FR2862794A1 - Persons authentication and traceability permitting system, has micro-programmed device that is integrated with radio frequency identifier and transmits message, corresponding to movement of person, to management supervisor - Google Patents

Abstract

The system has radio frequency units that identify a person (6) in a particular zone. Micro-programmed devices are integrated with radio frequency identifiers. The device transmits a message, corresponding to the movement of the person, to a management supervisor (12), where the message transmission is stopped when the identifier is moved out of the zone or destroyed voluntarily.

Description

passengers. Similarly, traceability at airport sites makes it possible to

  ensure that the supervisory, control or security personnel are at their workstation and justify this presence to the police authorities.

  - Traceability, localization and authentication of health care staff inside hospitals to locate them quickly in case of emergency intervention request and to authorize them to carry out certain actions.

  Traceability and localization of people in hospitals or medical facilities for patients with impaired orientation, suffering from Alzheimer's disease or other neurodegenerative diseases, whose wandering and leaving specified areas may put them at risk for their own safety, but also generates responsibility for the hospital. Traceability management allows patients to move freely in a defined site or a defined area of the site, and allows carers to: o be notified and identify a person entering or leaving the site or zone, o to follow the patient geographically and in real time in the site, to generate an alarm if the patient remains in an area for an abnormally long time, this time being configurable, according to the principle of the dead man used in the protection isolated workers, o generating an alarm on the supervisor if a malfunction occurs in medical equipment transported by the patient, provided that the device is capable of delivering information in the form of an electrically potential-free contact or that he can communicate this information via a computer link.

  o Generate an alarm to the caregiver if the patient falls on the ground (by shock detection) or is inanimate (by motion detection).

  - Traceability, localization and authentication of personnel working in sites classified Sévéso or in establishments classified pyrotechnics, it is essential to know their geographical location in real time to intervene on area knowingly during an accident or an explosion, in order to know the number and identity of personnel that may be involved, to allow the release of relief when the identifier they carry on them is destroyed by a chemical accident or explosion.

  Traceability, location and authentication of security and surveillance staff in prisons. Traceability of the 10 prisoners in these same penitentiary establishments.

  Traceability, localization and authentication of safety and security personnel in safety-critical establishments such as nuclear power plants, or in establishments in which the public is very present, such as SNCF and RATP stations, large shopping centers. ..

  Traceability, location and authentication of people to create virtual physical access control applications, ie without dedicated wiring and without traditional badge readers.

  Several devices already exist on the market to prevent the theft or movement of equipment or works of art. Some of these devices use radio frequency identification, also known as RFID (Radio Frequency Identification) to transmit alarm information. The terms RFID, Radio Frequency Identification and Radio Frequency Identification are trademarks of the Applicant.

  A traceability device has been designed, developed and patented by the applicant, for physical traceability applications of goods such as computers, works of art, or any other object including the cost of material replacement or the cost of loss or theft of data is important.

  An essential feature of this device is that it operates in positive logic, that is to say that the radio frequency tag used emits a parameterizable periodic signal. On the other hand, the Applicant had also proposed the use of Power Line Carrier (PLC) technology to provide the transport of information more economically than using conventional wiring on a traditional dedicated network.

  The devices and applications of traceability of existing assets, including that of the plaintiff, require to be technically, technologically and functionally adapted and improved in order to provide a solution to the different issues of traceability, location of people, identification and authentication of these people. Indeed, it is necessary to ensure an effective functioning of traceability and location of people to not only detect the geographical location (the zone, the site) or io is the radio frequency identifier used to ensure traceability, but also to determine the different places of particular passage such as the doors, airlock or even the elevators. This also makes it possible to identify and authenticate access to vehicles, industrial trucks, computers with various equipment and machines.

  The invention will be better understood on reading the following description: The proposed device uses, among others, the principle of communication and identification by radio frequency, whose technical and technological operation has been known for several decades. . The people whose traceability and location are to be ensured are provided with radio frequency identifiers, that is to say badges equipped with radio frequency tags stuck on the conventional badge holders, or linked to said persons by means of radio frequency identifiers. bracelets, pendants or keyrings. To simplify the reading of this document, the various terms generally used to define different form factors such as: badges, tags, transponders, radio frequency identifiers, radio frequency tags, radio frequency wristbands, radio frequency keychain will be in this description. defined under the sole term device.

