Secured personal data handling and management system

• US 8,401,875 B2
• Filed: 08/04/2010
• Issued: 03/19/2013
• Est. Priority Date: 03/12/2010
• Status: Active Grant

• Current Assignee: OS - New Horizons Personal Computing Solutions Limited
• Original Assignee: OS - New Horizons Personal Computing Solutions Limited
• Inventors: Korman, Avner, Fish, Gila
• Primary Examiner(s): NGUYEN, HIEP VAN
• Application Number:
  US12/849,971
• Publication Number:
  US 20110224509A1
• Time in Patent Office: 958 Days
• Field of Search: 705 1- 3
• US Class Current: 705/3
• CPC Class Codes: A61B 5/0002 Remote monitoring of patients using telemetry, e.g. transmission of vital signals via a communication network A61B5/07 takes precedence; transmission systems for measured values G08C; transmission H04B; transmission of digital information H04L; wireless communication networks H04W
• CPC Class Codes: A61B 5/1172 using fingerprinting
• CPC Class Codes: A61B 5/14552 Details of sensors specially adapted therefor
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A system, method and personal apparatus for managing highly secured personal data is provided. The system and the personal apparatus are complementary, both providing highly secured personal data, mass, safe and secured data access, storage and management solutions, while serving the needs for managing and exchanging secured personal data with external services and data providers and with other such highly secured personal data users. The apparatus may be used independently of the system by securely connecting the apparatus to service providers. The apparatus, which is uniquely identified with a unique user, includes a sensor module comprising a plurality of biometric sensors for reading a plurality of personal biological identification parameters of the user and an authentication unit for positive authentication of the user'"'"'s personal biological identification parameters stored in the authentication unit. The system is designed to securely serve the needs of conducting and maintaining multiple users'"'"' personal data access, storage, updating and retrieval capabilities. The method supports the safe and secured operation of the apparatus by its owner, in order to get access to the system and to exchange highly secured personal data with external pre-registered service providers and with other registered system users.

Claims

1. Apparatus for storing and managing personal and secured data and documentation files associated with a specific user, comprising:

a plurality of biometric sensors for reading a plurality of personal biological biometric identification parameters of the user holding the apparatus, said plurality of biometric sensors being integrated within the apparatus;

at least one life signs detector integrated within the apparatus, said life signs detector being configured to measure and record at least one of said user'"'"'s life sign parameters;

a first storage unit for the storage of said user'"'"'s data and documentation files;

an authentication unit comprising a second storage unit, with said second storage unit configured to store a pre-recorded set of personal biological biometric identification parameters uniquely associated with the specific user, wherein said authentication unit is configured to compare the plurality of personal biological biometric identification parameters of the user holding the apparatus with the pre-recorded set of personal biological biometric identification parameters stored in said second storage unit;

a processor in communication with said plurality of biometric sensors, said first storage unit and said authentication unit;

wherein access to the personal data and documentation files stored in said first storage unit is only enabled after said authentication unit positively matches each of the plurality of personal biological biometric identification parameters of the user holding the apparatus with the pre-recorded set of personal biological identification parameters stored in said second storage unit; and

wherein, whenever any of said at least one life signs detector detects a critical level of said user measured life sign parameters, the apparatus is configured to prevent access to said user'"'"'s personal data and documentation files stored in said first storage unit.

2. The apparatus according to claim 1, wherein said plurality of biometric sensors are configured to continuously read a plurality of personal biological identification parameters associated with said user holding the apparatus and in the event that a change occurs in any of the plurality of personal biological identification parameters, access to the stored personal data files is denied and the operation of the apparatus is completely shut down.

3. The apparatus according to claim 1, wherein said at least one of said user'"'"'s life sign parameters is measured by any of a group of life sign indicators including a body pulse rate measurement indicator, a body O₂ saturation level indicator, a body heat measurement indicator, an electro-dermal activity indicator, a body respiration indicator and a physical or emotional stress indicator.

4. The apparatus according to claim 1, further comprising:

communication and data connection means for communicating with an external device, said communication and data connection means being controlled by and in communication with said processor.

