmitting a secure access signal to a system for providing
secure access to a controlled item, the access being dependent on
information contained in the secure access signal, the program
comprising: [0099] code for receiving a biometric signal; [0100]
code for matching the biometric signal to a member of a database of
biometric signatures; [0101] code for selecting one of a plurality
of proximity modules, the selected proximity module being
associated with at least one of the plurality of controlled items;
and [0102] code for enabling the selected proximity module, if the
received biometric signal matches a member of the database of
biometric signatures, the enabled selected proximity module being
configured for transmitting a secure access signal conveying
information stored in the selected proximity module upon the
proximity module being placed within range of a radio-frequency
field adapted to activate the selected proximity module.
[0103] According to still another aspect of the present disclosure,
there is provided a computer program product having a computer
readable medium having a computer program recorded therein for
performing a secure transaction over a network using a card, the
program comprising: [0104] code for matching a biometric signal
against members of a database of biometric signatures to thereby
determine an authentication signal; and [0105] code for generating
a password dependent upon the authentication signal, the password
being generated according to an encryption process based on a
dynamic input value, the password comprising an encrypted number
representing the card; [0106] code for reading the card to
determine the card number from the card; [0107] code authenticating
a received password based on the card number encrypted within
password; and [0108] code for performing the transaction based on
the authentication.
[0109] Other aspects of the present disclosure are also
disclosed.
BRIEF DESCRIPTION OF THE DRAWINGS
[0110] Some aspects of the prior art and one or more embodiments of
the present disclosure are described with reference to the
drawings, in which:
[0111] FIG. 1 shows a conventional arrangement for providing secure
access;
[0112] FIG. 2 is a functional block diagram of a system for
providing secure access according to an exemplary embodiment of the
present disclosure;
[0113] FIG. 3 shows an example of a method of operation of a
transmitter sub-system of the system of FIG. 2;
[0114] FIG. 4 shows an example of a method of operation of a
receiver sub-system of the system of FIG. 2;
[0115] FIG. 5A shows an example of a method of operation of the
transmitter sub-system of FIG. 2 where the IC is a smart card
chip;
[0116] FIG. 5B shows an example of a method of operation of the
receiver sub-system of FIG. 2 where the IC is a smart card
chip;
[0117] FIG. 6 is a schematic block diagram of the system in FIG.
2;
[0118] FIGS. 7A and 7B show an alternate arrangement for enabling
the proximity module in FIG. 2;
[0119] FIG. 8 shows how the secure access system of FIG. 2 can
support multiple selectable proximity modules;
[0120] FIG. 9 shows an example of a method of operation of the
arrangement of FIG. 8;
[0121] FIG. 10 shows an example of a method of making an online
payment using the arrangement of FIG. 8;
[0122] FIG. 11 is a functional block diagram of a general purpose
computer system upon which the method of FIG. 10 may be
implemented;
[0123] FIG. 12 shows an example of a method of debiting an amount
of funds from an account stored within the transmitter sub-system
of FIGS. 2 and 8;
[0124] FIG. 13 shows how the secure access system of FIG. 2 can
support one or more conventional proximity modules according to
another embodiment; and
[0125] FIG. 14 shows an example of a method of performing a secure
transaction using the arrangement of FIG. 13.
DETAILED DESCRIPTION
[0126] It is to be noted that the discussions contained in the
"Background" section relating to prior art arrangements relate to
discussions of documents or devices that form public knowledge
through their respective publication and/or use. Such should not be
interpreted as a representation by the present inventor(s) or
patent applicant that such documents or devices in any way form
part of the common general knowledge in the art.
[0127] Where reference is made in any one or more of the
accompanying drawings to steps and/or features that have the same
reference numerals, those steps and/or features have for the
purposes of this description the same function(s) or operation(s),
unless the contrary intention appears.
[0128] FIG. 2 is a functional block diagram of a system 100 for
providing secure access according to the exemplary embodiment. A
user 101 makes a request 102, as depicted by an arrow, to a
biometric module 103. The biometric module 103 includes a biometric
sensor 121 and the request 102 takes the form of a biometric signal
that corresponds to the nature of the sensor 121 in the module 103.
In the embodiments described herein, the biometric sensor 121 in
the module 103 is a fingerprint sensor and the request 102
typically takes the form of a thumb press on a sensor panel (not
shown) on the module 103. Alternatively, the biometric sensor 121
may be responsive to one or more of voice, retinal pattern, iris
pattern, face pattern and palm configuration.
[0129] The module 103 interrogates a user ID database 105 as
communication 104, depicted by an arrow. Thus, for example, if the
request 102 is the thumb press on the biometric sensor panel 121
then the user database 105 contains one or more members in the form
of biometric signatures for authorized users against which the
request 102 can be authenticated. If the identity of the user 101
is authenticated successfully, then the biometric module 103 sends
a signal 106 to a controller 107. Upon receiving the signal 106,
the controller 107 sends a signal 112, as depicted by an arrow, to
a switch module 113 comprising a "normally open" switch 127. Any
suitable mechanical or electronic (e.g., semiconductor) switch may
be used to implement the switch 127.
[0130] As seen in FIG. 2, the switch module 113 is connected to a
proximity module 126. The proximity module 126 comprises an
inductive circuit formed from an IC 128, a coil 129 and a capacitor
131, which are connected in series. The IC 128 has information in
the form of a unique card number stored within a memory of the IC
128. The switch 127 of the switch module 113 is connected in series
with the IC 128, the coil 129 and the capacitor 131 of the
proximity module 126. Accordingly, the proximity module 126 is
similar to that used in conventional proximity cards such as those
provided by financial institutions such as VISA.RTM.,
MASTERCARD.RTM., AMERICAN EXPRESS.RTM. and so on. However, the
switch module 113 is configured to close and open the circuit
formed by the IC 128, the coil 129 and the capacitor 131, thereby
enabling and disabling the proximity module 126, respectively.
[0131] Upon receiving the signal 112 from the controller 107, the
switch module 113 closes the normally open switch 127 for a
predetermined period of time (e.g., four to five seconds). Within
this period the inductive circuit in the proximity card module 126
is enabled and may be placed by the user 101 within range of a
radio frequency field being emitted by a code entry module 130. The
field emitted by the code entry module 130 excites the coil 129 and
charges the capacitor 131, which in turn energizes the IC 128 and
thus activates the proximity module 126. The IC 128 then transmits
a secure access signal 132, as depicted by an arrow, via the coil
as transmit antenna, to the code entry module 130. Accordingly, the
secure access signal 132 is transmitted via the inductive circuit.
The secure access signal 132 is configured for conveying
information including the card number stored within the memory of
the IC 128.
[0132] The switch 127 is preferably implemented in the form of a
flip/flop arrangement where upon receiving the signal 112 the
switch 127 will close but will automatically return to the normally
open position at the end of the predetermined period. Accordingly,
if the proximity card module 126 is not placed within the range of
the code entry module 130 within the predetermined period, then the
field emitted by the code entry module 130 will not charge the
capacitor 131 as the switch 127 has opened the circuit formed by
the IC 128, coil 129 and capacitor 131. In this instance, the user
101 again makes the request 102 in order to enable the proximity
module 126.
