Smart card controlled internet access

• US 20040172552A1
• Filed: 03/01/2004
• Published: 09/02/2004
• Est. Priority Date: 12/15/1999
• Status: Active Grant

• Current Assignee: Clyde G. Moody Jr, Jochen E. Fischer, Ken Wilkinson, Richard C. Leinecker, Stephen L. Boyles, Troy Mcconnell
• Original Assignee: Clyde G. Moody Jr, Jochen E. Fischer, Ken Wilkinson, Richard C. Leinecker, Stephen L. Boyles, Troy Mcconnell
• Inventors: Leinecker, Richard C., Fischer, Jochen E., McConnell, Troy, Wilkinson, Ken, Boyles, Stephen L., Moody, Clyde G. Jr.
• Granted Patent: US 6,934,841 B2
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A system for customizing individual internet access includes a server that registers a user with the system, stores information pertaining to internet sites the user is authorized to access, and controls the user'"'"'s access to internet sites. A carding station is provided to enter personal identification information about the user and information regarding internet sites the user is authorized to access into the system. The carding station also generates a personal smart card for the user that includes a read only memory storing a serial number that correlates with data about the user stored in the server. An internet station is provided to allow the user to view the internet only with his or her personal smart card. While accessing the internet, the server controls the user'"'"'s access to internet sites based on whether the information stored in the server indicates that the user is authorized to access the specific internet sites that are requested to be displayed. A secure sockets layer protocol provides security for the data transferred across the internet connection.

Claims

1. A method of customizing individual internet access in a system comprising the following acts:

registration of a user with the system by entry of information about the user at a carding station;

storing in a server information on whether the user is authorized to access specific internet sites;

generating a personal smart card for the user at a carding station, the personal smart card including information that uniquely identifies the user and not including a microprocessor;

reading the personal smart card at an internet station;

identifying the user based on the information stored on the personal smart card;

controlling the user'"'"'s access to the specific internet sites based on the information stored in the server regarding whether the user is authorized to access the specific internet sites; and

displaying the internet at the internet station.

2. The method of customizing individual internet access in a system as defined in claim 1 wherein registration includes entering personal identification information about the user at the carding station.

3. The method of customizing individual internet access as defined in claim 1 wherein registration includes entering a personal identification number at the carding station, the personal identification number providing security for the personal smart card.

4. The method of customizing individual internet access as defined in claim 1 wherein registration includes entering a password at the carding station, the password providing security for the personal smart card.

5. The method of customizing individual internet access as defined in claim 1 wherein registration includes scanning a fingerprint or other biometric data of the user, the fingerprint or other biometric data providing security for the personal smart card.

6. The method of customizing individual internet access in a system as defined in claim 1 wherein registration includes entering the information on whether the user is authorized to access the specific internet sites at the carding station.

7. The method of customizing individual internet access in a system as defined in claim 1 wherein said controlling act is performed by a server.

8. The method of customizing individual internet access in a system as defined in claim 1 wherein said controlling act includes granting or denying requests from the internet station to display the specific internet sites based on the information stored in said server regarding whether the user is authorized to access the specific internet sites.

9. The method of customizing individual internet access in a system as defined in claim 1 wherein said registration act includes establishing an internet access level for the user, the access level being selected from the group consisting of an unfiltered internet access level, a filtered access level, and a restricted access level, such that the information on whether the user is authorized to access the specific internet sites includes the access level for the specific user.

10. The method of customizing individual internet access in a system as defined in claim 9 wherein said controlling act includes granting the user full access to all internet sites with the unfiltered access level.

11. The method of customizing individual internet access in a system as defined in claim 9 wherein said controlling act includes blocking the user'"'"'s access to one or more predetermined internet sites with the filtered access level.

12. The method of customizing individual internet access in a system as defined in claim 11 wherein said registration act further includes a system administrator selecting the one or more predetermined internet sites.

13. The method of customizing individual internet access in a system as defined in claim 11 wherein said registration act further includes the user or a representative of the user selecting the one or more predetermined internet sites.

14. The method of customizing individual internet access in a system as defined in claim 11 wherein said registration act further includes a third party selecting the one or more predetermined internet sites.

15. The method of customizing individual internet access in a system as defined in claim 9 wherein said controlling act includes blocking the user'"'"'s access to any internet sites that is not included in a predetermined set of approved internet sites.

16. The method of customizing individual internet access in a system as defined in claim 15 wherein said registration act further includes a system administrator selecting the one or more predetermined internet sites.

17. The method of customizing individual internet access in a system as defined in claim 15 wherein said registration act further includes the user or a representative of the user selecting the one or more predetermined internet sites.

