DE102005043053A1 - User authorization information e.g. name, identification unit for use in company, has release and locking unit for identifying and representing user authorization information on indicating unit that is in form of electronic paper - Google Patents

Abstract

The unit has a carrier that is in credit card format, and an indicating unit (11) that is in the form of an electronic paper and is arranged on the carrier. An indicating electronics (12) is placed in the carrier for storing user authorization information and representing portion of the information on the indicating unit. A radio frequency identification (RFID) tag (13) is provided in or on the carrier, where authorization information is provided via the tag. A release and locking unit is provided for identifying and representing the authorization information on the indicating unit. Independent claims are also included for the following: (1) a method of determining an authorization of an identification unit (2) a method for assigning an authorization for an identification unit.

Description

The The present invention relates to a badge unit with a display for presentation and transmission access authorizations, an access authorization system, a passport identification system and methods for determining and / or determining such permissions.

conventional Badges, such as company badges, are either with one visual representation such as a picture of the owner and additional printed text information about the owner and his access rights to company buildings and like or with a picture as well as on a so-called RFID tag (Radio Frequency Identification) stored data. ID cards, which contain only graphical information pose a security risk because they are lost or willfully passed on to unauthorized persons relatively easy for the unauthorized access can be used, especially in such Badges that do not contain an image where the image can be manipulated or is used in environments where, due to the prevailing Conditions (light, stress) a review of the image by staff to check the access authorization is difficult.

The same applies to Employees who do not have their identity card when leaving the company submit, and the no longer valid For example, you could use an ID card in a field office.

Also for ID cards with additional radio are provided to provide a contactless identification of the holder when passing certain locks or readouts to enable absolute security is not guaranteed, as with these often still staff is used, for example, in certain areas or at field offices, which only visually check the information on the ID card. at a change the authorization status of the cardholder, for example one Visitors after the end of their official visit or the Granting or canceling access permissions to certain Areas within the company must have the badge attached to a special programming device for the wireless communication system be reprogrammed. If this does not happen, there is another use the ID card possible.

Of the present invention is therefore based on the object, a badge unit to provide that reprogrammed at any time and digital at the same time and visually changed can be.

These Task is solved according to the identification unit of the independent Patent claim 1, the conditional access system according to the independent claim 12, the identification system according to the independent claim 15, and the method according to the independent claims 17 and 18. Further advantageous embodiments, details and aspects The present invention will become apparent from the dependent claims, the Description and attached drawings. Embodiments, details and aspects related to a Certain aspects of the invention are described, of course, apply as well in connection with the respective other aspects of the invention.

Of the Invention is based on the idea, a badge with a display unit to dynamically provide the credentials of the cardholder displayed and at the same time these permissions also dynamic when passing readout units reprogrammed according to specifications can be.

Accordingly the invention is directed to a badge unit which comprises a carrier, one on the carrier arranged display unit, a housed in or on the carrier control unit for storing user and authorization information and for Presenting at least part of the information on the display unit, one in or on the carrier housed radio unit for a local area radio system; wherein at least one authorization information about the radio unit can be received and stored by the control unit or is stored; wherein the identification unit is characterized by a release / blocking means, at least for evaluation and presentation at least one authorization information stored by the storage unit determined on the display unit.

Of the carrier can one for Badges usual structure be, for example, a plastic or cardboard card in Credit card format. On this carrier is a display unit arranged, which serves the representation of various information. A Radio unit for A near-field communication system (NFC = Near Field Communication) is one electronic assembly, which is able to over a close Distance, for example up to 5 m or up to 1 m or up to 20 cm, to record a radio connection with a remote station and data via this radio connection transferred to.

The identification unit further consists of a control unit which is capable of storing information and representing at least a part of the in formations on the display unit. This control unit can be, for example, a microprocessor which contains a control electronics for the display unit used and a memory for storing the information for the display unit and other information. The control unit can likewise be distributed over two physical components, for example a control logic for controlling the display unit and a memory logic for storing the information associated with the radio unit. In a particularly preferred embodiment, the memory logic is part of a conventional RFID tag that can be used in the invention.