[0133] Upon receiving the secure access signal 132 including the
card number from the proximity card module 126, the code entry
module 130 sends a signal 108, as depicted by an arrow, including
the card number to a controller 109. The controller 109 tests the
card number received from the code entry module 130 against a
database 115 of card numbers by sending test 114, this test 114
being depicted by an arrow. If the incoming card number received
from the code entry module 130 is found to be legitimate, then the
controller 109 sends a command signal 110, as depicted by an arrow,
to a controlled item 111. The controlled item 111 can be a door
locking mechanism on a secure door, or an electronic lock (or key
circuit) on a personal computer (PC) that is to be accessed by the
user 101. Accordingly, access to the controlled item 111 is
dependent on the information (e.g., the card number) contained in
the secure access signal 132. The system 100 provides conditional
access to the controlled item 111 dependent upon the information
contained in the secure access signal 132.
[0134] It is noted that the controller 109 contains a receiver 118
that receives the signal 108 including the card number and converts
the signal 108 into a form 120, as depicted by an arrow, which the
controller 109 can use.
[0135] The biometric module 103 also incorporates at least one
mechanism for providing feedback to the user 101. This mechanism
can, for example, take the form of one or more light emitting diode
(LED) indicators 122, which can provide visual feedback 123,
depicted by an arrow to the user 101. Alternately, or in addition,
the mechanism can take the form of an audio signal provided by an
audio transducer 124 providing audio feedback 125. Similarly, the
code entry module 130 may also incorporate one or more mechanisms
for providing feedback to the user 101.
[0136] The transmitter sub-system (or transmitter) 116 in FIG. 2
falling to the left hand side, as depicted by an arrow, of a dashed
line 119 may be implemented in a number of different forms. The
transmitter sub-system 116 (or transmitter), including the
biometric module 103, the switch module 113, the user ID database
105, the controller 107 and the proximity module 126, may, for
example, be incorporated within a remote fob (which is a small
portable device carried by the user 101) or even a mobile (cell)
telephone. The biometric module 103 may be powered by an internal
battery of the fob or telephone.
[0137] Similar to the transmitter sub-system 116, the code entry
module 130, the controller 109, database 115 and the controlled
item 111 form a receiver sub-system 117 as seen in FIG. 2.
[0138] The code entry module 130 may be mounted in a protected
enclosure on the outside jamb of a secured door. In this instance,
the channel used by the signal 108 typically uses a wired medium.
However, the code entry module 130 may communicate with the
controller 109 via a wireless communication channel used by the
signal 108.
[0139] The controller 109, database 115 and controlled item 111 are
typically located in an inaccessible area such as a hidden roof
space or alternately in a suitable protected area such as an
armored cupboard. In the case that a wireless communication channel
is used by the signal 108, the location of the controller 109 is of
course consistent with reliable reception of the wireless signal
108.
[0140] In the case that the code entry module 130 communicates with
the controller 109 via a wireless communication channel, the signal
108 may be based upon rolling code. However, it is noted that this
is merely one arrangement, and other secure codes can equally be
used. Thus, for example, either of the BLUETOOTH.TM. protocols, or
the WI-FI.TM. protocols may be used.
[0141] Rolling codes provide a substantially non-replayable,
non-repeatable and encrypted radio frequency data communications
scheme for secure messaging. These codes use inherently secure
protocols and serial number ciphering techniques, which may be used
to hide clear text values required for authentication.
[0142] Rolling codes may use a different code variant each time the
transmission of the signal 108 occurs. This is achieved by
encrypting the data from the code entry module 130 with a
mathematical algorithm, and ensuring that successive transmissions
of the signal 108 are modified using a code and/or a look-up table
known to both the code entry module 130 and the receiver sub-system
117. Using this approach, successive transmissions are modified,
resulting in a non-repeatable data transfer, even if the
information from the code entry module 130 remains the same. The
modification of the code in the signal 108 for each transmission
significantly reduces the likelihood that an intruder can access
the information and replay the information to thereby gain entry at
some later time.
[0143] The biometric signature user ID database 105 is shown in
FIG. 2 to be part of the transmitter sub-system 116. The sub-system
116 may comprise a memory 1006 (see FIG. 6) containing the database
105 of biometric signatures. As described above, the transmitter
sub-system 116 including the database 105 may be implemented as a
remote fob, where the fob incorporates the biometric (e.g.,
fingerprint) authentication arrangement. However, in an alternate
arrangement, the biometric signature user ID database 105 can be
located in the receiver sub-system 117 together with the controller
109, in which case the communication 104 between the biometric
module 103 and the signature user ID database 105 can also be
performed over a secure wireless communication channel. In the
event that the secure access system 100 is being applied to
providing secure access to a PC, then the secured PC can store the
biometric signature of the authorized user in internal memory, and
the PC can be integrated into the receiver sub-system 117 of FIG.
1.
[0144] The combination of the biometric verification and proximity
module 126 in a remote fob provides a particularly significant
advantage over current proximity card systems. If the remote fob is
lost by the user 101, the lost remote fob may not be used by an
unauthorized person to gain the desired access. Further, the
security of conventional proximity card systems may be improved
without the need to upgrade existing infrastructure.
[0145] FIG. 3 shows the method 200 of operation of the transmitter
sub-system 116 of FIG. 2. The method 200 commences with a testing
step 201 in which the biometric sensor 121 in the code entry module
130 checks whether a biometric signal 102 is being received. If
this is not the case, then the method 200 is directed in accordance
with a NO arrow back to the step 201 in a loop. If, on the other
hand, the biometric signal 102 has been received, then the method
200 is directed in accordance with a YES arrow to a step 202. The
step 202 compares the received biometric signal 102 with
information in the biometric signature user ID database 105 in
order to ensure that the received biometric signal 102 is that of
the rightful user 101 of the transmitter sub-system 116.
[0146] A subsequent testing step 203 checks whether the comparison
in the step 202 yields the desired authentication. If the biometric
signature matching is authenticated, then the method 200 is
directed in accordance with a YES arrow to a step 204. In the step
204 the controller 107 sends the signal 112 to the switch module
113 to close the normally open switch 127 to allow the coil 129 to
be excited when the proximity card module 126 is placed within
range of the code entry module 130. Then at the next step 205, upon
the proximity card module 126 being placed within the field of the
code entry module 130, the coil 129 is excited and charges the
capacitor 131, which in turn energizes the IC 128. The IC 128 then
transmits secure access signal 132, i.e., the card number stored
within the IC 128, as depicted by an arrow, via the coil, to the
code entry module 130. The method 200 is then directed in
accordance with an arrow 206 back to the step 201.
[0147] Returning to the testing step 203, if the signature
comparison indicates that the biometric signal 102 is not
authentic, and has thus not been received from the proper user,
then the method 200 is directed in accordance with a NO arrow back
to the step 201. In an alternate arrangement, the NO arrow from the
step 203 could lead to a disabling step that would disable further
operation of the transmitter sub-system 116, either immediately
upon receipt of the incorrect biometric signal 102, or after a
number of attempts to provide the correct biometric signal 102.
[0148] FIG. 4 shows the method of operation of the receiver
sub-system 117 of FIG. 2. The method 300 commences with a testing
step 301 that continuously checks whether the signal 108 including
the card number has been received from code entry module 130. The
step 301 is performed by the controller 109. As long as the signal
108 is not received the method 300 is directed in accordance with a
NO arrow in a looping manner back to the step 301. When the signal
108 is received, the method 300 is directed from the step 301 by
means of a YES arrow to a step 302. In the step 302, the controller
109 compares the card number received by means of the signal 108
with one or more card numbers stored in the database 115. A
subsequent testing step 303 is performed by the controller 109. In
the step 303 if the card number received on the signal 108 is
successfully matched against a card number stored in the database
115 then the method 300 is directed in accordance with a YES arrow
to a step 304.
[0149] In the step 304 the controller 109 sends the control signal
110 to the controlled item 111 (for example, opening the secured
door). The method 300 is then directed from the step 304 as
depicted by an arrow 305 back to the step 301.