  Devices that are used for traceability, location, identification and authentication of individuals advantageously integrate several technologies.

  Each device is at least equipped with an active radio frequency component, that is to say that it contains a battery power source and periodically transmits a radio frequency message containing the virtual identity of the person whose wish to trace the presence. The transmission frequency of the identifier in active mode is configurable to allow it to be adjusted to the temporal need of traceability. In the case of airport management, for example, this time will be set to 60 seconds. However, in the context of an application in a medical, hospital or pyrotechnic, the emission period will be shorter in order to trigger the relief as soon as possible.

  Each device is at least equipped with a passive radio frequency component, that is to say that it receives the energy necessary for its operation when said identifier is placed in an electromagnetic or radio electric field.

  The identifier is then able to give their identity during an interrogation by an RFID reader, but also to store information in the memory of their circuit.

  Each device integrates a micro-programmed system that will ensure the management of the identifier, store the identity of the identifier, manage the synchronization of the operation of the various elements related to the communication with the radio frequency transmitters and receivers and the biometric reader .

  Finally, each device optionally integrates a miniaturized device for acquiring biometric data, in particular the acquisition of fingerprints, which makes it possible to authenticate the person carrying the device.

  This technical approach of the use of several technologies on the same device makes it possible to create so-called multiacreditious environments, that is to say allowing its holder to have access to various environments that the computer systems, the physical accesses on sites , specific premises, dangerous machines, vehicles ...

  This approach makes it possible to create virtual access control devices, that is to say without the usual badge readers located at the entry of zones or sites. Since the biometric information is virtually produced, only one device incorporating a biometric sensor worn by the person is necessary to access one or more zones, one or more parts of an area or to have access to equipment.

  The various transmitters and receivers integrated into the device and the zone transceivers operate on the standardized frequency bands known as ISM (Industrial, Scientific and Medical), namely the frequencies: 125 kHz, 433 to 915 MHz, 13.56 MHz and 2.45 GHz and all other frequencies that would be authorized by the telecommunications regulator.

  The accompanying drawings illustrate the invention: FIG. 1 represents the general architecture of the system by integrating the persons carrying a device (6), the devices (1) the zone receivers (7), constituted by the transceivers of communication with the devices (9), carrier current modems (11.1), the application-specific management computer (12) and the non-dedicated management computer (13).

  FIG. 2 represents the general architecture of the system by integrating the persons carrying a device (6), the devices (1), the zone receivers (7), constituted by the communication-transceivers with the devices ( 9), the RS 232 or 485 converters, the management computer dedicated to the application (12) and the non-dedicated management computer (13), the communication ports (P1), (P2), P3).

  FIG. 3 represents the general architecture of the system by integrating the persons carrying a device (6), the devices (1), the zone receivers (7), constituted by the communication transceivers (9) with devices, communication transceivers (11.3) for communication with the management computer (12) using a standard wireless telecommunication network, the dedicated management computer and the non - dedicated management computer (13).

  FIG. 4 represents the radio frequency zones of location by wide area (16), the radio frequency zones of short range location (17), the persons (6) carrying the devices, the equipment (18) of which the person wants to have access (18), vehicles that the person wants to have access (19), doors that the person wants to have access (15) and short-range transceivers (14).

  Figure 5 shows the internal schema of the traceability, identification and authentication device.

  - Figure 6 shows the diagram of the device (1) with the tear detection system, which consists of a flexible printed circuit whose tracks are printed with conductive ink forming a mesh whose tearing cut the normally closed circuit.

  Figure 7 shows the diagram of the device (1) with the detachment detection system which consists of a glued wire forming a mesh whose tearing cuts the normally closed circuit. FIG. 8 represents the device (1) connected to the monitoring apparatus which is connected to the person (6) in the architecture of the use of communication by Online Carrier Currents.