Of Furthermore, the identification unit according to the invention comprises a release / blocking means for evaluating and displaying at least one of the memory unit stored authorization information on the display unit. Under An authorization information is any information understand the data about it contains if and for which contexts (see below) the user releases, that is for one Access or access is authorized, and for which it is locked.

The Representation of the authorization information is dependent on at least one authorization information in the control unit. If the at least one authorization information about the radio unit in the Identification unit has been read in, by means of the release / blocking means, optionally using the control unit, a representation the authorization information takes place. It can be handy here to any possibilities act for presentation. Thus, in the presence of a release authorization an authorization code can be graphed, it can be a special representation of a user picture done, for example in color, while in the presence of a blocking information, the image black and white displayed it can be a textual information about the type or Types of permission (s) to be presented on the ad and the like. If the authorization information includes a lock, the is called, that the holder of the ID card for certain activities is not or no longer justified, this can also be specific displayed by, for example, a diagonal on the display running lock-cross in addition to the other existing information is displayed, or by a corresponding text hint is displayed.

On this way it is possible in addition to the electronic storage of the authorization information at the same time for a visual inspection of the identification unit according to the invention to differentiate the ad accordingly, so that at a glance It can be seen whether the card holder has a release or not.

The In addition, authorization information may consist of static and consist of dynamic parts. Under static parts are issued To understand permissions or locks in certain contexts or globally. Under dynamic permission information is to understand information that informs the identity unit about in which context the card is located, so as to use the Enable / disable means to determine whether for the current context Release exists or a lock exists.

In contrast, are the usage information stored in the control unit are, other information than permission information. It can This is, for example, name or address information to the card holder or to act as a picture of the cardholder. This information and the authorization information are preferred displayed in a combined view, each dynamic adapted to the current context.

In a preferred embodiment the release lockout means is still for issuing the authorization information via the Radio unit determined after receiving an interrogation signal via the radio unit. That way you can Authorization checks are made at certain points, for example, at locks without security personnel present would have to be. Only if the correct authorization information is present in the Card is released the appropriate lock and can be the cardholder the protected in this way Enter area. By this preferred embodiment, it is possible, too in case of disturbances or the absence of a central management system for the permissions the identity cards used to carry out an authorization check. This For example, in very distributed systems, for example at several factories and the like, or in case of faulty infrastructure (Network problems) desirable be. In this embodiment So is not a central storage of permissions for each badge unit necessary, but rather carries each badge unit carries its credentials with it.

Preferably, the enabling / disabling means may be further for enabling and disabling the issuance of information via the radio unit upon receipt of an interrogation signal via the radio unit. In this way, the digital part of the ID card can be completely blocked. Upon receipt of appropriate authorization information, the output may escape from query scanners which can be enabled or suppressed. In a suppression of the output of the authorization information after receipt of a corresponding authorization information simply a corresponding interrogator, such as a lock, no longer identify the card and thus denied access through the lock.

The Identification unit according to the invention can be prepared in any formats, wherein in a preferred embodiment the carrier essentially a credit card format has to get the badge with the usual ID Holders, Readers and keep wallets compatible by cardholders.

The Power supply of the identification unit according to the invention can, for example, via a battery, a battery, a capacitor, or the like, wherein the selection of the energy source used from the energy demand of the used components depends. In a particularly preferred embodiment, the identification unit according to the invention uses a rechargeable energy source that is charged via inductive Energy supply is determined by means of the radio unit. To this Way is to replace a battery or recharge one Batteries over electrical contacts are not necessary and the power supply happens almost automatically when passing through interrogators. This embodiment can be used especially if particularly energy-efficient Components are used because of an inductive energy input over a certain Distance only very small amounts of energy can be transmitted.

Especially it is preferred that the display unit of the identification unit according to the invention a area having electronic paper. Under an electronic paper is generally understood a flat display unit whose display is de-energized or works practically without power. A form of electronic paper is a novel type of display in which, for example, small beads in a carrier material embedded in a grid. The beads have a white and a white black surface half on and can through a grating field, through which currents can flow, so rotated that either the white one or the black half the ball are visible. This way, a black or a white one Pixel can be generated, which with suitable screening the representation of any black and white Information allows. Of the particular advantage of the use of such electronic paper is the low energy consumption, as the black and white beads maintain their orientation even without continuous flow of current and the display consumes virtually no power with it. It can too other forms of electronic paper, such as colored electronic Paper on similar Principles like LCD displays based, are used when this fit for use become.

