Information management and security system

• US 5,629,981 A
• Filed: 07/29/1994
• Issued: 05/13/1997
• Est. Priority Date: 07/29/1994
• Status: Expired due to Term

• Current Assignee: Texas Instruments, Inc.
• Original Assignee: Texas Instruments, Inc.
• Inventors: Nerlikar, Virupax M.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/283,081
• Time in Patent Office: 1,019 Days
• Field of Search: 380/23-25, 340/825.34
• US Class Current: 713/168
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G07F 17/0014 for vending, access and use of specific services not covered anywhere else in G07F17/00 meter-controlled dispensing of liquid, gas or electricity G07F15/00
• CPC Class Codes: G07F 17/26 for printing, stamping, franking, typing or teleprinting apparatus ticket printing or the like apparatus G07F17/42
• CPC Class Codes: G07F 7/0806 Details of the card record carriers per se G06K
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A closed loop, (networked) information management and security system which provides a secure, end-to-end fully automated solution for controlling access, transmission, manipulation, and auditability of high value information comprising an RFID transponder badge 302 and an RF reader transceiver 315 which is associated with a host peripheral or a network. The RF reader transceiver 315 automatically identifies and verifies authorization of the RFID transponder badge holder via a "handshake" prior to allowing access to the host peripheral. The energy generated by the transmission of the interrogation signal from the RF reader means 315 provides a power source which is accumulated and then used to activate a transponder 304 response from the RFID transponder badge 302. The RF reader/transceiver 315 writes the access transaction on either the RFID transponder badge 302 and/or the host peripheral database or the network controller. Alternatively, the RF reader means 315 may be associated via network server with a LAN, WAN, or MAN. Optionally, an RFID badge 302a may be powered by an independent power source such as a flatpak battery 314.

Claims

1. An information management and security system comprising:

a transponder having an identification code, said transponder including a charge storage element for storing energy received from an interrogation signal, said transponder subsequently using the stored energy to power the transmission of said identification code;

an transceiver to send said interrogation signal to said transponder and to receive said identification code from said transponder;

a first terminal device connected to and activated by said transceiver;

a host network element in communication with said transceiver, said host network element having authorized identification codes stored in memory, whereby said host network element compares the identification of said transponder with the authorized identification codes stored in memory; and

a second terminal device connected to said host network element for communicating with said first terminal device after said host network element has verified the authorized identification of said transponder.

2. An information management and security system as set forth in claim 1, wherein prior to allowing communication between said first terminal device and said second terminal device said transceiver interrogates said transponder which causes said transponder to respond by broadcasting identification signals so that said transceiver receives the identification signals and communicates the identification signals to said host network element which authenticates the authorization of said transponder by comparing the identification signals with said authorized identification codes stored in said memory of said host network element.

3. An information management and security system as set forth in claim 1, wherein said transponder comprises a Personal Computer card having an transponder, mass memory, and input/output data means.

4. An information management and security system as set forth in claim 3, wherein said mass memory of said transponder is application specific memory.

5. Information management and security system as set forth in claim 1 wherein said transponder comprises an RF transponder.

6. An information management and security system as set forth in claim 3, wherein said transponder further comprises a battery power source.

7. An information management and security system as set forth in claim 1, wherein said transceiver writes a record of the transaction on said transponder.

8. An information management and security system as set forth in claim 3, wherein said transponder further comprises encryption means to encrypt signals emitted from said transponder.

9. An information management and security system as set forth in claim 8, wherein said encryption means comprises a random number seeding.

10. An information management and security system as set forth in claim 9, wherein said encryption means further comprises an encryption chip.

11. An information management and security system as set forth in claim 8, wherein said encryption means further comprises an integrated encryption and packetization chip.

12. An information management and security system as set forth in claim 1, wherein said transponder stores unique biographical information of a user of said transponder in Read Only Memory.

13. An information management and security system as set forth in claim 1, wherein said transceiver connected to said first terminal device writes the transaction on said singular transponder.

