DE102015114367A1 - Device and method for authenticating and authorizing persons - Google Patents

Abstract

The invention relates to a device (1) for authenticating and authorizing persons. The device (1) has a housing (2), at least one display device, at least one energy store (11), a carrier element (10) with a storage element arranged on the carrier element (10), at least one transmission element (12) and a scanning device (3 ) for recording biometric features of the person. Within the memory element comparison data of the biometric features for authenticating the person are stored. The device (1) is configured to transmit a data packet containing user authentication information to an access-requested system after the user is authenticated by receiving biometric features on the device (1) to be authorized for the system which all information for use are deposited. The device (1) is closed in such a way that the transmission of the data takes place exclusively in the direction of the device (1) to the system and that changing, deleting or reading the data stored in the memory element is prevented. The invention also relates to a method of registering the device to a registerable component of a system to which the device requests access, and to a method of authenticating and authorizing persons with the device on the system to be joined.

Description

The invention relates to a device for authenticating and authorizing persons. The device has a housing, at least one display device, at least one energy store, a carrier element with a storage element arranged on the carrier element and at least one transmission element. The invention further relates to a method of registering the device to a registerable component of a system to which the device requests access, and to a method of authenticating and authorizing persons with the device on the system to be joined.

Devices known from the prior art as tools for access to enclosed spaces restricted to particular persons or groups of persons or into closed electronic systems are safe only during the personal possession of the corresponding person. There is a risk that unauthorized persons acquire the device and gain desired access. Among the tools for access to locked rooms are any kind of mechanical keys for opening a lock, such as door or office locks, rooms or rooms, garage doors, vehicles, lockers or safes, mailboxes, suitcases or bags. In addition to the mechanical keys are also electronic or electromagnetic systems, such as magnetic card key, common. The electronic or electromagnetic systems can be designed with a wireless transmitter, as in the case of a key for the motor vehicle, with a fingerprint recognition or with electromagnetic high-frequency identification technology, in short also referred to as RFID for "radio-frequency identification". which are also known as transponders. The transponders are conventionally designed either as a card or key fob or are integrated in a mechanical key. Tools for access to closed electronic systems include applications such as online banking, such as mobile phones or tablets via SMS with PIN, mobile payment methods for parking meters or tickets, direct applications for ordering applications such as Amazon, or credit card functions and payment functions with debit cards, EC cards. Cards or Payback cards with direct debit or signature. The PIN is to be understood as a personal identification number or secret number which, depending on the application, is known or should only be known to one or a few persons.

The prior art also includes systems and devices for authentication of persons and possible subsequent access authorization, such as identity cards, password-protected access to computers or personal computers, in corporate networks or in wireless networks, the aforementioned bank application method with password and possibly with PIN, EC cards or credit cards with PIN, loyalty cards or payment cards. Other authentication systems and devices include encrypted environments, such as corporate storage drives, intranet with critical data, virtual private network (VPN) access, and so-called tokens as hardware components for identifying and authenticating users for access to computer systems, most commonly a PIN, a token number, a username and a password. Tokens are also referred to as electronic keys or chipkeys.

To log on to a local computer system or in a computer network, the user is usually asked to enter a user name and a password associated with the user name. The logon process is very insecure because the username and / or password may be forgotten, where clearly putting down the password or dropping the password in a password container application to avoid forgetting increases uncertainty, the combination of username and password The password can be intercepted when sending over the local network. In addition, the user is required at regular intervals to consider ever more complex passwords, which must be kept in mind and still be exposed to the above mentioned dangers.

Payments by credit card or account card usually take place either by signature or by entering the PIN. However, the signature on the back of a credit card is in most cases easy to imitate with sufficient practice. Thus, the protection against misuse of the credit card is limited to safekeeping and exclusive use by the rightful owner. The PIN of a credit card is stored on a magnetic stripe integrated in the card. The magnetic strip can be duplicated by various fraudulent methods or spied from a number input device or otherwise reach the possession of unauthorized persons. A loss of the credit card is often detected only with a considerable delay, so that it is possible within the period of detection of the loss of unauthorized persons, the credit card possibly together with the signature or PIN for the purchase of goods and the use of services as well as to withdraw cash at appropriate machines to abuse.

With access methods based on the use of a mechanical key or an electronic or electromagnetic access card, for example a motor vehicle security or a building security, any person in possession of the key or the card can open the corresponding access. In most cases, there is no query of the user, for example via a PIN or optical control instead. If lost, the key or the access card can be used by any person who acquires their possession.

The known from the prior art systems, devices and methods for authentication of persons are complex, costly and associated with high demands on the memory of the user. Thus, every active member of society is forced to use a greater number of the various tools and methods of access enumerated. The use of it requires carrying all the necessary data safely with you and / or remembering the data and, moreover, matching each other, such as the correct PIN to telephone, debit card, credit card or online banking.

In addition, each active member of the company must identify himself in different places and in different situations by means of personal documents, such as identity documents, for example a social security card, a company card or a stage pass, or a passport or driver's license. The personal papers are on the one hand by a variety of immutable features relatively forgery-proof, on the other hand, however, always require unconditional carrying and are not safe with a certain amount of criminal energy from misuse. Likewise, conventionally widespread online methods are to abuse without major technical effort and thus uncertain.

Much of the requirements for authentication systems can be achieved over short distances by transmitting data between devices over the air. These include, for example, the above-mentioned electromagnetic high-frequency identification technology RFID, the near field communication, also abbreviated as NFC for "Near Field Communication", or Bluetooth. The data transmission over short distances by radio, in which an object is kept and identified at a short distance to a reading device, is used, for example, in non-contact credit cards, in smartphones designed as mobile phones, tablets or personal computers.

