DE4402430A1 - Authentication method using person-specific psychometric data (PSPI) - Google Patents

Abstract

The method uses (PSPI) in the form of images, tokens, texts, or sounds for identification, based on individual knowledge and experiences. The PSPI items are subdivided into elements which are assembled and registered within a memory, having kept inaccessible. The elements are then made available, some in a determined sequence and others in a random sequence, before being assembled into characteristic two-dimensional structures or linear chains. Associated elements are connected to form reconstituted PSPI in a sequence which is defined by the way in which they were registered. The PSPI data may also consist of statements with correlated verification or falsification data.

Description

The invention relates to an authenticator, that is, an Facility for verification of identity, authenticity, Authenticity of people and their use.

Authenticators come in two main versions Application: In the first version the becomes authenticating person with a non-specific person Characteristic equipped, for example with a Password, a chip card or an encoded key. This characteristic is verified with the help of an Device belonging device verified for authenticity. Most of the time this verification is done by comparing the Characteristic with a matching or matching counterpart, being in the first case Equality and in the second on fit (system key Lock) is checked. For example Immobilizers for cars opened with a key in the a microchip is built in, which is connected to the motor control unit a code that can be changed after each use exchanges as soon as the key is pushed into the ignition lock becomes. Only if the key and motronics can be "understood" the engine start. Another example of Authentication using non-specific personal Characteristic is from the field of electronic Communication known as RSA cryptography: texts and This makes signatures of documents tamper-proof and transmitted undecipherable that each participant receives individual key pair, the sender with creates its key pair of cryptography and the Recipient of the message with the corresponding key pair brought back to the original. One disadvantage of this first one Version of authenticators is that third parties of the empower non-specific characteristics and for Slipping outsiders into the wrong identity unnoticed can. The way out, as a characteristic of numbers or passwords memorizing is for the sake of human forgetfulness  often not feasible. In addition, third parties can operate the authenticator's knowledge of these numbers or passwords procure.

The second version of authenticators is based on the principle of storing (storing) person-specific Characteristics (information) spatially separated from the respective person. The authenticity is verified by comparison of the original characteristic with the saved duplicate guided. With the so-called biometric authentication In principle, procedures become certain physical characteristics such as Fingerprints, photos or due to the physique Peculiarities such as speaking samples as people specific characteristics used. So far, however no mature technology available yet to biometric procedures in practice safe and inexpensive to use for authentication.

Authenticators or facilities previously proposed Similar objectives, be it based on people non-specific or person-specific characteristics, are listed in the following patent applications or -writings described; these authenticators are out mostly not for technical and economic reasons has been widely used.

PCT / KR92 / 00056 (WO 93/09621): An electronic one Identification system consists of a portable device that after entering a password, possibly in connection with the License plate, an account or ID number activated and an automatically reacting control station. For Authentication of the user or to trigger a signals and certain effects are transmitted wirelessly Information chains exchanged in both units be verified. The input device has one special design only four buttons, two for Scroll forward and backward on a display appearing characters, as well as one for marking certain  Sign and undo wrong markings.

DE-OS 42 20 971: The identity check is the Fingerprint of a person photoelectrically recorded, transformed and saved and as feature recognition used.

DE-OS 41 25 870: identification data of people and Animals are in the form of an active medium on a tooth applied so that the later polling the Output of information achieved in a non-destructive way becomes.

DE-OS 41 07 042: There is a cannula for implanting Identification intended to identify living beings carriers in the living being.

DE-OS 40 39 646: It is a biological object Measured values - e.g. B. electrical brain or muscle activity - recorded and compared with predetermined measured value structures. After a positive comparison, the start or the Cancellation (triggering) of an operation.

DE-OS 40 36 025: Using a hologram Recognized fingerprints.

DE-PS 40 09 051: It becomes a characteristic Temperature distribution in the face as a biometric Identifier used. Attention is drawn to the Possibility of personal values such as voice-specific Characteristics (the spoken word), height, shoe size, the dynamic pressure curve in the course of the movement that Structure of the retinal blood vessels (fundus of the eye Identification) to use as identification features.

