EP2321801A1

EP2321801A1 - Identification module and pointing method using such a module

Info

Publication number: EP2321801A1
Application number: EP09740411A
Authority: EP
Inventors: Samer Jarrah
Original assignee: Individual
Current assignee: Individual
Priority date: 2008-08-04
Filing date: 2009-07-29
Publication date: 2011-05-18
Also published as: WO2010015773A1; FR2934739A1; US20110202440A1; FR2934739B1

Abstract

Portable identification module comprising a housing (51) of pocket format and containing; a sensor (53) of a biometric characteristic at the surface of said housing; an element (52, 54, 55) for processing the biometric characteristic providing a numerical result; and a transmitter (57) suitable for sending said numerical result in a secure form via a DTMF signal through a telephone pathway.

Description

IDENTIFICATION MODULE AND POINTING METHOD USING

Such a module.

The present invention relates to an identification module and a pointing method at a remote workplace using this module.

To date, there are numerous identification devices using a biometric technique such as the analysis of the fingerprint, the palm of the hand, the iris of the eye, etc.

However, these devices are very often expensive and require the establishment of a suitable infrastructure, for example, in the form of cabling of the place of use. These devices are then perfectly adapted to the records of employees' working hours.

Indeed, methods and pointing devices have been used for many years to enable employees to record the daily hours of work they perform for their employer. Punching machines are thus generally arranged at the entrance of the companies and are connected directly or indirectly to a computing unit for the processing of the clockings making it possible to calculate the duration of work carried out by each employee and the corresponding salary. This type of score does not pose any problem with regard to the legal provisions regulating its implementation when employees work on the premises of their company. Subject to compliance with the regulations on personal data, these pointers may include biometric analysis means to increase security and / or simplify use, for example by removing the badge.

However, this implementation is much more delicate when the employee is assigned to a position in the premises of another company for example in the context of maintenance operation or access to sensitive sites. As part of these operations, the service providers should send a person to point these employees at the place of their work. Given the difficulties of implementing such a solution, it is common that no score is achieved.

An object of the invention is to provide a solution for the pointing of employees exercising in remote locations of the premises of their employer. For this purpose, according to one aspect of the invention, there is provided a portable identification module comprising:

• a pocket-sized box containing:

A sensor of a biometric characteristic on the surface of said housing;

A biometric feature processing element providing a numerical result; and

A transmitter adapted to send said digital result in a secure form via a DTMF signal by a telephone channel. According to particular embodiments, used alone or in combination:

• the DTMF signal is a signal modified to be transported by telephone as a voice signal;

• the module comprises a cover mounted on the housing movable between a protective position of the sensor and a release position of the sensor for its use;

The processing element comprises a memory containing information of at least one reference biometric characteristic and a comparator of the sensed biometric characteristic and of each reference biometric characteristic, the numerical result being the result of said comparator adapted to indicate whether the biometric characteristic captured, or not, to one or more of the reference biometric characteristic (s); The memory then also contains an identifier associated with each reference biometric characteristic and the transmitted digital result is the identifier corresponding to the recognized biometric characteristic;

The processing element is adapted so that the numerical result is the template, or a signature thereof, of the sensed biometric characteristic;

The module further comprises a receiver of an acoustic signal adapted for, in connection with the transmitter, to establish a session of communication with an IPBX server via any telephone apparatus;

The module further comprises means of payment for triggering a payment authorization transmitted by the issuer and in which the processing means comprise a memory containing a biometric validation characteristic and are adapted to activate the means of payment only if the biometric characteristic captured corresponds to the biometric validation characteristic; The module further comprises a housing of an RFID tag making it possible to deactivate by default said RFID tag and in which the processing means comprise a memory containing a biometric validation characteristic and are adapted to activate the RFID tag only if the sensed biometric characteristic corresponds to the biometric validation characteristic.

According to a second aspect of the invention, a clocking method comprises a parameterization phase and a nominal operating phase, the parameterization phase comprising the steps of: • assigning to at least one user

The preceding identification module containing a biometric characteristic of said user and an identifier and

• at least one authorized extension number of the user; • store in an IPBX server the user's ID and authorized extension number;

• the nominal operating phase comprising the steps of:

• when arriving at the workplace and leaving the workplace, have the server call the user from the telephone and • authenticate the user with the identification module by checking a biometric characteristic the captured user, and If the authentication is successful, cause the box to send a successful authentication signal to the server containing the user's identifier, and

• within the server, check the call number and the identifier and memorize a time of the call and identify it in an archiving file.

