Identification verification method and system

• US 4,679,236 A
• Filed: 12/21/1984
• Issued: 07/07/1987
• Est. Priority Date: 12/21/1984
• Status: Expired due to Term

• Current Assignee: Richard E. Davies
• Original Assignee: Richard E. Davies
• Inventors: Davies, Richard E.
• Primary Examiner(s): Cangialosi, Salvatore
• Assistant Examiner(s): Lewis, Aaron J.
• Application Number:
  US06/684,918
• Time in Patent Office: 928 Days
• Field of Search: 178/22.08, 178/22.09, 178/22.16, 178/22.11, 235/379, 235/380, 235/381, 235/382
• US Class Current: 713/184
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G07C 9/21 having a variable access code
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A secure system provides identification verification by transmission of an access number, preferably a random number, from a central processor to a remote terminal. The system provides portable identification devices for use by individuals, programmed to perform specified mathematical functions on data input thereto. The user obtains the access number from a remote terminal, and provides selected digits therefrom as input to the portable device. The result of the mathematical function performed on the selected digits is transmitted to the host processor for comparison with a similar result obtained by performing the mathematical function associated with the identified user on a selected subset of digits of the access number selected in accordance with a selection pattern associated with the user. As a further step for securing operation of the system, only selected digits of the results may be provided for comparison.

Claims

1. A method of verifying identity of a user of a secure system comprising the steps of:

providing a user identifying number to the system;

providing a response number to a user;

maintaining in the system a first table of different number portions corresponding to each individual user identifying numbers;

maintaining in the system a second table of arithmetic functions corresponding to individual user identifying numbers;

inputting a user-selected portion of said response number to calculating apparatus of the system;

calculating a first result as a function of said user-selected portion of said response number;

selecting from said first table a number portion corresponding to the user-identifying number provided to the system;

selecting from said response number a portion corresponding to the number portion selected from said first table;

selecting from said second table an arithmetic function corresponding to the user-identifying number provided to the system;

operating on said selected portion of said response number with said arithmetic function selected from said second table to obtain a second result;

comparing said first and second results;

providing an output signal confirming verification of the identity of the user only if said first and second results are equal; and

activating apparatus controlled by the system to permit user access thereto only in response to said output signal.

2. The identity verification system of claim 1 wherein

said step of providing a response number comprises the step of providing a random number to the user.

3. The identity verification system of claim 2 wherein

said step of providing the user identifying number to the system comprises the further step of inputting said identifying number to a portable, user-carried, component of said system remote from a host computer of said system.

4. The identity verification system of claim 3 wherein

said step of providing said response number comprises the step of generating said random number in the host computer of said system.

5. The identity verification system of claim 2 wherein

said step of inputting a user-selected portion of the random number comprises the further step of inputting said portion to a portable, user-carried, component of said system remote from a host computer of said system.

6. The identity verification system of claim 2 wherein

said step of inputting a user-selected portion of the random number comprises the further step of inputting said portion to a portable, user-carried, component of said system preprogrammed to perform a single, predetermined function on the input portions of the random number input thereto by the user, said user-carried component being remote from said host computer.

7. The identity verification system of claim 6 comprising the further step of activating said portable component by inputting an activation code thereto, said portable component programmed for responding to input of a proper activation code by accepting the user selected number to perform the predetermined function thereon.

8. The identity verification system of claim 2 comprising the further steps of

inputting a user-selected portion of said first result to the system, and

selecting a portion of said second result for comparison with said user-selected portion of said first result, and

wherein said step of comparing said first and second results comprises the step of comparing said user-selected portion of said first result with said selected portion of said second result to provide said output signal only if said portions of said first and second results are equal.

9. The identity verification system of claim 8 wherein

said step of selecting a portion of said second result for comparison with said user selected portion comprises the step of selecting said portion of said second result in accordance with the number portion corresponding to the user identifying number in said first table.

10. The identity verification system of claim 8 comprising the further step of maintaining in the system a third table of result portions corresponding to individual user identifying numbers and wherein said step of selecting a portion of said second result for comparison with said user-selected portion comprises the step of selecting said portion of said second result in accordance with an entry in said third table.