DE-PS 40 08 971: The user of a data station is through Passwords and random numbers via a one-way function authenticated.

DE-OS 40 05 448: For the purpose of partner search personal A person's data, such as traits, business and private plans, interests and attitudes in one of these Person belonging station stored, to an analog Sent by a potential partner's station Send response corresponding data of this potential Partners compared and by displaying the  Degree of agreement assessed.

DE-OS 39 43 097: Biometrically measurable data, e.g. B. an eye or fingerprint, are used as keys to access stored medical data used.

DE-OS 38 34 048 and DE-OS 38 34 046: the fingerprint of one Person or a finger bone outline fluoroscopy impression used for optoelectronic identification of a person. Attention is drawn to the possibility of supplementary Identification measurements such as the nail shape or the Use your finger circumference or the person to be identified To have test tasks solved.

DE-PS 38 27 172: messages are identified by that an input message - depending on previous ones Signs - on the principle of associated, individual Conversion is converted into an output message, where special branching structures are used. When Any information can serve as an identification basis, for example completely unknown, inaccessible, no longer reproducible random information. Attention is drawn to the Possibility to identify individuals between one Data carrier and the test station alternately after the "Challenge-Response" principle to exchange information sequences and with stored information sequences compare, the test station if there is a match "Good signal" generated. Furthermore, a portable storage mentioned, in the one when delivered to the owner personal, secret identity number, the number of the Bank accounts and other personal data can be entered.

DE-OS 33 01 629: In a telephone exchange to identify a calling subscriber by a special circuit for each participant sequentially Messages generated what information about the address, contain its number and a class assigned to it.

DE-OS 22 54 597: people are identified by the fact that Body parts that have a characteristic curvature, mapped, saved in the form of a curve and with a data processing machine can be evaluated.

DE-OS 22 24 667: A key switch has a  Identity register with several independently in two Positions movable display elements, each of which Display symbols carries. Depending on the combination of the display elements there are different symbol patterns, only one of which pattern of key position known to the user corresponds to that allows an unlocking of the lock.

DE-AS 17 62 669: When transmitting messages, the Calling participants after establishing a connection two different characteristic authorization signals, from where the second is an encryption of the first. Of the called party decodes the second signal and compares it to the first one before releasing the connection.

DE-AS 11 95 057 and DE-AS 10 84 036: for comparison of People become certain markers of the face - or of the whole body - like the shape of the ears, end points of the Temples, the location of the pupils, the tip of the nose, the middle lip line and chin or special wrinkles, Scars, birthmarks, facial warts, the hairstyle, the beard shape etc. measured or recorded. Attention is drawn to the Use of poroscopy and finger and hand prints.

DE-PS 6 83 233: For comparison of manuscripts and in Recognition service, the distance between two is more characteristic Points of an object, e.g. B. a written sample or one Body characteristic, the corresponding points of a given Patterns compared opto-electrical.

EP-OS 0 573 245: To check the integrity of Messages in a communication network between one A large number of participants will receive each message a so-called authenticator is attached, d. H. a code in the Transmitter station is calculated from the total information. In the Receiving station is based on the same algorithm Comparison code from the total information received calculated. Only if both codes match Certainty that the message was delivered intact. The Authentication of the participants takes place by means of secret and non-secret key and various encryption functions and transmission steps.  

EP-OS 0 548 967: In a data exchange system, the mutual authentication by checking one of the User entered personal characteristic (code word) initiated after a known and by the user changeable encrypted stored data word is shown.

EP-OS 0 532 227: in a cellular mobile phone network are assigned with a network operator, but also Key code authentication signals that can be changed later generated that are used to create unique connections.

EP-OS 0 522 473: By exchanging certain secret and non-secret information in a communication network as well resulting inquiries and answers (challenge Response principle) between a person to be authenticated and a central authentication point become transcripts generated by an arbitration board in cases of doubt repeated verification of the authorization.