The invention can be implemented from a fixed or mobile telephone. This allows a recording of employee schedules. With the use of a workplace telephone or by locating the call via a mobile phone, the presence of the user at the workplace is attested. The IPBX server can provide simple telephone number recognition and call data storage such as call number and time. The score is thus ensured in a simple and reliable way. The identification of the user is carried out by the identification module which, thanks to the biometric characteristic, makes it possible to ensure that the person calling is actually the registered user.

If the telephone number is different from the telephone number of the user's place of work whose identifier has been communicated to the server, the identifier and the call time are stored in an archiving file of the user. failures.

It is possible to keep track of faulty scores that can be processed later by an operator.

Other features and advantages of the invention will emerge on reading the following description of a particular non-limiting embodiment of the invention.

Reference will be made to the appended drawings, among which:

- Figure 1 is a schematic view of a pointing system according to one embodiment of the invention, illustrating the implementation of a pointing method according to one embodiment of the invention;

FIG. 2 is a schematic perspective view of an identification module according to one embodiment of the invention; and FIG. 3 is a schematic perspective view of an alternative embodiment of the module of FIG. 2.

With reference to FIG. 1, the method and the pointing system are arranged to enable users working outside the premises 1 of the company employing them, in places 2 equipped with telephone sets 3, to communicate their time schedules on their workplaces. The telephone sets 3 are connected to a telecommunication network 100 here comprising the telephone network and the Internet network.

The pointing method is implemented by means of a system comprising an IPBX server 10 of a call reception platform of a telephone operator. The IPBX server 10 is associated with a memory that contains:

user identifiers and numbers of at least one of the telephones 3 of the workplace of each user, a telephone station from which the users are authorized to call the IPBX server 10 to point,

- an archiving file of the scores,

- an archiving file of the pointing failures.

The IPBX server 10 is connected to the network 100 by means of Internet Voice Processing (VoIP), these means ensuring the decompression of flows from the Internet. The IPBX server 10 is reachable by a call number such as an untaxed call number.

The method of the invention comprises a parameterization phase of the IPBX server 10 comprising the steps of: assigning to at least one user an identifier and at least one telephone number 3 of the user's workplace 2;

- Store in the IPBX server 10 the identifier and the (or) telephone number 3 of the workplace 2 of the user.

The user's identifier includes a sub-identifier of the company employing the user and a personal sub-identifier of the user. Preferably, the company stores in a table contained in a server 20, on the one hand, the identifiers of its employees working outside its premises 1 and, on the other hand, one or more telephone numbers 3 located on the server. workplace 2 of its employees. The server 20 is connected to the network 100. This table is transmitted via the Internet 100 to a centralization server 30 pointing data that communicates these tables to the IPBX server 10 via a WEB server 31 connected to the Internet network 100 and the server 30. These servers 30 and 31 are here hosted in the premises of a service provider 32 which maintains a database for each of its customers (here only company 1 is a client), each database containing the customer's table and the scores of its remote employees for a period data and being accessible by the server 20 to allow the company to update the table and recover the scores. Alternatively, these servers could be hosted directly by the company employing the users.

The method comprises a nominal operation phase comprising the steps of:

- On arrival at the workplace 2 and its departure from it, the user calls the IPBX server 10 from the telephone station 3 that it is authorized to use and communicates its identifier to the server IPBX 10;

the IPBX server 10 verifies the call number and the identifier and stores a time of the call and the identifier in the file of archiving of the scores.

During the telephone call to the IPBX server 10, the IPBX server 10 guides the user by voice or voice indications so that the user can at the appropriate moment transmit his identifier via the telephone set 3 that he is authorized to use. The identifier is thus transmitted by modified DTMF signals to the IPBX server 10. It should be noted that the signals

DTMF are modified to ensure that they will be routed through the telephone network as a voice signal and not in the form of signaling

DTMF. This modification may consist, for example, in modifying the basic frequency of these signals.

