RU108256U1 - DEVICE FOR EXCLUSION OF UNAUTHORIZED ACCESS TO THE PROTECTED SYSTEM - Google Patents

Abstract

 1. A device for eliminating unauthorized access to the protected system, comprising an electrically interconnected scanner for registering a papillary pattern, an image processing unit, a memory unit with a database with previously stored electronic fingerprint images of system users and active images obtained during registration at the time the user accesses the protected system, and a comparison unit that compares previously registered fingerprints a user with active fingerprint images obtained at the time the user accesses the protected system, characterized in that the device further comprises a unit for generating a “call-response” protocol with a device for its inclusion, electrically connected to the comparison unit and the scanner, and a panel for displaying commands of the unit for protocol generation, located on the front surface of the scanner, while the protocol generation unit generates commands for the user placed on the display panel, and a command for the block user access to the protected system depending on the comparison results in the comparison unit, the display panel schematically shows the contours of the right and left palms, each of the fingers shown on the contours of the palms is made with independent illumination, electrically connected to the unit for generating the protocol. ! 2. The device according to claim 1, characterized in that the display panel additionally has a countdown timer that is electrically connected to the protocol generation unit and the scanner. ! 3. The mouth

Description

The utility model relates to devices based on fingerprinting, and designed to exclude unauthorized access to the protected system of unregistered persons or persons intending to commit illegal actions in relation to the protected system. A protected system is understood to mean a bank, a secure facility, computer networks, a cabinet of public authorities, etc.

Analogues of the claimed technical solution are known, for example, a method and apparatus for verifying a transaction (application WO 9618169 A1, IPC 7 G06K 9/00, priority date 01.12.1995), which is as follows. Using a “live” scanner (hereinafter referred to as the scanner), the fingerprint of the person conducting the transaction is obtained, after which the resulting fingerprint is converted into an electronic image and stored. Then, the stored electronic image is compared with the electronic image corresponding to the image of the fingerprint of the person conducting the transaction. A transaction is permitted only when the electronic fingerprint image of the person conducting the transaction basically matches the stored fingerprint image of the individual who is allowed to conduct the transaction. If the images do not match, permission to conduct the transaction is not given. The corresponding device comprises a fingerprint scanner electrically interconnected, an image processing unit, a comparison unit and a memory unit, in which a database with previously stored electronic fingerprint images of users stored in it is located.

The disadvantage of this method and the device that implements it is that they provide a relatively low degree of protection, since permission to conduct a transaction is given by one fingerprint, which can be replaced by a fake with a relief papillary pattern applied to it from the client’s live finger and in the case of the absence of additional visual control in the protected system can be penetrated by an attacker.

Closest to the utility model is the method and device described in RF patent No. 2216114 "Method, mobile device, SIM card and system for determining the authenticity of a user or group of users", IPC Н04М 1/675, publ. November 10, 2003. The method includes recording and temporary storage of video information about physical signs (fingerprints, eyes, voice, etc.) of a user (user group) at the point of entry into the network (system), processing of this information, as a result which produces certain features as biometric codes, storing biometric codes in the tables of the biometric server and on the user's SIM card, wherein at least one code in one table is assigned to the corresponding user, the user entering the SIM card, and containing at least one personal biometric code in the communication terminal, recording and temporary storage of actual video information about at least one physical attribute of the user by means of a video sensor, processing of temporarily stored actual video information about the user, as a result of which it is established and temporarily stored, according to at least one specific feature as a biometric code, determining authenticity by comparing at least one current user biometric code, with at least one stored biometric code, moreover, with a positive comparison, authenticity is considered confirmed, and with a negative comparison, authenticity is considered unconfirmed.

The method is implemented using a mobile device for telephone communication, which contains an interface for placing a SIM card and a video sensor (scanner), a memory means for storing biometric codes, processing means for establishing certain features, and also means for comparing these specific features with stored biometric codes . For the communication terminal, a SIM card is used, in the memory of which at least one biometric code is stored to determine the authenticity of the user. This device is selected as a prototype.

The disadvantage of this device is its vulnerability to imitation, i.e. there is a possibility of penetration into the protected system of an attacker through a communication terminal. In addition, as a result of the loss or theft of a SIM card, the information on biometric codes contained in it can be decrypted by specialists for personal gain.

The task solved by the utility model is to create a device that provides a high degree of system protection against unauthorized entry into the system of unregistered persons.

This is achieved by the fact that in the device for eliminating unauthorized access to the protected system, which contains an electrically connected scanner for registering a papillary pattern, an image processing unit, a memory unit with a database and an image comparison unit, according to the utility model:

- the device further comprises a unit for generating a call-response protocol with a device for its inclusion, electrically connected to the comparison unit and the scanner;

- a command display panel of the unit for generating the protocol located on the front surface of the scanner;

- on the display panel, the contours of the left and right palms are shown schematically, each of the fingers depicted on the contours of the palms of the fingers is made with independent illumination, electrically connected to the unit for generating the protocol.

In addition, on the display panel, a countdown timer is additionally made, electrically connected to the protocol generation unit and the scanner.

In addition, the components that make up the device are made in a single housing.

The essence of the utility model is illustrated by the drawing in figure 1, which shows a block diagram of the device.