18. The method of customizing individual internet access in a system as defined in claim 15 wherein said registration act further includes a third party selecting the one or more predetermined internet sites.

19. The method of customizing individual internet access in a system as defined in claim 1 wherein said controlling act includes reviewing the contents of a requested site and blocking the site if it contains selected material.

20. The method of customizing individual internet access in a system as defined in claim 1 wherein said generating act includes storing the information that identifies the user in a read only memory on the personal smart card.

21. The method of customizing individual internet access in a system as defined in claim 1 wherein said generating act includes taking a photograph of the user with a digital camera again, system currently is configured with a digital camera.

22. The method of customizing individual internet access in a system as defined in claim 21 wherein said generating act further includes printing the photograph on said personal smart card.

23. The method of customizing individual internet access in a system as defined in claim 1 wherein said generating act includes printing the personal smart card from a card printer.

24. The method of customizing individual internet access in a system as defined in claim 1 further comprising the act of providing a data display unit at the internet station, the data display unit selected form the group consisting of a telephone, a television, a pager, a computer terminal, and a personal digital assistant.

25. The method of customizing individual internet access in a system as defined in claim 1 wherein said reading act is performed by a card reader.

26. The method of customizing individual internet access in a system as defined in claim 1 further comprising the act of authenticating the personal smart card.

27. The method of customizing individual internet access defined in claim 26 further comprising the act of establishing a secure sockets layer protocol to provide security for data transferred across an internet connection in the authenticating act.

28. The method of customizing individual internet access defined in claim 27 further comprising the act of encrypting the data at said internet station and using hypertext transfer protocol to transfer the data between said internet station and said server.

29. The method of customizing individual internet access in a system as defined in claim 26 wherein said authenticating act includes entering a personal identification number that is associated with the personal smart card.

30. The method of customizing individual internet access in a system as defined in claim 26 wherein said authenticating act includes entering a password that is associated with the personal smart card.

31. The method of customizing individual internet access in a system as defined in claim 26 wherein said authenticating act includes verifying a fingerprint of the user.

32. The method of customizing individual internet access in a system as defined in claim 26 further comprising the act of automatically displaying a predetermined internet site when the personal smart card is removed from the card reader.

33. The method of customizing individual internet access as defined in claim 25 further comprising the act of automatically deleting internet sites viewed by the user at the internet station when the personal smart card is removed from the card reader.

34. The method of customizing individual internet access in a system as defined in claim 1 further comprising the act of authorizing or denying the user to log onto the system based on information stored in the server regarding a maximum amount of time the user may view the internet during a time interval.

40. The system that customizes individual internet access comprising a server as defined in claim 32 wherein the internet sites the user is authorized to access are selected by a system administrator.

35. A system that customizes individual internet access comprising a personal smart card, said personal smart card including:

a photograph of the user of the system; and

a read only memory that stores information identifying the user to enable the system to control the user'"'"'s internet access;

wherein said personal smart card does not include a microprocessor.

36. The system that customizes individual internet access as defined in claim 35 wherein said read only memory is configured as a storage area selected from the group consisting of an encoded memory chip, a magnetic stripe, a bar code, and machine readable indicia.

37. The system that customizes individual internet access as defined in claim 35 wherein the information that identifies the user is unique to that personal smart card and differentiates it from similar personal smart cards.

38. The system that customizes individual internet access as defined in claim 35 wherein said personal smart card is generally wallet-sized.

39. A system that customizes individual internet access comprising a server, said server including:

a registration module that registers a user with the system;

a database that stores information regarding internet sites the user is authorized to access;

an administration module that executes an active server page when an internet site is requested to be displayed; and

a deny module that grants or denies a request to display an internet site based on the information stored in said database regarding the internet sites the user is authorized to access.

41. The system that customizes individual internet access comprising a server as defined in claim 39 wherein the internet sites the user is authorized to access are selected by system by the user or a representative of the user.

42. The system that customizes individual internet access comprising a server as defined in claim 39 wherein the internet sites the user is authorized to access are selected by a third party.

43. The system that customizes individual internet access as defined in claim 39 further comprising a third party filter database that stores information regarding a set of internet sites the user is authorized to access.

44. The system that customizes individual internet access as defined in claim 43 wherein the set of internet sites are selected by a third party.

45. A system that customizes individual internet access comprising:

software adapted to be loaded on a computer that is configured to register a user with the system;

software adapted to be loaded on a computer that is configured store information regarding internet sites the user is authorized to access;

software adapted to be loaded on a computer that is configured to execute an active server page when an internet site is requested to be displayed; and

software adapted to be loaded on a computer that is configured to grant or deny a request to display an internet site based on the information stored in the system regarding the internet sites the user is authorized to access.

