Personal identification badge that resets on the removal of the badge from the wearer

• US 6,778,066 B2
• Filed: 06/29/2001
• Issued: 08/17/2004
• Est. Priority Date: 06/29/2001
• Status: Expired due to Term

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Smith, Mark T
• Primary Examiner(s): Horabik, Michael
• Assistant Examiner(s): Shimizu, Matsuichiro
• Application Number:
  US09/896,569
• Publication Number:
  US 20030001722A1
• Time in Patent Office: 1,145 Days
• Field of Search: 283/74, 283/75, 283/14, 340/5.21, 340/573.1, 340/573.4, 340/572.8, 340/825.15, 340/825.17, 340/5.8, 340/5.81, 340/3.1, 235/380, 235/382, 395/187.01, 395/188.01, 455/41, 295/187.01
• US Class Current: 340/5.61
• CPC Class Codes: G06K 19/073 Special arrangements for circuits, e.g. for protecting identification code in memory protection against unauthorised use of computer memory G06F12/14
• CPC Class Codes: G06K 19/07749 the record carrier being capable of non-contact communication, e.g. constructional details of the antenna of a non-contact smart card
• CPC Class Codes: G06K 19/07798 part of the antenna or the integrated circuit being adapted for rupturing or breaking, e.g. record carriers functioning as sealing devices for detecting not-authenticated opening of containers electronic seals G09F3/03
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G08B 13/1445 with detection of interference with a cable tethering an article, e.g. alarm activated by detecting detachment of article, breaking or stretching of cable furniture, e.g. shelves for displaying merchandise, incorporating tethers to prevent theft A47F7/024, A47F5/0861
• CPC Class Codes: G08B 13/1472 with force or weight detection

Abstract

A security badge to be worn by a person seeking access to a secure system. The badge includes a data processor having a non-volatile and a volatile memory, a transceiver, and an attachment sensor. The volatile memory stores information related to the wearer'"'"'s security clearance. This information is loaded after the badge is attached to the person and the person'"'"'s identity is verified. This information is deleted from the volatile memory if the badge is removed from the wearer or subjected to tampering. The data processing system has sufficient computing power to allow the badge to execute encrypted communications with the secure system.

Claims

1. A security badge to be worn by a person, said badge comprising:

a data processor having a non-volatile memory and a volatile memory;

a transceiver for sending signals generated by said processor and receiving signals specifying operations to be carried out by said badge, said signals including access signals that are stored in the volatile memory and are developed in response to authentication of the person and that provide said person access to a secure system; and

an attachment sensor for detecting the removal of said badge from said person, said attachment sensor causing information stored in said volatile memory to be altered such that said person no longer has access to said secure system when said attachment sensor detects said removal, wherein said volatile memory stores information related to a security clearance associated with said person.

2. The security badge of claim 1 wherein said volatile memory stores information enabling the wearer of said badge to gain access to a data processing system.

3. The security badge of claim 1 wherein said badge stores a program enabling said badge to load information in said volatile memory.

4. The security badge of claim 3 wherein said attachment sensor detects the attachment of said badge to said person and, in response thereto, enables said badge to load information in said volatile memory.

5. The badge of claim 1 wherein said transceiver comprises a receiver and a transmitter for respectively receiving and transmitting optical signals.

6. The badge of claim 1 further comprising a tamper sensor for detecting an alteration in said badge that could allow the contents of said volatile memory to be read, said tamper sensor causing information stored in said volatile memory to be rendered unreadable when said tamper sensor detects said alteration.

7. The badge of claim 6 wherein said tamper sensor causes one piece of information stored in said non-volatile memory to be rendered unreadable when said tamper sensor detects said alteration.

8. The badge of claim 1 wherein said badge has low and high power modes, said processor being capable of performing at least one computation in said high power mode that cannot be performed in said low power mode, said processor detecting a first signal from said transceiver while in said low power mode and causing said badge to enter said high power mode when said first signal is detected, wherein said badge consumes more power in said high power mode than in said low power mode.

9. The badge of claim 8 wherein said processor detects a second signal from said transceiver in said low power mode and responds by sending a reply signal without leaving said low power mode.

10. The badge of claim 1 wherein said processor executes a first program in response to receiving a first signal on said transceiver and a second program in response to receiving a second signal on said transceiver.