The device for eliminating unauthorized access to the protected system contains (version of the embodiment) a scanner 1, a finger 3 is attached to the receiving surface 2. The scanner 1 is connected by an electric connection 4 to the processing unit 5, which converts the cut-off pattern of the papillary lines of the finger 3 into an electronic image, which enters the memory block 6 with the database located in it. The database stores previously registered electronic images of fingerprints of users of the system and active images obtained during registration at the time of user access to the protected system. In addition, the device comprises a comparison unit 7, in which the image stored in the database of the block 6 images is compared with active fingerprint images, and a call-response protocol generation unit 8, electrically connected to the comparison unit 7 and the scanner 1, with the device 13 to enable it, generating commands for the user, which are placed on the display panel 9, for example, made in the form of a miniature monitor located on the front (facing the user) surface of the scanner 1. On the display panel 9 schematically shows the contours 10 of the left and right palms, and each of the fingers depicted on the contours of the palms of the fingers is made with an independent backlight 11 (the backlight of the thumb of the right hand is shown), electrically connected to the unit 8 for generating the protocol. In addition, on the display panel 9 can be performed timer 12 countdown time (electronic stopwatch with light indication), electrically connected with the block 8 for generating the protocol and the scanner 1. Blocks 1, 5, 6, 7, 8 of the claimed device are interconnected electrical connections 4 and can be made in a single housing, including in the form of a mobile device (Fig. 1 housing is not shown). The inclusion of the block 8 is carried out, for example, by a button 13, located, for example, on the rear wall of the scanner housing.

The operation of the device is as follows. Previously, the user of the protected system takes fingerprints of both hands and enters the database of the memory unit 6 for long-term storage. At the same time, system users are trained in the skills of working with the device. Consider now the user’s work with the device. The user presses the button 13, which enables the block 8 to form a protocol (as an embodiment, the button 13 can simultaneously turn on the scanner 1). Block 8, for example, using the random number generator located inside it (from 1 to 10 in the number of fingers of two hands) generates a backlight using, for example, an LED, one of the fingers on the contours of the palms 10 located on the display panel 9 (for example , thumb of the right hand using the backlight 11, as shown in figure 1). The LED can work in flashing or in a constant mode of illumination. Synchronously with the backlight of one of the contour fingers of the palm 10, the protocol generation unit 8 includes a timer 12 for counting down the time, for example, determined by three seconds (set at the request of the device customer), during which the user must attach 1 finger 3 of the same name to the receiving surface 2 of the scanner a symbolic image of a finger highlighted on the contour of the palm 10. In case the user of the system does not have time to attach finger 3 to the sensing surface 2 of the scanner 1 for a predetermined timer 12 mezhutka time (e.g., three seconds), the block 8 generates a command protocol for blocking the user access to the protected system. This is necessary in order to prevent penetration into the system of users with a delayed reaction, for example, with alcohol, drugs and other types of exposure.

If the user applied a finger to the receiving surface 2 of the scanner 1 at a predetermined period of time, the electrical signal from the scanner 1 via communication 4 is transmitted to the processing unit 5, which converts the black-and-white drawings of the papillary patterns of the finger 3 into an electronic image, which is then entered into the database of the memory block 6. The user identity is identified by comparing the registered fingerprint in block 7 when the user accesses the system with the set of images in the database of block 6. If, as a result of identification, it is found that the user's identity is registered in the system database, then the protocol generating unit 8 again generates a signal (using a random number generator) to highlight one of the fingers depicted on the contours of the palms 10 and turns on the timer 12. If when the finger 3 is first applied to the receiving surface 2, the person is not identified, the protocol unit 8 generates a command to block user access to the protected system. Identification of the user’s identity upon repeated application of a finger recommended by the device occurs similarly to the above. Thus, the user is allowed to the protected system only if he has time to attach the finger recommended by the device to the sensing surface of the scanner twice and the device twice identifies him as a registered user of the system. Failure to at least one of these conditions leads to blocking access to the protected system.

It should be noted that user identification can be carried out in three, four, etc. fingers, which significantly increases the degree of protection of the system. In addition, the presence of block 8 significantly complicates the actions of the attacker, since it is not known in advance which of the fingers needs to be applied to the scanner at each registration of the fingerprint, which makes it difficult to use imitation. It should also be noted that the location of the device for turning on the unit 8 (for example, buttons) is known only to a trained and instructed user (the button can be installed outside the scanner 1), and therefore an attacker will not be able to turn on the claimed device for identifying himself. An important advantage of the claimed device is also that the “key” to the protected system (fingers) is always with the user, in contrast to the SIM card, which may be lost or stolen. The device is made of elements known and used in fingerprinting technology, and the software used in it, which allows for fingerprint identification, is operated by the Ministry of Internal Affairs of the Russian Federation, for example, the automated fingerprint identification system ADIS SONDA 8E, registered in the registry of computer programs (peg No. 20066611657 dated 05/17/2006), which indicates the industrial applicability of the claimed device. The applicant makes a prototype device, which will be tested in the IV quarter. 2010 year

Given the novelty and industrial applicability of the claimed device, the applicant believes that it can be protected by a patent for a utility model.

Claims (3)

1. A device for eliminating unauthorized access to the protected system, comprising an electrically interconnected scanner for registering a papillary pattern, an image processing unit, a memory unit with a database with previously stored electronic fingerprint images of system users and active images obtained during registration at the time the user accesses the protected system, and a comparison unit that compares previously registered fingerprints a user with active fingerprint images obtained at the time the user accesses the protected system, characterized in that the device further comprises a unit for generating a call-response protocol with a device for its inclusion, electrically connected to the comparison unit and the scanner, and a panel for displaying the unit’s commands for protocol generation, located on the front surface of the scanner, while the Protocol generation unit generates commands for the user placed on the display panel, and a command for the block user access to the protected system depending on the comparison results in the comparison unit, the display panel schematically shows the contours of the right and left palms, each of the fingers shown on the contours of the palms is made with independent illumination, electrically connected to the unit for generating the protocol. 2. The device according to claim 1, characterized in that the display panel additionally has a countdown timer that is electrically connected to the protocol generation unit and the scanner. 3. The device according to claim 1, characterized in that the units comprising the device are made in a single housing.