The IPBX server 10 checks whether the extension number used by the user corresponds to one of the telephone numbers stored in connection with the presented identifier. If the call number corresponds to one of these numbers, the IPBX server 10 stores a time of the call and the identifier in the file archiving scoring. If the call number does not match one of these numbers, or if the call number is hidden, the caller ID and time are stored in a fault archive file. The service provider periodically sends a request by the web server 31 to retrieve the archiving files via the network 100 and stores the scores in the database of the client company or companies corresponding to the identifiers stored in the archive file. To ensure that the pointing person is one of the registered users, the identification of the user includes a user authentication step performed by a verification of a biometric data of the user.

The biometric data is captured by a box or identification module held by the user and the module transmits after authentication a successful authentication signal or a failure signal transmissible by telephone and recognizable by the server. The IPBX server is programmed to record in the archive file an indication of success or failure of an authentication based on an authentication success signal transmitted by telephone during the call. The success signal is, for example, the identifier of the user.

The portable identification module includes a biometric feature sensor, a biometric feature processing member for providing a digital result, and a transmitter for sending the digital result as a DTMF signal over a telephone channel.

In the embodiment described in detail, the biometric characteristic is the fingerprint. However, it is understood that other biometric characteristics are usable as the analysis of the iris of the eye or the shape of the face provided that the module remains portable.

The identification module, generally designated 50, comprises a housing 51 incorporating a microprocessor 52 which constitutes the treatment element and is connected to:

a fingerprint sensor 53 comprising here a sensitive surface flush with an outer surface of the casing 51;

a clock 54;

a non-volatile memory 55 containing, on the one hand, an authentication program, an encryption program, an encryption key, a transaction history and, on the other hand, in encrypted form a serial number and one or more image of the fingerprint of the user;

a microphone 56 and a loudspeaker 57 via a transmission / reception device 58 of modified DTMF signals; a power source 59, here a battery;

- luminous indicators 60.

The case has a pocket size, for example less than 30 cm ³ , so as to allow easy transport of the module by the user without particular discomfort and thus, the user can permanently have this module. For example, the case is designed so that the module can serve as keychain. In the embodiment described, the entire module has a weight of less than 50 g.

The authentication program is arranged to capture an image of a fingerprint placed on the fingerprint sensor 53 and the comparison of this image with a stored image.

The encryption program makes it possible to encrypt or decrypt data contained in the memory 55 or messages received from the IPBX server 10.

Preferably, the commissioning of the identification module is performed by means of a switch associated with a cover 61 mounted on the housing to be movable between a protection position of the fingerprint sensor 53 and a release position of this sensor allowing its use.

The indicator lights 60 comprise here: - a validation flag 60.1,

an error indicator 60.2,

an indicator 60.3 indicating that the module must be placed in front of the earpiece of the handset of the telephone,

- an indicator 60.4 indicating that the module must be placed in front of the microphone of the handset of the telephone.

The clock 54 is here a real time clock having a precision of the order of two minutes per year.

One mode of operation of the module will be described by way of example. The user wishing to point calls the IPBX server 10 from an authorized telephone and opens the cover 61 and the microprocessor 52 briefly lights the indicator 60.1 if the battery charge level is correct to show that the module is ready for operation. If the battery charge level is too low, the microprocessor 52 flashes the indicator 60.2 to show that the battery needs to be changed.

In the first case, the microprocessor 52 is waiting for a finger on the fingerprint sensor 53.

When a finger is detected, an image of the fingerprint of this finger is captured and compared by the microprocessor 52 after encryption to the stored image.

If the comparison is successful, indicator 60.4 is lit and an encrypted DTMF message is transmitted. This message contains: the serial number of the module 50, the state of the battery, the local time provided by the clock, the validity of the time (battery changed or not), a value of integrity of the message ( for example a checksum). This message is an indication of successful authentication. The identification of the user is then done by relationship between the serial number of the module and the user, relationship established during the delivery of the module to this user. The message may also contain a digital signature of the fingerprint, or an identifier associated with this fingerprint, the latter allowing the server to establish the identity of the user.

