EP1163560A1

EP1163560A1 - Identification system

Info

Publication number: EP1163560A1
Application number: EP00901471A
Authority: EP
Inventors: Johann Kaspar Locher
Original assignee: A-Tronic MGM AG
Current assignee: A-Tronic MGM AG
Priority date: 1999-02-11
Filing date: 2000-02-09
Publication date: 2001-12-19
Also published as: AU2275500A; WO2000048059A1

Abstract

The inventive identification system is provided for a computer installation which works with external information data carriers that are configured as a carrier (51) for additional identification data. In said carrier, a separate chip (141) is provided along with the memory for the identification data. The separate chip is provided for the identification data and comprises a memory and a processor of its own. A flat loop antenna (91) which is connected to the chip (141) is provided for transmitting said identification data.

Description

Identification system

The invention relates to an identification system according to the preamble of patent claim 1.

To identify the access authorization to programs and data in computer systems, it is customary to use a secret password that is only known by authorized users. However, such a method is not sufficiently secure because it is relatively easy for experts to bypass such passwords.

Identification systems are also known which are used as access authorization means for cashier systems. Such systems include, for example, an identification card with access functions that can be carried by a person in order to obtain banknotes or pay bills.

Such identification systems are highly dedicated and therefore not flexible enough for other applications.

It is therefore an object of the invention to create a user-friendly, secure identification system that is as user-friendly as possible.

According to the invention, this object is advantageously achieved by an identification system

Claim 1 solved. Advantageous embodiments of the invention result from the dependent claims.

Examples of the invention are explained in more detail below with reference to a drawing. Show it:

1 shows a schematic block diagram of a computer system with an identification system according to the invention;

FIG. 1 shows a schematic illustration to explain the mode of operation of a data carrier according to the identification system according to the invention,

Fig., A schematic sectional view of a housing of a read head

4 and 5 representations of a first and a second embodiment of a computer diskette provided according to the invention with a so-called loop antenna and a chip, and

6 and 7 representations of a first and a second embodiment of a compact disc provided according to the invention with a so-called loop antenna and a chip.

The computer system according to FIG. 1 comprises a computer 1, a reading drive 1 '- in the present case a compact disc drive - or a read / write drive, a read / write unit, also called WRU unit 2, and a read head 3, which is integrated in the read drive 1 '. The WRU unit 2 comprises a security module 4.

The reading drive 1 'is designed in a known manner in order to read the information data stored thereon from a portable data carrier 5, which can be carried by a person, for example, a S art card CD in the example shown. The reading head 3 is designed to from

Data carrier 5 read identification and authorization data; For this purpose, the data carrier 5 is provided with a passive electronic circuit 12 with a processor, which is separate from the memory area 5 '

Act (state machine, control logic) or the like -, provide memory and a data transmission or antenna surface. As shown in FIG. 1, the read head 3 designed as an additional device can have an antenna, preferably a loop antenna 6, also a loop or loop antenna. It is connected to WRU unit 2. However, the reading head 3 can also be integrated in the WRU unit 2 and / or this - together with the reading drive 1 'in the computer 1.

The circuit 12 arranged in the interior of the data carrier 5 comprises, as shown in FIG. 2, one of the

Data transmission area defining antenna 9, which is intended to cooperate with the antenna 6 of the read head 3. The antenna 9 is preferably a loop antenna, which is integrated in the data carrier 5. The antenna 9 is connected to an integrated electronic circuit part which is provided with two diodes 101, 102 connected to the antenna, a capacitor 11 and a processor and memory chip 14.

The identification system according to FIGS. 1 and 2 works as follows:

For example, an EEPROM is present in the processor and memory chip 14 as a data memory. During reading and writing, the data carrier 5, also called the medium, is located in the reader 1 'and thus in the vicinity of the antenna 6 connected to the WRU unit 2. The data carrier 5 receives the energy required for the processor and memory chip 14 via the inductive coupling between the antenna 6 of the read head 3 and the antenna 9 of the

Data carrier 5. Simultaneously with the energy, identification and authorization data are transmitted in both directions by intelligent modulation methods between the security module 4 of the WRU unit 2 and the processor and memory chip 14 in the data carrier 5.

Electromagnetic waves are emitted by the antenna 6. If the coupling between the transmitting antenna 6 and the receiving antenna 9 is sufficiently close, 5 AC voltage is induced in the antenna 9 of the data carrier. This alternating voltage is rectified via the diodes 101 and 102 and smoothed by the capacitor 11, which also acts as an energy store. It serves to supply power to the electronic circuit 12. In addition the electromagnetic waves also serve to transmit signals. Transmission data - these contain the identification and authorization data - and a system clock for processing the identification and authorization data in the processor and memory chip 14 are derived from these.