11. The badge of claim 1 wherein said attachment sensor comprises an attachment mechanism having an open position and a closed position for securing said badge to said person in said closed position and a position sensor for detecting that said mechanism is in said open position.

12. The badge of claim 11 wherein said attachment mechanism comprises a band for encircling part of said person'"'"'s body.

13. The badge of claim 12 wherein said position sensor detects that said band includes a break.

14. The badge of claim 12 wherein said position sensor detects that said band has a length greater than a predetermined value.

15. The badge of claim 11 wherein said attachment mechanism comprises a clip for securing said badge to an article of clothing worn by said person.

16. The badge of claim 11 wherein said position sensor comprises a temperature sensor.

17. The badge of claim 11 wherein said position sensor comprises a pulse sensor for detecting the pulse of said person.

18. A security badge to be worn by a person, said badge comprising:

a data processor having a non-volatile memory and a volatile memory;

a transceiver for sending signals generated by said processor and receiving signals specifying operations to be carried out by said badge, said signals including signals that provide said person access to a secure system;

an attachment sensor for detecting the removal of said badge from said person, said attachment sensor causing information stored in said volatile memory to be altered such that said person no longer has access to said secure system when said attachment sensor detects said removal, wherein said volatile memory stores information related to a security clearance associated with said person; and

a random number generator that comprises a sensor for sensing an environmental variable that determines a random number generated by said random number generator.

19. The badge of claim 18 wherein the environmental variable sensed by the sensor comprises temperature.

20. The badge of claim 18 wherein the sensor further comprises a resistor and wherein the environmental variable corresponds to a random thermal noise signal generated by the resistor.

21. An access device adapted to be associate with a person, comprising:

a sensor operable to detect separation of the device and the person; and

a processor adapted to receive and store access signals developed in response to authentication of the person and indicating access privileges associated with the person, the processor operable to generate authentication signals from the stored access privileges and further operable to alter the generated authentication signals responsive to the sensor indicating the separation of the device from the person exceeds a threshold value.

22. The access device of claim 21 wherein the sensor comprises a sensor that detects at least one of temperature and pulse of the person.

23. The access device of claim 21 wherein the processor is operable to alter the generated authentication signals by terminating generation of the authentication signals.

24. The access device of claim 21 wherein the processor is operable to alter the generated authentication signals by erasing the stored access signals corresponding to the access privileges.

25. The access device of claim 24 wherein the processor further comprises volatile memory for storing the access signals and wherein the processor alters the stored access signals by removing power from the volatile memory.

26. The access device of claim 21 wherein the access signals include a secret code that expires after a time.

27. The access device of claim 26 wherein the secret code comprises day code that expires upon the start of the next day after the code was stored in the device.

28. The access device of claim 21 wherein the processor further comprises a transceiver for receiving the access signals and transmitting the authentication signals.

29. A method of utilizing an access device to provide a user with access to a computer system, the method comprising:

authenticating the user;

developing user access information indicating access privileges associated with the user in response to authentication of the user;

storing in the access device the user access information;

associating the device with the user;

detecting whether the access device is associated with the user;

providing the user access to the computer system according to the access privileges indicated by the access information while the device is associated with the user; and

denying the user access to the computer system when the access device is detected as not being associated with the user.

30. The method of claim 29 wherein associating the access device with the user comprises sensing at least one of temperature and pulse of the user.

31. The method of claim 30 wherein detecting whether the access device is associated with the user comprises determining if the device has been removed from the user responsive to at least one of the sensed temperature falling below a threshold value and the loss the sensed pulse.

32. The method of claim 29 wherein associating the access device with the user comprises physically attaching the device to the user.

33. The method of claim 29 further comprising:

generating a random number;

encoding the access information using the random number prior to accessing the access information.

34. The method of claim 33 further comprising:

sensing an environmental variable; and

generating the random number using the sensed environmental variable.

35. The method of claim 34 wherein the sensed environmental variable comprises at least one of temperature and thermal noise of resistor.

36. The method of claim 29 further comprising storing in the access device a secret code that expires after a time and denying the user access to the computer system when the secret code has expired.

37. The method of claim 29 wherein authenticating the user comprises at least one of performing a retinal scan on the user and performing a fingerprint scan on the user.