EP-OS 0 466 146: Certain texts only for this Authorized people can be read Texts - at least in part - from coded characters composed, which are registered in a memory and be decrypted using special methods.

EP-PS 0 441 774: An authentication card has several separate zones, one for permanent storage of one person-specific singularity, d. H. of individual Features such as fingerprints or footprints, signatures etc., in coded form with addition or abstraction of certain Sub-elements; the other zones are for Storage of the same singularity without additions or Deletions are provided, for example after being pressed on by finger or foot or by scanning at the Authentication. In a card reader - after Reconstruction of the image of the permanently stored Singularity by an authorized user entered code - an automatic comparison of both Singularities made.

EP-OS 0 382 410: For memorizing and retrieving one Password the user sets the characters of this  Password according to a pattern of your choice Majority of alphanumeric texts that he alone in the Is able to use these characters using the memorized pattern to find again.

EP-PS 0 085 680: a data carrier, preferably one personal card, with information about the owner, about the issuing organization, account number etc. becomes Triggering an enable signal introduced into a reader; for the purpose of additional authentication, the The owner's fingertip was scanned with a sensor when Papillary line information recorded and with an im Reader compared to already registered impression.

EP-OS 0 034 755: in the identification area of an authorization card is a character and the owner changeable authorization pattern in coded form saved, which generates a log when reading, which at authentication with an authenticity protocol must match.

EP-PS 0 029 894: One electronically in a personal one Identification card unchangeable and unrecognizable stored key is compared with a key, which is in the possession of the person to be authenticated. Pointed out is based on the possibility of signatures or dynamic Signals when signing, as well as voice or fingerprints as a person-specific identifier for authentication to use.

EP-PS 0 007 002: For transactions between one Data station and a control unit are used for the purpose of user Authentication of the former in a triple step User messages accepted, combined, encrypted and in changed form returned and received by the latter and compared with stored information.

EP-OS 0 006 419: becoming part of a person's signature cryptographically registered via certain keys and for Authentication decrypted and verified.

The present invention relates to an authenticator, characterized in that on individual knowledge and  Experience of a person based images, characters or Sound body (so-called person-specific psychometric Information or PSPI), which preferably consists of a main body and there is a complement or associations of terms, especially written or spoken texts, as Identification feature can be used, in particular:

• - by this person even in the absence of observers and Eavesdropping individually or in a first authentication step preferably in larger numbers on a storage medium registered and kept inaccessible to third parties,
• - individually or in a second authentication step one after the other - preferably without the complement - and in at least for third parties not predictable order or made audible and
• - in a third final authentication step identified by the person to be authenticated, preferably complemented with the missing complement.

In contrast to biometrics, the previously known Authentication method using person-specific Characteristics, the invention is a psychometric method, its use for Authentication has not yet been considered. The Invention also has nothing to do with known didactic methods like "interactive learning" on the computer or "multiple choice" - To do tests, because with these the learner or examinee just no individual knowledge and experience, but reproduce commonly available knowledge.

According to the characteristics of the claims, it is the Object of the invention, specific technical instructions for the Structure of the authenticator, its mode of operation and its To give use. The authenticator according to the invention is characterized by the possibility of a very large and practically unlimited number of PSPI for authentication by people. Because certain individual Knowledge and experience through association of different Terms and a. as two-part structures - especially couples  of written or spoken texts - especially simple, clear and compact, so with minimal effort Information units that are expressed and processed the psychometric authentication according to the invention the biometric method is particularly economical and safe to realize. Also can be used for constructive design in essential common and inexpensive components used become. Overall, the authentication according to the invention offers compared to all other known authentication methods big advantages, especially the possibility of one Mass use in a wide variety of applications such as Communication, traffic and security technology, in Banking and legal informatics.

Particularly expedient configurations of the invention are in the claims 2 to 10 described. A detailed constructive and functional description of this Refinements are no longer required as far as known techniques and components for realizing the authenticator according to the invention can also be used. Such Techniques and components are already in the international Patent application PCT / KR92 / 00056 (publication number WO 93/09621) has been communicated in great detail.