[0150] Returning to the testing step 303 if the card number
received on the signal 108 is not successfully matched against card
number stored in the database 115 by the controller 109 then the
method 300 is directed from the step 303 in accordance with a NO
arrow back to the step 301. As was described in regard to FIG. 3,
in an alternate arrangement, the method 300 could be directed, if
the card number match is negative, from the step 303 to a disabling
step that would disable the receiver sub-system 117 if the
incorrect card number where received once or a number of times.
[0151] In the exemplary embodiment described above, the IC 128
merely stores information in the form of a unique card number. In
an alternative embodiment, the IC 128 may be a smart card chip that
may be used to store one or more other values as well as the unique
card number. Such an embodiment provides particular advantages
where the transmitter sub-system 116 is being used to pay for a
service. For example, the IC 128 may further comprise a memory (not
shown) containing a "stored value" representing an amount of money
where the transmitter sub-system 116 is being used for paying the
fare on a bus or other form of public transport.
[0152] FIG. 5A shows a method 500 of operation of the transmitter
sub-system 116 of FIG. 2 where the IC 128 is a smart card chip
containing a stored value representing an amount of money, in
accordance with the alternative embodiment. The method 500
commences with a testing step 501 in which the biometric sensor 121
in the code entry module 130 checks whether a biometric signal 102
is being received. If this is not the case, then the method 500 is
directed in accordance with a NO arrow back to the step 501 in a
loop. If, on the other hand, the biometric signal 102 has been
received, then the method 500 is directed in accordance with a YES
arrow to a step 502. The step 502 compares the received biometric
signal 102 with information in the biometric signature user ID
database 105 in order to ensure that the received biometric signal
102 is that of the rightful user 101 of the transmitter sub-system
116.
[0153] A subsequent testing step 503 checks whether the comparison
in the step 502 yields the desired authentication. If the biometric
signature matching is authenticated, then the method 500 is
directed in accordance with a YES arrow to a step 504. In the
subsequent step 504 the controller 107 sends the signal 112 to the
switch module 113 to close the normally open switch 127 to allow
the coil 129 to be excited when the proximity module 126 is placed
within range of the code entry module 130. Then at the next step
505, upon the proximity module 126 being placed within the field of
the code entry module 130, the coil 129 is excited and charges the
capacitor 131, which in turn energizes the IC 128. The IC 128 then
transmits secure access signal 132, i.e., the card number stored
within the IC 128, as depicted by an arrow, via the coil, to the
code entry module 130.
[0154] At the next step 506, the proximity module 126 receives a
signal 133, as depicted by an arrow, from the code entry module
130. In the described arrangement, the signal 133 is received via
the coil 129 acting as a receive antenna. Then at the next step
507, the IC 128 decrements the stored value by a predetermined
amount. This predetermined amount may represent the fare for a trip
on a bus, for example. In another alternative embodiment, the
signal 133 received from the code entry module 130 may include a
value indicating an amount that needs to be decremented from the
stored value in step 507. In this instance, the IC 128 decrements
the stored value by the amount represented by the value received
from the code entry module 130. Accordingly, the stored value is
decremented by an amount (i.e., either predetermined or variable)
depending on the information (such as the card number) contained in
the secure access signal 132 and the proximity module 126 never has
to leave the user's hand. Following step 507, the method 500 is
then directed in accordance with an arrow 508 back to the step
501.
[0155] FIG. 5B shows a method 510 of operation of the receiver
sub-system 117 of FIG. 2 where the IC 128 is the smart card chip
containing the stored value of FIG. 5A. The method 510 commences
with a testing step 511 that continuously checks whether the signal
108 including the card number has been received from code entry
module 130. The step 511 is performed by the controller 109. As
long as the signal 108 is not received the process 510 is directed
in accordance with a NO arrow in a looping manner back to the step
511. When the signal 108 is received, the method 510 is directed
from the step 511 by means of a YES arrow to a step 512. In the
step 512, the controller 109 compares the card number received by
means of the signal 108 with the card numbers stored in the
database 115. A subsequent testing step 513 is performed by the
controller 109. In the step 513 if the card number received on the
signal 108 is successfully matched against a card number stored in
the database 115 then the method 510 is directed in accordance with
a YES arrow to a step 514. In the step 514, the controller 109
sends a signal 134, as represented by an arrow in FIG. 2, to the
code entry module 130 indicating that the card number was
successfully matched.
[0156] In the alternative embodiment of FIG. 5A, the amount by
which the stored value should be decremented (i.e., the amount of
the fare) is predetermined. However, in one arrangement, the amount
by which the stored value should be decremented may be variable
(e.g., where the fare is variable). In this instance, the signal
134 may include a value representing the value of the fare.
[0157] At step 515, if the code entry module 130 determines that
the stored value is more than the fare, then the method 510 is
directed by a YES arrow to a step 516. The code entry module 130
may read a particular memory address in the IC 128 to determine if
the stored value is more than the fare.
[0158] At step 516, the code entry module 130 sends the signal 133
to the proximity module 126 to indicate that the stored value
should be decremented by the predetermined amount. As described
above, the signal 133 may include a value indicating an amount that
needs to be decremented from the stored value. At step 516, the
code entry module 130 may also send a further signal to the
controller 109, which in turn sends a signal 110 to the controlled
item 111. In this instance, the controlled item may merely produce
an audible tone indicating that the fare has been paid.
Alternatively, the controlled item 111 may open a gate or enable a
turnstile. The method 510 is then directed from the step 516 as
depicted by an arrow 517 back to the step 511.
[0159] Returning to the testing step 513 if the card number
received on the signal 108 is not successfully matched against card
number stored in the database 115 by the controller 109 then the
method 510 is directed from the step 513 in accordance with a NO
arrow back to the step 511. In this instance, the controller 109
may send a signal 110 to the controlled item 111, which then sounds
an audible alert to indicate that the fare has not been paid.
[0160] Returning to the testing step 515, if the code entry module
130 determines that the stored value is less than the fare, then
the process 510 is directed from the step 515 in accordance with a
NO arrow back to the step 511. Again, in this instance, the
controller 109 may send a signal 110 to the controlled item 111,
which then sounds an audible alert to indicate that the fare has
not been paid.
[0161] In the embodiment of FIGS. 5A and 5B, the code entry module
130 may include a liquid crystal display (LCD) screen (not shown)
for providing feedback to the user 101. In this instance, at step
515, the code entry module 130 may display the amount of the fare
as well as the amount of the stored value representing the
remaining amount of money on the proximity module 126.
[0162] The transmitter sub-system 116 as described with reference
to FIGS. 5A and 5B may also be configured to enable value to be
added to the stored value. For example, a cash station similar to a
train ticket vending machine may be configured with a card reader
similar to the code entry module 130. In this instance, upon
entering an amount of money into the vending machine (e.g., via a
note collector) and providing a biometric request to the biometric
sensor 121, the proximity module 126 may be placed within the field
of the card reader module 130 of the vending machine. The card
reader module 130 may then send a signal to proximity module 126
indicating the value of the money entered into the vending machine
and the corresponding amount by which the stored value is to be
incremented.
[0163] The transmitter sub-system 116, including the switch module
113 and the proximity module 126, may also include an LCD screen
(not shown) for providing feedback to the user 101. The LCD screen
may be used for displaying information, such as the stored value,
stored on the transmitter sub-system 116. In this instance, at step
507 of the method 500, the LCD of the transmitter sub-system 116
may display the amount of the fare as well as the amount of the
stored value representing the remaining amount of money stored in
the IC of the proximity module 126. In this instance, the LCD and
the IC 128 included in the transmitter sub-system 116 may be
powered by a battery (e.g., a battery incorporated within the
remote fob). In this instance, the user 101 may determine the
amount of money remaining on the transmitter sub-system 116 by
presenting a biometric request. After the biometric has been
authenticated in the manner described above, the amount of the
stored value may be displayed on the LCD.