5. The apparatus according to claim 4, wherein, whenever any of the group of life sign indicators detects a critical level, the apparatus is configured to initiate an emergency call to any of a group of registered emergency centers, and send to said registered emergency centers any of a group of data files containing information associated with the user, including the identification data file of the user, personal medical data file of the user, the measured set of life sign parameters of the user and location of the user.

6. The apparatus according to claim 4, wherein said apparatus is configured to communicate with any of a group of service providers, said group of service providers including banks, credit card companies, clinics, hospitals and medical insurance companies, municipal and utility entities and websites frequently accessed by said user;

thereby allowing said user to access and manage personal data and documentation files, associated with said user.

7. The apparatus according to claim 4, wherein said external device comprises any one of a group including a remote server, a local server, a host computer, voice or data communication means and a cellular phone.

8. The apparatus according to claim 4, wherein said emergency call is initiated via any one of a group of communication means including a secured server, directly via the internet by said apparatus connection and communication means, via the internet through any host computer, via a voice and data communication device and via any cellular phone network.

9. The apparatus according to claim 4, wherein said emergency call is initiated via any one of a group of communication means including a secured server, directly via the internet by said apparatus connection and communication means, via the internet through any host computer, via a voice and data communication device and the cellular phone network.

10. The apparatus according to claim 4, wherein said communication and data connection means comprises at least one of a group of connection and communication devices including a data interface connector attached to a host computer, a Mini USB, a compatible industrial data interface connector attached to a cellular phone, a near field wireless communication interface, a Bluetooth communication interface, a magnetic reader interface, and a smart card reader based on a contact-less communication interface using induction or RF communication.

11. The apparatus according to claim 4, further comprising an integrated software module that automatically detects the operating system of the computer or cellular phone connected to said apparatus through one of said group of communicating devices through which the apparatus is connected, said computer or cellular phone having keyboard and display units associated therewith, thereby allowing the user to interact with said first storage unit and with said processor of said apparatus via said keyboard and display units, whereby said computer or cellular phone is configured to utilize and interact with said memory module, said processor and said sensor module of said apparatus.

12. The apparatus according to claim 1, wherein said first storage unit comprises a detachable and upgradeable miniature PCB board having Flash and/or Nano type solid state read and write memory components with a memory capacity of at least 10 Gigabytes of accessible memory size.

13. The apparatus according to claim 1, further comprising:

a magnetic strip element that is only activatable after positive authentication of said user'"'"'s personal biological biometric identification parameters and positive normal non critical measured output of all of the at least one of said life sign detectors of said user measured life sign parameters; and

wherein said magnetic strip is configured to be concealed within the apparatus and on activation configured to extend out of the apparatus for swiping and reading by any of group of devices including a credit card reader, ATM and point of sale magnetic strip reading device.

14. The apparatus according to claim 1, wherein the processor is configured to securely update the user'"'"'s data and documentation files.

15. The apparatus according to claim 1, further comprising an integrated digital data encoder/decoder and a wireless transceiver module in communication with the processor, said integrated digital data encoder/decoder and a wireless transceiver being configured to communicate with any of a group of external devices including RF operated credit card readers, ATM machines, and remotely operated electronic locks gates and doors opener using RFID based techniques.

16. The apparatus according to claim 15, further comprising a supplementary base-station device in communication with said wireless transceiver, said base-station device configured to electrically charge the apparatus and simultaneously automatically execute a backup of the internal secured and non-secured stored data of the apparatus.

17. The apparatus according to claim 1, further comprising a power charging and data backup device in communication with the processor of said apparatus, said device comprising;

i. a charging plug for connecting to the mains supply, an AC-DC converter, a power supply unit and a rechargeable backup battery;

ii. a micro processor and a mass memory unit;

iii. an electronic buzzer activator, a button connected to said buzzer activator and an RF transmitter connected to said electronic buzzer activator, wherein on activating said buzzer button, said RF transmitter is configured to transmit a coded signal to the apparatus to enable the user to determine the location of the apparatus; and

wherein the first storage unit of said apparatus is in communication with the mass memory unit of said device, thereby to compare and synchronize the version of data stored in the first storage unit of said apparatus with the version of data stored in mass memory unit of said device.