From the WO 2011 028874 A1 A personalized multifunctional access device with an individualized form of authentication and data exchange control emerges. In this case, data is exchanged bidirectionally between the multifunctional access device and the system to which the access is desired via local transmission options such as NFC, RFID or Bluetooth. The data is transmitted, for example via the Internet or an intranet or computer software. Using the computer, data is retrieved from the multifunctional access device, exchanged and processed with the multifunctional access device. The personalized multifunctional access device, which allows an operating system to extend the basic functions and interact with other devices, calculates key sets from a plurality of data contained within the device using mathematical cryptography, and also has a slot as well as connectivity to an SD card as "Secure Digital Memory Card", to transfer a variety of data to and from the SD card. The multifunctional access device actively uses data exchange with other devices via radio, cable or removable media.

In the US 2007 0197261 A1 there is described a component designed as a general-purpose key which can be integrated into operating systems of devices such as mobile phones of various manufacturers. For example, the general-purpose key communicates with existing software via the Internet, also for updating and uploading software, and can be found using the Global Positioning System, or GPS for short. The general-purpose key is coupled for bidirectional data exchange with other devices and systems to which access is desired.

Against the widespread uncertainty and abuse, additional security measures such as fingerprint scanners, for example for a mobile phone and access controls for entry into sensitive areas of business, iris scanners or similar systems have been developed and used. However, these security systems either provide very limited security or are extremely expensive to implement and manage in other systems, such as biometric access control.

The known from the prior art systems have in summary significant security vulnerabilities. In particular, it can not be ensured that the systems are used exclusively by the authorized person. The systems can be misused by unauthorized persons. The conventional systems, Devices and methods for authentication of persons are also extremely complex, costly and / or associated with high demands on the memory of the user.

The object of the invention is to provide an apparatus and method for authenticating and authorizing or identifying and verifying a present person for a desired access, for example in a spatially or electronically completed system. The device should meet the highest security requirements and combine as many relevant safety functions in everyday life. The device should be easy to use and not make changes to the existing authorization process necessary on the active user side as a user or on the passive side of the system to which access is to be granted.

The object is achieved by the objects and methods with the features of the independent claims. Further developments are specified in the dependent claims.

The object is achieved by an inventive device for authenticating and authorizing persons. The device has a housing, at least one display device, at least one energy store, a carrier element with a storage element arranged on the carrier element and at least one transmission element.

According to the concept of the invention, the device is designed with a scanning device for recording biometric features of the person. Within the memory element comparison data of the biometric features for authenticating the person are stored. According to the invention, the device is configured to transmit a data packet with user authentication information as the person to be authenticated and authorized to an access requesting system after the user is authenticated by receiving biometric features on the device to be authorized for the system in which all information on use is stored. The device is also closed in such a way that the transmission of the data takes place exclusively in the direction of the device for access requested system and that changing, deleting or reading the data stored in the memory element is prevented.

In addition to the storage element, a computing unit is also advantageously arranged on the carrier element. The device is preferably configured to send the data to the requesting system for a fixed period of five seconds. It is advantageous that the display device is formed from at least one light-emitting diode. The scanning device is preferably designed to record a fingerprint or an iris or a voice as biometric features.

According to a preferred embodiment of the invention, the device is configured to trigger a self-destruction of the memory element after a certain number of consecutive erroneous attempts of recording biometric features. For example, entering three consecutive false fingerprints or false fingerprint combinations triggers self-destruction of the memory contents, making it impossible to misuse the device.

According to a development of the invention, the housing has a multilayer wall. In this case, two outer or outer layers of the wall of a plastic and an inner layer of a metal are formed. The wall of the housing is preferably formed in three layers, wherein the metal layer is disposed between the two outer plastic layers. The housing and thus the device advantageously has the shape of an ellipsoid.

A further preferred embodiment of the invention is that the formed of metal inner layer of the wall of the housing is connected as a mechanical shell between the housing and the components placed within the housing with an arranged on the storage element essay. The attachment is designed in such a way to physically destroy the storage element when the housing is opened. The attachment is advantageously designed as a rotary-cutting mechanism.

The advantageous embodiment of the invention, in particular in view of the high security, the small footprint and ease of use, allows the use of the device for authenticating and authorizing persons in financial transactions in payment transactions and / or locking systems and / or access systems of buildings or vehicles and / or for logging onto computer systems or network systems as computer-assisted login procedures and / or as an identification medium for identifying the user to authorities.

• – Anzeigen eines Kontaktes zwischen der Vorrichtung und der registerfähigen Komponente sowie Auffordern zur Aufnahme biometrischer Merkmale des Nutzers,
• – Aufnehmen der biometrischen Merkmale des Nutzers und Speichern von biometrischen Daten in der Vorrichtung,
• – Erzeugen und Senden einer eineindeutigen Identifikationskennung von der Vorrichtung an die registerfähige Komponente,
• – Empfangen und Ablegen der Identifikationskennung innerhalb einer Datenbank des beizutretenden Systems zum Registrieren des Nutzers,
• – Senden einer Meldung von der Vorrichtung an die registerfähige Komponente und Anzeigen der Meldung durch die registerfähige Komponente.

The object is also achieved by a method according to the invention for registering a device for authenticating and authorizing persons on a registerable component of a solved system to be solved. The system to be joined is understood to be the system requested by the device for access. The method comprises the following steps:

• Displaying a contact between the device and the registerable component, and requesting to receive biometric features of the user,
• Recording the biometric features of the user and storing biometric data in the device,
• Generating and sending a one-to-one identification tag from the device to the registerable component,
• Receiving and storing the identification code within a database of the system to be registered for registering the user,
• Sending a message from the device to the registerable component and displaying the message through the registerable component.

The display of the message may refer to the successful or unsuccessful acquisition of the biometric features by the device.