46. The system that customizes individual internet access comprising a server as defined in claim 45 wherein the internet sites the user is authorized to access are selected by a system administrator.

47. The system that customizes individual internet access comprising a server as defined in claim 45 wherein the internet sites the user is authorized to access are selected by the user or a representative of the user.

48. The system that customizes individual internet access comprising a server as defined in claim 45 wherein the internet sites the user is authorized to access are selected by a third party.

49. The system that customizes individual internet access comprising a server as defined in claim 45 further comprising software adapted to be loaded on a computer that is configured to store information regarding a pre-selected set of internet sites the user is authorized to access.

50. A system that customizes individual internet access comprising a server as defined in claim 49 wherein the pre-selected set of internet sites is selected by a third party.

51. A method of customizing individual internet access comprising the following acts:

registration of a user of the system and issuance of a smart card identifying the user by a unique indicia stored in a read only memory on the card;

determining whether a user is authorized to log onto the system by comparing indicia read off of a card and allegedly correlative information from a user to determine if a correlation exists; and

controlling the user'"'"'s access to specific internet sites.

52. The method of customizing individual internet access as defined in claim 51 wherein said registration act includes entering information into the system on whether the user is authorized to access specific internet sites and storing the information in the server.

53. The method of customizing individual internet access as defined in claim 51 wherein said registration act is performed by a registration module.

54. The method of customizing individual internet access as defined in claim 51 wherein said determining act is performed by a registration module.

55. The method of customizing individual internet access as defined in claim 51 wherein said determining act includes accessing whether information stored in the system indicates that the user has exceeded a maximum amount of time the user may view the internet in a time interval.

56. A method of customizing individual internet access as defined in claim 51 wherein said controlling act includes granting or denying a request from an internet station to display an internet site based on information stored in the system on whether the user is authorized to access the internet site.

57. A system that assists in customizing individual internet access comprising a carding station, said carding station including:

a registration module that enables entry of information about a user into the system to register the user with the system and has a data transfer capability for transfer of entered user information between said carding station and a server;

a camera that takes a photograph of the user; and

a card printer that generates a personal smart card not including a microprocessor for the user, the personal smart card including information that identifies the user correlated with the entered user information transferred to a server.

58. The system that customizes individual internet access as defined in claim 57 further comprising:

an imaging module that processes information related to the photograph and allows the photograph to be altered;

a printing module that processes information related to said card printer;

a carding application that process information related to the imaging module and the printing module and transfers the information to the registration module;

a card reader that reads the information stored on the personal smart card; and

a carding module that process the information related to said card reader.

59. The system that customizes individual internet access as defined in claim 57 wherein the registration module includes data entry screens that allow entry of the information about the user into the system.

60. A system that customizes individual internet access comprising:

software adapted to be loaded on a computer that is configured to enable entry of information about a user into the system and transfer information between the carding station and a server to register a user with the system;

software adapted to be loaded on a computer that is configured to process information related to a photograph taken by a camera; and

software adapted to be loaded on a computer that is configured to process information related to a card printer that prints a personal smart card for the user, the personal smart card including information that identifies the user to enable the system to control the user'"'"'s access to specific internet sites and not including a microprocessor.

61. A method of generating a personal smart card for a user of a system that customizes individual internet access, said method comprising the steps of:

entering information about the user at a data display unit;

requesting a server to register the user with the system; and

printing a personal smart card and storing information that identifies the user in a memory on the smart card not including a microprocessor to enable the system to control the user'"'"'s access to specific internet sites.

62. The method of generating a personal smart card for a user of a system that customizes individual internet access as defined in claim 100 further comprising the steps of:

taking a photograph of the user with a camera;

displaying the photograph on a data display unit; and

cropping the photograph on the data display unit;

wherein the photograph of the user is printed on said personal smart card.

63. A internet station that customizes individual internet access comprising:

a card reader that reads a read only memory and not a microprocessor on a personal smart card issued to a user to obtain information that identifies the user to control the user'"'"'s internet access;

an authentication module that verifies that the user is using his/her own personal smart card;

an internet browser that allows the user to browse the internet;

a shim that communicates with said internet browser and has a port for connection to a server to request permission from the server to display an internet site requested by the user; and

a WSOCK that communicates with said shim and displays the internet site requested by the user if permission is granted by the server.

64. The system that customizes individual internet access as defined in claim 63 wherein said internet browser is accessed by the user at a data display unit selected from the group consisting of a telephone, a television, a pager, a computer terminal, and a personal digital assistant.