18. The apparatus according to claim 1, further comprising an integrated GPS module in communication with the processor to precisely locate the geographical position of the apparatus.

19. The apparatus according to claim 1, further comprising at least one of a group of units including a cellular modem and a flat display, and a touch screen for communication with the processor.

20. The apparatus according to claim 1, further comprising:

an encryption unit in communication with said processor for the encryption plus compression and for the decompression plus decryption of said user'"'"'s data files.

21. The apparatus according to claim 1, further comprising:

an emergency button in communication with said processor and said communication and data connection means module;

wherein on said emergency button being activated, communication is initiated between said apparatus and any of a group of registered emergency centers, said emergency call transmitting any of a group of data files containing information associated with the unique user of said apparatus, including the identification data of said user, the personal medical data file of said user, and location of said user.

22. A method for managing personal and secured data and documentation files of a plurality of unique users, each one of said plurality of unique users having a personal identification unit uniquely associated with said one user for storing each user'"'"'s personal data and documentation files, each of said personal identification units comprising:

a plurality of biometric sensors integrated within the personal identification unit;

at least one life signs detector, integrated within the personal identification unit, said life signs detector being configured to measure and record at least one of said user'"'"'s life sign parameters;

a processor in communication with said plurality of biometric sensors;

an authentication unit in communication with the processor;

an encryption unit in communication with said processor;

a first storage unit in communication with said processor and said encryption unit; and

communication and data connection means in communication with said processor;

the method comprising the steps of;

a. the plurality of biometric sensors reading a plurality of personal biological identification parameters of the user holding the personal identification unit;

b. at least one life signs detector, integrated within the apparatus, measuring and recording at least one of said user'"'"'s life sign parameters;

c. said authentication unit comparing each of the personal biological identification parameters of said user with a pre-recorded set of personal biological identification parameters stored in said authentication unit; and

d. if said authentication unit positively identifies said user, and if all of said at least one life signs detector, records the user'"'"'s normal life sign parameters, allowing said user access to said user'"'"'s personal data and documentation files stored in said first storage unit and allowing said user to communicate with other communication means through said personal identification unit.

23. The method of claim 22 further comprising the steps of:

said biometric sensors continuously reading a plurality of personal biological biometric identification parameters of said user holding the apparatus; and

in the event that a change occurs in any of the plurality of personal biological biometric identification parameters or in the normal output reading of said least one of said life signs detectors, denying access to the stored personal data files and completely shutting down the operation of said apparatus.

24. The method of claim 22, wherein at least one of said plurality of life signs detectors includes a body pulse rate measurement indicator, a body O2 saturation level indicator, a body heat measurement indicator, an electro-dermal activity indicator, a body respiration indicator and a physical or emotional stress indicator, the method further comprising the steps of:

initiating an emergency call to any of a group of registered emergency centers, whenever any of the life sign indicators detects a critical level; and

wherein said emergency call transmits any of a group of data files information associated with the user, including identification of the user, personal medical data file of the user, the measured set of life sign parameters of the user and location of the user.

25. The method of claim 22, wherein said apparatus further comprises an emergency button in communication with said processor and said communication and data connection means, the method further comprising the steps of:

when said emergency button is activated, communication is initiated between said apparatus and any of a group of registered emergency centers; and

said emergency call transmitting any of a group of data files information associated with the user, including identification of the user, the personal medical data file of the user, and location of the user.

26. The method of claim 22, further comprising the step of:

communicating, via any one of a group of communication means, with any of a group of service providers including banks, credit card companies, clinics, hospitals and medical insurance companies, municipal and utility entities and websites frequently accessed by said user thereby allowing said user to access and manage said user'"'"'s personal data and documentation files stored by said group of service providers.

27. The method of claim 22, wherein said apparatus further comprises a magnetic strip element, the method further comprising the step of:

after positive authentication of said user'"'"'s personal biological identification parameters, activating said magnetic strip thereby allowing said magnetic strip to be read by any of group of devices including a credit card reader, ATM, and point of sale magnetic strip reading device.

