DE10230446A1 - Biometric access control procedures - Google Patents

Abstract

The invention relates to methods for biometric access control, which at least partially evaluates as a biometric feature at least one characteristic feature of the movement of a living being.

Description

The invention relates to a method for biometric access control according to claim 1 and a corresponding Device according to claim 18.

For biometric access control Various methods are known which have at least one characteristic Evaluate the characteristic of a living being, especially a human. The evaluation of a fingerprint or image is known People. This is why the finger image is so suitable for biometric Access control as it uniquely identifies almost everyone. More for the identificatian of a person suitable characteristic features result from evaluation of the iris or iris, the Facial lines, the voice or the handwriting of a person.

To ensure a particularly high level of access security reachable biometric access method also dynamic components in the Process access control. For example, dynamic Handwriting recognition of a person the chronological course of the Handwriting during an access control evaluated. To do this, a person must have a Give a written sample before access control.

An advantage of evaluating dynamic components in the case of biometric access controls compared to the static biometric Access controls such as fingerprint, iris and face recognition is the higher Forgery. While it is relatively simple, for example, static biometric access controls fooled by copies of iris, face or finger picture and to "outsmart" this is the case with the dynamic biometric access controls more difficult since the dynamic components are very difficult, for example through training a certain manuscript, are to be falsified. A current one Report on biometric detection methods and their counterfeit security can be found in the journal c't magazine for computertechnik, issue 5/2002, Heise-Verlag, pp. 156 to 161.

Another important aspect at biometric access control is the user acceptance of the control. This is mainly due to the user friendliness and reliability embossed. To achieve a high degree of user friendliness, should biometric access control by users is not perceived as annoying or be completely rejected. To ensure high reliability to achieve the likelihood that legitimate users falsely rejected (the so-called FRR: false rejection rates, if possible be small. To finally On the other hand, achieving a high level of security should make the probability low that an incorrect, illegitimate user is accepted (so-called FAR: False Acceptance Rate). From the report “Test and Testing the suitability for everyday use of biometric systems "by Dr. Gunter Lassmann, presented at the 12th SIT smartCard Workshop 2002 in Darmstadt get an overview of the Suitability for everyday use and acceptance of biometric access controls among users.

Object of the present invention is a method and device for biometric access control to propose which, on the one hand, a high level of security against counterfeiting, and offer other user acceptance due to easy handling.

This task is accomplished through a process for biometric access control with the features according to claim 1 and by a corresponding device with the features according to Claim 18 solved. Further advantageous embodiments of the invention result from the dependent Claims.

An essential idea of the invention relies on at least one characteristic as a biometric characteristic Characteristic of the movement of a living being, in particular, at least partially evaluate. Expressed differently becomes the gait or more precisely the gait behavior with the invention of a living being, preferably a human, for a biometric access control evaluated. It has been found that the walk of a living being as a biometric feature roughly the same security against counterfeiting or deceptions such as dynamic handwriting recognition. By at least partially evaluating the movement of a living being can therefore characteristic information about the living being is determined be the for a biometric access control can be used to advantage can.

This preferably comprises at least a characteristic feature the speed of the living being, the acceleration from a resting position of the living being, the direction of living being's steps, walking speed and / or the cadence of the living being. All of these factors can contribute to Evaluation used as a characteristic feature of the movement of the living being , especially since they are used for automatic processing can be derived.

The at least one characteristic feature is measured in a preferred embodiment of the invention with at least one sensor on the living being. The at least one sensor can comprise an acceleration sensor that measures and stores the speed and direction of movement of the living being. With the movement data measured in this way, as with dynamic handwriting recognition, at least one characteristic can be characteristic of locomotion or gait behavior of a living being can be determined.

The acceleration sensor is preferably a monolithic silicon acceleration sensor with at least one etched in silicon Bending beam that has doped strain sensors. alternative or additionally the acceleration sensor can be a capacitive monolithic silicon acceleration sensor his. An advantage of the monolithic silicon acceleration sensors is that they are very small and therefore, for example can be integrated into a person's clothing without that this affects, for example, the weight of the clothes and thus has a significant impact on comfort. There are also acceleration sensors Standard components and thus mass products that are inexpensive and on the one hand on the other hand, technically mature and therefore reliable. For example, the company Analog Devices GmbH includes acceleration sensors the designation ADXL202 / 210 available. With these acceleration sensors you can directly through integration Velocity and location vectors in both analog and in digital form.