• – Aufnehmen der biometrischen Merkmale des Nutzers und Vergleichen der biometrischen Daten mit in der Vorrichtung gespeicherten biometrischen Daten,
• – Authentifizieren des Nutzers und Einleiten eines Vorgangs des Sendens zum Autorisieren des Nutzers bei Übereinstimmung der verglichenen biometrischen Daten,
• – Übertragen einer in der Vorrichtung abgelegten eineindeutigen Identifikationskennung als Informationen an das beizutretende System sowie
• – Abschalten und Deaktivieren der Vorrichtung nach dem Vorgang des Sendens der Informationen,
• – Empfang und Aufnahme der übertragenen Informationen durch das beizutretende System und
• – Senden der eineindeutigen Identifikationsnummer an ein zentrales Datenbanksystem sowie Vergleich der Identifikationsnummer mit im Datenbanksystem hinterlegten Daten,
• – Autorisieren des Nutzers bei Übereinstimmung der Daten und
• – Freigabe zum Durchführen sowie Durchführen des vom Nutzer angeforderten Vorgangs.

The object is also achieved by a method according to the invention for authenticating and authorizing persons with a device on a system to be joined. In this case, the system to be joined is understood to be the system requested by the device for access. The method comprises the following steps:

• Recording the biometric features of the user and comparing the biometric data with biometric data stored in the device,
• Authenticating the user and initiating a process of sending to authorize the user in accordance with the compared biometric data,
• - Transferring a stored in the device one-to-one identification as information to the system to be joined as well
• Switching off and deactivating the device after the process of sending the information,
• - Receiving and recording of the transmitted information by the system to be joined and
• Sending the one-to-one identification number to a central database system and comparing the identification number with data stored in the database system,
• Authorize the user if the data matches and
• - Release to perform and perform the requested by the user process.

According to an advantageous embodiment of the invention, fingerprints of two different fingers of the user are recorded as biometric features, whereby the process of transmission is initiated by the scanning of the fingerprints at intervals of no more than five seconds. During the process of transmission, the one-to-one identification identifier stored in the device is transmitted as information to the registerable component or to the system to be joined.

According to a development of the invention, the unambiguous identification code stored in the device is transmitted over an adjustable period of five seconds to the system to be joined.

The one-to-one identification identifier is preferably formed from fields with data. In this case, a first field data of a date and time stamp, a second field, a serial number of the device and a customer number of the user and a third field on a checksum to verify the integrity of the transmitted data. The serial number and the customer number are advantageously encrypted by means of a 256-bit key based on the date and time stamp.

• – für ein Türschloss oder Torschloss eines Zimmers, eines Gebäudes, einer Garage, innerhalb eines Firmengeländes, eines Hotels – kann bereits bei Buchung oder Zahlung für den gebuchten Zeitraum freigegeben werden – oder eines Fahrzeugs – privat, Firma, Mietwagen, aber auch
• – als Zugang für ein Mobiltelefon, einen Personalcomputer oder ein Rechnernetzwerk, oder
• – zur Identifikation gegenüber Anwendungen auf einem Mobiltelefon, Personalcomputer oder einem Rechnernetzwerk durch kurzzeitige Autorisierung des Nutzers oder
• – zur Freigabe von Transaktionen durch kurzzeitige Autorisierung des Nutzers verwendbar.

Die Vorrichtung sowie das Verfahren zum Authentifizieren und Autorisieren von Personen kann ebenso als Identifikations-Medium zur Identifikation des Nutzers gegenüber Behörden, wie der Polizei und Sicherheitsdiensten, beispielsweise als Personalausweis, Führerschein, Reisepass, EU-Aufenthaltsgenehmigung, Einreisegenehmigung, Visa, Firmenausweis oder Versicherungskarte, zum Beispiel der Krankenversicherung oder Sozialversicherung, verwendet werden. Für alle Verwendungen als universeller Schlüsse gilt: verfügt der Nutzer über die erfindungsgemäße Vorrichtung, ist lediglich eine Freigabe beziehungsweise eine Aktivierung der Vorrichtung 1 notwendig – besitzt der Nutzer die erfindungsgemäße Vorrichtung nicht, ist eine einmalige Ausgabe und Übergabe an den Nutzer notwendig.The device and the methods for authenticating and authorizing persons is a universal key, for example

• - for a door lock or gate lock of a room, a building, a garage, within a company premises, a hotel - can already be released when booking or payment for the booked period - or a vehicle - private, company, car rental, but also
• - as access for a mobile phone, a personal computer or a computer network, or
• - To identify against applications on a mobile phone, personal computer or a computer network by short-term authorization of the user or
• - Usable to release transactions through short-term user authorization.

The device and the method for authenticating and authorizing persons can also be used as an identification medium for identifying the user to authorities, such as the police and security services, for example as an identity card, driver's license, passport, EU residence permit, entry permit, visa, company card or insurance card. for example, health insurance or social security. For all uses as universal conclusions applies: if the user has the device according to the invention, is only a release or activation of the device 1 necessary - the user owns the Device according to the invention, a one-time issue and handover to the user is necessary.

Also for businesses, the device and the method for authenticating and authorizing individuals have advantages. The legitimate user of the device can be assigned in all areas, the assignment is centrally assigned or revoked, both in data processing, such as directory services, as well as premises or information sources, such as remote locking of mobile phones, access to the intranet or the like. Secure access to premises, company computers or computer networks can be made possible and time recording can be used.

Due to the one-to-one identification of the authorized user, no abuse, for example of health insurance data, is possible. The device 1 is much safer than any current insurance card, even with picture. It is always a clear assignment of each benefit case, a central and immediate intervention in permissions or a login in the personal area of the website possible. Machine-readable ID cards for authorities can be stored on the device. All information about the authorized person, which is stored in the authorities, can be retrieved and displayed immediately, such as pictures, fingerprints or wanted information. Machine-readable driving licenses can be checked immediately, EU residence permits are readable immediately. By harmonizing the machine readability of ID cards, the system can also be used internationally, so ID cards of foreign citizens can also be read by the national border police. Visas can be deposited exactly on time. With an intrinsic linking of the information to the person a much easier verification of the person is possible, the device only clearly indicates who it is. The remaining information is, as before, stored in the original systems and made visible only to the responsible editors. There is no need to change the previous software.