  The device (1) is composed (according to FIG. 5) of a long range radio frequency transceiver (2-1) or its antenna (5).

  io - a short-range radio frequency transceiver (2-2) and its antenna (5.1).

  a micro-programmed system (3) comprising a microcontroller, random access memory and program memory, physical and logical input inputs (25).

  a sensor (20) which detects the tearing off or taking off of the device from its support or destruction. The sensor is connected to the micro-programmed system (3) via a connector (21).

  a biometric authentication sensor (8).

  a battery (4) for supplying the active stage of the radio frequency identifier, the micro-programmed system (3) and the biometric sensor (8).

  a motion detector (22) and a shock detector (23).

  Advantageously, an electrical connection of the supply of the micro-programmed system (3) is arranged outside the device and stuck on the physical badge, the key ring, the pendant or the b rack of the person (6) have we want to ensure traceability and localization. This power supply connection will be destroyed during the tearing of the support, which will correspond to de facto stopping the sending of identification frames. The tear detection device (20) consists of either a flexible printed circuit (22) whose tracks (22) are either printed with conductive ink forming a mesh or is made of a wire very thin (22), and therefore a normally closed electrical circuit whose tearing cuts the normally closed circuit of the supply of the microprogrammed system. This flexible printed circuit, or this wire mesh, is glued with a two-component adhesive or double-sided adhesive.

  This circuit is stuck on the device. It is connected to the microprogrammed system (3) via a connector (21).

  The device (1) communicates with the zone receivers (7), which are themselves connected to a management supervisor (12) via one of the available communication networks. Depending on the physical site installation constraints and security considerations, the zone receivers (7) are connected to the supervisor (12) by: (see Figure 1) Current Carrier Current Modems (PLC) (11.1) , on the domestic electrical network (11-A). In this case, the zone receiver (7) is connected to a current carrier modem in lines (11.1), itself connected to the electrical network of the site. This avoids expensive cabling on site and easily allows the creation of permanent or temporary protected areas.

  (see Figure 2) a wired link (11.2), using physical networks and is the logical communication protocols available on the market such as: RS 232, 485, fieldbus (Bus Can, Profibus, Lonworks, TCP / IP ...). In this case, the zone receiver (7) is connected to a converter RS 232, 485 or fieldbus (11.2), itself on a dedicated wired network (11.B).

  - (see Figure 3) a long-distance wireless link (11.3) meeting international standards type 802.11, otherwise called WIFI. In this case, the zone receiver (7) is connected to a transceiver (11.3).

  It is advantageous to use these 3 technologies on the same installation as a function of the needs and constraints of the site. In this case, the management computer has concomitantly 3 input / output ports (P1), one for the PLC link, the second for the RS 232 RS 485 or fieldbus (P2) link, and the third for radio reception (P3). This architecture is shown in Figure 1.

  The logical operation of the system is as follows: The device (1) regularly sends a frame of radio frequency information, whose frequency is configurable, to a zone receiver which is installed in an area of the site.

  The communication between the devices (1) and the zone receivers (7) can be unidirectional or bi-directional.

  Each receiver (7) consists of a long-range radio frequency transmission / reception stage (9) and either: a carrier current modem (11.1) allowing a wired connection to an electrical network (11.A).

  - An RS 232 RS 485 or fieldbus interface (11.2) allowing a wired connection to a network (11.B).

  an 802.11 interface (11.3) for radio communication.

  The information of the presence of the radio frequency identifier (1) on the person (6) whose traceability, location, identification and authentication is desired, is regularly received by the zone receiver (7). ). The zone receiver (7), via either its carrier line modem (11.1) or a wired interface (11.2) or even by radio link (11.3) sends a communication frame containing the identity of the identifier and the level of energy still available in the device (1) to the management supervisor (12).