As already mentioned above, contains the authorization information preferably for a particular context specific information. Under a context is in the sense the present invention to understand any set of circumstances which the framework conditions for form an entitlement, such as a release or a revocation. For example, the context can be more spatial, directional, functional and / or temporal nature.

Under a spatial Context is a spatial one Understand area for a release or blocking applies. So can badge holders for certain areas of a company, for example, certain buildings, certain spaces, particular ones Projectiles, certain company complexes or factories, released or be locked.

Under a directional context is to be understood that accordingly authorized badge holder a lock with an interrogator in a particular Direction may or may not happen. Thus it can be achieved for example, at certain times of day, a building only left, but can not be entered again.

One functional context is one in which an authorization based on a function to be performed of the cardholder. Such a functional Description of the authorization is primarily with other types of privileges conceivable, for example, if a particular Personnel, such as cleaning staff, certain areas of a company may only enter at certain times of the day. A functional authorization may also depend on a management system of the company, for example if a service technician after failure of a machine he is to repair, automatically a release for gets free access to the area where the machine is built is.

One temporal context finally is a time dependence a release or blocking, in which the cardholder only to certain Times get a release. For example, this can be used to comply with Working hours are reached or visitor restrictions temporal nature imposed.

To demarcate against the authorization data are the general, stored in the control means information, which, for example Represent user information and specifically include the identity information, such as name, address, date of birth, employee number, ID card, and the like of a cardholder. Generally, the identity information may include textual and / or pictorial data about a holder of the badge unit.

Next the already mentioned form of the identification unit as a flat component, for example, in credit card size, can the ID unit also as part of a mobile terminal, for example a radiotelephone or a personal digital assistant (PDA) or the like and can, given the necessary hardware in the corresponding device, even completely implemented in software. On the corresponding Device then runs a program that over in the device built-in radio unit gets the necessary information and can output and the normal display of the device with a badge unit the necessary picture and text information as well as authorization information can represent. In such a case, for example, it may be possible that the program switches the display to the badge information, when the device in the receiving and transmitting area of a corresponding scanner, for example a lock is located.

The Identification unit according to the invention may also be characterized in that it further comprises a clock unit contains. The clock unit is an even more flexible control of the display, in particular the display of authorization information, possible because no longer passing and granting permissions a scanner is necessary, but a badge for example even after expiry of a given visit period with a visitor badge automatically represent a lock information on the display unit can, so that already visually recognizable that the visitor outside the for his intended visit time is still in the supervised area.

The Invention is further directed to an access authorization system, comprising: a badge unit according to the invention as described above; a device for interrogating the badge unit by means of a radio unit; Means for determining the identity of a card in the area of the radio unit; and means for detecting and / or changing authorization information on the identity card.

The Conditional access system thus includes with the (stationary or mobile) interrogation unit and the means for determining the identity usual components of conditional access systems, while the means of detection and changing the Authorization information flexible handling of permissions (Approvals / Blocking) of the identity unit for the contexts as well as the dynamic one Customize permissions based on contextual information (for Example of passing a barrier, entering a building part, a current time).

Preferably includes the means for detecting and / or changing authorization information a radio unit (for example, stationary or mobile), that of radio transmission and the receipt of authorization information, but if necessary also of identity information the identification unit is used.

The inventive access authorization system may also be characterized in that it is an entrance system for receiving user authorization profiles over a network, wherein the user permissions profiles over the Means for detecting and / or changing from entitlement information on the badge unit to the badge unit can be sent. Through this entrance system it is possible the conditional access system also from the outside, for example, a central office, another company, or a Security company to provide authorization information. In a particularly preferred embodiment of the invention can This input means will be used to create authorization profiles another company to the company with the conditional access system to send, whereupon these authorization profiles are transferred, for example, to an identification unit can be the one employee of the company on it as a visitor badge to the other company (sending the authorization profile) can take with him, so he already has the intended permissions before arriving at the other company.

