AU6722198A

AU6722198A - Contactless log-on system for computers

Info

Publication number: AU6722198A
Application number: AU67221/98A
Authority: AU
Inventors: Anton Gstohl
Original assignee: Mobiltrading & Financing Anstalt
Current assignee: Mobiltrading & Financing Anstalt
Priority date: 1997-02-19
Filing date: 1998-02-19
Publication date: 1998-09-22
Also published as: ES2167068T3; CA2280783A1; WO1998039702A1; ATE208059T1; DE59801952D1; DE19706494A1; EP0961960A1; DE19706494C2; EP0961960B1

Abstract

The invention relates to a contactless log-on system for computers, comprising a data carrier containing an ID code, a code detecting device to detect said code and a transmitter device sending out an ID signal to the detecting device. The transmitter device section of the transponder system is characterized in that the detecting device is arranged in a computer input/output device or a mouse pad and is connected to the computer interface in such a way that no additional computer interface is used. The log-on system also comprises a contactless data carrier and a code detecting device, preferably a transceiver antenna, which is connected to the computer and which communicates in a contactless manner with the data carrier. In order to identify the user, the contactless data carrier which is located on the wrist is brought into the range of the antenna by moving it close to said antenna. The data carrier's built-in transmission system is activated by the field of the antenna and sends out an ID code. The antenna subsequently receives the log-on signal (ID code) which is transmitted to the computer.