The data transmission from the security module 4 to the data carrier 5 via the antennas 6 and 9 preferably takes place according to the principle of pulse-pause modulation, in that the high-frequency signal is switched on and off briefly at certain time intervals, for example in such a way that gaps occur at two different intervals that correspond to the information "logical 0" or "logical 1".

The data transmission from the data carrier 5 to the security module 4 via the antennas 9 and 6 preferably takes place according to the principle of load modulation, in that the antenna circuit of the data carrier 5 is subjected to a higher load in order to transmit a “logical 1” in order to cause the antennas to be slightly detuned, which can be detected and processed in the security module 4. Data transmission can be encrypted in both directions using special coding algorithms and checked for transmission errors by means of checksums (CRC = cyclic redundancy checks).

3, with a slot 8 for receiving the card 5. This housing 7 with the associated electronics can be installed in the unit 2, which would then itself be provided with the slot accordingly.

4 shows a computer diskette, which serves as a data carrier 5 and is typically designated as a medium and is generally designated with the reference symbol 51 and, as usual, has a rotatable data carrier disk 13 for storing information data (see also FIG. 5) and according to the invention is additionally provided with a loop antenna 91 and a processor memory chip 141, as described above. The elements 91 and 141 can be arranged or implemented on a very thin film using technology known per se. Such a plastic film, as indicated in FIG. 4, is preferably integrated on one flat side into the wall of the housing of the diskette 51, preferably not recognizable from the outside; but it can also be glued on. In addition to functions of the processor and memory, the chip 141 (FIG. 4) or 14 (FIG. 2) can also take over the function of the diodes 101 and 102 and the capacitor 11.

In the embodiment of the floppy disk 52 according to FIG. 5, a circular loop antenna 92 is arranged concentrically with or on the rotatable actual information data carrier disc 13, preferably in the interior such that the active surface of the data carrier disc 13 does not pass through the loop antenna 92 is overlapped. The processor and memory chip 142 for the identification data is connected to the loop antenna 92. As also indicated in FIG. 5, a circular loop antenna 93 can be arranged in or on the outer edge of the data carrier disk 13, to which a processor and memory chip 143 for the identification and authorization data, also integrated in the data carrier disk 13, is connected is.

The rectangular card 53 according to FIG. 6 - it is a smart card CD as already shown in FIG. 1 - is in the form of a compact disc with two cut segments on the edges 531, 532, so that only a partial area the compact disc area is active as a storage area 5 'for the information data. In this embodiment, a circular loop antenna 94 is arranged concentrically to the central opening 533 of the rotatable actual information data carrier disc (compact disc), preferably in the interior of the card 53 in such a way that the active surface 5 ′ of the data carrier disc does not pass through the loop antenna 94 is overlapped, to which a processor and memory chip 144 is connected for the identification and authorization data.

The rectangular card 54 according to FIG. 7 - again a smart card CD - is also in the form of a compact disc with two cut segments, so that the surface 5 'is again active for the information data storage. In this embodiment, a rectangular loop antenna 95 is approximately symmetrical to the central opening of the rotatable actual information data carrier disc (Compactdisc) arranged, preferably in such a way in the outer area of the card 54 that the active surface 5 'of the data carrier disk is not significantly overlapped by the loop antenna 95 to which a processor and memory chip 145 for the information and authorization data is connected .

Each data carrier 5 or each medium contains a processor and memory chip 14, 141, 142, 143, 144, 145 with a stored specific identification and authorization information. The identification information serves to identify the data carrier 5 and / or the user, preferably for both. For identification of the data carrier 5, preferably unique and preferably unchangeable identification information is stored in the processor and memory chip, which can be read by means of the reading head 3 and compared with data stored in the security module 4. For identification of the user, further identification information can be stored in the processor and memory chip, for example a PIN code (Personal Identification Number), biometric information such as a fingerprint image, etc., which is read by means of the reading head 3 and which in the security module 4 with corresponding information the keyboard of the computer 1 or another corresponding reading or input device supplied to the security module 4 and identifying the user can be compared. The authorization data stored in the processor and memory chip 14, 141, 142, 143, 144, 145 relate to the access authorization “who may which areas of the Read information storage, who is allowed to describe which areas of the information storage. "

After identification of the data carrier 5 and / or the user by the security module 4, the WRU unit 2 reads the authorization data of the processor and memory chip 14 via the read head 3 and allows the user to read or write only those areas of the information data memory 5 'for which he is authorized.