For banks and transactional payment systems, the device can be unlocked for different functions, such as online banking via the personal computer or the mobile phone, the use of a Maestro card or a credit card, with no need to spend different cards. Different passwords and PIN for different applications and functions are eliminated. It is no longer possible to abuse the cards. Elaborate and different identification procedures including all combinations of user names and passwords as well as different PIN methods are eliminated. It provides a previously unavailable transaction security. In the case of online services, the unique user identification via the device in combination with a mobile telephone or a personal computer also replaces the use of the complete user names, passwords and transaction codes even in public environments.

For private individuals there are other advantages in terms of customer loyalty systems such as Payback, Miles-and-More or in hotel chains, public transport ticket systems, paying for parking tickets, entrance tickets, airline tickets or concert tickets. There are no accumulations of different cards of different systems with different PINs, no paper cards or mechanical keys to carry, which can also be forgotten or lost.

The device may be issued to private individuals by banks, insurance companies, government agencies, companies, service providers, such as hotel operators or landlords. This is a one-time activation of the device by the user, then any functions can be released or added.

The device according to the invention and the method for authenticating and authorizing persons have in summary various advantages. Utilizing available technologies for encryption and authentication in the near-field, such as NFC, RFID or Bluetooth, a universally applicable device for authenticating and authorizing or identifying and verifying a person present for most everyday applications is provided. The device meets all safety requirements and goes far beyond the possibilities of the prior art known systems is not abusive used by unauthorized persons and offers the user through a variety of uses a drastic simplification in everyday life.

The device can be activated only by the assigned user, for example via the recognition of fingerprints, the scanning of the iris or the recognition of the voice. Memory contents of the system can not be deleted, read out or overwritten. Since a fingerprint for activation can be falsified even with a great deal of technical effort, impressions of at least two fingers in the case of a selection of ten fingers are requested in the present case, so that a multiplicity of possible combinations results which makes it almost impossible to misuse the device. All memory contents are also using standard methods encrypted and readable only after the delivery of the at least double fingerprint. New functions of the device may be released only by the issuing institutions, with the user being present and having to release the transaction with at least two fingerprints.

The entirety of the functions ensures that the device can only be used by the authorized person. A lost or stolen device would not be usable for an unauthorized person, even in a kidnapping or killing of the authorized person is a further use of the device by an unauthorized person almost impossible. The device could therefore even be provided with the address and / or telephone number of the authorized person or, for example, an institution issuing the device in order to motivate a return of the device. The institutions issuing the device or the users of the systems that can be accessed, such as employers, online shops and banks, have the advantage of a uniform, easily managed and unequivocally secure system. The device, as one form of universal key, reduces costs, since no different systems and administrations are necessary, protects the environment, as the device replaces a variety of cards and keys, serves to reduce the weight and size of purses and handbags. The user does not have to memorize a large number of different PINs or runs the risk of being denied the desired access to the system by forgetting the PIN. Countless changing combinations of usernames and passwords are eliminated. It is neither a PIN queried nor sent over a network, so no data can be spied. Thus, the device with the personally bound authorization method is much safer than the known signature or card PIN methods. In addition, the security is significantly increased for all parties involved, since the device does not require data exchange, but only sends a data packet with authentication information after the user has registered with the delivery of biometric features on the device. The device is not based on the exchange of data for authentication, neither internal nor wide area networks. Thus, when using local computer systems or computer networks no user information is transmitted over networks, so that the credentials are not intercepted, decrypted and abusive reusable. The device provides a secure, personally-bound authorization method for both local applications and for use in local and wide area networks, such as Internet shopping or similar applications. For data security reasons, the device can not be coupled with other devices, exchanges data or communicates via other media, but merely sends a unique authentication identifier or one-time confirmation that the authorized user of the device at a certain time at a particular location is present , The device does not allow bidirectional coupling for bidirectional data exchange, for example via cable or radio, with external devices or the use of mobile, removable media. Moreover, the device is not designed with an operating system which, for example, allows an expansion of the basic functions or even the interaction with other devices. The device is designed as a closed system without the possibility of alteration, erasure or readout of data once stored in the device. The information for use is stored in the respective system to which the access is requested.

Further details, features and advantages of embodiments of the invention will become apparent from the following description of exemplary embodiments with reference to the accompanying drawings. It shows a device for authenticating and authorizing persons in a:

1a : View from above,

1b : Side view,

1c : Bottom view,

1d : alternative embodiment in bottom view,

2a : View from above with arrangement of individual components inside and

2 B : Side view with arrangement of individual components inside.

The 1a to 1c show a device 1 for authenticating and authorizing persons in a view from above, according to 1a , a side view, according to 1b , and and a bottom view, according to 1c ,

The device 1 is with a multi-layered housing 2 formed in the form of an ellipsoid with three different lengths semi-axes a, bc. The ellipsoid has dimensions of the half-axes of a = 20 mm, b = 14 mm and c = 6 mm on a non-uniform shape with a length of 40 mm, a width of 28 mm and a height of 12 mm. The top 2a and the bottom 2 B of the housing 2 is determined by the half-axes a and b. The triaxial ellipsoid may also be formed with three equally long half-axes and thus as a ball or with a few equal-length half-axes and a third, deviating from the other in length half-axes and thus flattened or stretched. The housing 2 is formed in three layers, wherein the two outer layers of a plastic and the inner layer of a metal. The metal layer is arranged between the two plastic layers.

On the top 2a of the housing 2 are, according to 1a , visible to the user visible to the user a scanning device 3 for a fingerprint, also referred to as a fingerprint reader, and two light-emitting diodes 4 . 5 educated. The scanning device 3 has a circular shape with a diameter of about 10 mm. The first light-emitting diode 4 , also referred to as a light-emitting diode or LED for short, emits electromagnetic radiation of a wavelength that is visible to the eye as green. The second light-emitting diode 5 emitted compared to the first light-emitting diode 4 electromagnetic radiation of a wavelength which is visible to the eye as red. The light-emitting diodes 4 . 5 each have a circular shape with a diameter of about 1.5 mm. The first light-emitting diode 4 is used to indicate the readiness of the device 1 to receive an input from the user. The second light-emitting diode 5 signals malfunctions and malfunctions.