The at least one is preferably Sensor placed in or on a shoe, especially in the heel and / or the sole of the shoe. Shoes are particularly good to accommodate such sensors, since many people wear shoes every day and therefore the risk is low that a human being from a biometric Access control is rejected because he does not have his access card carries with it. In addition, there is little danger that shoes will be lost like ID or even stolen by a thief. Even if an unauthorized person is in possession of the shoes is, according to the invention, the unauthorized Access to a secure system, for example, is hardly possible because the unauthorized person would have to copy the walking behavior of the shoe owner what is very unlikely.

The at least one sensor can also placed in a shoe insert. This makes it possible to wear shoes retrofit with the sensor.

Finally, it is also possible to place at least one sensor in or on an ankle strap attached to the a foot of the Living being is attachable. This solution is particularly useful for people who have no shoes or shoe inserts with the sensor and / or want to wear. To give these people access to one with the method according to the invention secure system to enable can this the ankle strap invest.

To handle the method according to the invention to further simplify and thus increase user acceptance the at least one sensor data wirelessly by radio and / or Infrared to give access to a secure room or, for example to get a computer system. In particular, it transmits data to a recipient in an access control device. This means that a person must at least one sensor for one Do not take access control to put it in a reader, for example Access control device to insert. The wireless transmission of For example, data can be transmitted using Bluetooth or the DECT standard, which is widely used in cordless phones. Conceivable are a matter of course all other wireless transmission methods, the data preferably about short distances between sender and receiver transmit with low transmission power.

To prevent during the transfer of data from at least one sensor to an access control device the data can be spied on, particularly in the case of wireless transmission can, in a preferred embodiment of the invention, these are transmitted in encrypted form. You can do this all common, in particular, symmetrical encryption methods are used become.

Especially with wireless transmission or transmission of the data, it makes sense to use at least one error correction code for secure transmission to provide. This avoids that the data in the event of transmission problems, which, for example, by interference signals can be caused transmitted several times from at least one sensor to the access control device Need to become.

In a further preferred embodiment According to the invention, the at least one sensor is a piezo element supplied with electrical energy. Here is the piezo element placed on the living being in such a way that when the Creatures a piezo voltage. This embodiment needed no battery for power supply. This means that there is no longer any need to change the battery required. The at least one sensor and additional circuit elements as well as the piezo element thus be firmly integrated into a shoe. For example the piezo element integrated in the heel or sole of the shoe in this way that when the shoe appears, there is pressure on the Piezo element exerted so that this is an electrical voltage to supply the generated at least one sensor. The piezo element in would also be conceivable to implement a shoe insert that is just like the heel is regularly burdened by pressure when moving.

After all, at least one Sensor an evaluation circuit for processing signals of the least a sensor and processing for transferring the processed Have signals. For example, the evaluation circuit can be put together be integrated with the at least one sensor on a chip, similar to with an airbag sensor system. Such an integrated circuit can be mass-produced and in shoes or shoe insoles to be built in.

The evaluation circuit preferably comprises a processor with a memory that a stored in memory Program executes. This program processes those received from the at least one sensor Signals with an algorithm that uses the signals to give typical characteristics the movement of the living being determined.

In particular, the algorithm determines Velocity and location vectors as typical features of the movement of the living being.

To prevent the characteristic Characteristics of locomotion of a living being by the evaluation circuit have been determined and stored, are read without authorization, can Safety-relevant data in a module from the evaluation circuit stored that is protected against unauthorized access. This can be a specially protected semiconductor memory, for example, for example a flash EEPROM, of the additional circuits that prevent that by a unauthorized access to the memory data can be read out can.

According to another aspect the invention a device for biometric access control, which is designed to be at least one as a biometric feature characteristic feature of the movement of a living being at least partially evaluated.

For this purpose, the device in FIG a preferred embodiment at least one sensor for measuring the movement.

The at least one sensor has preferably an acceleration sensor and circuits for measurement on the speed and direction of movement of the living being.

The sensor can be a monolithic Silicon acceleration sensor with at least one bending beam etched in silicon, the doped strain sensors.

Alternatively or additionally the sensor is also a capacitive monolithic silicon acceleration sensor his.