28. The method of claim 22, wherein said apparatus further comprises a power charging and data backup device, said device comprising a charging and power unit, an electronic sub unit and a mass memory solid-state memory unit, the method further comprising the steps of:

comparing the memory content of said apparatus first storage unit to the memory content of said mass memory solid-state memory unit; and

if the first storage unit of the apparatus lacks data, updating the first storage unit with the last version of the data stored within the solid-state memory unit; and

if said solid-state memory unit of said device lacks data, updating the solid-state memory unit of said device with the last version of the data stored within said apparatus the solid-state memory unit.

29. The method of claim 22, wherein each of said plurality of unique users is in communication with a system manager, said system manager managing a remote centralized data communication storage and management system of said plurality of unique users, the method further comprising the steps of:

a. said system manager registering each unique user and storing the personal ID data file of each unique user in a memory sub-system connected to said centralized system; and

b. said registration further includes the step wherein said system manager generates for each system user N pairs of two different randomly selected characters strings, each of said strings is a combination of n alphanumeric characters in length; and

c. said system manager storing said N pairs in said system memory sub-system and sending said n characters strings pairs to be stored in said unique user personal identification unit memory module; and

d. said personal identification unit generating a secret access code of L alphanumeric characters to be further stored in said system memory within a special partition containing the list of said secret access codes for said plurality of unique users without assigning any identification or link between the associated users to his registered secret access code.

30. The method of claim 29, wherein after registration and upon normal initiation of communication between said system manager and each unique user, said system manager further communicating with said unique user and first comparing said unique user'"'"'s ID data file and said personal identification unit unique embedded characterizing serial number stored in the unique user'"'"'s personal identification unit with the corresponding user'"'"'s ID and personal identification data stored in said memory sub-system;

and

if the two sets of identification data match;

i. said system manager sending a first string of said stored N strings of coded alphanumeric data, to said user'"'"'s personal identification unit; and

ii. said user personal identification unit responding with the second matching string from the same stored pair of coded alphanumeric data uniquely associated with said user personal identification unit; and

iii. said system manager comparing the received second string of coded alphanumeric data with a second string of coded alphanumeric data pre-stored in the memory sub-system; and

iv. said system manager comparing for consecutive M out of N times the received additional different strings of coded alphanumeric data pre-stored in the memory of said personal identification unit associated with said unique user with the additional strings of coded alphanumeric data pre-stored in the memory of sub-system; and

v. if all M strings of coded alphanumeric data match, then said system manager declares authenticating of said unique user and permitting said unique user access to said system.

31. The method of claim 30, wherein after said user gains access to said system, said user chooses either to work with the unsecured parts of said system memory or to gain access to said user secured personal data stored in said system memory by sending from said personal identification unit said secret access code that permits each such user sole access to his private secured memory partition in said system memory.

32. The method of claim 29, further comprising the steps of:

after the step of authenticating, said system manager connecting the personal identification unit of said unique user with any of a group of emergency centers or service providers registered with said system manager at the request of said user personal identification unit; and

in the case of a medical emergency call initiated by said personal identification unit, transferring the user'"'"'s updated medical data to the emergency center.

33. A system for managing personal and secured data and documentation files of a plurality of unique users, the system comprising:

a. a system manager for managing and updating personal data of said system plurality of unique users and for full-duplex communication with each of said plurality of unique users and a plurality of service providers; and

b. a storage system connected to said system manager to store updated personal data of each of said plurality of unique users;

c. a plurality of personal identification units, each of said personal identification units being associated with a unique user, each unique user being registered with said system manager, each of said personal identification units comprising a storage unit configured to store the personal ID data file of each unique user and a plurality of biometric sensors for reading a plurality of personal biometric biological identification parameters of the user holding the apparatus, said plurality of biometric sensors being integrated within the personal identification units and at least one life signs detector, integrated within said personal identification units, said life signs detector being configured to measure and record at least one of said user'"'"'s life sign parameters;

d. a plurality of computer hosts and cellular phones in communication with said system manager, enabling the direct connection by said system manager with said plurality of unique users through their corresponding personal identification unit; and

e. a plurality of registered emergency centers and a plurality of registered service providers in communication with said system manager, said plurality of service providers including banks, credit card companies, insurance companies, clinics, hospitals and medical insurance companies, government, municipal and utility entities and selected websites frequently accessed by said plurality of users;