For receiving the device 1 on a keychain, for example, is the case 2 with a through hole 6 Mistake. The circular through-hole 6 has a diameter of about 5 mm and is equipped with an internal reinforcement 7 , preferably of metal, formed.

The housing 2 is on one side towards the bottom 2 B provided with a recess or a slot-shaped opening, from which before the start of the device 1 a trained plastic cover 8th protrudes. The cover element 8th has the shape of a thin strip and fills the recess with a height of about 0.25 mm and a width of about 5 mm. The opening and the cover corresponding to the opening 8th are formed in the dimensions such that the cover 8th movable within the opening, in particular from the housing 2 is removable.

Out 1d goes a device 1 for authenticating and authorizing people in an alternative embodiment in bottom view. The difference from the embodiment according to the 1a to 1c consists in the formation of an energy storage and the related peripherals. While the first embodiment according to the 1a to 1c is designed with at least one high-capacity battery as energy storage, which is operable at a maximum of ten to fifteen times a day over a period of about four years, the second embodiment proves 1d at least one rechargeable accumulator as energy storage. For this reason, the second embodiment is used instead of the opening and the cover member disposed in the opening 8th with two contacts 9 designed to connect a charger for charging the energy storage. The as charging contacts 9 for the accumulator on the housing 2 trained contacts are at the through hole 6 longitudinally opposite side of the device 1 arranged. The embodiment of the device 1 with the accumulator as energy storage is preferable for more intensive uses of the above embodiment.

In the 2a and 2 B is the device 1 for authenticating and authorizing persons with an arrangement of individual components inside in a view from above, according to 2a and a side view, according to 2 B represented.

Inside the case 2 are next to the scanning device 3 for the fingerprint and the light-emitting diodes 4 . 5 a carrier element 10 Also called logic carrier, at least one energy storage 11 , which is designed as a long-life battery or accumulator, and transmission elements 12 arranged. In the case 2 In addition, a photocell can also be integrated. The carrier element 10 comprises a non-volatile memory element and an embedded computing unit. The transmission elements 12 For example, they are designed as radio modules for NFC, RFID or Bluetooth to send data. In the alternative embodiment with at least one rechargeable accumulator as energy storage 11 , are also the rechargeable battery and the wiring to the external charging contacts 9 , to 1d , inside the case 2 integrated. A nonvolatile memory element is able to hold the data or information stored in the memory, such as a PROM for "Programmable Read Only Memory" or an SSD for "Solid State Drive", even without an operating voltage applied from the outside. In contrast to a nonvolatile memory element, memories which lose the data or information stored in the memory as soon as the externally applied operating voltage is omitted, such as a RAM for "Random Access Memory" or a main memory of a computer, which is known from so-called DRAMs for " Dynamic Random Access Memories "is designed. That through the opening from the housing 2 outwardly guided and retractable cover 8th Prevented in the delivery state, that is before the device is put into operation 1 , the contact of the energy store 11 with the components to be supplied with electrical energy. The cover element 8th thus prevents unintentional startup of the device 1 and inadvertent discharge of the energy storage 11 , With the removal, that is, the process of extracting the cover member 8th from the device 1 , become the poles of energy storage 11 contacted with the components to be supplied with electrical energy and the device 1 is started. The housing 2 is formed with a spring element, not shown, which in the delivery state of the device 1 is curious. After removal or extraction of the cover 8th becomes the opening in which the cover 8th in the case 2 was inserted, waterproof and dust-tight. In this case, the spring element causes a movement of an elastic sealing element, which sealingly closes the opening after reaching the end position. The sealing member is formed of a soft plastic such as an elastomer or rubber having a length of about 7 mm and a width of about 1 mm.

The scanning device 3 for the fingerprint is protected against inadvertent activation by a closure, for example a rubber closure. When removing the shutter of the scanning device 3 the recognition process is activated. The device 1 is in an active state.

The housing 2 , whose wall is formed of two layers of plastic, which in turn embed a layer of metal, is apart from the recesses for the scanning device 3 , the light-emitting diodes 4 . 5 and the opening for the cover 8th completely closed and formed without the possibility of mechanical opening. In an attempt, the case 2 Forcibly opening, a mechanism connected to the metal layer destroys the memory element of the device 1 physically, so the device 1 unusable and the stored data becomes unreadable. The mechanism is as a on the support element 10 arranged non-volatile memory element not shown essay, in particular as a rotary-cutting mechanism formed. For example, in an experiment, in the case 2 penetrate the metal layer formed as a middle layer bent such that a spike in the non-volatile memory element and the logic of the device 1 penetrates and thus the device 1 makes us unusable.

Inside the case 2 is also a chamber 13 as enclosed free volume for optional extensions of the device 1 , for example, for extensions of communication skills trained. Inside the chamber 13 could be arranged more radio modules or the like. The chamber 13 encloses a volume of the order of 15 mm × 10 mm × 7.5 mm.

The device 1 is configured to send information or data only over a period of five seconds and over a short distance. The device 1 is not designed for the reception of data, which are sent for example by radio or cable connections from other devices.

To the device 1 to put into operation, is the cover 8th to remove, that is from the housing 2 pull out so that electrical contact between the on the support element 10 arranged components of the logic, such as the memory element and the arithmetic unit, and the transmission elements 12 with the energy storage 11 produced as an energy supplier. By establishing the electrical contact, the arithmetic unit and the main memory are put into operation, wherein the arithmetic unit loads the operating system from the nonvolatile memory element. The operating system checks whether biometric data, ie data from two different fingerprints, is already stored. When the biometric data is stored, the device goes 1 in an operating mode, which by lighting the first light-emitting diode 4 is shown. The first light-emitting diode 4 lights up at a distance of five seconds each for half a second and emits green light.