The Invention is directed in a further aspect to a badge system, comprising: a badge unit according to the invention as described above; and a mobile device with a receiving unit for receiving authorization information from an access system and with a radio unit for transmission the authorization information to the card unit.

This aspect allows the transmission of authorization information from a telephone or a similar device, which increases the range of use of the badge unit according to the invention, since a change of authorization information is thus possible outside the sphere of influence of the readers of an access authorization system, if only one connection to the mobile device can be made.

Preferably is the mobile device a radiotelephone or a personal digital assistant (PDA).

In In another aspect, the invention is directed to a method for determining and / or determining the entitlement of a badge unit which Including steps: determining an identity of one as described above Identification unit according to the invention in the reception area of a radio unit (stationary or mobile) by polling the identification unit with the radio unit; Determining authorization information the identification unit with the established identity in one certain context; and submit release or lock information to the display unit.

In In this aspect, the other party to the identity unit in their function defined, which interacts with the card unit.

Yet Finally, one aspect of the invention is a method of handover permissions for directed an identification unit, comprising the steps: Send a user authorization profile from a first conditional access system via a Network to a second, independent Conditional access system; Transfer the badge information on a badge of the second conditional access system; Using the badge system of the second conditional access system within of the first conditional access system according to the user authorization profile.

By this aspect makes it possible the access authorization system also from the outside, for example a central office, another company, or a security company, authorization information to send.

In a particularly preferred embodiment According to the invention, this method can be used for authorization profiles another company to the company with the conditional access system to send, whereupon these authorization profiles are transferred, for example, to an identification unit can be the one employee of the company on it as a visitor badge to the other company (sending the authorization profile) can, so he has the intended permissions already before arrival received at the other company.

in the The invention will be described below with reference to concrete exemplary embodiments explained in more detail, wherein on the attached Drawings in which:

1 shows the arrangement of the main components of a badge unit according to the invention in the badge unit;

2 shows the electronic components used to realize the function of the badge unit;

3A and 3B show exemplary representations on the display of the identification unit according to the invention;

4A and 4B show further exemplary representations of the display of the identification unit according to the invention; and

5 shows the use of the badge unit according to the invention in a system in which permissions can be released and blocked via a network.

The the following description describes an electronic company ID, changed at any time, locked and made useless as a company card even from the outside can be. The ID card can be integrated into an electronic access system and can be used together with mobile devices, such as mobile phones or PDAs with an integrated radio interface (e.g., NFC or eNFC), the above This interface can exchange data, be integrated.

1 shows a first embodiment of the identification unit according to the invention. The identity card unit 10 consists of a display unit 11 in the form of a piece of electronic paper (ePaper) and associated display electronics 12 , combined with a radio unit 13 in the form of an RFID tag 13 with antenna 13a and a small button battery 14 or battery or a capacitor for storing the energy necessary for operation. The ID card 10 is via the RFID interface 13 supplied with data. If the ePaper 11 If you only need very little energy for the operation, the energy can also be transmitted via the antenna 13a the RFID interface 13 be transferred to the badge and there in a condenser 14 get saved.

The badge is capable of on the display unit 11 display all the information that can be found on a company card today, such as name, department, owner's photo, access authorization data, and the like. Due to the low power consumption of ePaper, a small head cell is sufficient for operation. Once ePaper technologies are available, those with extremely little energy As with today's standard passive RFID cards, the supply of the complete ePaper ID card can be done inductively via the antenna of the RFID interface. The storage of energy then takes place in a capacitor.

The ePaper display of the ID card is a pure output medium, which is supplied with data via an I / O interface from the outside. All data that is to be shown on the display is received by an RFID tag and forwarded to the ePaper-Diplay via a special interface ( 2 ). The badge usually has no controls. A watch module can be part of the card, but is not mandatory. The ID card is operated via external devices such as an NFC mobile phone or a stationary device using the RFID interface.

