Smart card access control system

• US 7,376,839 B2
• Filed: 05/06/2002
• Issued: 05/20/2008
• Est. Priority Date: 05/04/2001
• Status: Expired due to Fees

• Current Assignee: Cubic Corporation
• Original Assignee: Cubic Corporation
• Inventors: Carta, David R., Kelly, Guy M., Ravenis, Joseph V J II
• Primary Examiner(s): Vu; Kim Y.
• Assistant Examiner(s): To; Baotran N
• Application Number:
  US10/141,575
• Publication Number:
  US 20030028814A1
• Time in Patent Office: 2,206 Days
• Field of Search: 382/115, 726/3, 726/2, 726/9, 726/20, 380/25, 380/24, 713185-186, 235/384, 705 65- 67
• US Class Current: 713/185
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 2009/00841 by a portable device
• CPC Class Codes: G07C 9/00674 with switch-buttons
• CPC Class Codes: G07C 9/00817 where the code of the lock can be programmed
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/27 with central registration

Abstract

An access control system securely transfers identification and transaction information between an access reader and a contactless smart card over a contactless radio frequency link via an RF modem. The access reader contains a programmable microcontroller, DC/DC converter, regulator, Opto-Isolators and LEDS, and an RF modem. The smart cards contain identification or transaction data as well as reader programming and de-programming software, which is protected by appropriate security keys. An access reader having the appropriate security keys performs a one to one verification of data stored in the smart card to data from an identification device coupled to the access reader. Upon verification of the validity of the smart card, the access reader transfers identification and transaction information over a data link to any external processor or controller which controls access to a secured area. Both the data format/protocol and operating state out of the access reader is programmable and configurable at any time. The access reader and access cards are compatible with any existing Wiegand, magnetic stripe, and serial based access control systems, and are configurable to emerging Biometric system designs.

Claims

1. A system for providing controlled access to a secured area, the system comprising:

a secured device for allowing access into the secured area upon receiving at least one access control signal;

an identification device for providing identification data corresponding to a biometric measurement by the identification device;

an access card having at least one block of memory comprising;

application data corresponding to biometric data of an access card holder; and

at least one application security key comprising an application read key; and

an access reader for outputting the at least one access control signal for controlling the secured device, the access reader comprising;

a memory means for storing configuration data and at least one valid security read key;

an RF interface for reading the application data from the access card if the at least one valid security read key is the same as the application read key, the at least one valid security read key providing an authenticated reading of the application data from the access card;

at least one input data line for receiving the identification data from the identification device; and

a processor means for comparing the application data to the identification data and for outputting the at least one access control signal upon a match between the application data and the identification data.

2. The system of claim 1, wherein the secured device is a transit gate.

3. The system of claim 1, wherein the secured device allows operation of electronic equipment having a device processor, further comprising:

security software for execution by the device processor, the security software disallowing use of the electronic equipment unless the at least one access control signal is received by the security software.

4. The system of claim 1, wherein the identification device is a biometric device and the identification data is image data.

5. The system of claim 1, wherein the identification device is a biometric device and the identification data comprises template minutia.

6. The system of claim 5, wherein the processor means for comparing the application data is automated.

7. The system of claim 4, wherein the access reader further comprises means for displaying the image data and the application data, the displayed image data and application data for use by a security person for making a decision regarding issuance of the at least one access control signal for allowing access to the secured area.

8. The system of claim 1, wherein the access reader has a plurality of reader states comprising:

an activated state for controlling access to the secured area; and

a deactivated state, the deactivated state having an activation key for reading an activation card.

9. The system of claim 1, further comprising an update card for updating the configuration data of the access reader.

10. The system of claim 1, wherein the at least one application security key of the access card further comprises an application write key.

11. The system of claim 10, wherein the memory means of the access reader further stores a valid security write key for writing to the access card if the valid security write key is the same as the application write key.

12. The system of claim 11, wherein the access reader writes an invalid flag to the access card if the application data does not match the identification data.

13. A method of controlling access to a secured area using an access reader, the method comprising the steps of:

receiving identification data corresponding to a biometric measurement of a user of an access card from a biometric device;

reading application data corresponding to biometric data of an access card holder from an access card, comprising the steps of;

transmitting an application read key from the access reader to the access card; and

allowing output of the application data from the access card if the transmitted application read key matches a read key stored on the access card;

comparing the application data to the identification data; and

outputting at least one access control signal upon a match between the identification data and the application data, the at least one access control signal for allowing access to the secured area.

14. The method of claim 13, wherein the at least one access control signal opens a gated entrance.

15. The method of claim 13, wherein the at least one access control signal allows the use of a processor enable device.

16. The method of claim 13, wherein the step of providing identification data corresponding to an access card holder to the access reader comprises the step of:

producing an image of the access card holder, wherein the image is one of a facial image, a retinal image, and a fingerprint image.

17. The method of claim 13, wherein the step of comparing the application data to the identification data is performed by the access reader.

18. The method of claim 13, wherein the step of comparing the application data to the identification data is performed by a security person.

19. The method of claim 13, further comprising the step of:

writing an invalid flag to the access card upon a mismatch between the identification data and the application data, the invalid flag for at least partially restricting use of the access card.

20. The method of claim 13, further comprising the step of updating configuration data of the access reader using a contactless update card.

21. A system for controlling access to a secured area, the system comprising:

an access card configured to;

store, in memory of the access card, biometric data of an access card holder and an application read key;

prevent output of the biometric data to one or more access devices until a security read key matching the application read key is received; and

output the biometric data to the one or more access devices when the security read key matching the application read key is received; and

the one or more access devices, communicatively coupled with the access card, and configured to;

read the biometric data from the access card only when the application read key matches the security read key stored in memory of the one or more access devices;

receive identification data corresponding to a biometric measurement associated with a user of the access card;

compare the biometric data with the identification data; and

output at least one access control signal to allow the user access to the secured area upon a match between the biometric data and the identification data.