If no biometric data are already stored, the device becomes 1 placed in a request mode, which on the housing 2 by a mutual illumination of the light-emitting diodes 4 . 5 is shown. To execute the request mode, the device must 1 be arranged in the vicinity of a registerable component, such as a computer. The device 1 is now to be registered directly in the database of the system to be joined. Is the device located 1 however, not near a registerable component, the registration function will shut off after 30 seconds to discharge the energy store 11 to avoid. The process of registration can be restarted by the scanning device 3 is covered for 30 seconds, which in turn is registered by means of a photocell. Subsequently, the registration process continues.

At the registerable component, proximity and contact with the device become apparent 1 clearly indicated clearly and requested the release of two imprints of any different fingers. Once the fingerprints on the scanning device 3 read in and in the device 1 stored, the device sends 1 via a transmission element 12 a one-to-one Identungskennunng to the registerable component. The identification code is stored under the name or another individual identifier in the database of the system to be joined. The successfully carried out transmission is by a three times flashing green light of the first light-emitting diode 4 displayed. However, if the scanned fingerprints are unusable or another malfunction occurs, the second light-emitting diode flashes 5 red three times shortly. In addition, via a transmission element 12 sent a corresponding message to the registerable component, which is displayed in clear text by the device. When the prints of the two different fingers in the memory element of the device 1 is filed and all processes of registration by the registerable component are confirmed, is no communication to the device 1 that is a transfer of data to the device 1 , more is possible. The device 1 only sends data and only on request. Registering the device 1 does not require a central database to synchronize the data with a user. This is the registration of the device 1 also not recoverable. At a loss of the device 1 The process of activation must be with a new device 1 be carried out again. A function to completely replicate a device 1 with a takeover of the identity of the user is conceivable.

To the device 1 and sending data during later use of the device 1 to be activated, by means of the scanning device 3 the footprints of the user's two fingers are scanned and within the device 1 stored data compared. In agreement with the scanning device 3 generated fingerprint data with those in the device 1 stored data, the user is authenticated and it is initiated a transmission process for authorizing the user, wherein the information for authorization is transmitted by radio. Alternative methods of authentication include the process of scanning the iris or recognizing the user's voice. The transmission process is activated by scanning the imprints of the two different fingers at intervals of no more than five seconds. After successfully authenticating the user send the transmission elements 12 over a period of five seconds within the device 1 stored uniquely identifiable identification as a unique code and identify the user of the device 1 clearly as the rightful user. The process of transmission is by a continuously green light emitting first light-emitting diode 4 displayed.

In the event of a system failure after or during fingerprint scanning, the second light emitting diode illuminates 5 red for a period of five seconds, which will repeat every ten seconds if the fault persists. If at least one of the fingerprints is not recognizable or processable, the light-emitting diode will light up 4 . 5 five times each for one second. Although the fingerprints could be scanned but are not identical to the stored fingerprint data, the second light-emitting diode is illuminated 5 over a period of ten seconds continuously red, while the first light-emitting diode 4 green every two seconds for one second each. In addition, via the transmission elements 12 an error message is transmitted to the remote station, which can be displayed when forming a corresponding output unit, such as a screen or a light display of light-emitting diodes, a clearly worded warning.

The remote station takes the from the device 1 With a signal sent via radio data, sends the unique identification number via any media to a central database system, in which the adjustment of the data takes place. Upon agreement or successful comparison of the data, the user is authorized and the requested transaction is performed. If the data matches and then released, the transaction takes place as usual. However, if the comparison shows that the data does not match, the release of the transaction is rejected and displayed as a warning at the remote site. In the case of transactional payment systems, such as credit cards or debit cards, the data is compared, that is to say in particular the identification number, with data from the database of the respective financial service provider. In locking systems, for example of buildings or motor vehicles, the comparison of the data takes place either with data from a locally stored database or with data from a centrally stored database of the security provider.

After the single registration the device becomes 1 in a transmit-only mode and operated in the transmit-only mode, which does not allow two-way communication in terms of bidirectional data exchange. The device 1 can therefore neither read nor a second time, for example, with data of others Fingerprints, but sends after scanning the prints of the two fingers and authenticating the user only for five seconds, an identification that can be picked up by a radio receiver. After the process of sending the information, the device becomes 1 automatically turned off and deactivated. The device 1 is thereby put back in a passive state in which no data can be sent. The waterproof and dustproof trained, as well as against shocks and magnetic influences protected device 1 has no externally visible or achievable serial numbers or similar identifiers. An individualization should be possible by means of a shrink wrap, engraving or the like.

The function of the overall system is based on the integration into existing payment systems and transaction systems. This will be additional, not from the device 1 used data in the execution of the process needed. The device 1 is exclusively intended and suitable for authorizing the present user to the transaction office, such as a payment point or a cash machine, and thus to guarantee the authenticity of his identity at that moment. With the device 1 itself can not be a transaction, reinsurance or the like, as the device 1 sends only within a short period of time a positive signal to a dedicated receiver and confirms that the trigger of the transaction with the owner of the device 1 matches. Any other functionality, such as storing more information, rewriting or changing the content of within the device 1 arranged memory element is impossible to ensure maximum security.