2 explains in more detail the operation of the badge unit according to the invention 10 , On the RFID tag 13 the badge the access authorization profile (such as a room-time-time profile) of the employee or visitor is stored after it has been previously sent by a reader / programmer or the like by radio to the card, where the information via an interface 15 to the display electronics 12 is sent. It is also possible to make this transmission wired via a suitable interface. It is also possible to have the profile in another part of the identification unit 10 store, for example in a microcontroller or in the control electronics 12 the display unit 11 , At least a part of this profile, for example an authorization information for the current context currently to be used, is displayed on the display unit 11 displayed in a suitable form. For admission to a room or building becomes the ID card 10 led into the transmission range of an RFID reader. The reader is connected to a control center (access control manager) in which the access authorizations are stored. If the person is authorized to enter the area, the access is released. The checking of the access authorization via the central system can also be carried out at remote locations via wireless communication interfaces such as GPRS or the like.

3a shows a typical representation of the display unit 11 the identification unit according to the invention 10 , When using the identification unit 10 As a company ID card for its own employees, the RFID tag works on the ID card in the usual way (authorization profile in the internal memory, control via external reader). In contrast to today's standard RFID badges with firm imprint of company, name, department and photo, the online company ID card can output such data variably. For example, if the employee is in public areas of the company, only the name and department are displayed. Special permissions are not displayed for privacy reasons.

However, if the employee enters an internal security area that may be divided into different security zones, the online company card may display, in addition to the name and department, the security level or zones that may be entered on the card, as in 3b shown. For this purpose, the passport upon entering such a zone or the passing of a reading device receives corresponding authorization information about entering the area and, if applicable, about the authorizations valid there for the pass holder.

4a displays a badge indicating that the badge is invalid. If the card has been invalidated or blocked, access to the area concerned will not only be denied as usual today, but the ID card will also be deleted by RFID. The display clearly shows that this badge is invalid, for example by a large "X" over the entire display area. Thus, the ID card can not be used even with purely visual controls by a security guard. Such a block can only be displayed in certain contexts.

In a further preferred embodiment of the invention, the identification unit according to the invention can also be used as a visitor's pass or the like. The processes are schematic in 5 shown. If, for example, several companies use the same ID card technology, it is possible to send a visitor authorization to a foreign company ID card. The transfer of the visitor authorization of company A. 20 to the visitor from the company B 21 can be emailed 22 or via another appropriate protocol. The visitor of company B can obtain the obtained visitor authorization to the central access server 24 send in his company B (arrow 23 ) or the authorization information can be transmitted to the access server in other ways. If the employee has the ID card 25 The next time he holds a reader (eg when leaving the company B in the evening) he is entitled to use the ID card 25 dubbed.

The visitor authorization is usually not displayed immediately on the display, but only if the ID at the visited company A 20 is activated (arrow 26 ); however, it can also be displayed immediately if required in a special section of the ID. This status means that there was up-to-date data for the badge. This results in a "legitimate card", as exemplified in 4b is shown.

following is an exemplary use of a badge unit according to the invention without watch unit. When activating a Visitor card in the company visited (company A) becomes neutral Identity card in front of an activation terminal, for example a specific one Reader held. The activation terminal checks the access profile via the RFID part (Room-date-time profile) and displays the data on the display. The access profile is on each access visit to a building or room with the help of Reader tested. Lies a Card access profile within the spatio-temporal authorization profile, that is it are releases for the desired Areas available, access is granted. After expiration of the authorization profile no access is possible anymore.

The deletion The profile is made on each activation terminal in which Usually so, if the visitor with the help of the visitor badge over a Turnstile leaves the company visited. This is also the display reset on the display.

An exemplary use of a badge unit according to the invention will be illustrated below. The interface on the online company ID card can optionally be equipped with a clock module 16 (please refer 2 ). With this clock module, the ID card can recognize when the access authorization has expired. Thus, the card automatically locks after the specified time, even if he does not come with a reader in connection and receives no blocking information transmitted.

In a further preferred embodiment can the visitor (or an employee with changing responsibilities and the like) in addition directly at NFC-enabled Mobile phones can send the visitor profile via SMS to the mobile phone. By Pairing the NFC Handie with the ePaper Company ID can change the visitor profile Simply be downloaded from the mobile phone to the company card. A small application on the phone ensures that the access data really transferred to the card were. With this application lets Check yourself anytime which authorizations exist on the card. In the same Way you can the visitor profiles are updated.