[0164] The IC 128 may also be used to store personal details,
health records, account balances, personal identification numbers
(PIN) and/or other pertinent data. Again, after a biometric has
been authenticated in the manner described above, the personal
details, medical records, account balances and/or PIN may be
displayed on the LCD.
[0165] The IC 128 may also be used to store audit trail information
so that a record is kept of the date and time that the user 101
attempted to gain access to the controlled item 111.
[0166] As will be described in detail below, the ICs such as the IC
128 may also be used to generate a one-time dynamic password for
use in online banking applications or the like. If the identity of
the user 101 is authenticated successfully upon the user presenting
a particular biometric (e.g., an index finger), as described above,
then the biometric module 103 sends the signal 106 to the
controller 107. The controller 107 may then access a key stored in
a key database (not shown) and generate a one-time password using
the key and the current time, which the controller 107 determines
from a clock (not shown). The password may be displayed on the LCD.
The password may be generated using the RSA encryption algorithm.
However, any suitable encryption algorithm may be used (e.g., Data
Encryption Standard (DES), Blowfish, International Data Encryption
Algorithm (IDEA)). The user may then provide the generated password
read from the LCD to an authentication server via a personal
computer and communications network (see FIG. 11) in order to make
an online banking transaction, for example.
[0167] The transmitter sub-system 116 of any of the described
embodiments may be used in automotive applications where the
controlled item 111 is the central locking of a car. The controlled
item 111 may also activate or deactivate an engine immobilizer.
[0168] The transmitter sub-system 116 of any of the embodiments
described may also be used in resort areas, hotels, theme parks or
the like. In this instance, the internal operators of the resort
areas, hotels and theme parks may issue the transmitter sub-system
116 incorporated within a remote fob, for example, to the user 101.
The user 101 may then operate the transmitter sub-system 116 within
the confines of the resort, hotel or theme park to enter their room
or to go on a ride, where the code entry module 130 is mounted on a
door jamb or near a gate, respectively.
[0169] Any suitable and secure method may be used for populating
the user ID database 105 with biometric signatures. Biometric
signatures may be added to the user ID database 105 or deleted from
the user ID database 105. For example, if a biometric signal has
been received by the biometric module 103 and the user ID database
105 in FIG. 2 is empty, then the received biometric may be treated
as an "administrator." This would be the case, for example, if the
biometric module 103 is new and has never been used, or if the user
101 has erased all the information in the database 105. The
administrator may have the ability to amend data stored, for
example, in the database 105. Another type of user may be termed an
"ordinary user" and may not have the capability to amend the data
stored in the user ID database 105.
[0170] The first user of the biometric module 103, whether this is
the user who purchases the module, or the user who programs the
module 103 after all data has been erased from the database 105,
may be automatically categorized as an administrator. This first
administrator may direct the system 100 to either accept further
administrators, or alternately to only accept further ordinary
users.
[0171] FIG. 6 is a schematic block diagram of the system 100' in
FIG. 2. The disclosed secure access methods are preferably
practiced using a computer system arrangement 100', such as that
shown in FIG. 6 wherein the processes of FIGS. 3-5B and FIGS. 9, 12
and 14 may be implemented as software, such as application program
modules executing within the computer system 100'. In particular,
the method steps for providing secure access are effected by
instructions in the software that are carried out under direction
of the respective processor modules 107 and 109 in the sub-systems
116 and 117. The instructions may be formed as one or more code
modules, each for performing one or more particular tasks. The
software may also be divided into two separate parts, in which a
first part performs the provision of secure access methods and a
second part manages a user interface between the first part and the
user. The software may be stored in a computer readable medium,
including the storage devices described below, for example. The
software is loaded into the sub-systems 116 and 117 from the
computer readable medium, and is then executed under direction of
the respective processor modules 107 and 109. A computer readable
medium having such software or computer program recorded on it is a
computer program product. The use of the computer program product
in the computer preferably effects an advantageous apparatus for
provision of secure access.
[0172] The following description is directed primarily to the
transmitter sub-system 116, however the description applies in
general to the operation of the receiver sub-system 117. The
computer system 100' is formed, having regard to the transmitter
sub-system 116, by the controller 107, input devices such as the
biometric sensor 121, output devices including the LED indicators
122, the audio transducer 124 and the switch module 113.
[0173] The controller module 107 typically includes at least one
processor unit 1005, and a memory unit 1006, for example, formed
from semiconductor random access memory (RAM) and read only memory
(ROM). The controller module 107 also includes a number of
input/output (I/O) interfaces including an audio-video interface
1007 that couples to the LED display 122 and audio speaker 124, an
I/O interface 1003 for the biometric sensor 121 and the switch
module 113. The switch module 113 is connected to the proximity
module 126.
[0174] The components 1005, 1007, 1003 and 1006 of the controller
107 typically communicate via an interconnected bus 1004 and in a
manner that results in a conventional mode of operation of the
controller 107 known to those in the relevant art.
[0175] Typically, the application program modules for the
transmitter sub-system 116 are resident in the memory 1006 iROM,
and are read and controlled in their execution by the processor
1005. Intermediate storage of the program and any data fetched from
the biometric sensor 121 and a network, for example, may be
accomplished using the RAM in the memory 1006. In some instances,
the application program modules may be supplied to the user encoded
into the ROM in the memory 1006. Still further, the software
modules can also be loaded into the transmitter sub-system 116 from
other computer readable media (e.g., over a communications
network). The term "computer readable medium" as used herein refers
to any storage or transmission medium that participates in
providing instructions and/or data to the transmitter sub-system
116 for execution and/or processing. Examples of storage media
include floppy disks, magnetic tape, CD-ROM, a hard disk drive, a
ROM or integrated circuit, a magneto-optical disk, or a computer
readable card such as a PCMCIA card and the like, whether or not
such devices are internal or external of the transmitter sub-system
116. Examples of transmission media include radio or infra-red
transmission channels as well as a network connection to another
computer or networked device, and the Internet or Intranets
including e-mail transmissions and information recorded on Websites
and the like.
[0176] FIGS. 7A and 7B show an alternate arrangement for enabling
the proximity module in FIG. 2. FIG. 7A shows the proximity
arrangement of FIG. 2, in which the control signal 112 from the
controller 107 of the transmitter sub-system 116 is used to control
the switch module 113. When the switch 127 is open, the series
circuit comprising the IC 128, the coil 129 and the capacitor 131
is open, and thus the proximity module 126 is disabled and cannot
operate when it is brought into the field emitted by the code entry
module 130. When the switch 127 is closed, the series circuit
comprising the IC 128, the coil 129 and the capacitor 131 is
closed, and thus the proximity module 126 is enabled and can
perform its designated functions when brought into the field
emitted by the code entry module 130. In this arrangement, the
control signal 112 can be a simple is binary signal, in which, for
example, one voltage level can cause the switch 127 to be in an
open state, and another voltage level can cause the switch 127 to
be in an open state.