If the message is correctly received by the IPBX server 10, an audio message is transmitted to the telephone set that the user is using. The local time and the identifier are stored in the file of archiving of the scores.

If the comparison is a failure, the microprocessor 52 turns on the indicator 60.2.

Note that if the clock has been reset, pointing is not possible and a configuration phase must be performed.

The configuration phase allows the recording of a fingerprint in the identification module and its transmission to the IPBX server 10 directly and setting the time of the clock 54. The user wishing to enter the configuration phase calls the IPBX server 10 from an authorized telephone and opens the cover 61 and the microprocessor 52 briefly lights the indicator 60.1 if the battery charge level is correct to show that the module is ready for operation, If the battery charge level is too low, the microprocessor 52 flashes the indicator 60.2 to show that it is necessary to change the battery.

In the first case, the microprocessor 52 is waiting for a finger on the fingerprint sensor 53. When a finger is detected, an image of the fingerprint of this finger is captured and compared by the microprocessor 52 after encryption to the stored image.

In the absence of a stored fingerprint, the microprocessor 52 flashes the indicator 60.3 and sends an encrypted DTMF message containing: the serial number of the module 50, the state of the battery, the local time provided by the clock , the validity of the time (battery changed or not), the presence of a fingerprint stored, a random byte of control.

The microprocessor then flashes the indicator 60.3 so that the user presents the module 50 in front of the handset earpiece. The IPBX server 10 then transmits an encrypted message containing: the authorization to record a fingerprint, a time setting of the clock 54 if the time was not valid, a copy of the random byte, a integrity value of the message (for example a checksum).

A fingerprint registration operation is then performed. The beginning of this operation is for example signaled by a sound or light signal.

In case of impossibility of connection to the IPBX server, it is possible to provide that the scores are stored in the identification module 50 to be transmitted later. The identification module may be subject to variants for particular uses.

It can record several biometric characteristics of the same person or the biometric characteristics of several people. In the latter case, an identifier is associated with each impression / person. This identifier being sent by the sender, the receiving server is able to determine the person who has used the module. This thus advantageously makes it possible to use a single identification module for a whole work team having to point from one and the same place. The ability to record multiple fingerprints of the same person adds a security condition by defining one of the fingers as an alert finger used when the user acts under duress. Thus the server is informed that the current operation is not performed under the control of the user. The digital result sent may be the template of the fingerprint that is to say the set of coordinates of minutiae defining the uniqueness of a fingerprint or a coding of this template. The identification of the user is then done at the server that compares the received template with a database of known templates. In the case of other biometric characteristics such as the iris of the eye or the shape of the face, the template is the set of coordinates of the remarkable points defining the uniqueness of the characteristic.

In this variant embodiment, the identification module no longer has to be parameterized for a particular user. It also allows remote user identification. For example, Alice calls Bob to give her confidential information, Bob wants to verify Alice's identity in a reliable and tamper-proof way, Bob asks Alice to identify herself by the identification module:

• Alice positions the identification module in front of the speaker of her telephone handset

• Alice puts her finger on the impression sensor 53;

• The identification module sends the code and / or template in modified DTMF format;

• The IPBX intercepts the frame, decrypts it and sends it to the Fingerprint Identification Server;

• If the fingerprint is recognized, the IPBX beeps to Bob's phone (or any signal defined as a positive acknowledgment) • If the fingerprint is not recognized, it emits a long beep to Bob's phone (or any signal defined as negative recognition)

In a third variant, the identification module has in memory the information of a payment card to allow secure remote payment. The ability of the biometric module to store multiple fingerprints makes it usable by many people. For example,

• A consumer makes purchases on a website, at the time of payment, the site assigns him an order number (ex: 2475) and asks him to call a phone number to make the payment of his order;

• The consumer calls a phone number;

• A voice server prompts him to dial his command number; then • The voice server asks him to identify himself by the identification module;

• The consumer puts the identification module on the microphone of the telephone handset and places his finger on the sensor 53;

• The identification module sends in modified DTMF information necessary for payment;

• The IPBX sends this information to a secure payment site;

• The voice server confirms or not the validity of the payment.