After all, at least one Sensor a transmitter for wireless transmission of data by radio and / or infrared, in particular for transmitting data to one Recipient in an access control device.

Furthermore, the at least one sensor can be a Encryption circuit of the data, for example a circuit for symmetrical encode the data with a cryptographic key.

After all, at least one Sensor also have a circuit to use at least the data an error correction code for a secure transmission to provide.

The electrical supply of the at least one Sensor with electrical energy can use a piezo element respectively.

In a further preferred embodiment the at least one sensor has an evaluation circuit which it delivers signals for evaluation, for processing the received Signals and for processing the processed signals for transmission to a recipient is trained.

The evaluation circuit preferably comprises a processor and a memory in which a program is stored is that the processor is executing. The Program processes those received from at least one sensor Signals with an algorithm that uses the signals to give typical characteristics the movement of the living being.

The algorithm preferably determines as typical features of the movement speed and location vectors.

Finally, the evaluation circuit comprises in a preferred embodiment a module in which security-relevant data can be stored and that is protected against unauthorized access. In particular in this module the determined characteristic features of the Movement of a living being discarded. This prevents the data stored in it Interfaces, not just read out by the processor.

Another aspect of the invention concerns an ankle bracelet, the device according to the invention as explained above having. Furthermore, the invention relates to a shoe that like the device according to the invention explained above includes. Another aspect of the invention includes a shoe insert, which the device according to the invention as explained above having.

Finally, the invention relates according to one Another aspect is a circuit module that is used to perform the trained method according to the invention is. In particular, this circuit module can be equipped with a powerful microprocessor Have memory, as well as at least one sensor and others application-specific circuit parts that are within the meaning of the invention are trained.

Further advantages, features and possible applications of the present invention for biometric access control from the following description in connection with the in the drawing shown embodiment.

The invention is illustrated below of the embodiment shown in the drawing. In the description, in the claims, in the abstract and in the drawing, the list of reference numerals given in the rear used terms and assigned reference numerals. In the drawing means:

1 a block diagram of an embodiment of a device according to the invention for biometric access control.

In 1 is a device for biometric access control 10 shown the one sensor 12 for measuring and evaluating at least one characteristic feature of the movement of a person and an access control device 22 and a piezo element 28 includes.

The access control facility 22 can be, for example, a module of a data processing system that controls access to the data processing system. The piezo element 28 serves to supply the sensor 12 the device for biometric access control 10 with electrical energy.

The following is the construction of the sensor mentioned 12 explained, which can be installed, for example, as a chip or integrated circuit in a shoe, in the heel of a shoe, in the sole of a shoe, in a shoe insert or in an ankle strap. The sensor 12 is used, among other things, to measure the speed and direction of movement of a person using the sensor 12 carries with him. For this purpose, it has an acceleration sensor 14 , which is, for example, a monolithic integrated silicon acceleration sensor that works according to the capacitive method, or has at least one bending beam etched in silicon with a doped strain sensor.

The signals from the acceleration sensor 14 become circuits 16 fed, which measure the speed and direction of movement of the living being. These circuits 16 comprise an analog-to-digital converter, not shown, which receives the analog signals from the acceleration sensor 14 converted into digital values for further processing.

The output signals of the circuits 16 An evaluation circuit is used to measure the speed and direction of movement of the living being 30 fed that a processor 32 , a memory 34 and a module 36 includes, in which security-relevant data can be stored and which is protected against unauthorized access. In other words, the module 36 only from the processor 32 controlled, in particular read or written, so that external access, for example via an interface of the sensor 12 is not possible, so the module offers 36 protection against unauthorized access to security-relevant data, in particular passwords, keys and important measurement data of the acceleration sensor 14 that include at least one characteristic of human locomotion.

The storage facility provides the opposite 34 represents a conventional memory for storing data, for example for temporarily storing data. In the memory 34 a program is also stored, which the accelerometer 14 received signals processed with an algorithm that uses the received signals to determine characteristic features of the movement of the human being, the sensor 12 carries with him. This program is run by the processor 32 executed. Accordingly, the memory has 34 a volatile part for caching data and a non-volatile part for the program.