[0177] FIG. 7B shows an alternate arrangement 702 in which a
proximity module 704 has a series circuit comprising an IC 705, a
coil 707 and a capacitor 706 that is permanently closed, and in
this arrangement, a control signal 703 controls the operation of
the IC 705 directly. In this arrangement, the control signal can in
one example comprise a secure encrypted communication session,
using multiple layers of security if desired, between the
controller 107 (see FIG. 2) and the IC 705. In another simpler
arrangement, the control signal 703 can be a simple binary signal
that merely enables or disables the operation of the IC 705. Upon
receiving the signal 112 from the controller 107, the IC 705
remains enabled for a predetermined period of time (e.g., four to
five seconds). Within this period the proximity module 704 is
enabled and may be placed by the user 101 within range of a radio
frequency field being emitted by a code entry module 130. Although
the arrangement of FIG. 7B shows one series circuit for each IC
705, other arrangements may be used that share some of the
components such as the coils and/or the capacitors.
[0178] The communication between the controller 107 and the IC 705
can be implemented using data and/or address bus communications,
via a direct bus connection between the controller 107 and the IC
705. Alternatively, the communication between the controller 107
and the IC 705 can be implemented using a contactless communication
interface comprising the series circuit of the IC 705, the coil 707
and the capacitor 706. The contactless communication interface
between the controller 107 and the IC 705 is a software interface.
Any suitable contactless communication interface may be used. In
one example, the controller 107 may communicate with the IC 705
according to the Sliding Window Protocol (SWP).
[0179] FIG. 8 shows how the secure access system of FIG. 2 can,
using the proximity module arrangement of FIG. 7B, support multiple
selectable proximity modules (e.g., 806A and 806B). FIG. 8 shows
the biometric module 103 of FIG. 2 together with the audio
transducer 124, the LED indicators 122 and the biometric sensor
121. In this arrangement 800, however, the biometric module 103
also has a set of control selectors 801 designated selectors 1-4 in
the present example for selecting one or more control functions. A
greater or smaller number of selectors can be incorporated as
desired. Furthermore, the module 103 has an LCD display 802.
[0180] According to this arrangement, once the identity of the user
101 is authenticated successfully, the user may select one of the
set of the control selectors 801 such as the selector designated
"1." In response to such a selection, the biometric module 103
sends a signal 803 to the controller 107. Upon receiving the signal
803, the controller 107 sends a control signal on a control line
807A to a corresponding proximity module 806A. Upon receiving the
control signal from control line 807A from the controller 107, the
proximity module 806A remains enabled for a predetermined period of
time (e.g., four to five seconds). Within this period the proximity
module 806A is enabled and may be placed by the user 101 within
range of a radio frequency field being emitted by a code entry
module 130. Again, the biometric module 103, the controller 107 and
the plurality of the proximity modules (e.g., 806A, 806B) may, for
example, be incorporated within a remote fob or mobile telephone,
together with the switch module 113 and the user ID database 105.
The arrangement 805 of FIG. 8 can be used to incorporate a number
of different ICs (e.g., 705A, 705B) (being the service provider
specific elements in the corresponding proximity modules) in a
single transmitter sub-system 116, each IC and associated proximity
module being associated with a different service provider (such as
VISA.RTM., MASTERCARD.RTM., AMERICAN EXPRESS.RTM. and so on). This
arrangement would enable the user 101, after biometric
authentication, to select the appropriate service provider by
pressing the appropriate selector in the set of control selectors
801, and to then bring the corresponding proximity module 806A into
the field emitted by the code entry module 130. In fact, all of the
proximity modules incorporated into the transmitter sub-system 116
are being brought into the field emitted by the code entry module
130 however only the desired proximity module 806A is enabled by
the signal 803.
[0181] The LCD display 802 can show the user 101 which service
provider has been selected, thereby confirming to the user that the
desired service provider has been selected. The LCD display 802 can
be provided before the user places the proximity module (e.g.,
806A) into the field emitted by the corresponding code entry module
130.
[0182] In a more general case, the various selectable proximity
modules (e.g., 806A, 806B) can be associated with service providers
from diverse fields, namely financial, security, automotive,
individual identification and so on, and can have different
interfaces with the respective code entry modules such as 130.
Therefore, the ICs 705A, 705B configured within the proximity
modules 806A, 806B may include a combination of ICs such as the
known HID.TM. proximity IC, iCLASS IC, and MIFARE.TM. IC, each for
a distinct application and using a different interface. The user
101 may select the desired application using the set of control
selectors 801, and optionally can receive feedback on the selection
via the LCD display 802.
[0183] Security and payment functionality may be combined using one
or more iterations of authentication and selection, thus
facilitating operation with existing infrastructure. For example,
the proximity module 806A and corresponding IC 705A may contain a
stored unique number for use in secure access and the proximity
module 806B and corresponding IC 705B may contain a stored value
for use in making cashless payments as described above.
[0184] The controller 107 may also be configured to generate a
one-time dynamic "time-dependent" or "event-synchronous" password.
Upon authentication of a user's biometric as described above with
reference to FIG. 3, the controller 107 may access a key stored in
a database (e.g., the database 115). The controller 107 may then
generate a one-time time-dependent password using the key and the
current time (as a dynamic input value), for example. The current
time may be determined from a computer clock (not shown) configured
within the arrangement 800 of FIG. 8. The password may be generated
using the RSA encryption algorithm or any other suitable encryption
algorithm (e.g., Data Encryption Standard (DES), Blowfish,
International Data Encryption Algorithm (IDEA)).
[0185] Accordingly, a password may be generated using the current
time as the input value to the encryption process. It is noted that
this is merely one arrangement, and other input values such as a
simple counter value or a random number may be used as with
event-synchronous tokens and asynchronous challenge/response
tokens. Further, other mathematical algorithms or codes can equally
be used to generate the one-time password. For example, the
password may be generated using a rolling code to generate a
different code variant each time the password is generated. In this
instance, successive passwords may be generated using a code and/or
a look-up table known to both the code entry module 130 and
receiver sub-system 117. Using this approach successive numbers are
modified, resulting in a non-repeatable number.
[0186] The user 101 may make a payment (e.g., a VISA.RTM. payment)
at a conventional (i.e., not using the proximity module) payment
terminal or online by selecting the appropriate control selector
801 from the set, then pressing a suitable combination of the
control selectors 801 as guided by a display on the LCD display 802
and waiting for a one-time password to be generated and shown on
the LCD display 802. The password may then be manually entered into
the keyboard of the payment terminal or personal computer. This
approach supports applications including business-to-business on
line payments through to standard contactless payments at existing
payment terminals.
[0187] FIG. 9 shows a method 900 of operation of the arrangement
800 of FIG. 8 according to one example. In the example of FIG. 9,
the user 101 generates a dynamic password using the arrangement 800
of FIG. 8. The dynamic password may then be used for making an
online payment to a business web site. In the present example, the
online payment is being made using a VISA.RTM. account. The example
provides a secure scenario as a reference to a typical transaction.
However, variations of the steps of the methods described below
including input from the user 101, biometric reads, generation of
dynamic passwords, display of current account balances, can be used
to conduct various transactions.
[0188] The method 900 of FIG. 9 may be implemented as software,
such as application program modules being controlled in their
execution by the controller 107 and being resident in the memory
1006 of the controller 107. The method 900 commences with a testing
step 901 in which the biometric sensor 121 in the code entry module
130 checks whether a biometric signal 102 is being received. If
this is not the case, then the method 900 is directed in accordance
with a NO arrow back to the step 901 in a loop. If, on the other
hand, the biometric signal 102 has been received, then the method
900 is directed in accordance with a YES arrow to a step 902. The
step 902 compares the received biometric signal 102 with
information in the biometric user ID database 105 in order to
ensure that the received biometric signal 102 is that of the
rightful user 101.