14. An information management and security system as set forth in claim 1, wherein said transceiver connected to said first terminal device stores a record of the transaction in memory.

15. An information management and security system as set forth in claim 1, wherein said transceiver connected to said first terminal device writes the transaction on said host network element.

16. An information management and security system as set forth in claim 1, wherein a request for a transfer of data between said first terminal and said second terminal is automatically stamped with the location, date and time of the request and stored in memory in said transceiver.

17. An information management and security system as set forth in claim 1, wherein said host network element records the identification communicated by said transponder.

18. An information management and security system as set forth in claim 1, wherein said transponder communicates with an environmental sensor.

19. An information management and security system as set forth in claim 18, wherein said environmental sensor detects an environmental condition selected from the group consisting of humidity, temperature, ozone, oxygen, and smoke particles.

20. An information management and security system as set forth in claim 1, wherein said first terminal device is selected from the group consisting of printers, copiers, pagers, personal digital assistants, personal computers, dumb terminals, workstations, facsimile machines, telephones, cellular phones, Video Cassette Recorders, radios, electronic door mechanisms, mass memory storage devices, data storage devices, automated teller machines, or modems.

21. An information management and security system as set forth in claim 1, wherein said second terminal device is selected from the group consisting of printers, copiers, pagers, personal digital assistants, personal computers, dumb terminals, workstations, facsimile machines, telephones, cellular phones, Video Cassette Recorders, radios, electronic door mechanisms, mass memory storage devices, data storage devices, automated teller machines, or modems.

22. An information management and security system as set forth in claim 1, wherein said host network element is selected from the group consisting of network servers, network controllers, central office switches, or base relay stations.

23. An information management and security system as set forth in claim 20, wherein said second terminal device is selected from the group consisting of printers, copiers, pagers, personal digital assistants, personal computers, dumb terminals, workstations, facsimile machines, telephones, cellular phones, Video Cassette Recorders, radios, electronic door mechanisms, mass memory storage devices, data storage devices, automated teller machines, or modems.

24. Information management and security system as set forth in claim 1 wherein said transponder comprises an optical transponder.

25. Information management and security system as set forth in claim 1 wherein said transponder comprises an infrared transponder.

26. Information management and security system as set forth in claim 1 and further comprising a third terminal device connected to said host network element for communicating with said first terminal device after said host network element has verified the authorized identification of said RFID transponder.

27. An information management and security system comprising:

a first security badge including a transponder, a mass memory and an input/output circuit;

a first transceiver to wirelessly send and receive signals to and from said first transponder, said first transceiver to continuously transmit a broadcast signal until receiving a response from said first security badge and then, upon receipt of said response, said transceiver to receive a first authorization code from said first security badge and to store a record of the receipt of the authorization code;

a first terminal device connected to and activated by said first transceiver;

a second security badge including a transponder, a mass memory and an input/output device;

a second transceiver to send and receive signals to and from said second RFID transponder, said second transceiver to continuously transmit a broadcast signal until receiving a response from said second security badge and then, upon receipt of said response, said second transceiver to receive a second authorization code from said second security badge and to store a record of the receipt of the authorization code;

a second terminal device connected to and activated by said transceiver; and

a host network element in communication with said first transceiver and said second transceiver, said host network element to receive the first authorization code from the first transceiver and the second authorization code from the second transceiver and compare the first and second authorization codes with at least one host authorization code, said host network element to send a first verification code to the first transceiver upon verification of the first authorization code and to send a second verification code to the second transceiver upon verification of the second authorization code.

28. A method of securing access to a terminal device, said method comprising the steps of:

providing an authorized user with a security badge which includes a personal computer card, a read/write transponder, a mass memory and a input/output data circuit, said transponder electronically storing an identification code; and

associating a transceiver with said terminal device, said transceiver being operable to communicate with said terminal device;

wherein said authorized user gains access to said terminal device by;

(a) bringing said security badge within a selected distance of said transceiver, said security badge located so that it is not physically visible so that said transponder is not within line-of-sight with said transceiver;

(b) transmitting an interrogation signal from said transceiver;

(c) receiving said interrogation signal at said security badge and storing said interrogation signal within a charge storage device within said security badge;

(d) transmitting said identification code from said security badge to said transceiver wherein the transmitting is powered by energy derived from said charge storage device;

(e) receiving said identification code at said transceiver; and

(f) verifying said identification code;

wherein steps (b)-(f) are performed without said transponder being physically visible.