In normal operation of the device for biometric access control 10 when the sensor is operating 12 that in memory 34 program from the processor 32 processed. As part of this program, the signals from the acceleration sensor 14 by the circuits 16 (Before were processed, processed by determining characteristic features of the locomotion of the person, in particular their step frequency, speed, acceleration or the like, essential information about the locomotion.

The evaluation circuit 30 generates data that are based on the determined characteristic features of the human locomotion and transmits this to a circuit 24 for encryption. The circuit 24 encrypts the data with a given key using a symmetrical encryption algorithm. It then transmits the encrypted data to a circuit 26 for error correction codes. The circuit 26 adds error correction data to the received data so that in the event of a faulty transmission, a receiver can reconstruct the original data from the faulty data using the error correction code.

The encrypted data with an error correction code is then sent by a radio transmitter 18 over a radio link 38 to a radio receiver 20 in the access control facility 22 transfer. The radio transmitter preferably checks 18 continuously, whether there is a corresponding radio receiver in its environment 20 located. For example, the radio receiver can do this 20 the access control device 22 Periodically send out data that identify it and inform a corresponding receiver that it is within the range of the radio receiver 20 located.

Once a radio link 38 between radio transmitters 18 and radio receiver 20 the radio transmitter transmits 18 the data to the radio receiver 20 of this to circuits of the access control device, not shown 22 passes for evaluation. These circuits now compare the data received, which comprise the characteristic features of human locomotion, with data from a database, which contains information about persons who have access authorization. This information also includes characteristic features of the movement of the person concerned. The circuits compare the individual data records from the database with the received data and, if a data record matches the received data, grant access to a person identified in this way.

Typically, access control is carried out without human intervention 12 carries with him. It takes place automatically as soon as the radio transmitter 18 in the reception area of the radio receiver 20 and this is from the sensor 12 is detected. In this case the sensor sends 12 automatically data over an existing radio connection 38 between radio transmitters 18 and radio receiver 20 and the access control runs in the access control device 22 from.

The sensor 12 is from the piezo element 28 supplied with electrical energy. The piezo element 28 For this purpose, it is integrated in the sole of the shoe or in the heel of a shoe in the human being and emits a voltage pulse every time it occurs, which is a capacitor C of the sensor 12 charging. The capacitor C serves to supply the circuit parts of the sensor 12 , Current-saving circuit elements, in particular an energy-saving processor, are preferred as circuit parts 32 used to only slightly load the energy supply through the capacitor C.

The invention is characterized by this from that at least one characteristic as a biometric characteristic Characteristic of the movement of a living being at least partially evaluated becomes. This can make a similar high security as with dynamic handwriting control as well a high level of user acceptance, in particular due to the simple and easy handling can be achieved.

10

contraption for biometric access control

12

sensor

14

accelerometer

16

circuits for measuring speed and

movement direction

18

radio transmitter

20

radio receiver

22

Access control device

24

circuit for encryption

26

circuit for error correction codes

28

piezo element

30

evaluation

32

processor

34

Storage

36

module with secured access

38

radio link

C

capacitor

Claims (37)