For financial transactions must be in addition to the device 1 the rightful user to be present, as users and device 1 are firmly coupled together by the delivery and storage of the biometric data. The relationship between the device 1 and the rightful user can not be changed or transferred once the biometric data has been saved. In addition, a database must be present, which on a central system of the issuing office of the device 1 , ie a bank or other transactional business. Furthermore, at the point of the transaction, a query system is necessary, which is one with the device 1 compatible transmission technology is formed. A fictitious transaction has the following steps. The legitimate user of the device 1 decides on a product or service, wants to pay for it and goes to a suitable point of payment. The provider of the product or service collects all data for the transaction and submits the data to the local application. A display device, such as an LED on the POS system of the provider, the user of the device 1 for authenticating and authorizing over at least one biometric characteristic, such as fingerprint or iris scanning or voice recognition. Upon successful authentication of the legitimate user, the device sends 1 a one-to-one identification identifier via a compatible transmission technique to the recipient of the system of the provider, which inserts the user name and an intrinsic identifier, for example a credit card identification number, into the local application. The provider's system sends the request of the transaction over an existing network to the credit card company, the bank or other transactional systems. In this case, as already known, a request is made as to whether the user with the corresponding identifier is authorized to carry out a transaction in the specified amount. The company sends back a message that consists only of a confirmation or a rejection. Upon confirmation, all entered data is collected by the provider's system, sent to the company, the transaction is made against the customer's account, and the invoice is printed to complete the transaction. If rejected, the corresponding reason will be sent and displayed on the provider's system. For the described transaction, only a new data set-up has to be defined as a packet type and its contents, since the actual transaction is carried out by the company after authorization has been carried out on the system of the provider. The packet type with the data, also called the authorization token, has the following fields: fourteen digit date and time stamp - MMTTYYYYHHMMSS, device serial number 1 and user number of the user, each up to sixteen digits to ensure authorization authorization uniqueness, and a checksum to verify the integrity of transmitted data in two digits. The date and time stamps as well as the checksum are the only unencrypted fields, the serial number and the customer number are encrypted on the basis of the date and time stamp by means of a 256-bit key determined by the issuing company. This will prevent accidental packets being cut with the device 1 authorized transaction once again for a transaction. Encrypting using the date and time stamp makes each data packet usable only once. In the case of unsuccessful authorization, the user must again biometric on the device 1 login and send a new data packet. Because the contraption 1 is only used for a different, safer type of authorization than with a PIN, a signature or similar security-prone method, all previous ways to complete the transaction can be used unchanged, which significantly facilitates the commissioning of the new process and only an extension of the interface system with a corresponding compatible transmission technique, such as a radio link required.

Also for key systems or access systems must in addition to the device 1 the rightful user to be present, as users and device 1 are firmly coupled together by the delivery and storage of the biometric data. The relationship between the device 1 and the rightful user can not be changed or transferred once the biometric data has been saved. In addition, a database must be present, which on a central system of the issuing office of the device 1 , that is the operator of the building or a security company, is stored. Furthermore, at the access point, such as a door, a gate or the like, a query system is necessary, which is one with the device 1 compatible transmission technology is formed. A fictitious admission permit has the following steps. The legitimate user of the device 1 Approaches the access of his choice, authenticates and authorizes over at least one biometric feature, such as fingerprint or iris scanning or voice recognition. Upon successful authentication of the legitimate user, the device sends 1 a one-to-one identification identifier via a compatible transmission technique to the receiver of the access system, which consists of filters out the system-internal identifier from the data packet. The receiver sends the request for access via the existing network to the main computer of the building. In this case, as already known, a request is made as to whether the user with the corresponding identifier is entitled to open the desired access at the present time. The master computer sends back a message which consists only of a confirmation or a rejection. To end the process, access will be opened upon confirmation and access will be denied upon refusal. For the query described, only a new data compilation is to be defined as a packet type together with content, since the actual query of the authorization is carried out on the central management computer of the building management as before. The packet type with the data again has the following fields: date and time stamp with fourteen digits - MMTTYYYYHHMMSS, serial number of the device 1 and sequential number of the user, each up to sixteen digits to ensure the uniqueness of the authorization request and a checksum to verify the integrity of the transmitted data with two digits. The date and time stamps as well as the checksum are the only unencrypted fields, the serial number and the serial number are encrypted on the basis of the date and time stamp by means of a 256-bit key determined by the issuing company. This will prevent accidental packets being cut with the device 1 authorized access once again for access. Encrypting using the date and time stamp makes each data packet usable only once. In the case of unsuccessful authorization, the user must again biometric on the device 1 login and send a new data packet. Because the device 1 is used only for a different, safer type of authorization than with a PIN, a magnetic card or similar security-prone method, which can not be uniquely coupled with a legitimate user, all previous ways to handle the access authorization can be used unchanged, which is merely the exchange the previous number fields or the extension of the interface system with a corresponding compatible transmission technology, such as radio receiver requires. The access authorization procedure can be used for both commercial and private buildings.

Also for the registration on computer systems and network systems must in addition to the device 1 the rightful user to be present, as users and device 1 are firmly coupled together by the delivery and storage of the biometric data. The relationship between the device 1 and the rightful user can not be changed or transferred once the biometric data has been saved. In addition, a database must be present, which on the computer system used or on a central system of the issuer of the device 1 , that is the operator of the network system, is stored. Furthermore, a computer system is necessary, which with one with the device 1 compatible transmission technology is formed. A fictitious login to the computer system or the network system has the following steps. The legitimate user of the device 1 starts the computer of the computer system or the network system, which the user of the device 1 via a login mask for authenticating and authorizing via at least one biometric feature, such as the scanning of the fingerprints or the iris or the recognition of the voice. Upon successful authentication of the legitimate user, the device sends 1 a one-to-one identification identifier via a compatible transmission technology to the computer as a receiver of the computer system or the network system, which filters out the system-internal identifier from the data packet. The computer sends the request for access either to a locally stored security database or to a central computer within the system. It is, as already known, asked whether the user is entitled to use the computer with the appropriate identifier. The local or central computer sends back a message that consists only of a confirmation or a rejection. To terminate the process, the use of the computer is permitted upon confirmation and the refusal to use the computer denied and sent a message to the system administrator. For the described application or query, only a new data compilation is to be defined as a package type including content, since the actual logon is carried out after authorization in the security database of the local computer or the central computer within the system as before.

Also this packet type with the data has the following fields: date and time stamp with fourteen digits - MMTTYYYYHHMMSS, serial number of the device 1 and sequential number of the user, each up to sixteen digits to ensure the uniqueness of the authorization request and a checksum to verify the integrity of the transmitted data with two digits. The date and time stamps as well as the checksum are the only unencrypted fields, the serial number and the serial number are encrypted on the basis of the date and time stamp by means of a 256-bit key determined by the issuing company. This will prevent accidental packets being cut with the device 1 authorized registration once again are available for registration. Encrypting using the date and time stamp makes each data packet usable only once. In the case of unsuccessful authorization, the user must again biometric on the device 1 login and send a new data packet. Because the device 1 can only be used for a different, safer type of authorization than with a user name in combination with a password or similar security-prone method, which can not be uniquely coupled with a legitimate user, all previous ways to complete the application can be used unchanged, which only the replacement of the previous login mask or an extension of the computer used with a corresponding compatible transmission technology, such as a radio link requires.

