Method and Arrangement for User Validation

• US 20100268961A1
• Filed: 07/04/2008
• Published: 10/21/2010
• Est. Priority Date: 07/17/2007
• Status: Abandoned Application

• Current Assignee: Valid8 Technologies Pty Limited
• Original Assignee: Valid8 Technologies Pty Limited
• Inventors: Hammond, Michael J., Wilmot, Michael, Cole, Steven M.
• Application Number:
  US12/669,358
• Publication Number:
  US 20100268961A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2139 Recurrent verification

Abstract

A controlled access storage device includes a resource store storing two or more resources, the resource store having two or more levels of administration, wherein at least a first administration level is adapted to provide exclusive access to at least a first resource. The system includes an access control server (102) or validation terminal, an educational course server or resource server (104) including a resource database, a registration terminal (106) and fingerprint reader (110), and one or more user terminals (116) with associated user terminals fingerprint reader (118), and one or more registration terminals. The fingerprint readers has a “swipe pad” (112) with a line scanner (114) adapted to record characteristics of the fingerprint as it is swiped across the reader across. The various terminals and servers are interconnected via a communication network (120), such as the internet.

Claims

1. A controlled access storage device including a resource store storing two or more resources, the resource store having two or more levels of administration, wherein at least a first administration level is adapted to provide exclusive access to at least a first resource.

2. A storage device as claimed in claim 1, having three administration levels.

3. A device as claimed in claim 1, including a super administration level, an administration level, and a user level, wherein the super administration level has exclusive access to/control of one or more of:

resource content;

course content;

resource software;

reporting function;

reporting software;

software development kit;

administration software;

set the number of authorized users;

number of user identification parameters;

revalidation timing settings;

setting the administration level password to permit the Admin level user to enrol a user.

4. A storage device as claimed in claim 1, including an administration level having access to/control of one or more of:

user enrolment/s;

reporting mailing list;

report reception.

5. A storage device as claimed in claim 1, including a user level having access to one or more of:

user enrolment;

user validation process;

user revalidation process;

device;

device content;

access to remote server.

6. A storage device as claimed in claim 5, including encryption software adapted to encrypt the biometric information.

7. A storage device as claimed in claim 1, including a biometric characteristic reader and a biometric identification program adapted to record biometric information of a user in the storage device, the biometric information being available to be used to validate user identity.

8. A storage device as claimed in claim 1, wherein the storage device is a USB device.

9. A storage device as claimed in claim 8, wherein the resource store includes a FLASH memory.

10. A method of verifying the presence of an authorized user during an attempt to access a resource stored in a first store, the method including the steps of:

recording and storing at least one biometric characteristic of an authorized person in an authorization store together with associated used identity information;

receiving a log-in request from a user;

requesting the user to provide specified biometric information;

receiving specified biometric information from the user;

comparing the biometric information with the biometric characteristic;

if the biometric information matches the biometric characteristic, granting access to the resource store.

11. A method as claimed in claim 10, wherein, if the biometric information does not match the biometric characteristic, access to the resource store is inhibited.

12. A method as claimed in claim 10, wherein the log-in request includes user identification information.

13. A method as claimed in claim 10, wherein if the log-in request does not contain user identification information, user identification information is requested from the user on receipt of the log-in request.

14. A method as claimed in claim 10, wherein, when a user has been granted access, one or more subsequent requests for user biometric information are made.

15. (canceled)

16. An access controller adapted to mediate access between one or more user terminals and a resource terminal, the access controller including:

a memory adapted to store user registration information including user identification information and associated user specific registration biometric information;

biometric information analysis means adapted to compare registered user specific registration biometric information with request biometric information associated with an access request from a user terminal;

the controller being adapted to authorize/enable or deny/inhibit the user terminal to access at least a designated part of the resource on the basis of the comparison.

17. An access controller as claimed in claim 16, wherein the user registration information includes associated user access information.

18. An access controller as claimed in claim 16, wherein the access controller is adapted to receive user specific registration biometric information from registration means.

19. An access controller as claimed in claim 18, wherein the registration means includes a biometric scanner.

20. An access controller as claimed in claim 16, wherein the registration means includes digitizing means to convert the scanned biometric characteristic to digital format.

21-38. -38. (canceled)

39. A user authorization system utilizing fingerprint verification means and random re-validation to prevent unauthorized access of data stored in the apparatus.