Personal identification fob

• US 6,041,410 A
• Filed: 12/22/1997
• Issued: 03/21/2000
• Est. Priority Date: 12/22/1997
• Status: Expired due to Term

• Current Assignee: Northrop Grumman Systems Corporation (Northrop Grumman Corporation)
• Original Assignee: TRW Limited (Zeppelin - Stiftung der Stadt Friedrichshafen)
• Inventors: Hsu, Shi-Ping, Evans, Bruce W., Ling, James M., Messenger, Arthur F.
• Primary Examiner(s): Swann, Tod R.
• Assistant Examiner(s): Darrow, Justin T.
• Application Number:
  US08/995,267
• Time in Patent Office: 820 Days
• Field of Search: 713/202, 713/186, 380/21, 380/23, 380/25, 380/283, 380/285, 709/229
• US Class Current: 713/186
• CPC Class Codes: G06V 40/13 Sensors therefor
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 9/00563 using personal physical data of the operator, e.g. finger prints, retinal images, voicepatterns
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence

Abstract

Apparatus, and a method for its use, for automatically verifying the identity of a person seeking access to a protected property, such as a car, room, building or automatic teller machine. The apparatus, which is disclosed in the form of a handheld fob (14), includes a sensor (16) for reading biometric data, such as a fingerprint image, from the person (12), and a correlator (28) for comparing the sensed data with a previously stored reference image (32) and for determining whether there is a match. If there is a match, the fob (14) initiates an exchange of signals with the "door" (10) that protects the property. Specifically, the fob (14) generates a numerical value, such as a cyclic redundancy code, from the stored reference image (32), encrypts the numerical value, and transmits it to the door (10) as confirmation of the person'"'"'s identity. For further security, the person (12) registers this numerical value at each door (10) to which access is desired. Upon receipt of identity confirmation from the fob (14), the door (10) compares the received numerical value with the one stored during registration, before granting access.

Claims

1. A personal Identification fob for automatically verifying the identity of a user seeking to use the fob for access to a protected property, the fob comprising:

a sensor, for reading fingerprint data identifying a user seeking access to a protected property;

a memory for storing a reference fingerprint image of the user during an enrollment procedure and for holding the reference image for future use;

an image correlator, for comparing the stored reference image with a fingerprint image of the user seeking access, as obtained from the sensor, and for determining whether the two images match; and

means for securely communicating identity confirmation to a door that provides access to the protected property upon receipt of the identity confirmation, wherein the means for securely communicating identity confirmation includes

means for generating a numerical value from the stored reference fingerprint image, including means for generating a cyclic redundancy code from the stored reference fingerprint image,

encryption logic, for encrypting the numerical value, and

a transmitter for sending the encrypted numerical value to the door, together with user identification data,

wherein the door provides the desired access to the protected property upon confirming that the transmitted numerical value is the same as one previously provided by the user during a registration procedure.

2. A personal identification fob as defined in claim 1, and further comprising:

a receiver, for receiving an encryption key generated by and transmitted from the door; and

means for storing a private encryption key in the fob;

and wherein the encryption logic includes means for doubly encrypting the numerical value using the encryption key received from the door and the private encryption key.

4. A method as defined in claim 2, wherein the step of securely communicating includes:

generating a numerical value from the stored reference biometric data;

encrypting the numerical value;

transmitting the encrypted numerical value to the door;

transmitting user identification data to the door;

receiving and decrypting the encrypted numerical value, at the door;

comparing the decrypted numerical value with one previously stored at the door by the user during a registration process, to confirm the identity of the user; and

if the identity of the user is confirmed, activating a desired function to provide access to the protected property.

5. A method as defined in claim 4, wherein the step of securely communicating further comprises:

generating at the door a random pair of door public and private encryption keys;

transmitting the door public key to the personal identification device;

selecting for the personal identification device a pair of public and private encryption keys for all subsequent uses of the device;

providing the personal identification device public key to the door as part of the door registration process; and

storing the personal identification device private key secretly in the device;

and wherein the encrypting step includes doubly encrypting the numerical value with the door public key and the personal identification device private key.

6. A method as defined in claim 5, wherein door performs the additional step of:

decrypting the doubly encrypted numerical value using the personal identification device public key and the door private key.

3. A method for automatically verifying the identity of a user seeking access to a property protected by a door, the method comprising the steps of:

receiving from the door a "wake-up" message at a personal identification device carried by the user, upon approaching the door to seek access; and

initiating normal operation of the personal identification device on receiving the "wake-up" message,

sensing biometric data of a user, through a sensor that is part of the personal identification device;

comparing the sensed biometric data with reference biometric data previously stored in the personal identification device;

determining whether the sensed biometric data match the reference biometric data;

if there is a match, securely communicating an identity confirmation to the door; and

upon confirmation of the identity of the user at the door, actuating a device that provides the desired access.