Claim 2 states that the invention with the means of modern data and communication technology leaves. Claim 3 describes in which Individual steps and by what means authentication runs and constructively as a branch as a terminal is designed. Claim 4 describes how with an actuator, that is, a device for achieving a particular one mechanical, electrical, optical or other effects, after the actual authentication the desired process is initiated.

Claim 5 describes that short and graspable at a glance Statements - especially a combination of two terms -, which are either right or wrong are particularly good  as the main part of person-specific psychometric Information (PSPI) is appropriate while the complement is a symbol is for "right" or "wrong". For example, a such a statement read:

Main part of the PSPI: "A village lies in the district B city", Complement of the PSPI: "wrong".

Compared to other categories of PSPI (for example questions or incomplete texts to be completed) are suitable Statements best for the authentication according to the invention, since there are only two different complements (answers) are possible, namely "right" or "wrong". These Complements can be constructed very easily in that Enter the external unit (terminal), for example using Pressing a single or two corresponding Function keys. Verifying a statement alone is enough but not for secure authentication, because the Probability that an unauthorized person happens to be pressing the correct button is 50%. Therefore it is envisaged a number of different statements as quickly as possible to verify in turn and the total amount of all stored statements preferably in 50% correct and 50% to divide the wrong one so that when the Complement or identification keys by unauthorized persons the hit rate remains minimal. About ten statements is then the probability of a random Authentication only 1 divided by 2 to the power of 10, so 1/1024.

Claim 6 describes an expedient embodiment of the Invention according to which the stored PSPI under consideration special safety precautions primarily through of the terminal partially or entirely replaced or are reproducible. According to this configuration, it is possible to update the saved PSPI as required or to exchange them entirely, to reproduce them further to distribute different locations and from there  compare different duplicates.

One expects an average for a text statement Requires about 25 characters, so can be in a memory of 50 kB around 2000 text units can be accommodated. A extensive miniaturization of the storage unit is therefore possible. This allows their installation immediately in terms of construction desired places of action.

In many cases it is advantageous to use the terminal and the Storage unit omitting all redundant or duplicate building blocks and functions in a stationary or summarize transportable unit (cf. claim 7). A combined portable device is, for example, as cryptographic notebook can be used. This is what the device is for To be programmed so that after entering one with the respective Note closely associated keyword a certain number of Statements appear one after the other in the display, which the User (and only the user alone) as "+" or "-" can interpret. This sequence of "+" and "-" signs lets yourself with elementary mathematical conversions in Translate numerical values or letters.

In claim 8 it is stated that there are combined units easy with telecommunication devices (like phones, Fax machines, ATMs, credit card readers), electronic data processing systems (such as computers, Access guards, car electronics) or other known Put the facilities together or have them connected upstream in order for this to take over the authentication function. For such circuits come mainly miniaturized Units in question. They are for numerous applications (such as subscriber recognition, legal informatics, security, Communication, traffic and banking technology).

In the following the invention is based on two examples can only give a small impression of their varied Applicability, explained in more detail.  

The first example (cf. claim 9) describes the use of authenticators according to the invention in legal informatics: Binding declarations of intent are generally accompanied by the Signature sealed, either in the presence of the recipient the declaration of intent, or in the presence of witnesses or Officials, or with lower demands on the Authenticity without the presence of third parties. Such Paper documents are unique and can usually be obtained from Distinguish copies and in the sealed envelope with the Send mail. In contrast, electronic documents can be copied as often as required without the duplicates from Original are distinguishable. Sender details and Signatures on faxes are therefore simply too falsify, so that the addressee never gets a falsified facsimile can distinguish from a real one. The invention creates remedy here.

