Data security system

• US 7,797,750 B2
• Filed: 03/02/2005
• Issued: 09/14/2010
• Est. Priority Date: 08/10/2004
• Status: Expired due to Fees

• Current Assignee: Newport Scientific Research LLC
• Original Assignee: Newport Scientific Research LLC
• Inventors: Choi, Gyu Nam, Ho, Joshua
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US11/070,417
• Publication Number:
  US 20060036873A1
• Time in Patent Office: 2,022 Days
• Field of Search: 382/116, 382/124, 726 27- 30, 713/165, 713/168, 713/186
• US Class Current: 726/26
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A data security system controls access to and interfaces with a computer system by requiring user verification through fingerprint sensing. The data security system includes a security module having a fingerprint sensor, image data, and an application interface that is generated by the security module and communicative with the computer system. The image data is associated with a fingerprint of a user through the use of the security module.

Claims

1. A data security system for a computer system, comprising:

a security module that is separate from the computer system;

image data associated with a fingerprint of a user through the use of said security module, said image data being stored on said security module;

an application interface generated by said security module and communicative with said computer system, where the application interface is displayed on said computer system;

at least one software application that is stored on said computer system, where said security module controls access to said at least one software application by said image data; and

at least one software data file used in said at least one software application, where said at least one software file is stored on said security module;

wherein the application interface includes a graphical user interface, including at least one of a link and a button, the graphical user interface configured to select the at least one software application.

2. A system according to claim 1, wherein said security module is portable.

3. A system according to claim 1, wherein said security module comprises:

a fingerprint sensor;

a microprocessor communicative with said fingerprint sensor and adapted to store said image data; and

a connector port coupled to said fingerprint sensor and said microprocessor.

4. A system according to claim 1, wherein said graphical user interface is displayed on said computer system.

5. A system according to claim 1, wherein said at least one software application comprises a web browser application, an email application, an address book application, a data encryption application, a data back-up application, and a system directory application.

6. A system according to claim 5, wherein said application interface for said web browser application includes a URL factory adapted to supply password/login and bookmark data to said application interface.

27. The data security system according to claim 1, wherein said security module is portable such that the security module may be selectively connected with any one of a plurality of host computer systems, said plurality of host computer systems including said computer system and at least one additional computer system;

and

wherein said security module is configured to selectively display said application interface generated by said security module on one of the plurality of host computer systems when the security module is connected to the one of the plurality of host computer systems.

28. The data security system of claim 1, wherein the at least one software application stored on said computer system includes non-authorization information.

29. The data security system of claim 28, wherein the non-authorization information includes at least one of address book information and bookmark information.

7. A security module for a computer system, comprising:

a fingerprint sensor adapted to scan the fingerprint of a user;

a microprocessor communicative with said fingerprint sensor, said microprocessor adapted to store data, encrypt data, and control access to said computer system;

a memory location including at least one software data file used in a software application that is executable on said computer system;

a connector port coupled to said fingerprint sensor and said microprocessor; and

a connecting device that includes a first port for connection to the security module and a second port for connection to a computer system;

wherein the security module is a separate component from the computer system, and wherein the security module generates an application interface displayed on said computer system, the application interface including a graphical user interface having at least one of a link and a button, the graphical user interface configured to select at least one software application stored on the computer system.

8. A module according to claim 7, wherein said fingerprint sensor is a silicon type sensor.

9. A module according to claim 7, wherein said connector port is a USB port.

10. A module according to claim 7, wherein said microprocessor has flash memory.

11. A module according to claim 7, wherein said microprocessor is adapted to store fingerprint data of a user.

12. A module according to claim 7, wherein said microprocessor comprises:

a disk controller;

a device lock controller communicative with said disk controller; and

a memory disk communicative with said disk controller and said device lock controller.

13. A module according to claim 12, wherein said device lock controller is adapted to encrypt and decrypt data stored in said security module.

14. A module according to claim 7, wherein said microprocessor creates an encryption key that uniquely identifies a registered user.

15. A module according to claim 14, wherein said encryption key is comprised of a digital fingerprint template, at least one user password/login, and a randomly generated digit.

16. A module according to claim 7, wherein said microprocessor further comprises:

a dynamic optimization control adapted to analyze each fingerprint scan.

17. A module according to claim 16, wherein said dynamic optimization control creates a digital composite of a fingerprint based on each fingerprint scan.

18. A module according to claim 7, wherein said fingerprint sensor utilizes an image matching method when authenticating a fingerprint of a user.

19. A module according to claim 7, wherein said fingerprint sensor utilizes a minutiae information calculating method when authenticating a fingerprint of a user.

20. A method of controlling access to and securing data located on a computer system, comprising the steps of:

providing a data security system having a fingerprint sensor and a microprocessor with memory storage capability, wherein the security module is a separate component from the computer system;

storing an encryption key having a registered user fingerprint template in said microprocessor;

determining whether a fingerprint scanned by said fingerprint sensor matches said fingerprint template;

displaying a graphical user interface including at least one of buttons and links to applications located on said computer system and said data security system when said scanned fingerprint matches said fingerprint template; and

sending at least one software data file from said security module to said computer system, where said software data file is used in said applications.

21. A method according to claim 20, wherein the step of displaying a graphical user interface includes displaying links to applications including a web browser application, an email application, an address book application, a data encryption application, a data back-up application, and a system directory application.

22. A method according to claim 21, wherein the step of displaying a graphical user interface for said email application further includes displaying a complete email message.

23. A method according to claim 21, wherein the step of displaying a graphical user interface for said address book application further includes displaying information stored in memory or in a database.

24. A method according to claim 21, wherein the step of displaying a data encryption application includes providing an encrypting function for a user to encrypt and de-crypt data.

25. A method according to claim 21, wherein the step of displaying a data backup includes providing a data backup function for a user to backup data.

26. A method according to claim 20, wherein the step of storing an encryption key includes storing an encryption key comprising a digital fingerprint template, at least one user password/login, and a randomly generated digit.