Description

Contact-less log-on system for computers The invention concerns a contact-less log-on system for computers, in particular for identification of the user, having a data carrier as a 5 storage medium for a password (identification code) and a transmission device in order to gain access to the computer. In the case of modern operating systems such as for example WINDOWS NT, WINDOWS 95, NOVELL, UNIX etc, log-on with user name and password is necessary in order to gain access to the computer. In addition, further 10 passwords are required for many scientific programs or in dealing with confidential information such as for example telebanking. In practice therefore it is almost impossible to make a note of all passwords and keep them completely secret on a long-term basis. Therefore various system manufacturers offer log-on devices which 15 operate with magnetic cards or contact chip cards and which facilitate identification at the computer. Those systems however generally presuppose modifications to the computer or expansion thereof. The risk involved in systems of that kind is that any person who is in possession of the log-on card can gain access to the computer. With the 20 known card-form data carriers there is a relatively high danger of loss or misuse by third parties as data carriers of that kind can be relatively easily forgotten, lost or stolen. Such a system is disclosed in DE 43 26 735 Al which serves to safeguard a computer installation from unauthorised access. In that case, a 25 chip card reading device is arranged in the casing of a mouse so that there is no need for a separate item of equipment in order to carry out a log-on procedure. That arrangement however suffers from the above-indicated disadvantages such as for example the loss of the chip card. Japanese patent application No 5-41 226 discloses a computer security 30 system which operates in a contact-less mode and which blocks access to the computer when the user moves away from the work station. The system includes a transponder which is incorporated into the nameplate or name tag, pass or the like of the user and which emits an identification code to a receiving AMENDED PAGE 2 device. The receiving device is in the form of an independent unit which is provided for the external connection to a specific interface already present on the computer. Besides the amount of space required for setting up the additional item of equipment, a specific interface is additionally occupied, 5 which is therefore no longer available for other items of equipment and devices. European patent EP-A-0 496 344 discloses a computer log-on system as set forth in the classifying portion of claim 1. In that system the detection device is in the form of an antenna which extends in a 10 substantially areal configuration and which is arranged in a cover or a support of the keyboard. The construction illustrated therein includes with that support a further additional member for which furthermore an additional interface must be set up. DE 40 15 482 C1 also discloses a system of the general kind set forth 15 for the identification of users on computers. In that system the detection device which receives the identification signal emitted by the transmitting device is for example incorporated into a desk support. In that arrangement the detection device is connected to an electronic unit which as a special processor card including the associated security program occupies its own 20 expansion slot in the computer. Therefore the object of the present invention is to provide a contact less log-on system for computers, which can be subsequently fitted as inexpensively as possible and which does not require any additional space. A further object of the invention is to provide a contact-less log-on 25 process which is as simple as possible and which affords a high level of security. That object is attained by the features recited in the independent claims. The computer log-on system according to the invention includes a 30 contact-less transmission system, preferably a transponder system, by means of which an identification code is transmitted in contact-less mode to a code detection device. In that case, in accordance with the invention, the code detection device is arranged in a computer input/output unit or in a AMENDED PAGE 3 mouse support and is plugged into an interface of the computer so that no additional interface of the computer has to be occupied. A computer input/output unit which is equipped in that way such as for example keyboard or a mouse and in particular such a mouse support can be inexpensively 5 retro-fitted. The log-on system according to the invention further includes a contact-less data carrier which is preferably disposed at or in a watch and a code detection device - preferably a transmitting/receiving antenna which is connected to the computer and communicates in a contact-less mode 10 with the data carrier. For identification of the user, the contact-less data carrier which is to be found at the wrist is brought into the region of influence of the antenna by being moved into the proximity of the antenna. The transmission system which is incorporated in the data carrier, for example a transponder, is activated by the field of the antenna and thereby 15 emits the identification code. The antenna thereupon receives the log-on signal (identification code) which is transmitted into the computer. That terminates the log-on procedure. The transmission system in the data carrier, in accordance with the invention, may use any desired wire-less transmission technology. It is thus 20 also possible for example to provide for infra-red transmission, ultrasound transmission and the like, in each case with suitable transmitting and receiving devices. The data carrier according to the invention includes a storage medium for storing the identification code, a laser-programmed storage means 25 preferably being used. The programmed information can be predetermined for example by a laser-programmed serial number which affords the advantage that it can already be inserted at the time of production, thereby excluding multiple allocations. That stored number is transmitted upon computer log-on by the transponder system and detected by the antenna. 30 The transmission system disposed in the data carrier is preferably an electromagnetic transponder system which is activated by the energy of the antenna and then emits the ID-code. AMENDED PAGE 4 An even higher stage of security is afforded by a log-on system with variable ID-code which changes automatically for example at each log-on operation. For that purpose, the password is firstly read out of a programmable storage means or memory, as described above. Then, software in 5 the computer, preferably on the random principle, produces a new password which is sent by the antenna to the data carrier and stored in the storage means thereof. At the next log-on operation, that new password is compared to the new password stored in the computer. Misuse which has occurred in the meantime can be immediately discovered if the password in the data carrier 10 is no longer in conformity with that of the computer as in that case the computer has already produced a new different password. The following example makes the procedure involved clear. The number 15 is stored both in the data carrier and also in the computer. During log-on the number 15 is read out of the storage means in the data carrier and transmitted to the 15 computer. After a piece of software has compared the two numbers and, upon conformity, has enabled access, the computer produces a new random number, for example 82, and passes it to the data carrier, in the storage means of which it is stored. In the next log-on operation the number 82 is compared in the computer. 20 The code detection device according to the invention is preferably plugged into an existing interface of the computer together with an input/output unit so that no further interface is lost for other applications. The antenna can be connected to the computer for example together with the mouse, the monitor or the keyboard. 25 The log-on system according to the invention requires the smallest amount of space on the working surface for the antenna according to the invention is formed as an integral component of the computer. Particularly suitable for that purpose is the mouse support in which the antenna can be simply disposed. In this case the mouse support would be connected to the 30 mouse port of the computer. The antenna therefore does not require either an additional interface or port, or any further space on the working surface. The mouse is then connected for example to a plug on the mouse support. Accordingly the log-on system affords the advantage that it can be easily AMENDED PAGE 5 retro-fitted and the PC only has to be supplemented by a mouse support, a software package and the data carrier. Similarly it is possible to envisage a configuration in which the antenna is plugged as a separate unit into the keyboard or monitor interface 5 or port or is already installed for example in a special keyboard. An antenna which is installed in a computer monitor would also be a possibility. The identification procedure by means of a contact-less data carrier preferably takes place in a similar manner to identification by means of a 10 password. For log-on on the first occasion, the password is inputted twice or the contact-less data carrier is twice moved past the antenna. The change in the password can be effected for example by moving the old contact-less data carrier past, followed by the new data carrier, and so forth. For uses in which the highest level of security is necessary, in 15 addition to the contact-less identification it is also possible to apply another known log-on procedure, such as for example the input of a password. Embodiments according to the invention are described in greater detail hereinafter by way of example with reference to Figures 1 and 2 in which: Figure 1 shows a diagrammatic structure of the log-on system according 20 to the invention, and Figure 2 shows a data carrier according to the invention fixed to the strap or bracelet of a watch. Figure 1 shows a diagrammatic view of a computer 1 with input and outputs units 4, 6, 7, on which the contact-less log-on system is installed. 25 The antenna 2 is disposed in a mouse support 3 which is plugged to the mouse interface or port of the computer 1. The mouse 4 itself is connected by means of plugs to the mouse support 3. The data carrier is mounted to the strap or bracelet of a wristwatch 8 so that it can be conveniently passed over the antenna 2 in the mouse 30 support 3, by means of a movement of the hand. The mouse 4 is connected by means of plugs on the mouse support. A voltage is induced in the transponder of the data carrier 5 by the magnetic field of the antenna 2, whereupon the information in the storage AMENDED PAGE 6 means or memory is read out and an identification signal is emitted. That signal is in turn received by the antenna 2 in the mouse support 3 and transmitted into the computer 1 by way of the mouse interface. That brings the log-on procedure to a close. 5 The antenna can for example also be installed in a special keyboard 6 or in the computer monitor 7. The data carrier 5 would then have to be moved into the proximity of those units in order to implement log-on. The invention thus permits contact-less identification of a user by simple convenient transmission of a password and it affords a very high 10 level of security. AMENDED PAGE

Claims

1. A log-on system for computers comprising - a data carrier (5) which includes an identification code, - a code detection device (2) for detection of the code, and - a transmitting device which emits an identification signal to the detection device (2), wherein the transmitting device is part of a transponder system, characterised in that - the detection device (2) is arranged in a mouse support (3) and is plugged into the mouse interface of the computer (1).

2. A log-on system according to claim 1 characterised in that the data carrier (5) detects a storage means with laser-programmed serial number.

3. A log-on system according to claim 1 characterised in that a mouse (4) is connected to the mouse support (3).

4. A log-on system according to claim 1 characterised in that the data carrier (5) is mounted in or at a watch (8).

5. A process for the identification of the user on computers, including the following steps: - transmission of an identification code stored in a data carrier (5), by means of a transmitting device which is part of a transponder system, - reception of the identification code by means of a detection device (2) which is arranged in a mouse support (3), - transmission of the received identification code by way of the mouse interface of the computer (1) into the computer, - production of a new identification code at each log-on in the computer (1), and - storage of the new identification code on the storage medium of the data carrier (5). AMENDED PAGE