29. The method of claim 28 wherein said terminal device comprises a computer.

30. The method of claim 28 and further comprising the step of storing said interrogation signal within a charge storage device within said transponder unit wherein said step of transmitting said identification code is powered by energy derived from said charge storage device.

31. A method of securely communicating information between two locations comprising:

requesting an information transfer from a first location to a second location;

interrogating a radio frequency identification (RFID) transponder at said second location from a radio frequency (RF) transceiver at said second location;

transmitting an identification code from said RFID transponder at said second location to said RF transceiver at the said second location;

transmitting said identification code from said second location to a third location, said third location remote from said first and second locations;

comparing the authorization of said identification code with authorized identification codes stored in memory at said third location;

communicating an authorization signal from said third location; and

transmitting the requested information in packets to said second location after the authorization is verified, each of the packets of information including a header, the information to be transferred and a footer wherein the header includes an identification number for a user at the first location, an identification number for a receiver at the second location, a date/time stamp and a location stamp.

32. A method of securely communicating information between two locations comprising:

requesting an information transfer from a first location to a second location;

interrogating a radio frequency identification ("RFID") transponder at said first location from a radio frequency ("RF") transceiver at said first location;

transmitting an identification code from said RFID transponder at said first location to said RF transceiver at said first location;

transmitting said identification code from said first location to a third location, said third location remote from said first and second locations;

comparing the authorization of said identification code with authorized identification codes stored in a memory at said third location;

communicating an authorization signal from said third location; and

transmitting the requested information in packets to said second location after the authorization is verified, each of the packets of information including a header, the information to be transferred and a footer wherein the header includes an identification number for a user at the first location, an identification number for a receiver at the second location, a date/time stamp and a location stamp.

33. A method according to claim 32, wherein the step of transmitting the requested information to said second location after the authorization is verified, comprises the steps of:

storing the information requested for transfer in memory;

interrogating a radio frequency identification ("RFID") transponder at said second location from a radio frequency ("RF") transceiver at said second location;

transmitting an identification code from said RFID transponder at said second location to said RF transceiver at said second location;

comparing the authorization of said identification code with authorized identification codes stored in memory; and

transmitting the requested information to said second location after the authorization of the identification code of the RFID transponder at the second location is verified.

34. A method according to claim 33, wherein the step of transmitting the requested information to said second location after the authorization of the identification code of the RFID transponder at the second location is verified, comprises the step of:

transmitting the requested information to a terminal device at said second location, said terminal device being in communication with said RF transceiver at said second location.

35. A method according to claim 33, wherein the method further comprises the steps of:

encrypting the information transmitted to said second location; and

decrypting the information received at said second location.

36. A method according to claim 32, wherein the step of comparing the authorization of said identification code with authorized identification codes stored in memory is performed by a host network element.

37. A method according to claim 32, wherein the step of comparing the authorization of said identification code with authorized identification codes stored in memory is performed by said RF transceiver.

38. A method according to claim 32, wherein the method further comprises the steps of:

encrypting the identification code transmitted from said RFID transponder; and

decrypting the identification code at said RF transceiver.

39. A method according to claim 33, wherein the method further comprises the step of:

recording the date and time of each request for information transfer.

40. A method according to claim 34, wherein the method further comprises the step of:

recording the location of each request for information transfer.

41. A method according to claim 33, wherein the method further comprises the step of:

recording the date and time of each information transfer from said first location to said second location is completed.

42. A method according to claim 33, wherein the method further comprises the step of:

recording the location of destination of each information transfer.