Portable device and method for accessing data key actuated devices

• US 7,437,567 B2
• Filed: 12/06/2001
• Issued: 10/14/2008
• Est. Priority Date: 05/13/1998
• Status: Expired due to Fees

• Current Assignee: Bioscrypt, Inc. (Advent International Corporation)
• Original Assignee: Bioscrypt, Inc. (Advent International Corporation)
• Inventors: Hollingshead, Dennis W.
• Primary Examiner(s): Vu; Kimyen
• Assistant Examiner(s): Dada; Beemnet W
• Application Number:
  US10/497,560
• Publication Number:
  US 20050071646A1
• Time in Patent Office: 2,504 Days
• Field of Search: 713/185, 713/186, 713/167, 713/168, 713/171, 713/172, 713/164, 713/165, 713/175, 713/176, 726/9, 726/10, 726 26- 28, 380/281, 380/284
• US Class Current: 713/186
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07C 9/00563 using personal physical data of the operator, e.g. finger prints, retinal images, voicepatterns
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Data key actuated devices such as high security doors are modified so that they periodically transmit an identity pattern. An authorized user is provided with a portable access device storing keys for a number of such key actuated devices, with each key associated with an identity pattern for that device. The portable access device has a stored template comprising a fingerprint of the authorized user combined with a verification code. When the authorized user applies their fingerprint to the portable access device the verification code is returned which allows verification of the user. If the access device then receives a key actuated device identifier matching one in storage, the associated access key is retrieved and transmitted to the key actuated device to allow access to the user.

Claims

1. A method for accessing data key actuated devices, comprising:

receiving a key actuated device identifier from a key actuated device;

receiving a biometric;

determining whether said received biometric is an authorized biometric;

comparing said received key actuated device identifier with stored key actuated device identifiers and, on finding a matching stored key actuated device identifier and where said received biometric is an authorized biometric, retrieving a stored access key associated with said matching stored key actuated device identifier;

encrypting said retrieved access key; and

transmitting said retrieved access key.

2. The method of claim 1 further comprising:

receiving a temporary key; and

wherein said encrypting said retrieved access key comprises encrypting said retrieved access key with said temporary key prior to transmission of said retrieved access key.

3. The method of claim 2 further comprising:

responsive to determining said received biometric is an authorized biometric, initially transmitting a valid user indication.

4. The method of claim 3 wherein said temporary key is received subsequent to transmitting said valid user indication.

5. The method of claim 4 wherein said initially transmitting a valid user indication is dependent upon finding a stored key actuated device identifier matching said received key actuated device identifier.

6. The method of claim 2 wherein each said stored access key is encrypted and including performing a decryption operation on a retrieved access key prior to encrypting said retrieved access key with said temporary key.

7. The method of claim 6 wherein each said stored access key is encrypted with a special key and wherein said performing a decryption operation comprises retrieving a template and attempting to recover said special key from said template utilizing said received biometric.

8. The method of claim 1 further comprising retrieving a template and attempting to recover a special key from said template utilizing said biometric, said special key for use in performing a cryptographic operation.

9. The method claim 8 wherein said cryptographic operation involves at least one said access key.

10. The method of claim 3 wherein said initially transmitting a valid user indication is dependent upon finding a stored key actuated device identifier matching said received key actuated device identifier.

11. The method of claim 1 wherein said determining whether said received biometric is an authorized biometric comprises utilizing a template comprising said authorized biometric and a verification code such that presence of said biometric allows recovery of said verification code.

27. The method of claim 1 wherein said transmitting is wireless transmitting.

12. A portable electronic access device comprising:

a biometric input;

a verifier responsive to said biometric input for verifying that a biometric which is input to said biometric input matches an authorized biometric and providing a verification indication;

a memory storing a plurality of access keys, each for use in accessing a key actuated device and a plurality of key actuated device identifiers, each associated with one of said plurality of access keys;

a receiver for receiving a key actuated device identifier and a temporary key;

a comparator for, responsive to a verification indication from said verifier, comparing a key actuated device identifier received from a key actuated device with said stored key actuated device identifiers and, on finding a matching stored key actuated device identifier, retrieving a stored access key associated with said matching stored key actuated device identifier; and

a transmitter for transmitting a retrieved access key.

13. The device of claim 12 wherein said stored access keys are encrypted and including a decrypter for decrypting a retrieved access key prior to said access key being transmitted by said transmitter.

14. The device of claim 12 wherein said memory is also for storing a special key template, said access keys are encrypted with a special key and said decrypter is responsive to said biometric input to perform a special key recovery operation on said special key template utilizing said input biometric and a subsequent decrypting operation on said retrieved access key utilizing a recovered special access key.

15. The device of claim 12 wherein said memory is also for storing a special key template comprising said authorized biometric and a special key, said special key for use in performing a cryptographic operation.

16. The device of claim 12 wherein said verifier is for accessing a stored template comprising said authorized biometric and a verification code, for attempting to recover said verification code from an input biometric and for using said verification code to obtain said verification indication.

17. The device of claim 12 including an encrypter for encrypting said retrieved access key with said temporary key prior to transmission of said retrieved access key by said transmitter.

18. The device of claim 12 wherein said transmitter is also for initially transmitting a valid user indication in response to said verifier providing said verification indication.

19. The device of claim 17 wherein said transmitter is also for initially transmitting a valid user indication in response to said verifier providing said verification indication and wherein said temporary key is received after said transmitter has transmitted said valid user indication.

20. The device claim 12 wherein said receiver comprises one of a radio receiver and an infrared receiver and said transmitter comprises one of a radio transmitter and an infrared transmitter.

28. The device of claim 12 wherein said transmitter is a wireless transmitter.

21. A secure access system, comprising:

a data key actuated device for periodically transmitting a key actuated device identifier;

a portable access device comprising;

a biometric input;

a verifier responsive to said biometric input for verifying that a biometric which is input to said biometric input matches an authorized biometric and providing a verification indication;

a memory storing a plurality of access keys, each for use in accessing a key actuated device and a plurality of key actuated device identifiers, each associated with one of said plurality of access keys;

a receiver for receiving said key actuated device identifier and a temporary key;

a comparator for, responsive to a verification indication from said verifier, comparing a key actuated device identifier received from said key actuated device with said stored key actuated device identifiers and, on a match, retrieving an access key associated with said matching stored key actuated device identifier; and

a transmitter for transmitting a retrieved access key to said key actuated device.

22. The system of claim 21 wherein said access device includes an encrypter for encrypting said retrieved access key with said temporary key prior to transmission of said retrieved access key by said transmitter.

23. The system of claim 21 wherein said transmitter is also for initially transmitting a valid user indication in response to said verifier providing said verification indication to said access device and wherein said key actuated device is also for, responsive to receiving said valid user indication, transmitting said temporary key.

24. The system of claim 21 wherein said memory is also for storing a template and wherein said verifier is also for attempting to recover a special key from said template utilizing said biometric, said special key for use in performing a cryptographic operation.

25. The system of claim 21 wherein said transmitter is a radio transmitter and said receiver is a radio receiver.

26. The system of claim 21 wherein said verifier is for accessing a stored template comprising said authorized biometric and a verification code, for attempting to recover said verification code from an input biometric and for using said verification code to obtain said verification indication.