  At the level of the management supervisor (12), the information is received via either another in-line carrier modem (11.1) or a wired interface (11.2) or a radio interface (11.3). The management supervisor (12) has in his memory the list of devices (1) which have been previously declared to him and which have been associated with the person (6). When moving the person (6) out of the defined general zone (16) and / or if the device (1) is torn off the badge or destroyed (either physical destruction by an explosion or destruction of the tear detector ( 20), the supervisor (12) no longer receives the regular communication frame via the zone receivers (7) and the interfaces (11.1, 11.2 or 11.3) If the supervisor (12) processing the information no longer receives the periodic information, it generates an alarm for guards, medical personnel, emergency services, the Air and Border Police or communicates a computer message to access control computer applications personal health, security management, medical monitoring (13) or any other computer application such as pagers, beeps or SMS messages.

  Advantageously, another type of system operation is used by the system and corresponds to the following operation: A radio frequency transceiver with short range (14) is installed approaching a door, an airlock or an elevator (15). The device (1) integrates a radio frequency transceiver (2.2) and its antenna (5.1), active or passive, read-only and / or read and write, which is either in permanent transmission or awakened by a radio frequency signal when entering or exiting a particular area (17) within the general area (16) such as a door, airlock or elevator (15). At this time, the receiver (7) receives the precise positioning information of the person's location (6), when the person is in a general area (16) and enters a particular area (17) which can be either geographical or virtual.

  This particular area (17) may also be virtual and correspond to the authorization to use such or such equipment (18), whether medical, security, safety or industrial.

  Advantageously, a second radio frequency reception antenna is also arranged in a particular zone (17), which is part of a general zone (16) and close to a door or an airlock (15), will make it possible to discriminate the direction of passage of the person carrying the device.

  Advantageously, another type of operation of the system allows persons carrying a device to use a machine, a device, a forklift or a vehicle. The operation is as follows: the device (1) operates in writing, which makes it possible to record identification data concerning the identity of the bearer of the identifier. This device is either in permanent transmission or awake when it enters a particular zone (17) situated inside a general zone (16). At the same time, the receiver receives positioning information extremely accurate of the location of the person (6) since it is in an extremely small area. A radio frequency transceiver (7) is installed on a machine or equipment (18) (eg production machine, X - ray machine at Airport Inspection and Filtration Stations, medical equipment,. ..), either a vehicle (19) or a forklift (19).

  Advantageously, the system allows the zone exit alarm of the person traced (6) to be inhibited via a particular zone (17). This application finds its meaning in the hospitals to allow the inhibition of the alarm of fugue at the passage of a door if this person is accompanied by another person wearing a device (1) and having rights, or also within a penitentiary institution.

  Advantageously, another planned type of operation of the system making it possible to significantly increase safety is described below: it is useful, among other things, for security and safety applications to be able to authenticate a person and not only identify him or her. . For this purpose, a biometric authentication reader (8) is used, which, associated with the programmed system of the device (1), will simultaneously make it possible to identify and also to authenticate a person at a particular location. The device (1) integrates a biometric reader (8). For example, use a fingerprint reader whose cost of ownership ratio, in relation to its form factor and its performance is the most interesting. The biometric reader (8) makes it possible to read and then record in the micro-programmed system (3) the authentication data of the user of the device. The operation is as follows: the carrier of the device enrolls his identity on the device (1) via the biometric reader (8). The anthropological characteristics of the person (1) are stored in the micro-programmed system (3). During subsequent operation, that is to say during the authentication functional phases, the carrier (6) of the device (1) will put his finger on the biometric reader (8). The information is transmitted to the micro-programmed system (3). The micro-programmed system verifies the authentication of the reading by comparing this reading with the prerecorded authentication information in the system. If the authentication is correctly performed, an authorization is given by the micro-programmed system, which sends a message via the transceiver (2.1) and its antenna (5) of the device (1) to the long-zone transceiver reach (7) or the short-range area transceiver (14). The message is then sent to the management supervisor (12), which generates a process that can be for example: - an authorization to pass in a next zone via the door, the lock or the elevator (15). The information is managed by the micro-programmed system integrated into the long-range transceiver (7) or the short-range zone transceiver (14), - an authorization to use this or that equipment whether medical, safety, security, industrial (18) or a forklift or a service vehicle (19).