In the example, it may be confidential Information by fax between person P1 at location O1 and person P2 to be replaced at location O2. Two preferably except for the stored PSPI identical authentication devices according to claim 7 are set up in O1 and O2. The device in O1 has the PSPI stored by P2, the other in O2 the PSPI by P1. The Both authentication devices are on a digital network connected with each other. P1 sets by pressing Signal generator according to claim 4 the contact to P2. Of the Authenticator in O2 gradually sends ten texts from his Memory to the authenticator in O1, where P1 after checking the Statements in the display the function key "correct" or presses "wrong". If all statements are correct as wrong or have been verified correctly, the actuator of the device reports in O2 the authenticity of P1. Then P2 directs his Authentication process in the same way as previously P1, only that it is no longer necessary to close the signal transmitter press because the connection is already established. After this P2 also reacted correctly to all ten statements mutual authentication completed and the actuator  of the device in O1 gives the connection for the fax exchange free. All authentication is after about 20 seconds completed.

The second example (cf. claim 10) describes the Use of authenticators according to the invention in the Vehicle technology: In the past few years the theft of Motor vehicles have become a major problem. That's why it is becoming more and more common, so-called immobilizers to install. These devices (immobilizers) interrupt at the same time Starter, ignition, injection and petrol pump, sharpen automatically and within about 30 seconds can only use a code card or a code key be defused again after starting. According to Professionals let professional car thieves through hardly scare such systems. Easy bridging or Disconnecting the wiring also make the most modern immobilizer ineffective in a short time. Conventional also help Immobilizers never against theft "Carjacking". The invention also remedies this.

The example refers to a car in which two miniaturized storage units are built in by can be controlled from the same terminal. The first memory SP1 be mounted on the fuel pump, the other SP2 on Upper part of the body. Terminal T is in the dashboard installed and with preferably multi-core cables with SP1 and SP2 connected. SP1 acts directly using an actuator the pump, i.e. without the interposition of a short-circuitable one Circuit. In the basic position, the actuator holds the pump locked, the pump drive switched off and the Fuel flow blocked. In the operating position, the Actuator the fuel pump operationally. SP2 work - also directly by means of an actuator - to an outside visible and noticeable signal, for example one Metal arm, in such a way that the arm in the Basic position of the actuator is sunk into the body, see above that it cannot be seen from the outside, and in the  Operating position is directed freely upwards. In The arm blocks the basic position mechanically Vehicle. A mark is expediently on the arm of the vehicle owner clearly visible.

When starting the car, the driver has the electric one first Switch on supply of the vehicle, expediently with a mechanical key system. With the same process the devices SP1, SP2 and T are made functional. When next the driver actuates the signal transmitter from T and sets thus the contact to SP1. SP1 sends ten incrementally Texts from his supply of T, on his display this Statements become visible. After the appearance of each one The driver either presses the function key "right" or the "wrong" button. If all statements are correct have been verified as incorrect or correct, which is approximately 10 Lasts seconds, SP1 gives its actuator and over it the Free fuel flow. In a second step the Contacted SP2 and in the same way as in the first Step the signal arm brought into operating position, that is extended. The overall system consisting of SP1, SP2 and T is appropriately programmed so that in certain Time intervals the actuators in the basic position fall behind. Continued operation of the car is then only through re-authentication possible. These time intervals are preferably by means for generating Random series of control pulses unpredictable fixed. For the sake of avoiding one Traffic hazard must be some after each switch-off pulse Time passes until the actuators are in the basic position fall behind.

Claims (10)

1. Authenticator, characterized in that images, signs or sound bodies (so-called person-specific psychometric information or PSPI) based on an individual's knowledge and experience of a person, which preferably consist of a main part and a complement or associations of terms, in particular written or spoken texts, as an identification feature used, in particular:

• in a first authentication step by this person, even in the absence of observers and eavesdroppers, individually or preferably in large numbers on a storage medium and kept inaccessible to third parties,
• - made visible or audible in a second authentication step individually or in succession - preferably without the complement - and in at least a sequence that was not predictable for third parties and
• - In a third final authentication step identified by the person to be authenticated, preferably supplemented with the missing complement.