[0189] A subsequent testing step 903 checks whether the comparison
in the step 902 yields the desired authentication. If the biometric
signature matching is authenticated, then the method 900 is
directed in accordance with a YES arrow to a step 904. At step 904,
the controller 107 detects selection of one of the control
selectors 801 of the set. In the present example, the control
selector 801 "1" of the set is selected. In response to selection
of the selector "1," at the next step 905, the controller 107
displays the value, stored on one of the ICs, representing
available funds. In the present example, the IC 705A is a VISA.RTM.
IC for making VISA.RTM. card payments and comprises the stored
value. The value is displayed on the LCD display 802. In the
present example, the controller 107 displays $156.56, which
represents the balance of the user's VISA.RTM. account.
[0190] At the next step 906, if within a predetermined period of
time (e.g., 30 seconds) the controller 107 again detects selection
of the same control selector 801 (i.e., selector "1") of the set,
then the method 900 is directed in accordance with a YES arrow to a
step 907. Otherwise, the method 900 is directed in accordance with
a NO arrow to the step 901. At step 907, the controller 107
generates a dynamic password (i.e., a first dynamic password),
using the RSA encryption algorithm, as described above. The dynamic
password is displayed on the LCD display 802.
[0191] In the present example, the dynamic password generated at
step 907 is "2 3 4 9 8 7 8 9." The dynamic password will be
different each time it is generated. The dynamic password may be a
time-dependent password where the current time is used as the input
value to the encryption process. The available funds and the unique
token serial number are also preferably encrypted with the
generated password. Alternatively, the dynamic password may be an
event-synchronous password.
[0192] In accordance with the present example, the first dynamic
password generated and displayed by the controller 107 at step 907
is entered into a computer module 1101 of a computer system 1100 as
shown in FIG. 11, in order to make the online payment to the
business website. The online payment is made in accordance with a
method 1000 of making an online payment, which will be described in
detail below with reference to FIG. 10. The method 1000 may be may
be implemented using the computer system 1100, wherein the process
of FIG. 10 may be implemented as software, such as one or more
application programs executable within the computer system 1100. In
particular, the steps of method 1000 may be effected by
instructions in the software that are carried out within the
computer system 1100. The instructions may be formed as one or more
code modules, each for performing one or more particular tasks. The
software may also be divided into two separate parts, in which a
first part and the corresponding code modules performs the method
1000 and a second part and the corresponding code modules manage a
user interface between the first part and the user. The software
may be stored in a computer readable medium, including the storage
devices described below, for example. One or more portions of the
software may be stored within the computer module 1101 and also on
a remote server 1150, as will be described below. The software is
loaded into the computer system 1100 from the computer readable
medium, and then executed by the computer system 1100. A computer
readable medium having such software or computer program recorded
on it is a computer program product as described above. The use of
the computer program product in the computer system 1100 preferably
effects an advantageous apparatus for implementing the method
1000.
[0193] As seen in FIG. 11, the computer system 1100 is formed by a
computer module 1101, input devices such as a keyboard 1102 and a
mouse pointer device 1103, and output devices including a printer
1115, a display device 1114 and loudspeakers 1117. An external
Modulator-Demodulator (Modem) transceiver device 1116 may be used
by the computer module 1101 for communicating to and from a
communications network 1120 via a connection 1121. The network 1120
may be a wide-area network (WAN), such as the Internet or a private
WAN. Where the connection 1121 is a telephone line, the modem 1116
may be a traditional "dial-up" modem. Alternatively, where the
connection 1121 is a high capacity (e.g., cable) connection, the
modem 1116 may be a broadband modem. A wireless modem may also be
used for wireless connection to the network 1120.
[0194] In accordance with the present example, a server 1150
hosting a payments website (e.g., a utility website such as the
phone company or bank website) is connected to the network
1120.
[0195] The computer module 1101 typically includes at least one
processor unit 1105, and a memory unit 1106, for example, formed
from semiconductor random access memory (RAM) and read only memory
(ROM). The computer module 1101 also includes an number of
input/output (I/O) interfaces including an audio-video interface
1107 that couples to the video display 1114 and loudspeakers 1117,
an I/O interface 1113 for the keyboard 1102 and mouse 1103 and
optionally a joystick (not illustrated), and an I/O interface 1108
for the external modem 1116 and printer 1115. In some
implementations, the modem 1116 may be incorporated within the
computer module 1101, for example, within the I/O interface 1108.
The computer module 1101 also has a local network interface 1111
that, via a connection 1123, permits coupling of the computer
system 1100 to a local computer network 1122, known as a Local Area
Network (LAN). As also illustrated, the local computer network 1122
may also couple to the wide network 1120 via a connection 1124,
which would typically include a so-called "firewall" device or
similar functionality. The interface 1111 may be formed by an
ETHERNET.TM. circuit card, a wireless BLUETOOTH.TM. or an IEEE
802.11 wireless arrangement.
[0196] The interfaces 1108 and 1113 may afford both serial and
parallel connectivity, the former typically being implemented
according to the Universal Serial Bus (USB) standards and having
corresponding USB connectors (not illustrated). Storage devices
1109 are provided and typically include a hard disk drive (HDD)
1110. Other devices such as a floppy disk drive and a magnetic tape
drive (not illustrated) may also be used. An optical disk drive
1112 is typically provided to act as a non-volatile source of data.
Portable memory devices, such optical disks (e.g., CD-ROM, DVD),
USB-RAM, and floppy disks, for example, may then be used as
appropriate sources of data to the computer system 1100.
[0197] The components 1105 to 1113 of the computer module 1101
typically communicate via an interconnected bus 1104 and in a
manner which results in a conventional mode of operation of the
computer system 1100 known to those in the relevant art. Examples
of computers on which the described arrangements can be practiced
include IBM-PC's and compatibles, Sun Sparcstations, APPLE MAC.TM.
or alike computer systems evolved therefrom.
[0198] Typically, the application program(s) implementing the
method 1000 are resident on the hard disk drive 1110 and read and
controlled in execution by the processor 1105. Intermediate storage
of such programs and any data fetched from the networks 1120 and
1122 may be accomplished using the semiconductor memory 1106,
possibly in concert with the hard disk drive 1110. In some
instances, the application programs may be supplied to the user
encoded on one or more CD-ROM and read via the corresponding drive
1112, or alternatively may be read by the user from the networks
1120 or 1122. Still further, the software can also be loaded into
the computer system 1100 from other computer readable media.
Computer readable media refers to any storage medium that
participates in providing instructions and/or data to the computer
system 1100 for execution and/or processing. Examples of such media
include floppy disks, magnetic tape, CD-ROM, a hard disk drive, a
ROM or integrated circuit, a magneto-optical disk, or a computer
readable card such as a PCMCIA card and the like, whether or not
such devices are internal or external of the computer module 1101.
Examples of computer readable transmission media that may also
participate in the provision of instructions and/or data include
radio or infra-red transmission channels as well as a network
connection to another computer or networked device, and the
Internet or Intranets including e-mail transmissions and
information recorded on Websites and the like.
[0199] The second part of the application programs and the
corresponding code modules mentioned above may be executed to
implement one or more graphical user interfaces (GUIs) to be
rendered or otherwise represented upon the display 1114. Through
manipulation of the keyboard 1102 and the mouse 1103, a user of the
computer system 1100 and the application may manipulate the
interface to provide controlling commands and/or input to the
applications associated with the GUI(s).
[0200] The method 1000 may alternatively be implemented in
dedicated hardware such as one or more integrated circuits
performing the functions or sub functions of FIG. 10. Such
dedicated hardware may include graphic processors, digital signal
processors, or one or more microprocessors and associated
memories.