  Another planned type of system operation significantly increases safety when managing guards rounds in buildings or industrial sites. It is useful for safety and security applications to know the movements of people in general areas and particular areas, but also to know for sure the movements timestamped within these areas and cross-zonal passages. The guards are provided with the device (1). At the entry into the field of an area, whether particular or general, the guardian puts his finger on the biometric reader (8). If the authentication is correct, the device (1) sends a communication frame which is recognized by the zone receiver (7) and sent to the management supervisor (12). The supervisor (12) is able to send via the access control application (13) or the building management application (13) lighting remote control or alarm muting either in the area affected by the round be in other areas of the building, in order to deceive the perpetrators.

  Another planned type of operation of the system makes it possible to manage the safety of the patients during a malfunction of the medical monitoring device that they can use in a fixed manner or that they are able to carry. The device (1) is connected by radio or wired connection to the medical monitoring device (26), either to a potential-free contact of the monitoring apparatus (26) fixed or carried, or by a standardized computer link. During a malfunction of the monitoring device, the device (1) sends a message to the zone receiver (7). Receiving this message generates an alarm on the management supervisor (12) and then to another medical surveillance application (13).

Claims (15)

  An automated system that simultaneously enables traceability, localization, identification and authentication of persons (6), which is on the one hand constituted by radio frequency elements operating on the band authorized by the European regulatory authority, known as ISM (Industrial, Scientific and Medical), to enable localization, quick and certain identification, or authentication of a person in a particular area that is part of a general area or again to ensure their presence within a certain area in order to ensure the safety or security of said persons by determining and generating an alarm when the person leaves a perimeter delimited by the radio range device (1) or that said device is destroyed voluntarily or by accident, and secondly biometric authentication elements, and that said system automated system is characterized in that the radio frequency identifiers (2.1 and 2.2) part of the device (1), integrate at least two radio frequency identification technologies of which at least one is active, that is to say powered by a battery or a battery (4).   2. Automated system according to claim 1 for traceability, location, identification and authentication of persons, according to claim 1, characterized in that the device (1) operates in positive logic, that is to say ie, one generates a regular and periodic transmission of a radio frequency identification frame which is an electronic message according to a fixed protocol and a configurable periodicity. The displacement of the person (6) out of the planned or authorized zone (16) or the destruction of the device (1) causes the message at the zone receiver (7) not to be received, which generates an alarm at management supervisor level (12).   3. Automated system according to claims 1 and 2 for traceability, location, identification and authentication of persons, characterized in that the micro-programmed system (3) part of the device (1) periodically sends a message radio transmission via the transceiver (2.1) and its antenna (5) containing, in addition to its identity, the level of energy remaining in the battery or battery to the zone receivers (7), warning that the level of energy is insufficient.   4. Automated system for traceability, location, identification and authentication of persons, according to at least one of claims 1 to 3, characterized in that the power of the radio transmission of the identifier radio frequency (2.1) part of the device (1) is configurable to allow it to be adjusted to the geographical and physical need for traceability and localization.   5. Automated system for tracing, locating, identifying and authenticating persons, according to at least one of claims 1 to 4, characterized in that the transceiver (9) is part of the receiver zone (7) is configurable to allow it to be adjusted to the geographical and physical need for traceability and localization.   6. Automated system for tracking and locating people, according to at least one of claims 1 to 5, characterized in that the device (1) and the computerized management application (12) are configurable, thereby enabling define the polling period of the zone receivers (7) and therefore the period before the alarm is triggered.   7. Automated system for traceability, location, identification and authentication of persons, according to at least one of claims 1 to 6 characterized in that the devices (1) use concomitantly multiple radio frequency communication networks with zone receivers (7) or short range receivers (14).   