65. The system that customizes individual internet access as defined in claim 63 wherein said internet station has a data entry interface to receive identifying data about a user and the authentication module verifies that the user is using his/her own personal smart card based on entry of a personal identification number entered at the data entry interface that is associated with said personal smart card.

66. The system that customizes individual internet access as defined in claim 63 wherein said internet station has a data entry interface to receive identifying data about a user and the authentication module verifies that the user is using his/her own personal smart card based on entry of a password entered at the data entry interface that is associated with said personal smart card.

67. The system that customizes individual internet access as defined in claim 63 wherein said internet station has a data entry interface to receive identifying data about a user and the authentication module verifies that the user is using his/her own personal smart card based on a fingerprint or other biometric data entered at the data entry interface that is associated with said personal smart card.

68. The system that customizes individual internet access as defined in claim 63 wherein said internet browser includes an internet browser selected from the group consisting of Netscape Navigator®

and Microsoft Internet Explorer®

.

69. The system that customizes individual internet access defined in claim 63 wherein said internet station further includes a secure sockets layer protocol that provides security for data transferred across an internet connection.

70. The system that customizes individual internet access defined in claim 69 wherein the secure sockets layer protocol includes Microsoft CrptoAPI®

.

71. The system that customizes individual internet access defined in claim 69 wherein the secure sockets layer protocol enables said internet station to encrypt the data and use hypertext transfer protocol to transfer the data.

72. A system that customizes individual internet access comprising:

software that is adapted to be loaded on a computer that is configured to control a card reader that reads a personal smart card issued to a user of the system, the personal smart card including information that identifies the user to control the user'"'"'s internet access and not including a microprocessor;

software that is adapted to be loaded on a computer that is configured to authenticate the personal smart card;

software that is adapted to be loaded on a computer that is configured to create an internet connection; and

software that is adapted to be loaded on a computer that is configured to communicate with the internet browser and request permission from the system to display an internet site requested by the user; and

software that is adapted to be loaded on a computer that is configured to display the internet site requested by the user if permission is granted from the system.

73. The system that customizes individual internet access as defined in claim 72 wherein the personal smart card is authenticated by entry of a personal identification number that is associated with the personal smart card.

74. The system that customizes individual internet access as defined in claim 72 wherein the personal smart card is authenticated by entry of a password that is associated with the personal smart card.

75. The system that customizes individual internet access as defined in claim 72 wherein the personal smart card is authenticated by verification of a fingerprint or other biometric data of the user.

76. The system that customizes individual internet access defined in claim 72 further including software configured to establish a secure sockets layer protocol that provides security for data transferred across an internet connection.

77. The system that customizes individual internet access defined in claim 72 wherein the software configured to establish the secure sockets layer protocol includes Microsoft CryptoAPI®

.

78. The system that customizes individual internet access defined in claim 72 wherein the software configured to establish the secure sockets layer protocol encrypts the data and uses hypertext transfer protocol to transfer the data.

79. A method of customizing individual internet access in a system comprising:

reading a memory and not a microprocessor on a personal smart card issued to a user of the system, to obtain information that identifies a user;

authenticating the personal smart card;

requesting a server to grant the user access to the system; and

displaying the internet via an internet browser.

80. The method of customizing individual internet access in a system as defined in claim 79 wherein said reading step is performed by a card reader and associated software

81. The method of customizing individual internet access in a system as defined in claim 79 wherein said authenticating step is based on entry of a personal identification number that is associated with the personal smart card.

82. The method of customizing individual internet access in a system as defined in claim 79 wherein said authenticating step is based on entry of a password that is associated with the personal smart card.

83. The method of customizing individual internet access in a system as defined in claim 79 wherein said authenticating step is based on verifying biometric data of the user.

84. The method of customizing individual internet access in a system as defined in claim 79 wherein said displaying step includes requesting permission from the server to display a specific internet site.

85. The method of customizing individual internet access in a system as defined in claim 79 further comprising establishing a secure sockets layer protocol to provide security for data transferred across an internet connection.

86. The method of customizing individual internet access defined in claim 85 further comprising encrypting the data and using hypertext transfer protocol to transfer the data.

87. A system that customizes individual internet access comprising:

a server that registers a user with the system, stores information regarding internet sites the user is authorized to access, and controls the user'"'"'s access to the internet sites based on the information stored in said server for the specific user;

a carding station that provides for entry of information about the user to register the user with the server;

a remote service bureau that generates a personal smart card for the user based on the information about the user stored in the server; and

an internet station that allows the user to view the internet with the personal smart card, the personal smart including information that identifies the user to enable the server to control the user'"'"'s access to the internet sites and not including a microprocessor;

wherein the information about the user stored in the server includes the information regarding internet sites the user is authorized to access.