[0201] The method 1000 begins at step 1010, where after receiving
the first password entered by the user 101, the method 1000
proceeds to step 1011. At step 1011, the password is transmitted by
the processor 1105 to the server 1150 hosting the payments website.
Then at the next step 1012, the server 1150 verifies the password
entered by the user 101 by generating another dynamic password and
comparing the passwords. In order to generate the password, the
server 1150 accesses a key (associated with the user 101 of the
code module 130) stored in a key database 1151 and determines the
current time from a system clock 1152. In the present example, the
key database 1151 may be configured within a hard disk drive (not
shown) of the server 1150. The server 1150 generates the password
using the key and the current time determined by encrypting a value
representing the current time, using the RSA encryption algorithm,
which is the same encryption algorithm used by the controller 107.
Also at step 1012, the server 1150 determines available funds
(i.e., $156.56) by determining the amount from the password entered
by the user 101.
[0202] Once the dynamic password is entered into the computer
module 1101 and verified by the server 1150, the user 101 makes
another request using the arrangement of FIG. 8 in order to select
the amount of funds wishing to be debited from their account. The
amount of funds selected by the user 101 is then debited from the
value stored on the IC (e.g., 705A) corresponding to their account.
FIG. 12 shows a method 1200 of debiting an amount of funds from an
account.
[0203] The method 1200 commences at step 1201, where the controller
107 detects selection of another one of the control selectors 801
of the set. In the present example, the control selector 801 "2" of
the set is selected. In response to selection of the selector "2,"
at the next step 1202, the controller 107 prompts the user 101 to
enter the amount that they wish to pay that also represents the
amount to be debited from their account (i.e., their VISA.RTM.
account).
[0204] At the next step 1203, the controller 107 determines the
amount wished to be payed based on an amount entered by the user
101 and displays this amount on the LCD display 802. The user may
enter the amount using the set of control selectors 801. For
example, the controller 107 may display a generic amount and the
user may select control selector 801 "3" of the set to increase a
displayed amount and "4" to decrease the displayed amount.
[0205] The next step 1204 is a testing step in which the biometric
sensor 121 in the code entry module 130 checks whether a biometric
signal 102 is being received. If this is not the case, then the
method 1200 is directed in accordance with a NO arrow back to the
step 1206 in a loop. If, on the other hand, the biometric signal
102 has been received, then the method 1200 is directed in
accordance with a YES arrow to a step 1205. The step 1205 compares
the received biometric signal 102 with information in the biometric
signature user ID database 105 in order to ensure that the
biometric signal received is that of the rightful user 101.
[0206] A subsequent testing step 1206 checks whether the comparison
in the step 1205 yields the desired authentication. If the
biometric signature matching is authenticated, then the method 1200
is directed in accordance with a YES arrow to a step 1207. At step
1207, the controller 107 generates a second dynamic password, using
the RSA encryption algorithm with the current time being used as
the input value to the encryption process, as described above. The
dynamic password is displayed on the LCD display 802. In the
present example, the dynamic password generated at step is "5 6 8 8
8 1 8 9." Again, the second dynamic password is a time-dependent
password. However, the second password may also be an
event-synchronous password. The amount determined at step 1203
representing the amount of funds to be payed is also encrypted
within the dynamic password. The method 1200 concludes at the next
step 1208, where the amount of funds entered by the user at step
1203 is deducted from the value stored on the IC 705A.
[0207] In accordance with the present example, the second dynamic
password generated and displayed by the controller 107 at step 1207
is entered into the computer module 1101 to complete the online
payment to the business website.
[0208] Returning to FIG. 10, at the next step 1013, after receiving
the second dynamic password entered by the user 101, the method
1000 proceeds to step 1014. At step 1014, the second password is
transmitted by the processor 1105 to the server 1150 hosting the
payments website. Then at the next step 1015, the server 1150
verifies the password entered by the user 101 by generating still
another dynamic password and comparing the passwords as described
above. In order to generate this still further password, the server
1150 accesses the key (associated with the user 101 of the code
entry module 130) stored in the key database 1151 and determines
the current time from the system clock 1152, as described above.
Also at step 1015, the server 1150 determines the amount to be paid
by decrypting the amount from the second password entered by the
user 101.
[0209] The method 1000 concludes at the next step 1016, where the
payment is processed by the server 1150. The payment transaction
can be reconciled to the customer in a monthly statement.
[0210] Variations on the methods described above can also be used
for secure access, for example, to gain entry to a building. For
example, the dynamic password generated at step 907 may be entered
into a keypad located on a door jamb and being connected to a
building security system. In this instance, rather than
representing an account balance, the stored value encrypted within
the dynamic password can be a personal identification number (PIN)
stored with the transmitter sub-system 116. The building security
system then verifies the password entered by the user 101 by
generating another dynamic password and comparing the passwords.
Thus, the PIN used for secure access is enhanced through the need
of a biometric signature.
[0211] The dynamic passwords generated at step 907 may have other
user information encrypted within the dynamic password including a
serial number related to the transmitter sub-system (configured
within a telephone or fob), time of access, type of account and
validated finger (e.g., middle finger).
[0212] The arrangement of FIG. 8 comprises multiple selectable
proximity modules (e.g., 806A, 806B) each configured in accordance
with the arrangement of FIG. 7B. In an alternative arrangement, one
antenna (e.g., 707) may be associated with multiple ICs (e.g., all
connected in parallel with the antenna). Again, in this instance,
each of the ICs may be separately selectable using separate control
lines (e.g., 807A, 807B).
[0213] FIG. 13 shows how the secure access system of FIG. 2 can,
using one or more conventional proximity modules, be used to
perform a secure transaction. FIG. 13 shows the biometric module
103 of FIG. 2 together with the audio transducer 124, the LED
indicators 122 and the biometric sensor 121, and a set of control
selectors 1301 designated selectors 1-4 in the present example for
selecting one or more control functions. The biometric module 103
also has an LCD display 802. The arrangement 1300 also has a
proximity module 1306. The proximity module 1306 comprises the coil
129, the capacitor 131 and an IC 1307.
[0214] In the arrangement 1300 of FIG. 13, the proximity module
1306 is configured to be constantly available to be activated, upon
being placed within the field of the code entry module 130 in a
conventional manner, without the need for a control signal such as
the signal 803. That is, no biometric verification is required in
the arrangement 1300 in order to activate the proximity module
1306.
[0215] The arrangement 1300 may also be used to perform secure
transactions or the like, including an online transaction. Rather
than the biometric verification being needed in order to activate
the proximity module 1306, the generation of a dynamic password, as
described above, may be utilized to provide an additional security
layer, as will be described below.
[0216] A method 1400 of performing a transaction using the
arrangement 1300 of FIG. 13 will now be described with reference to
FIG. 14. The method 1400 begins with a testing step 1401 in which
the biometric sensor 121 in the code entry module 130 checks
whether a biometric signal 102 is being received. If this is not
the case, then the method 1400 is directed in accordance with a NO
arrow back to the step 1401 in a loop. If, on the other hand, the
biometric signal 102 has been received, then the method 1400 is
directed in accordance with a YES arrow to a step 1402. The step
1402 compares the received biometric signal 102 with information in
the user ID database 105 in order to ensure that the received
biometric signal 102 is that of the rightful user 101.