8. Automated system for traceability, location, identification and authentication of persons, according to at least one of claims 1 to 7 characterized in that the zone receivers (7) identification messages from devices (1) simultaneously use several possibilities of standardized physical communication networks: the technology of Online Carrier Currents (PLC), a traditional wired network or an electric radio communication operating in the ISM band.   9. Automated system for traceability, location, identification and authentication of persons, according to at least one of claims 1 to 8, characterized in that it incorporates a seal (20) which is constituted either an electrical wire (22) or a flexible printed circuit made of a very thin plastic material, the tracks (22) of which are printed with conductive ink based on silver or carbon, bonded to the device (1 ), forming a mesh whose tearing cuts off the normally closed circuit of the antenna or the power supply, and in fact stops the periodic transmission of the radio messages in the event of tearing of the device from its support or the destruction of this device and actually generates an alarm.   10. Automated system for traceability, location, identification and authentication of persons, according to at least one of claims 1 to 9, characterized in that the identifier includes a seal (20) consisting of a flexible plastic printed circuit, which can also be used to prevent access to certain areas (doors, elevators ...) or to certain equipment (CD players or computer diskettes, production machines, forklifts , TGBT ...), by sticking this seal on a part of an area or equipment by prohibiting physical access. The destruction of the device corresponds to a stop of the periodic information, which generates an alarm on the supervision application (12).   11. Automated system for traceability, location, identification and authentication of persons, according to at least one of claims 1 to 10 characterized in the traceability information of persons is processed either directly on a computer of dedicated supervision (12), either indirectly via a computer protocol on a physical access control supervisor, scheduling management or any other application for process supervision and computer data analysis such as an ERP (Resource Company) Planning) or a dedicated computer application, for example fleet management (13).   12. Automated system for tracing, locating, identifying and authenticating persons, according to at least one of claims 1 to 11, characterized in that the form factor of the device (1) is a badge , a tag, a tag, a transponder, a radio frequency identifier, a bracelet, a pendant or a key ring or any other form factor enabling the device (1) to be worn by the person ergonomically.   13. Automated system for traceability, location, identification and authentication of persons, according to at least one of claims 1 to 12 characterized in that the device (1) incorporates a biometric sensor (8) allowing the authentication of the persons (6) carrying the device (1), in addition to the radio frequency identification.   14. Automated system for traceability, location, identification and authentication of persons, according to at least one of claims 1 to 13 characterized in that the associated operation of the components of the device (1) allows to create a virtual access control device, that is to say without a badge reader at the entrance of a door (15), an airlock (15), an elevator (15) or in a zone particular (17), the authentication information of the person whose access must be controlled being read by the biometric reader (8) associated with the device (1).   15. Automated system of traceability, location, identification and authentication of persons, according to at least one of claims 1 to 14 characterized in that in its implementation the proposed system allows: the traceability of the security personnel in the areas such as airport areas, including the Inspection and Filtration Stations (PIF), where security personnel provide control of hand luggage and detect prohibited objects in aircraft transport. This traceability ensures that the personnel is well positioned at their weapons station.   - the traceability of the security and surveillance personnel in the penitentiary establishments and the traceability of the prisoners in these penitentiary establishments.   the traceability of personnel working in sites classified as pyrotechnics whose geographical location is needed in real time in order to intervene knowingly during an accident or an explosion in order to know the number and identity of the staff that may be involved.   - the traceability of personnel working in Seveso classified sites whose geographical location in real time must be known in order to intervene knowingly during an accident or explosion in order to know the number and the identity of the staff that may be involved.   the traceability of patients suffering from Alzheimer's disease or other neurodegenerative diseases by generating an alarm at the level of the receivers and the supervisor by the non-reception of this identification frame due to the pulling or destruction of the radiofrequency identifier of the person to whom he is attached or because of the fall of the patient on the ground.   the traceability of the patients connected to a medical monitoring equipment generates an alarm at the level of the zone receivers (7) and the supervisor (12) due to the non-reception of the identification frame because of the malfunction of the apparatus monitoring device (26) carried by the patient or to which he is connected, the device sending via the management supervisor (12) alarm messages to pagers or sending SMS when the equipment (26) which monitors the d a patient (6) no longer works or when the patient falls to the ground or does not move. the traceability, localization, identification and authentication of persons assigned to guarding jobs in buildings or industrial sites, thus making it possible to trace the movements of people in general areas and particular areas, as well as to be certain about time-stamped movements within these zones and between zones. In this application, the management application (12) is integrated in the form of computer libraries or connected to a third party supervisor (13).