Access control apparatus and method

• US 5,526,428 A
• Filed: 12/29/1993
• Issued: 06/11/1996
• Est. Priority Date: 12/29/1993
• Status: Expired due to Term

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Arnold, Todd W.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/175,032
• Time in Patent Office: 895 Days
• Field of Search: 380/21, 380/23-25, 340/825.31-825.34
• US Class Current: 713/159
• CPC Class Codes: G06Q 20/2295 Parent-child type, e.g. where parent has control on child rights
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An improved access control apparatus, method, and system are disclosed to enhance the security of information in cards of the type having data storage and functions which are not accessible without verification of the identity and the authority of a person requesting access. The card need not include identification information for others that may require access to information in a person'"'"'s card. Several authorization profiles are provided in a card, but there is no need that a profile be identified to any one person in order that they each may perform required tasks using or adding information in another person'"'"'s card. The identification card of a supervisor or doctor who requires access to another person'"'"'s card contains secret information Xsup identifying the supervisor or doctor as having the authority of supervisor or physician and an encryption key. The secret authorization information is encrypted and transmitted through the reader to the other person'"'"'s card where it is decrypted and compared with the X'"'"'sup secret value stored in the other person'"'"'s card. If they agree, the supervisor is permitted to perform functions authorized to be performed by supervisors in accordance with the profile for supervisors in the other person'"'"'s card. Each supervisor is identified by a supervisor'"'"'s own card using a password, PIN, or biometrics that may be changed as often as desired without recalling the cards of others for update. The authorization information is not exposed outside of a secure environment. Therefore, unlike PINs which are exposed during entry, it need not be changed or updated during the life of the card.

Claims

1. An information element comprising:

means for storing a test authorization value, said test authorization value being related for all persons having the same authority;

means for comparing said test authorization value with a trial authorization value received from an element interface;

means for allowing access to information in said information element only if said test authorization value compares positively with said trial authorization value.

2. The information element of claim 1 wherein said authorization value is a numerical value.

3. The information element of claim 1 wherein said information element is an IC card.

4. The information element of claim 3 wherein said element interface is an IC card reader.

5. The information element of claim 1 wherein said access to information is the performance of a function upon such information.

6. The information element of claim 5 wherein said function is the setting of control information in said information element.

7. The information element of claim 6 wherein said control information in said information element is a personal identification number.

8. The information element of claim 6 wherein said control information in said information element is a maximum value limit.

9. The information element of claim 1 wherein said information in said information element is medication information.

10. The information element of claim 1 wherein said information element is a personal identification card.

11. An element interface comprising:

means for receiving an identification element in communicating relationship with said interface;

means for receiving from said identification element, a trial authorization value, said trial authorization value being the same for all persons having similar identification elements and the same authority;

means for sending said trial authorization value to an information element, means for instructing said information element to perform a function in said information element, said function being performed only upon the positive correlation of said trial authorization value and a test authorization value stored in said information element.

12. The element interface of claim 11 further comprising:

means for storing said trial authorization value;

means for removing said identification element and for receiving said information element in its place.

13. The element interface of claim 12 wherein said identification element and said information element are IC cards and said element interface is an IC card reader.

14. The element interface of claim 12 further comprising means for receiving from a person, a personal identification verification value to verify the identity of a person holding said identification element.

15. The element interface of claim 14 wherein said element interface includes a computer having a keyboard, and said means for receiving said personal identification verification value is said keyboard.

16. An identification element comprising:

means preprogrammed into said identification element for storing a trial authorization value;

means for sending said trial authorization value from said identification element to an element interface, said trial authorization value being the same for all persons having similar identification elements and the same authority.

17. The identification element of claim 16 wherein said trial authorization value is a numerical value.

18. The identification element of claim 16 wherein said identification element is an IC card.

19. The identification element of claim 18 wherein said element interface is an IC card reader.

20. The identification element of claim 16 further comprising means for storing information relevant to an authorized holder of said element.

21. The identification element of claim 20 wherein said information relevant to an authorized holder of said element is medical information.

22. The information element of claim 16 wherein said identification element is a personal identification card.

23. The method of granting access to information in an information element comprising the steps of:

inserting an identification element into an element reader;

establishing a session key KS1 between a computer in said identification element and a computer controlling said reader;

computing in said identification element, a value eKS1(Xsup) of the encryption of an authorization value Xsup under said session key KS1;

sending said value eKS1(Xsup) to said computer controlling said reader;

computing in said computer controlling said reader, a value dKS1(eKS1(Xsup)) of the decryption of said value eKS1(Xsup) under said session key KS1;

removing said identification element from said reader to make way for said information element;

inserting said information element into said reader;

establishing a session, key KS2 between a computer in said information element and said computer controlling said reader;

computing in said computer controlling said reader, the value eKS2(dKS1(eKS1(Xsup))) of the encryption of the authorization value dKS1(eKS1(Xsup)) under the session key KS2;

sending said value eKS2(dKS1(eKS1(Xsup))) to said information element;

computing in said information element, the value dKS2(eKS2(dKS1(eKS1(Xsup)))) of the decryption of said value eKS2(dKS1(eKS1(Xsup))) under said session key KS2;

comparing in said computer in said information element, said value dKS2(eKS2(dKS1(eKS1(Xsup)))) with a test authorization value X'"'"'sup;

allowing execution of commands in said information element if said value dKS2(eKS2(dKS1(eKS1(Xsup)))) compares positively with said test authorization value X'"'"'sup.

24. The method of claim 23 wherein said step of allowing execution further comprises the step allowing access to information in said information element.