In a fourth variant, FIG. 3, the identification module is housed in a hatch 63 specially provided for this purpose with an RFID tag. The electronic card of the identification module is equipped with a circuit 62 designed specifically to prevent the RFID tag from transmitting its code when it is in the presence of an activation radio signal from a transmitter. When the user puts his finger and his fingerprint is known, the identification module disables the operation of the circuit 62 for 5 seconds which will allow the RFID tag to return to normal operation.

The generalization of RFID technology and the traceability of a consumer carrying such a technology without his knowledge is a problem of privacy. This variant advantageously allows the consumer to regain control of the technology because it is the only one to make his label active.

In addition, RFID technology is increasingly used for access control system or electronic payment inter-company

(coffee machine, photocopier, company restaurant, ...). The momentary or definitive flight of such a card poses a serious problem of security. With this variant, in case of theft, the card is unusable.

The invention has been illustrated and described in detail in the drawings and the foregoing description. This must be considered as illustrative and given by way of example and not as limiting the invention to this description alone. Many alternative embodiments are possible.

The module memory may also contain the user identifier and the control element is arranged to transmit the identifier by telephone as modified DTMF signals.

When the method is implemented in several countries, a single IPBX server is preferably used. In this case, a country-specific call number is provided for joining the call reception platform of an operator from each country which retransmits the call via a link, for example SDSL, to the IPBX server.

The invention can also be used by means of mobile or cellular telephones. It is also possible to carry out a location of the phone either via a transmitter / GPS receiver integrated by it or by the telephone operator. The module can integrate a GPS transmitter.

In the claims, the word "comprising" does not exclude other elements and the indefinite article "one" does not exclude a plurality.

Claims

1. Portable identification module comprising

A pocket-sized case (51) containing;

A sensor (53) of a biometric characteristic on the surface of said housing;

A processing element (52, 54, 55) of the biometric characteristic providing a numerical result; and

• a transmitter (57) adapted to send said digital result in a secure form via a DTMF signal by a telephone channel.

2. Module according to claim 1, wherein the DTMF signal is a signal modified to be transported by the telephone channel as a voice signal.

3. Module according to one of claims 1 or 2, comprising a cover (61) mounted movably on the housing between a protective position of the sensor and a release position of the sensor for its use.

Module according to any one of the preceding claims, wherein the processing element comprises a memory containing information of at least one reference biometric characteristic and a measured biometric characteristic comparator Ha and each reference biometric characteristic, the numerical result being the result of said comparator adapted to indicate whether or not the sensed biometric characteristic corresponds to the or one of the reference biometric characteristic (s).

5. Module according to claim 4, wherein the memory also contains an identifier associated with each reference biometric characteristic and the transmitted digital result is the identifier corresponding to the recognized biometric characteristic.

The module of any one of claims 1 to 3, wherein the processing element is adapted so that the digital result is the template, or a signature thereof, of the captured biometric characteristic.

7. Module according to any one of the preceding claims, further comprising a receiver (56) of an acoustic signal adapted for, in connection with the transmitter, establish a communication session with an IPBX server via any telephone device .

8. Module according to any one of the preceding claims, further comprising payment means for triggering a payment authorization transmitted by the issuer and wherein the processing means comprise a memory containing a biometric validation feature and are adapted for activate means of payment only if the biometric characteristic captured corresponds to the biometric validation characteristic.

9. Module according to any one of the preceding claims, further comprising a housing of an RFID tag for inactivating by default said RFID tag and wherein the processing means comprise a memory containing a biometric validation feature and are adapted to activate the RFID tag only if the sensed biometric characteristic matches the biometric validation feature.

10. A time pointing method comprising a parameterization phase and a nominal operating phase, the parameterization phase comprising the steps of: • assigning to at least one user

An identification module according to any one of claims 1 to 9 containing a biometric characteristic of said user and an identifier and

• at least one authorized extension number of the user; • store in an IPBX server the user's ID and authorized extension number; the nominal operating phase comprising the steps of:

• upon arrival at the workplace and when leaving the workplace, have the server call the user from the telephone and

• authenticate the user by the identification module by checking the biometric characteristic of the captured user, and

• if the authentication is successful, the box sends a successful authentication signal to the server containing the user's identifier, and • within the server, check the call number and the identifier and memorize a time of the call and the identifier in an archiving file of the scores.