11. The identity verification system of claim 2 wherein said system comprises a host computer and a portable, user-carried, remote component, and

wherein said step of providing said response number comprises the step of generating said random number in the portable component of the system.

12. In a limited access identification verification apparatus for authorizing access to a secure facility including

a plurality of remote access means and a host processing means having access number generating means, the improvement comprising:

means within each of said remote access means for performing a mathematical function on data input thereto to obtain a first result,

selecting means within said host processing means for selecting for each user a different subset of digits of a random number generated by said generating means, said subset being less than the whole random number, and for selecting and performing a specified mathematical function in accordance with a specified user on the selected digits of said random number to obtain a second result;

means for receiving said first and second results from said remote access means and from said selecting means; and

means for comparing said received first and second results and for providing a control signal to activate said secure facility only if said first and second results match one another, thereby authorizing access thereto only if a user successfully provides a proper user identification corresponding to a specific remote access means and if the user further selects a proper subset of digits of said random number, corresponding to said user identification, for input to said specific remote access means.

13. A limited access identification verification apparatus as recited in claim 12 wherein said means for comparing further comprises second selecting means for a specified subset of digits of said second result for said comparison, thereby further limiting authorization of access to said secured facility only to a user further selecting a proper subset of digits of said first result for provision to said comparing means.

14. A limited access identification verification apparatus as recited in claim 12 wherein said remote access means includes portable identification means programmed for performing said mathematical function on data input thereto.

15. A limited access identification verification apparatus as recited in claim 14 wherein said portable identification means includes storage for storing a plurality of mathematical functions and selecting means for selecting a specified one of said functions in accordance with a user specifying number input thereto.

16. A limited access identification verification apparatus as recited in claim 15 wherein said access number generating means includes random number generating means for providing said access numbers to the user as random numbers.

17. A limited access identification verification apparatus as recited in claim 15 wherein said storage means comprises interchangeable chip means pluggable into receiving means on said portable identification means for permitting different users to use a single portable identification means to select different subsets of digits of the access number and to perform different mathematical functions thereon.

18. In a limited access identification verification apparatus for authorizing access to a secure facility including

a plurality of remote access means and a host processing means, the improvement wherein said remote access means includes portable identification means programmed for performing said mathematical function on data input thereto and access number generating means,

means within each of said remote access means for performing a mathematical function on portions of the access number input thereto by the user to obtain a first result,

selecting means within said host processing means for selecting, for each user, a different subset of digits of a number generated by said generating means, said subset being less than the whole number, and for selecting and performing a specified mathematical function in accordance with a specified user on the selected digits of said number to obtain a second result;

means for receiving said first and second results from said remote access means and from said selecting means; and

means for comparing said received first and second results and for providing a control signal to activate said secure facility only if said first and second results match one another thereby authorizing access thereto only if a user successfully provides a proper user identification corresponding to a specific remote access means and if the user further selects a proper subset of digits of said number, corresponding to said user identification, for input to said specific remote access means.

19. A limited access identification verification apparatus for authorizing access to a secure facility as claimed in claim 18 further including a communication apparatus accessing a telecommunications network, said telecommunications network connecting said portable identification means to said host processing means, said means for comparing including means for providing access for said communication apparatus to said telecommunications network,

said portable identification means including first storage means for storing an identification number of a receiving terminal to be accessed by said communication apparatus via said telecommunication network, and second storage means for storing said access number,

signalling means for signalling said host processing means via said telecommunications network, and

means for activating said signalling means to transmit to said host the identification number of said receiving terminal, the access number generated by said generating means, the portions of the access number input by the user and portions of the first result input to said portable identification means by the user.

20. A limited access identification verification apparatus for authorizing access to a secure facility as described in claim 19 wherein said means for activating is further operable for activating said signalling means to transmit to said host an access code identifying the user.

21. A limited access identification verification apparatus for authorizing access to a secure facility as described in claim 19 wherein said signalling means comprises multifrequency tone signalling means and acoustic coupling means for coupling multifrequency tones generated thereby to said communication apparatus.