[0217] A subsequent testing step 1403 checks whether the comparison
in the step 1402 yields the desired authentication. If the
biometric signature matching is authenticated, then the method 1400
is directed in accordance with a YES arrow to a step 1404 where the
match is indicated to the user 101 on the LCD display 802. Also at
step 1404, the controller 107 detects selection of one of the
control selectors 801 of the set. In the present example, the
control selector 801 "1" of the set is selected by the user 101. In
response to selection of the selector "1," at the next step 1405,
the controller 107 generates a dynamic password, using the RSA
encryption algorithm, as described above, and displays the dynamic
password on the LCD display 802. The dynamic password is generated
based on a card number (associated with the user) stored on the IC
1307. In the present example, the dynamic password generated at
1405, is entered into a keypad or the like (not shown) associated
with the code entry module 130. The card number may be encrypted
within the dynamic password.
[0218] Then at the next step 1406, upon the proximity module 1306
being placed within the field of the code entry module 130, the
coil 129 is excited and charges the capacitor 131, which in turn
energizes the IC 1307. The IC 1307 then transmits signal 1332, as
depicted by an arrow, the card number stored within the IC 1307,
via the proximity module 1306, to the code entry module 130. A
controller (e.g., 109) associated with the code entry module 130
then uses the card number to verify the dynamic password as
described above. In particular, the controller of the code entry
module 130 generates a dynamic password, using the RSA encryption
algorithm, using the card number, and compares the generated
password to the password entered by the user 101. Again, the
passwords generated at step 1405 and by the controller may be
time-dependent or event-synchronous.
[0219] At the next step 1406, the proximity module 1306 receives a
signal 1333, as depicted by the arrow, from the code entry module
130. Then at the next step 1407, the IC 1307 decrements the stored
value by a predetermined amount. This predetermined amount may
represent a payment for a trip on a bus, for example. In another
alternative embodiment, the signal 1333 received from the code
entry module 130 may include a value indicating an amount that
needs to be decremented from the stored value in step 1407. In this
instance, the IC 1307 decrements the stored value by the amount
represented by the value received from the code entry module 130.
Accordingly, the stored value is decremented by an amount (i.e.,
either predetermined or variable) depending on the information
(such as the card number) contained in the secure access signal 132
and the proximity module 126 never has to leave the user's hand.
Following step 1407, the method 1400 is then directed in accordance
with an arrow 1408 back to the step 1401.
[0220] Accordingly, in the example of FIGS. 13 and 14, the dynamic
password generated on the basis of a valid biometric reading, is
used to verify the user of the arrangement 1300. Although in the
example of FIGS. 13 and 14, the dynamic password was generated
first, in alternative arrangements the dynamic password may follow
or accompany a payment.
[0221] The arrangements described above, including the arrangement
1300 of FIG. 13, may also be used with automatic teller machines
(ATMs) or point of sale (POS) devices where a personal
identification number (PIN) has conventionally been used to verify
the validity of a card (i.e., magnetic stripe card or smart card)
owner. The dynamic password generated on the basis of a valid
biometric reading may be used to replace such a FIN, without
affecting a conventional transaction. For example, in the case of
an ATM transaction or electronic funds transfer point of sale
(EFTPOS) transaction, a user inserts their magnetic stripe card (or
smart card) into the ATM or swipes the card using an EFTPOS
terminal. A card number corresponding to the magnetic stripe card
is stored on the IC 1307. At the same time as inserting or swiping
their card, the user may use the arrangement 1300 described above
to generate a time-dependent or event-synchronous dynamic password
based on a valid biometric reading. Again, the card number
corresponding to the magnetic stripe card may be encrypted within
the generated password. The user then enters the generated dynamic
password into the ATM or EFTPOS terminal. The dynamic password is
then verified by a back-end host server (e.g., associated with a
bank) in the manner described above based on the card number.
[0222] The arrangements described above, including the arrangement
1300 of FIG. 13, may also be used for making an online payment.
Again, the dynamic password may be used to replace the user's
password that has conventionally been used. At the same time as
logging into a banking website, for example, the user may use the
arrangement 1300 described above to generate a time-dependent or
event-synchronous dynamic password based on a valid biometric
reading. Again, a user identification number corresponding to the
user may be encrypted within the generated password. The user then
enters the generated dynamic password into a personal computer. The
dynamic password is then verified by a back-end host server (e.g.,
associated with a bank) connected to the personal computer in the
manner described above based on the user's identification number
encrypted with the entered password.
[0223] The arrangements described above, including the arrangement
1300 of FIG. 13 may stop intruders from stealing credit and debit
cards for later fraudulent use in ATM and POS devices. The owner or
user of a magnetic stripe card would also require the fob or mobile
telephone with the card number corresponding to the magnetic stripe
card stored thereon. A new dynamic password could then be generated
for each ATM or EFTPOS transaction. The dynamic password overcomes
the inherent weaknesses in PIN type inputs, due to the dynamic
nature of the password and requirement to validate the owner or
user biometrics prior to generating that password. If an intruder
views a dynamic password input, they cannot replicate it a next
time as the password is constantly changing.
[0224] Although the arrangement 1300 of FIG. 13 has been described
as including the proximity module 1306, the arrangement 1300 may
not necessarily include such proximity module 1306. An arrangement
without a proximity module may also be used to perform the
transactions described above including ATM, EFTPOS and online
transactions merely by generating a dynamic password as described
above.
[0225] The arrangements described above allow biometric security to
be easily integrated with existing infrastructure for payment or
access systems. The arrangements are simple and effective for
secure proof of identity. The user does not need to remember a
code, number, name or combination. The arrangements may be used
online or offline. The described arrangements may also be used in
wireless systems, alarm panel activation, garage control, door
access, boom-gate access and anywhere long distance secure
transmissions are required.
INDUSTRIAL APPLICABILITY
[0226] It is apparent from the above that the arrangements
described are applicable to the security industry.
[0227] The foregoing describes only some embodiments of the present
disclosure, and modifications and/or changes can be made thereto
without departing from the scope and spirit of the present
disclosure, the embodiments being illustrative and not
restrictive.
[0228] The system 100 can also be used to provide authorized access
to lighting systems, building control devices, exterior or remote
devices such as air compressors and so on. The system 100 may also
be used to gain access to online applications. For example, as
described above, the transmitter sub-system 116 may be used to
generate a one-time dynamic password for use in online banking
applications or the like. The concept of "secure access" is thus
extendible beyond mere access to restricted physical areas.
[0229] Although the present specification has described
communication between the transmitter sub-system 116 and the
receiver sub-system being performed using RF, other communication
modes such as capacitive coupling or infra-red could also be
used.
[0230] The arrangements described above may comprise a "duress" or
"alarm" feature. This feature may be activated using a different
predetermined biometrics. For example, typically the user may
present a particular finger (e.g., their thumb) for verification
prior to enabling the proximity module (e.g., 126) or generating a
dynamic password. If the valid user is under duress by an intruder,
the valid user can use an alternate finger (e.g., their index
finger) to enable the proximity module and/or generate a dynamic
password, for example. Use of the alternate finger may
automatically activate an alarm, thereby bringing emergency
services to the situation. Alternatively, the dynamic password
generated based on the alternate finger may include an encrypted
alarm notification. In this instance, when the generated password
is entered into a keypad, keyboard or the like, an alarm will be
automatically activated by a backend controller or server, again
bringing the emergency services to the location.
[0231] Generating different dynamic passwords based on the
verification of different biometrics may also be used where
multiple access areas are selectable from a single point. For
example, the arrangements described above (e.g., the arrangement
1300) may be configured so that a user's thumb may be read and
verified, as described above, in order to generate a first dynamic
password. The first password may be entered into a keypad, for
example, to allow the user to enter a first door "1." The user may
then present a different finger (e.g., the person's index finger),
which, once verified, may result in the generation of a second
dynamic password. The second password may be entered into a keypad,
for example, to allow the user to enter a second door "2."
* * * * *