Proximity validation system and method

• US 20070023508A1
• Filed: 08/04/2006
• Published: 02/01/2007
• Est. Priority Date: 01/31/2005
• Status: Active Grant

• Current Assignee: Quadient Technologies France
• Original Assignee: George Brookner
• Inventors: Brookner, George
• Granted Patent: US 7,287,693 B2
• Time in Patent Office: Days
• US Class Current: 235/382
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: G07C 2209/64 using a proximity sensor
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence

Abstract

A gate keeping system for a user accessible resource is provided. The system has a server, a transceiver and an RFID tag. The server is communicably connected to the resource for sending commands allowing and terminating user access to the resource. The receiver is communicably connected to the server. and capable of sending an RF interrogation signal. The RFID tag is capable of sending an RF signal in response to the receiving the interrogation signal. The RFID tag has a program that embodies user unique credentials capable of providing user access to the resource. The user unique credentials represent a user associated with the tag.

Claims

1. A method for providing secure access to a workstation, comprising:

broadcasting an interrogation signal within a predetermined operation area;

if an RFID tag is within the predetermined operation area, transmitting a response signal from the RFID tag to a transceiver;

forwarding the response signal to a remote server;

comparing user credential data of the response signal to user credential data stored in a database accessed by the remote server;

if the credential data of the response signal matches the stored user credential data, sending a log-on command from the remote server to a workstation located within the predetermined operation area to enable access to the workstation.

2. The method of claim 1, wherein transmitting comprises encrypting the response signal.

3. The method of claim 1, wherein transmitting comprises signing the response signal.

4. The method of claim 3, wherein signing comprises:

generating a hash value from tag identification data using a hash function stored on the RFID tag;

combining the hash value and a tag private key to form a signature function; and

transmitting the signature function as part of the response signal.

5. The method of claim 1, wherein forwarding comprises transmitting the response signal over a network.

6. The method of claim 1, further comprising determining if a locator signal is received from the RFID tag after sending the log-on command and if not, disabling access to the workstation.

7. The method of claim 6, further comprising broadcasting additional interrogation signals within the predetermined operation space, wherein the RFID tag transmits the locator signal in response if the RFID tag is within the predetermined operation space.

8. The method of claim 7, wherein broadcasting comprises continuously broadcasting the additional interrogation signals.

9. A system for securing access to a workstation, comprising:

a transceiver for broadcasting an interrogation signal within a predetermined operation area;

an RFID tag for transmitting a response signal to the transceiver if the RFID tag is within the predetermined operation area; and

a remote server for receiving the response signal from the transceiver, the remote server comparing user credential data of the response signal to user credential data stored in a database,

wherein the remote server sends a log-on command to the workstation located within the predetermined operation area to enable access to the workstation if the credential data of the response signal matches the stored user credential data.

10. The system of claim 9, wherein the response signal is encrypted.

11. The system of claim 9, wherein the response signal is signed.

12. The system of claim 9, wherein the remote server is connected to the workstation over a network.

13. The system of claim 9, wherein the transceiver broadcasts additional interrogation signals within the predetermined operation space after the remote server sends the log-on command.

14. The system of claim 13, wherein the RFID tag transmits a locator signal in response to the additional interrogation signals if the RFID tag is within the predetermined operation space.

15. The method of claim 14, wherein the remote server disables access to the workstation if the locator signal is not received by the transceiver in response to any additional interrogation signal.

16. The method of claim 13, wherein the remote server continuously broadcasts the additional interrogation signals.