By suitable programming of the data carrier 5 and the elements 2 and / or 4, effective data protection can be achieved in an excellent manner. In any case, the identification data and / or authorization data can also include security data.

Those information data which may not be read by everyone are preferably stored on the data carrier 5 in encrypted form and thus cannot be used by unauthorized persons. It is only when the read identification and authorization data matches the corresponding data in the security module 4 that the information data can be decrypted. The necessary decryption code for the information data is stored in the processor and memory chip 14, 141, 142, 143, 144, 145 of the data carrier - for example, under the authorization data - the processor and memory chip being programmed so that the decryption code can be changed using the Read head 3 can only be read out if the identification and authorization data that have been read out have previously been recognized by the security module 4 as correct and the latter has transmitted a corresponding confirmation signal to the data carrier 5.

Security can be further increased if only parts of the decryption code and the remaining parts are stored in the security module 4 in the processor and memory chip 14 of the data carrier 5.

It is also possible for the complete decryption code to be stored in the security module 4. What is said in connection with the decryption code applies accordingly to the

Encryption code in the event that information data are to be stored on the data carrier 5.

The present invention is not limited to the special floppy disks or CD smart cards described, but correspondingly also to conventional CD's, removable hard disks, zip floppy disks, DVD data carriers, tape cassettes, etc.

Instead of antennas, the data carrier 5 can have contact areas for the contact-related data transfer between the processor and memory chip 14 for the

Have identification information and the unit 2. In this case the read head is equipped with mechanical contacts. Capacitive transmission of the identification data is also possible.

Of course, with magnetic storage of the information data, the field strengths for the transmission of the identification data are to be selected in such a way that the information data is not deleted or changed. If necessary, suitable electromagnetic shields can be present in the read head and / or in the data carrier.

It is also conceivable that only identification data or only authorization data are stored in the processor and memory chip. If necessary, the authorization or identification data of the user can then be stored in the security module 4.

Claims

claims

1. Identification system for portable data carriers (5) of a computer system (1, 2), with a memory (5 ', 13) for information data, a separate circuit (12) with memory and its own processor (14) for identification and / or Authorization data and a loop antenna (6, 9) for contactless transmission of the identification and / or authorization data between the separate circuit (12) and the data carrier (5) having the computer system (1, 2), characterized in that the loop antenna (6 , 9) is arranged in an outer region of the data carrier (5), as seen in the radial direction.

2. Identification system according to claim 1, characterized in that the loop antenna (6,9) is arranged along the outer edge of the disk-shaped data carrier (5).

3. Identification system according to claim 1 or 2, characterized in that the computer system (1, 2)

Antenna (6, 9), which is preferably designed in the form of a loop antenna.

4. Identification system according to one of claims 1 to

3, characterized in that the data carrier (5) is designed as a computer diskette (51, 52), as a compact disc or as a smart card compact disc (53, 54).

5. Identification system according to one of claims 1 to

4, characterized in that the computer system (1, 2) comprises a computer (1), a read / write unit (1 ') for the information data, and a read head (3) which is designed to carry a portable data carrier (5) with identification and / or read authorization data residing in the memory of the separate circuit (12).

6. Identification system according to claim 5, characterized in that the read head (3) in the read / write unit (1 ') and / or this is integrated in the computer (1).

7. Identification system according to one of claims 1 to

6, characterized in that the data transmission is encrypted in both directions by special coding algorithms and / or checked for transmission errors by checksums.

8. Identification system according to one of claims 1 to

7, characterized in that the loop antenna (9, 91, 92, 93, 94, 95), preferably centered or concentric with a rotatable data carrier (13), in the radial direction outside the active area of the memory which forms the information data Data carrier (5) is arranged without overlapping it.

9. Data carrier for an identification system according to one of claims 1 to 8, characterized in that it, in addition to a memory (5 ', 13) for the information data, a separate circuit (12) with memory and its own processor (14) for Identification and / or authorization data and a loop antenna (6, 9) arranged in an outer area of the data carrier (5), seen in the radial direction, for contactless transmission of the identification and / or authorization data between the separate circuit (12) and the Computer system (1,2).

10. Information data carrier according to claim 9, characterized in that the data carrier (5) is designed as a computer diskette (51, 52) or as a compact disc or as a smart card compact disc (53, 54) and a film with a chip (14) and with the flat loop antenna (9).