Method and apparatus for secure identification and verification

• US 5,058,161 A
• Filed: 10/31/1989
• Issued: 10/15/1991
• Est. Priority Date: 11/27/1985
• Status: Expired due to Term

• Current Assignee: EMC Corporation (Dell Technologies Inc.)
• Original Assignee: Security Dynamics Technologies, Inc. (Symphony Technology Group LLC)
• Inventors: Weiss, Kenneth
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): CAIN, DAVID C
• Application Number:
  US07/429,326
• Time in Patent Office: 714 Days
• Field of Search: 380/23-25, 380/28, 380/48
• US Class Current: 380/270
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/725 operating on a secure reference time value
• CPC Class Codes: G06F 7/582 Pseudo-random number generators
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G07C 1/20 Checking timed patrols, e.g. of watchman
• CPC Class Codes: G07C 9/215 the system having a variable access-code, e.g. varied as a function of time
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A method and apparatus for performing identification and/or verification at predetermined checkpoints is provided. A selected radiation, such as an RF signal or an ultrasonic signal at a predetermined frequency, is transmitted at the checkpoint. Each identifyee has a unit such as a card, badge or other token or device which detects the predetermined radiation. The unit also stores a predetermined coded value, at least a predetermined portion of which is changed at selected time intervals in accordance with an algorithm, the algorithm being such that that the value of the predetermined portion of the stored coded value at any given time is nonpredictable. In response to the detection of the selected radiation, the unit presents an indication of the current stored coded value to the checkpoint, the checkpoint responding to the predetermined coded value for identifying the identifyee of the unit. Security may be enhanced by the identifyee inputting a unique PIN at the unit which PIN is utilized in generating the nonpredicatble codes. Verification may be achieved by including a public code as part of the code which is presented from the unit which public code is not changed.

Claims

1. A personal identification system comprising:

means for transmitting a predetermined radiation;

a unit to be carried by a person to be identified, said unit containing means for detecting said predetermined radiation, means for storing a predetermined coded value, means for changing at least a predetermined portion of the coded value at predetermined time intervals in accordance with a predetermined algorithm, the algorithm being such that the value of said predetermined portion of the stored coded value at any given time is nonpredictable, and means responsive to detection of the predetermined radiation for causing an indication of a current stored coded value, which value is independent of the detected radiation, to be automatically produced in a predetermined sequence; and

means automatically responsive to the produced coded value sequence for identifying the person who is to be carrying the unit.

2. A system as claimed in claim 1 wherein said means for transmitting is an RF signal source, and wherein the detection means in the unit is responsive to said RF signal.

3. A system as claimed in claim 2 wherein said RF signal source transmits at a predetermined frequency, and wherein said detection means includes a tuned circuit which absorbs energy at said predetermined frequency.

4. A system as claimed in claim 3 wherein said coded value is stored as a plurality of binary bits, and wherein said means for causing an indication includes means responsive to said RF signal detection for causing the bits of said stored coded value to be sequentially presented, and means responsive to the presented bit of said coded value for controlling the absorption state of said tuned circuit.

5. A system as claimed in claim 3 wherein said unit includes transmission means wherein said coded value is stored as a plurality of binary bits, and wherein said means for causing an indication includes means responsive to said RF signal detection for causing the bits of said stored code value to be sequentially presented, and means responsive to the presented bit of the coded value for controlling the output from said transmission means.

6. A system as claimed in claim 1 wherein the means for identifying includes means providing a current coded value for each person on the system, means for detecting and storing the current coded value indication produced by the unit, means for comparing the stored current value indication against each provided current coded value, and means responsive to a match between a provided current coded value for an person and the stored current value indication for identifying the person.

7. A system as claimed in claim 1 wherein the system controls access to or through a checkpoint;

and

including means responsive to the identification for permitting access to the identified person.

8. A system as claimed in claim 1 wherein the system tracks the location of the person at a facility, and including a plurality of means for transmitting located at selected locations at the facility, and a means for detecting the produced indication at each of said selected locations.

9. A system as claimed in claim 1 wherein said unit contains a clock means the value of which changes at least said predetermined time intervals, said algorithm utilizing said clock value and at least a portion of the current stored coded value to generate a new nonpredictable stored coded value.

10. A system as claimed in claim 1 wherein said unit contains a keypad with selected characters which the person may utilize to key in a unique PIN code, and wherein said means for changing utilizes the keyed in PIN in generating the nonpredictable current stored coded value.

11. A system as claimed in claim 10 wherein a predetermined subset of the stored coded value is a public ID code for the person which is not changed by said means for changing;

and

wherein said means for identifying includes means responsive to the produced public ID code for providing the current nonpredictable code for the person, means for comparing the provided nonpredictable code with the produced nonpredictable code, and means responsive to a match between the two nonpredictable codes for both identifying and verifying the person.

12. A system as claimed in claim 10 including means for storing said PIN for a predetermined duration, the PIN being removed from the unit at the end of said duration.

13. A system as claimed in claim 1 including means for synchronizing said means for causing an indication to be produced and said means for identifying.

14. A system as claimed in claim 1 wherein said means for transmitting is an ultrasonic signal source, and wherein the detection means in the unit is responsive to said ultrasonic signal.

15. A method for identifying a person comprising the steps of:

transmitting a predetermined radiation;

detecting said predetermined radiation at a unit to be carried by the person to be identified, the unit storing a predetermined coded value, changing at least a predetermined portion of the coded value at predetermined time intervals in accordance with a predetermined algorithm, the algorithm being such that the value of said predetermined portion of the stored coded value at any given time is nonpredictable, and causing an indication of the current stored coded value, which value is independent of the detected radiation, to be automatically produced in a predetermined sequence in response to detection of the predetermined radiation; and

automatically identifying the person who is to be carrying the unit in response to the produced coded value sequence.

16. A method as claimed in claim 15 wherein the transmitted radiation is an RF signal, wherein said coded value is stored as a plurality of binary bits, and wherein said causing an indication step includes the steps of causing the bits of said stored coded value to be sequentially presented in response to said RF signal detection, and controlling the absorption state of a tuned circuit in response to the presented bit of said coded value.

17. A method as claimed in claim 15 wherein the transmitted radiation is an RF signal, wherein said coded value is stored as a plurality of binary bits, and wherein said causing an indication step includes the steps of causing the bits of said stored coded value to be sequentially presented in response to said RF signal detection, and controlling the output from a transmitter in the unit in response to the presented bit of the coded value.

18. A method as claimed in claim 15 wherein the identifying step includes the steps of providing a current coded value for each person on the system, detecting and storing the current coded value indications produced by the unit, comparing the stored current value indications against each provided current coded value, and identifying the person in response to a match between a provided current coded value for an identifyee and the stored current value indication.

19. A method as claimed in claim 15 wherein the system controls access to or through a checkpoint;

and

including the step of permitting the person access in response to the identification.

20. A method as claimed in claim 15 wherein the system tracks the location of the person at a facility, and including the steps of transmitting at a plurality of selected locations at the facility, and detecting the produced indication at each of said selected locations.

21. A method as claimed in claim 15 wherein said unit contains a keypad with selected characters which the person may utilize to key in a unique PIN code, and wherein said changing step utilizes the keyed in PIN in generating the nonpredictable current stored coded value.

22. A method as claimed in claim 21 wherein a predetermined subset of the stored coded value is a public ID code for the person which is not changed by said changing step;

and

wherein said identifying step includes providing the current nonpredictable code for the person in response to the produced public ID code, comparing the provided nonpredictable code with the produced nonpredictable code, and both identifying and verifying the person in response to a match between the two nonpredictable codes.