wherein said system manager'"'"'s access to and communication with the personal data and documentation files stored in said personal identification units associated with each said unique user and to the personal data and documentation files stored by said group of service providers is only enabled after positive authentication of each of said unique user'"'"'s personal biometric biological identification parameters by said authentication unit and measuring the normal measured output of each one of said user'"'"'s life sign parameters;

wherein at least one of said plurality of biometric sensors is a life signs detector, said life signs detector being configured to measure and record at least one of said user'"'"'s life sign parameters; and

wherein said at least one of said user'"'"'s life sign parameters is measured by any of a group of life sign indicators including a body pulse rate measurement indicator, a body O₂ saturation level indicator, a body heat measurement indicator, an electro-dermal activity indicator, a body respiration indicator and a physical or emotional stress indicator.

34. The system according to claim 33, wherein each of said plurality of personal identification units comprises:

i. a sensor module comprising a plurality of biometric sensors for reading a plurality of personal biological biometric identification parameters of the user holding the of personal identification units, said of personal identification units being uniquely identified with said user;

ii. a processor in communication with said sensor module for processing said personal biological identification parameters and for processing and managing the personal and secured data and documentation files associated with said user;

iii. an authentication unit in communication with the processor configured to receive and authenticate the identity of said user by comparing said user'"'"'s personal biological identification parameters read, by the sensor module and processed by the processor, with a pre-recorded set of personal biological identification parameters stored in said authentication unit;

iv. an encryption module in communication with said processor for the encryption plus compression and/or decompression plus decryption of said user'"'"'s data files;

v. a storage unit in communication with said processor and said encryption module for the storage of said user'"'"'s data and documentation files; and

vi. communication and data connection means in communication with said processor for connecting said of personal identification units with said system manager and plurality of service providers.

35. The system according to claim 34, wherein said system manager is configured:

to communicate with said personal identification units to compare the user'"'"'s ID data file stored in the unique user'"'"'s personal identification units with the corresponding identification data stored in said storage unit, and

if the two sets of identification data match, then said system manager is configured to initiate a further level of security identification prior to full communication and data updating capability being enabled between said system manager and said user personal identification unit; and

wherein said further level of security identification comprises said system manager sending a first string of coded alphanumeric data uniquely associated with said user personal identification unit to said user personal identification unit, said personal identification unit responding with a second string of coded alphanumeric data uniquely associated with said user personal identification unit, and said system manager verifying the received second string of coded alphanumeric data with a second string of coded alphanumeric data pre-stored in the memory sub-system; and

said system manager comparing for full matching for N consecutive times received additional different strings of coded alphanumeric data pre-stored in the memory of said personal identification unit associated with said unique user with counter generated additional strings of coded alphanumeric data pre-stored in the memory of sub-system.

36. The system according to claim 34, wherein said plurality of biometric sensors continuously read a plurality of personal biological identification parameters associated with the user holding his unique personal identification units and in the event that a change occurs in any of the plurality of personal biological biometric identification parameters, access to the stored personal data files is denied and the operation of said identification units is completely shut down.

37. The system according to claim 34, wherein each personal identification unit further comprises an emergency button in communication with said processor and said communication and data connection means module;

wherein the personal identification unit is configured to initiate an emergency call to any of said plurality of registered emergency centers, whenever said emergency button is activated or whenever any of the group of life sign indicators detects a critical level; and

wherein the personal identification unit is configured to transmit any of a group of data files containing information associated with the user, including the identification data of the user, personal medical data file of the user, the measured set of life sign parameters of the user and location of the user.

38. The system of claim 33, wherein said system, further comprises:

a computerized call center configured to receive phone calls or emergency voice and data messages from any of said plurality of registered emergency centers and a plurality of registered service providers and to communicate with any of said plurality of cellular phone and host computers; and

wherein said call center is configured to communicate the user'"'"'s location coordinates to an emergency rescue team and simultaneously said call center is configured to communicate with any of said plurality of registered emergency centers and service providers to receive said user'"'"'s updated medical data and to transfer said data to the user'"'"'s personal identification unit.