Secure data card with passive RFID chip and biometric sensor

• US 8,823,497 B2
• Filed: 02/14/2012
• Issued: 09/02/2014
• Est. Priority Date: 02/14/2012
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hutzler, Richard, Nguyen, Steve Ngoc, Smith, Nelson Jay IV, Zimmerman, Thomas Guthrie
• Primary Examiner(s): Wu, Daniel
• Assistant Examiner(s): DARAMOLA, ISRAEL O
• Application Number:
  US13/396,274
• Publication Number:
  US 20130207786A1
• Time in Patent Office: 931 Days
• Field of Search: 340/5.82, 340/5.83, 340/10.1, 340/10.4, 235/382, 235/492, 455/41.1, 726/17, 726/6
• US Class Current: 340/10.51
• CPC Class Codes: G06K 19/0718 the sensor being of the biometric kind, e.g. fingerprint sensors fingerprint sensors in general G06V40/13; biometric access-control systems in general, see G07C9/00
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: G07F 7/0833 Card having specific functional components

Abstract

Biometric authorization is provided for a passive secure data card. An additional layer of security may be provided in the form of a biometric password. Session timing may be enforced to limit opportunities of third parties to snoop transmitted information while providing ample time to complete the card transaction. Biometric retries may be enforced to limit opportunities of third parties to hack the biometric security.

Claims

1. A passive secure data card, comprising:

a card;

an antenna tuned to receive an external RF reader signal;

a passive power module coupled to the antenna, said passive power module converting power drawn exclusively from the external RF reader signal to supply one or more voltages to a biometric sensor and at least one radio frequency identification (RFID) chip;

said biometric sensor configured to sense a biometric input from a card user and generate a biometric input signal, said biometric input and biometric input signal providing distinctive and measurable characteristics to identify individual card users; and

said at least one RFID chip comprising an RF transmitter and one or more processors and memory units configured to implement a communication module that stores information and a biometric module that stores biometric parameters representative of user-initialized biometric inputs, and in response to biometric input from the biometric sensor compares the biometric input signal to the stored biometric parameters and, upon determination of a match authenticates and authorizes that card user and activates the communication module, which in turn reads and sends the information to the RF transmitter to transmit an RF data signal via the antenna, wherein said communication module, although power is available from the external RF reader signal, will not active and transmit the information until activated by the biometric module.

2. The secure data card of claim 1, wherein upon determination of the match, said biometric module activates the communication module for a specified session time period provided power is still available from the external RF reader signal.

3. The secure data card of claim 2, wherein said specified time period is just long enough to transmit the RF data signal.

4. The secure data card of claim 2, wherein said specified time period is user defined during card initialization.

5. The secure data card of claim 1, wherein the stored biometric parameters comprise a user-initialized biometric password of at least two temporally displaced entries of one or more user-initialized biometric inputs, said biometric module compares a temporal sequence of the biometric input signals to the biometric password to determine whether a match exists.

6. The secure data card of claim 5, wherein said biometric password comprises at least a first entry for a first user-initialized biometric input and a second entry for a different second user-initialized biometric input.

7. The secure data card of claim 1, wherein the card transmits the RF data signal in an open format to maintain backward compatibility with an installed base of RFID card readers.

8. The secure data card of claim 1, wherein the biometric module stores a connection attempt threshold and counts a card user'"'"'s number of attempts to provide the biometric inputs to match the biometric parameters, and upon exceeding the connection attempt threshold said biometric module permanently alters the information stored with the communication module.

9. The secure data card of claim 8, wherein said biometric module writes a permanent error to the card that is transmitted as the RF data signal.

10. The secure data card of claim 8, wherein said biometric module alters the biometric parameters stored on the card.

11. The secure data card of claim 1, wherein the passive power module supplies at least a first voltage to supply power to the biometric sensor and a second voltage to supply power to the RFID chip where said first and second voltages are supplied at different voltage levels.

12. The secure data card of claim 1, wherein external RF reader signal induces an AC current in the antenna, said passive power module comprises a capacitor, a full wave rectifier that rectifies the AC current to produce an unregulated voltage across the capacitor and a voltage regulator that smoothes the unregulated voltage to supply the one or more voltages as long as the external RF reader signal is received.

13. A passive secure data card, comprising:

a card;

an antenna tuned to receive an external RF reader signal;

a passive power module coupled to the antenna, said passive power module converting power drawn exclusively from the external RF reader signal to supply one or more voltages to one or more biometric sensors and a radio frequency identification (RFID) chip as long as the external RF reader signal is received;

each said biometric sensor configured to sense a biometric input from a card user and generate a biometric input signal, said biometric input and biometric input signal providing distinctive and measurable characteristics to identify individual card users; and

said RFID chip comprising;

an RF transmitter, and

one or more processors and memory units configured to implement

a communication module that stores information and when activated reads and sends the information in to the RF transmitter to transmit an RF data signal via the antenna,

a biometric module that stores a user-initialized biometric password of at least two temporally displaced entries of one or more user-initialized biometric parameters representative of user-initialized biometric inputs, and in response to a sequence of biometric inputs from the one or more biometric sensors compares a sequence of biometric input signals to the stored biometric password and, upon determination of a match authenticates and authorizes that card user and activates the communication module for a specified session time period, said communication module in turn reads and sends the information to the RF transmitter to trans transmit an RF data signal via the antenna, wherein said communication module, although power is available from the external RF reader signal, will not active and transmit the information until activated by the biometric module, wherein said biometric module stores a connection attempt threshold and counts a card user'"'"'s number of attempts to provide the sequence of biometric inputs to match the biometric password, and upon exceeding the connection attempt threshold said biometric module overwrites the information with a permanent error and transmits the permanent error in the RF data signal.

14. The secure data card of claim 13, wherein the card comprises at least first and second sensors for sensing at least first and second biometric inputs that correspond to different first and second user-initialized biometric inputs, said biometric password comprising at least a first entry for said first user-initialized biometric input and a second entry for said second user-initialized biometric input.

15. The secure data card of claim 13, wherein the card transmits the RF data signal in an open format to maintain backward compatibility with an installed base of RFID chip readers.

16. The secure data card of claim 13, wherein external reader signal induces an AC current in the antenna, said passive power module comprises a capacitor, a full wave rectifier that rectifies the AC current to produce an unregulated voltage across the capacitor and a voltage regulator that smoothes the unregulated voltage to supply the one or more voltages.

17. A secure data card, comprising:

a card;

an antenna tuned to receive an external RF reader signal;

at least one biometric sensor configured to sense a biometric input from a card user and generate a biometric input signal, said biometric input and biometric input signal providing distinctive and measurable characteristics to identify individual card users; and

at least one radio frequency identification (RFID) chip comprising

an RF transmitter, and

one or more processors and memory units configured to implement

a communication module that stores information and when activated reads the information and sends the information in to the RF transmitter to transmit an RF data signal via the antenna, and

a biometric module that stores a user-initialized biometric password of at least two temporally displaced entries of one or more user-initialized biometric inputs, and in response to a sequence of biometric inputs from the one or more biometric sensors compares a sequence of biometric input signals to the stored biometric password and, upon determination of a match of each biometric input and the temporal sequence of those biometric inputs activates the communication module, which in turn reads and sends the information to the RF transmitter to transmit an RF data signal via the antenna, wherein said communication module, although power is available, will not active and transmit the information until activated by the biometric module.

18. The secure data card of claim 17, wherein said biometric password comprises at least a first entry for a first user-initialized biometric input and a second entry for a different second user-initialized biometric input.