Another advantage of the device 1 and the method for authenticating and authorizing, in particular, that only the user registered by the issuing company attaches to the device 1 can log, is that a loss of the device 1 only an expense of the new procurement and the reprogramming of the device 1 caused. In case of damage, malfunction or irreparable malfunction of the device 1 becomes the device 1 destroyed and replaced by a new one. A reprogramming of the device 1 to the authorized user is unique with a change of the serial number of the device 1 to correct the checksums in the subsequent authorization processes, such as in transactions, access authorizations, or logging on to computer systems or network systems. Unlike the loss of, for example, account cards, credit cards, access cards or keys is from the devices no longer under the control of the authorized user 1 no danger of abuse, as there is no unauthorized user on the device 1 log in and the device 1 for further authorizations. Above that can be the serial number of the device 1 be deleted from the database of the service provider, so even with successful authentication to the device 1 no successful authorization is possible anymore.

The operating life of device 1 , which are not equipped with accumulators and the corresponding recharging options, ends in average use with ten to fifteen authorizations a day after about three to four years. devices 1 Batteries that run out of time are discarded, as well as damaged equipment, because of the rugged design of the housing 2 and the self-destruction of the memory element when opening the housing 2 , there is no way the device 1 to open, to replace the battery as energy storage. Useless devices have become unusable 1 are taken back by the issuing company and sent to a recycling cycle, which separates all elements and reuses them or leads to environmentally friendly destruction.

LIST OF REFERENCE NUMBERS

1

 contraption

2

 casing

2a

Top of housing 2

2 B

Bottom housing 2

3

 Scanning device fingerprint

4

 first light-emitting diode

5

 second light-emitting diode

6

 Through Hole

7

 Reinforcement metal

8th

 cover

9

 Contact, charging contact accumulator

10

 support element

11

 energy storage

12

 transmission element

13

 chamber

a, b, c

 Length of the semi-axis

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• WO 2011028874 A1 [0010]
• US 20070197261 A1 [0011]

Claims (10)

Contraption ( 1 ) for authenticating and authorizing persons, comprising a housing ( 2 ), at least one display device, at least one energy store ( 11 ), a carrier element ( 10 ) with one on the carrier element ( 10 ) arranged memory element and at least one transmission element ( 12 ), characterized in that - a scanning device ( 3 ) is formed for recording biometric features of the person, wherein within the memory element comparison data of the biometric features for authenticating the person are storable, - the device ( 1 ) is configured to transmit a data packet containing user authentication information to an access-requested system after the user acquires biometric features on the device ( 1 ) is authenticated to be authorized for the system in which all information for use is stored, and - the device ( 1 ) is closed in such a way that the transmission of the data exclusively in the direction of the device ( 1 ) takes place to the system and that changing, deleting or reading the data stored in the memory element is prevented. Contraption ( 1 ) according to claim 1, characterized in that the device ( 1 ) is configured to initiate self-destruction of the memory element after a certain number of consecutive erroneous attempts to capture biometric features. Contraption ( 1 ) according to claim 1 or 2, characterized in that the housing ( 2 ) has a multilayer wall, wherein two outer layers of the wall of a plastic and an inner layer of a metal are formed. Contraption ( 1 ) according to claim 3, characterized in that the inner layer of metal is formed connected to a arranged on the storage element essay, wherein the article upon opening of the housing ( 2 ) physically destroys the memory element. Use of a device ( 1 ) according to one of claims 1 to 4 for authenticating and authorizing persons - in financial transactions in payment transactions and / or - for locking systems and / or access systems of buildings or vehicles and / or - for applications to computer systems or network systems as computer-assisted login procedures and / or - as an identification medium for identifying the user to authorities. Method for registering a device ( 1 ) for authenticating and authorizing persons according to one of claims 1 to 4 on a registerable component of a system to be joined, comprising the following steps: - displaying a contact between the device ( 1 ) and the registerable component, as well as requesting to record biometric features of the user, - recording the biometric features of the user and storing biometric data in the device ( 1 ), - generating and sending a one-to-one identification tag from the device ( 1 ) to the registerable component, - receiving and storing the identification code within a database of the system to be registered for registering the user, - sending a message from the device ( 1 ) to the registerable component and displaying the message through the registerable component. Method for authenticating and authorizing persons with a device ( 1 ) according to one of claims 1 to 4 to a system to be joined, comprising the following steps: - recording the biometric features of the user and comparing the biometric data with in the device ( 1 biometric data stored, - authenticating the user and initiating a process of sending to authorize the user in accordance with the compared biometric data, - transmitting a in the device ( 1 ) stored unambiguous identification identifier as information to the system to be joined and - switching off and deactivating the device ( 1 ) after the process of sending the information, - receiving and receiving the transmitted information by the system to be joined, and - sending the unique identification number to a central database system and comparing the identification number with data stored in the database system, - authorizing the user if the data matches, and Release to perform and perform the operation requested by the user. A method according to claim 6 or 7, characterized in that are taken as biometric features fingerprints of two different fingers of the user, wherein the process of sending by scanning the fingerprints at intervals of not more than five seconds is initiated. Method according to one of claims 7 or 8, characterized in that in the device ( 1 ) is transmitted over a period of five seconds to the system to be joined. Method according to one of claims 6 to 9, characterized in that the one-to-one identification code is formed from fields with data, wherein a first field data of a date and time stamp, a second field a serial number of the device ( 1 ) and a customer number and a third field having a checksum to verify the integrity of the transmitted data, the serial number and the customer number being encrypted using a 256-bit key based on the date and time stamp.

Images