Online business cards with clock module can as smart mobile devices for mobile phones be used. Nowadays, mobile phones or PDAs are called mobile subsystems of the own PC, which are part of the Store information from the PC (such as emails, calendars, addresses). About one Synchronization program The contents of PC and mobile phone are compared. Analogous is the online company ID can be used as a remote device of a mobile phone, which is loaded with certain data from the phone or PC (such as access profiles, Visitor permissions, payment card for canteen etc.), and daily at use with readers synchronized.

Around in the case of misuse of the ID card, for example as a payment card, minimize the risk without a PIN number for each payment transaction to have to enter For example, a limit can be set when using as a payment card. This limit expires after one day and every day when entering with this badge initialized automatically unless the badge is lost was reported.

10

ID unit

11

display unit (electronic paper)

12

display electronics

13

radio unit (RFID tag)

13a

antenna

14

energy

15

interface

16

Clock

20

company A

21

company B

22

E-mail connection

23

internal dispatch

24

Ingress server

25

identification card

26

activating compound

Claims (18)

Identification unit, comprising a carrier, a display unit arranged on the carrier ( 11 ), a control unit housed in the carrier ( 12 ) for storing user and authorization information and for presenting at least part of the information on the display unit ( 11 ), and a radio unit housed in or on the carrier ( 13 ) for a local area radio system; wherein at least one authorization information about the radio unit ( 13 ) and from the control unit ( 12 ) can be stored or stored, characterized by a release / blocking means, at least for the evaluation and display of at least one of the memory unit ( 12 ) stored authorization information on the display unit ( 11 ) is determined. ID card unit according to claim 1, characterized in that the release / blocking means continue to issue authorization information via the radio unit ( 13 ) upon receipt of an interrogation signal via the radio unit ( 13 ) is determined. Identification unit according to claim 1 or 2, characterized in that the release / blocking means continue to enable and disable the output of information via the radio unit ( 13 ) upon receiving an interrogation signal via the radio unit ( 13 ) is determined. Identification unit according to one of claims 1 to 3, characterized in that the carrier has a flat card of im essential credit card format is. Identification unit according to one of claims 1 to 4, characterized in that it further comprises a rechargeable energy source ( 14 ) for charging via inductive energy supply by means of the radio unit ( 13 ) is determined. Identification unit according to one of claims 1 to 5, characterized in that the display unit ( 11 ) has an area of electronic paper. Identification unit according to one of claims 1 to 6, characterized in that the authorization information for a Context specific information included. Identification unit according to claim 7, characterized that the context is a spatial, directional, functional and / or temporal context. Identification unit according to one of claims 1 to 8, characterized in that the information for the display unit ( 11 ) comprise specific identity information. Identification unit according to claim 9, characterized that the identity information is textual and / or pictorial data about include a holder of the identity card unit. Identification unit according to one of claims 1 to 10, characterized in that it further comprises a clock unit ( 16 ) contains. Conditional access system, comprising an identification unit according to one the claims 1 to 11, a device for interrogating the badge unit means a radio unit, means for determining the identity of a Card in the area of the radio unit and means for detecting and / or changing authorization information on the identity card. Conditional access system according to claim 12, characterized in that that means for detecting and / or changing authorization information a radio unit. Conditional access system according to claim 12 or 13, characterized in that it comprises an entry system ( 21 . 22 ) for receiving user authorization profiles over a network, wherein the user authorization profiles can be sent to the card unit via the means for detecting and / or changing authorization information on the card unit. Identification system, comprising an identification unit according to a the claims 1 to 11, and a mobile device with a receiving unit for receiving authorization information from an access system and with a radio unit for transmission the authorization information to the card unit. Identification system according to claim 15, characterized that the mobile device a radiotelephone or a personal digital assistant is. Method for determining and / or setting the Authorization of an identification unit, characterized by the steps: Determining an identity of a Identification unit according to a the claims 1 to 11 in the reception area of a radio unit by polling the Identification unit with the radio unit; Determining authorization information the identification unit with the identified identity in a particular one Context; and submit release or lock information to the display unit. Method of handing over permissions for an identification unit, characterized by the steps: sending a user authorization profile from a first conditional access system via a Network to a second independent conditional access system; Transfer the badge information on a badge of the second conditional access system; and using the badge system of the second conditional access system within the first conditional access system according to the user authorization profile.