Procedure for biometric access control, which is called biometric Feature at least one characteristic feature of the movement of a Living being at least partially evaluated. A method according to claim 1, characterized in that the at least a characteristic feature the speed of the living being, the acceleration from a resting position of the living being, the direction of living being's steps, walking speed and / or includes the cadence of the living being. A method according to claim 1 or 2, characterized in that at least one sensor ( 12 ) measures at least one characteristic feature of the living being. A method according to claim 3, characterized in that the at least one sensor ( 12 ) an acceleration sensor ( 14 ), which measures and stores the speed and direction of movement of the living being. A method according to claim 4, characterized in that the acceleration sensor ( 14 ) is a monolithic silicon acceleration sensor with at least one bending beam etched in silicon, which has doped strain sensors. A method according to claim 4 or 5, characterized in that the acceleration sensor ( 14 ) is a capacitive monolithic silicon acceleration sensor. Method according to one of claims 3 to 6, characterized in that the at least one sensor ( 12 ) is placed in or on a shoe, especially in the heel and / or sole of the shoe. Method according to one of claims 3 to 7, characterized in that that the at least one sensor is placed in a shoe insert is. Method according to one of claims 3 to 8, characterized in that the at least one sensor ( 12 ) is placed in or on a band that can be attached to one of the extremities of the living being. Method according to one of claims 3 to 9, characterized in that the at least one sensor ( 12 ) Sends data wirelessly by radio and / or infrared, in particular data to a receiver ( 20 ) in an access control facility ( 22 ) transmits. A method according to claim 10, characterized in that the Transfer encrypted data become. A method according to claim 10 or 11, characterized in that the data by means of at least one error correction code for a secure Transmission. Method according to one of claims 3 to 12, characterized in that the at least one sensor ( 12 ) from a piezo element ( 28 ) is supplied with electrical energy, the piezo element ( 28 ) is placed on the living being in such a way that it generates a piezo voltage when the living being moves. Method according to one of claims 3 to 13, characterized in that the at least one sensor has an evaluation circuit ( 30 ) to which it delivers signals that it processes and for transmission to a receiver ( 20 ) are processed. A method according to claim 14, characterized in that the evaluation circuit ( 30 ) a processor ( 32 ) with a memory ( 34 ) which includes a in memory ( 34 ) executes the stored program that uses the at least one sensor ( 14 ) received signals processed with an algorithm that uses the signals to determine typical features of the living being's movement. A method according to claim 15, characterized in that the Algorithm speed and location vectors as typical features the movement of the living being. Method according to one of claims 14 to 16, characterized in that the evaluation circuit ( 30 ) security-relevant data in one module ( 36 ) that is protected against unauthorized access. Contraption ( 10 ) for biometric access control, which is designed to at least partially evaluate as a biometric feature at least one characteristic feature of the movement of a living being. Device according to claim 18, characterized in that it comprises at least one sensor ( 12 ) to measure movement. Device according to claim 19, characterized in that the at least one sensor ( 12 ) an acceleration sensor ( 14 ) and circuits ( 16 ) for measuring the speed and direction of movement of the living being. Device according to claim 20, characterized in that the acceleration sensor ( 14 ) is a monolithic silicon acceleration sensor with at least one bending beam etched in silicon, which has doped strain sensors. Device according to claim 20 or 21, characterized in that the acceleration sensor ( 14 ) is a capacitive monolithic silicon acceleration sensor. Device according to one of claims 19 to 22, characterized in that the at least one sensor ( 12 ) is placed in a shoe, especially in the heel and / or sole of the shoe. Device according to one of claims 19 to 23, characterized in that the at least one sensor ( 12 ) is placed in a shoe insert. Device according to one of claims 19 to 24, characterized in that the at least one sensor ( 12 ) is placed in a band that can be attached to one of the extremities of the living being. Device according to one of claims 19 to 25, characterized in that the at least one sensor ( 12 ) a transmitter ( 18 ) for the wireless transmission of data by means of radio and / or infrared, in particular for the transmission of data to a receiver ( 20 ) in an access control facility ( 22 ). Device according to one of claims 19 to 26, characterized in that the at least one sensor ( 12 ) a circuit ( 24 ) for encrypting the data. Device according to one of claims 19 to 27, characterized in that the at least one sensor ( 12 ) a circuit ( 26 ) to provide the data by means of at least one error correction code for secure transmission. Device according to one of claims 19 to 28, characterized in that a piezo element ( 28 ) is provided that the at least one sensor ( 12 ) can supply with electrical energy. Device according to one of claims 19 to 29, characterized in that the at least one sensor ( 12 ) an evaluation circuit ( 30 ) to which it delivers signals for evaluation, which is designed to process the received signals and to process the processed signals for transmission to a receiver. Apparatus according to claim 30, characterized in that the evaluation circuit ( 30 ) a processor ( 32 ) and a memory ( 34 ) in which a program is stored that the processor ( 32 ) executes that of the at least one sensor ( 14 ) received signals processed with an algorithm that uses the signals to determine typical features of the living being's movement. Apparatus according to claim 31, characterized in that the Algorithm speed and location vectors as typical features the movement of the living being. Device according to one of claims 30 to 32, characterized in that the evaluation circuit ( 30 ) one module ( 34 ), in which security-relevant data can be stored and which is protected against unauthorized access. Belt, characterized by a device according to one of claims 18 to 33rd Shoe, characterized by a device according to one of the Expectations 18 to 33. Shoe insert, characterized by a device according to a of claims 18 to 33. Circuit module, characterized in that it is used to carry out a Method according to one of the claims 1 to 17 is formed.