2. Authenticator according to claim 1, characterized in that the PSPI according to the invention (in particular texts) analog or digital data storage and can be called up and the memory itself defined as operational database is designed with everyone essential components (such as power supply, processor, Memory elements, connections for peripheral devices, transmission and receiving device) and functions (such as access, Loading, reading, deleting, decoupling) such, or ever with a selection of these modules according to their intended use and functions.   3. Authenticator according to claim 1 or 2, characterized in that

• - firstly, a device is provided in the memory for generating a random selection or, at least for third parties, an unpredictable sequence of one or more PSPIs (in particular texts) from the totality of all stored PSPIs (in particular texts),
• - secondly, the PSPI (in particular texts) selected in this way are preferably sent to the branch office without the complement by means of a signal coming from a branch office (terminals) or from another transmitter, after fixed, periodic or arbitrary time intervals have elapsed, where they are made audible or visible,
• - thirdly, the person to be authenticated identifies and marks the presented PSPI (in particular texts), preferably enters the correct complement as quickly as possible into the branch (terminal), from where these reactions are sent to the memory and automatically verified there,
• - And that fourthly, the branch office (terminal) itself is designed as an operational data processing unit with all essential components and functions [such as power supply, processor, memory elements, signal transmitter, display and input device for PSPI (in particular texts) or for reactions to PSPI (in particular texts) function keys for the direct transmission of the complements, connections for peripheral devices, transmitting and receiving device] such or, depending on the intended use, with a selection of these modules and functions.

4. Authenticator according to one of claims 1 to 3, characterized characterized in that the storage unit with an actuator, that is, a device for achieving a particular one mechanical, electrical, optical or other  Effect that is provided after verification of all sent reaction signals, preferably the complements, automatically or by an additional user signal is triggered. 5. Authenticator according to one of claims 1 to 4, characterized by one or more of the following features:

• a) the main part of each PSPI (in particular text) is a short statement that can be grasped at a glance - in particular a combination of two terms - which, according to the logic of the person to be authenticated, is either right or wrong and the complement is a sign of "right""or" wrong "such as" + "or" - "," 1 "or" 0 ", etc .;
• b) the total amount of all stored statements is correct to a predetermined percentage, preferably 50%;
• c) the number of statements transmitted in succession is considerably greater than one, preferably at least ten;
• d) the transmission of the statement series is interrupted after the output of each individual statement on the display and either after pressing one of two function keys marked "correct", "+", "1" etc. or "incorrect", "-", "0 "etc. are marked again, or after pressing a single function key marked" correct "," + "," 1 "etc., the feedback" wrong "occurs automatically after a short time (or in reverse);
• e) The statements are formulated in a language that is not familiar at the place of use or in characters that are not generally understandable.

6. Authenticator according to one of claims 1 to 5, characterized characterized in that the stored PSPI (in particular Texts) taking into account special safety precautions  primarily by means of the field unit (Terminals) partially or entirely replaced or are reproducible. 7. Authenticator according to one of claims 1 to 6, characterized characterized in that the external unit (terminal) and the storage unit omitting all redundant or double blocks and functions in one stationary or transportable unit summarized are. 8. authenticator according to claim 7, characterized in that the combined unit with telecommunication devices (such as telephones, fax machines, ATMs, credit card Readers), electronic data processing systems (such as Computers, access guards, car electronics) or others known devices together or upstream and takes over the authentication function for them. 9. authenticator according to claim 7 or 8, characterized characterized that two preferably up to the PSPI (especially texts) identical authentication devices via one Telecommunications network are interconnected, wherein the first of these devices the PSPI (especially texts) of the Operator of the second device contains and the second the PSPI (especially texts) of the operator of the first. 10. Person authenticator according to one of claims 1 to 7, characterized by one or more of the following features:

• a) installation in a vehicle;
• b) Different storage units are connected via preferably multi-core cables to a common terminal, which is preferably installed in the dashboard;
• c) each storage unit is provided with at least one actuator, by means of which an important operating function of the vehicle can be put into or out of operation or an additional blocking or signaling device can be switched on and off;
• d) the operating functions are switched on for starting the vehicle from the terminal;
• e) after fixed, periodic or arbitrary time intervals have elapsed, the actuators fall back into the basic position if they are not kept in the operating state by renewed authentication coming from the terminal or from another transmitter.