Use of biometrics to provide physical and logic access to computer devices

• US 7,167,987 B2
• Filed: 08/29/2001
• Issued: 01/23/2007
• Est. Priority Date: 08/29/2001
• Status: Expired due to Term

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Angelo, Michael F.
• Primary Examiner(s): Barron, Gilberto
• Assistant Examiner(s): Brown, Christopher J
• Application Number:
  US09/942,352
• Publication Number:
  US 20030046553A1
• Time in Patent Office: 1,973 Days
• Field of Search: 713/186, 713/166, 70/78, 726/34, 726/35
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition

Abstract

Biometric sensors are used to control physical and logical access to various computer components or subsystems comprising a computer system. The biometric sensors may comprise fingerprint scanners, iris scanners or any other type of biometric sensor that can uniquely identify a person. The biometric sensors can be used to activate electromagnetic locks, which lock individual components within the system, or enabling locks which prevent devices from receiving power or being enabled (such as disk drives, network cards, etc.).

Claims

1. A computer system, comprising:

a computer component;

a biometric sensor;

a control unit coupled to said biometric sensor;

a lock coupled to and controlled by said control unit, wherein the control unit operates the lock by authenticating biometric data received from the biometric sensor; and

a registry stored in a memory accessible by said control unit, said registry including a first access code and a second access code,

wherein the lock prevents the computer component from being removed from the computer system unless the control unit authenticates biometric data received from the biometric sensor and obtains the first access code from the registry;

wherein logical access to the computer component is prevented unless the control unit authenticates biometric data received from the biometric sensor and obtains the second access code;

wherein the first access code enables physical access to the computer component, but not logical access; and

wherein the second access code enables logical access to the computer component, but not physical access.

2. The computer system of claim 1 wherein the biometric sensor comprises a fingerprint scanner.

3. The computer system of claim 1 wherein the biometric sensor comprises an iris scanner.

4. The computer system of claim 1 wherein the lock comprises an electromechanical lock.

5. The computer system of claim 1 wherein said control unit verifies the authenticity of a person that has activated one of the plurality of biometric sensors based on biometric templates stored in said registry.

6. The computer system of claim 5 wherein said control unit unlocks the lock if said control unit successfully verifies biometric data of a first person and wherein said control unit grants logical access to the computer component if said control unit successfully verifies biometric data of a second person.

7. The computer system of claim 1 wherein said control unit maintains the lock in a locked state if said control unit cannot verify the authenticity of a person.

8. The computer system of claim 1 further comprising a plurality of biometric sensors and a plurality of computer components wherein each of said plurality of biometric sensors is associated with a corresponding one of said plurality of computer components.

9. A security method for a computer system including a plurality of computer components, comprising:

registering a first user'"'"'s biometric to access a computing component logically;

registering a second user'"'"'s biometric to access the computer component physically;

authenticating a user identity using biometrics;

if the user identity is authenticated as the first user, permitting logical access to the computer component, but not physical access; and

if the user identity is authenticated as the second user, permitting physical access to the computer component, but not logical access.

10. The method of claim 9 wherein authenticating a user identity using biometrics comprises using a fingerprint sensor.

11. The method of claim 9 wherein authenticating a user identity using biometrics comprises using a iris scanner.

12. The method of claim 9 wherein at least one of said computer components comprises a storage device.

13. The method of claim 9 wherein at least one of said computer components comprises a storage device and wherein permitting logical access to the computer component comprises permitting a user to read data from but not write data to said storage device.

14. The method of claim 9 wherein at least one of said computer components comprises a storage device and wherein permitting logical access to the computer component comprises permitting a user to write data to but not read data from said storage device.

15. The method of claim 9 wherein at least one of said computer components comprises a storage device and wherein permitting logical access to the computer component comprises permitting a user to read data from and write data to said storage device.

16. The method of claim 9 wherein at least one of said computer components comprises a CD ROM.

17. The method of claim 9 wherein at least one of said computer components comprises a hard disk drive.

18. The method of claim 9 wherein said authenticating a user identity using biometrics is performed when a software program needs to access one of said computer components.

19. The method of claim 18 wherein at least one of said computer components comprises a storage device.

20. The method of claim 9 further comprising acquiring a user'"'"'s biometric image and associating a security access code with said biometric image.

21. A biometric access system for a computer system that includes a plurality of computer devices, comprising:

a plurality of biometric sensors; and

a control unit coupled to said plurality of biometric sensors, said control unit selectively controlling logical access and physical access to the plurality of computer devices in said computer system based on signals from one or more of said biometric sensors;

wherein the control unit selectively enables a first user to have logical access to at least one of the computer devices, but not physical access;

wherein the control unit selectively enables a second user to have physical access to at least one of the computer devices, but not logical access.

22. The biometric access system of claim 21 wherein at least one of said plurality of biometric sensors comprises a fingerprint scanner.

23. The biometric access system of claim 21 wherein at least one of said biometric sensors comprises an iris scanner.

24. The biometric access system of claim 21 wherein said control unit permits a person to access one of said plurality of computer devices based on a signal from the biometric sensor associated with the computer device that the person is trying to access.

25. The biometric access system of claim 21 wherein said control unit prevents a person from accessing one of said plurality of computer devices based on a signal from its associated biometric sensor.

26. The biometric access system of claim 21 further including a registry accessible by said control unit, said registry including biometric templates of people that are permitted use of various of said computer devices.

27. The biometric access system of claim 26 wherein said control unit verifies the authenticity of a person that has activated a biometric sensor by using the templates stored in said registry.

28. The biometric access system of claim 27 wherein said control unit permits a user to use one of said plurality of computer devices if said control unit successfully verifies the authenticity of a person.

29. The biometric access system of claim 28 wherein at least one of said plurality of computer devices comprises a storage device.

30. The biometric access system of claim 27 wherein said control unit prevents a user from using one of said plurality of computer devices if said control unit cannot verify the authenticity of the person.

31. The biometric access system of claim 21 wherein at least one of the computer devices comprises a storage device.

32. A security system for a server rack, said security system comprising:

a biometric sensor;

a control unit coupled to said biometric sensor; and

a lock coupled to and controlled by said control unit;

wherein the control unit selectively controls the lock to allow physical removal of a server based on data received from the biometric sensor,

wherein the control unit selectively controls logical access to the server based on data received from the biometric sensor,

wherein the control unit selectively enables a first user to have logical access to the server, but not physical access;

wherein the control unit selectively enables a second user to have physical access to the server, but not logical access.

33. A security system as defined in claim 32, wherein the biometric sensor is located remotely from the server rack.

34. A security system as defined in claim 32, further comprising:

a rack for holding a plurality of servers.

35. A security system as defined in claim 34, further comprising a plurality of locks to secure each of a plurality of servers to the rack.

36. A security system as defined in claim 32, further including a registry stored in memory accessible by said control unit, said registry including a template for each person authorized to unlock the lock.

37. A security system as defined in claim 36, wherein said control unit verifies the authenticity of a person that has activated the biometric sensor by using the templates stored in said registry.

38. A security system as defined in claim 32, wherein the biometric sensor is selected from among a fingerprint sensor and an iris scanner.