EP3573530A1

EP3573530A1 - Device for acquiring physiological and biometric data

Info

Publication number: EP3573530A1
Application number: EP18705433.3A
Authority: EP
Inventors: Rachid Bouchakour; Stephane DELLIAUX; Jean-François PONS
Original assignee: Aix Marseille Universite; Centre National de la Recherche Scientifique CNRS; Assistance Publique Hopitaux de Marseille APHM
Current assignee: Aix Marseille Universite; Centre National de la Recherche Scientifique CNRS; Assistance Publique Hopitaux de Marseille APHM
Priority date: 2017-01-30
Filing date: 2018-01-30
Publication date: 2019-12-04
Also published as: FR3062295B1; WO2018138457A1; FR3062295A1

Abstract

The invention concerns a device (DV1) comprising means (20, 21, 22, P1, M1, PAP) for acquiring a piece of physiological data (PD), from a physiological signal (SP), and means (10, 11, 12, P1, M1) for acquiring a piece of biometric data (BD), the device being configured to perform the acquisition (S02) of the biometric data (BD) and the acquisition (S01) of the physiological data (PD) simultaneously, and, in response to a request to transfer the physiological data, to transfer the physiological data accompanied by the biometric data or a piece of data depending on the biometric data, or to transfer it in an encoded form depending on the biometric data, or indeed to only transfer it upon prior presentation of the biometric data or a piece of data depending on the biometric data.

Description

DEVICE FOR ACQUIRING PHYSIOLOGICAL DATA AND

BIOMETRICS

The present invention relates to an electronic device comprising means for acquiring physiological data on a human subject from a physiological signal.

The evolution of so-called "e-health" devices makes it possible to meet the challenges of access to the health system around the world. For WHO, e-health is defined as "digital services for the well-being of the person" and is also defined as "the use of tools for production, transmission, management and sharing digitized information for the benefit of both medical and medico-social practices ". In addition to tangible benefits for the patient such as quick and personalized access to care or the reduction of medical deserts, e-health devices also reduce health costs. The portability of e-health devices limits, in some cases, the use of consultations and hospitalization thanks, in particular, to early detection or even real-time monitoring of patients.

Among the physiological signals of medical interest, the electrocardiographic signal and the photoplethysmographic signal are the subject of numerous researches and developments in the field of e-health because they can be easily measured by means of portable or even ultra-portable devices ( sometimes called "nomads"), and contain information particularly relevant for the prevention of cardiac risks.

However, with the expected increase in the number of e-health devices put into service in the population, a colossal amount of medical data will have to be managed. In addition to the problems of storage and confidentiality, it may be desirable to provide a method for acquiring and assigning physiological data to a single patient. This can allow, on the one hand, to classify the data reliably and automatically and, on the other hand, to ensure that the measured data corresponds to the person in question. This may allow the physician to know, for example, that the record he is analyzing is a good match for the supposed patient. It may therefore be desirable to provide a device for acquiring physiological data that makes it possible to assign measured physiological data to a single patient with good reliability.

Embodiments of the invention relate to a device comprising means for acquiring a physiological data item on a human subject, from a physiological signal, the device further comprising means for acquiring a biological data item. metric of the subject, distinct from the physiological data, and being configured to acquire the bio metric data simultaneously with the acquisition of the physiological data, and, in response to a request for transfer of the physiological data transmitted by a device external, perform at least one of the following actions: transfer the physiological data along with the biometric data or data according to the biometric data; transferring the physiological data in coded form according to the biometric data; do not transfer the physiological data without prior presentation, by the external device, of the biometric data or of a data function of the biometric data. According to one embodiment, the device is configured to, in response to a transfer request of the physiological data, transfer composite data generated according to at least one of the following methods: concatenation of the biometric data and the physiological data; encoding the biometric data from the physiological data or from a public or private key generated from the biometric data; interleaving the bits of the physiological data with the bits of the bio-metric data; adding to the physiological data a signature calculated according to the biometric data.

According to one embodiment, the device is configured to, in response to a transfer request of the physiological data, transfer the physiological data in an encrypted form by means of a private key generated from the biometric data, and also transfer a public key allowing the external device to decrypt the physiological data. According to one embodiment, the device is configured to acquire several times the biometric data during a period of acquisition of the physiological data.

According to one embodiment, the device is configured to detect an interruption in the reception of the physiological signal during the acquisition of the physiological data, and to initiate an acquisition of the biometric data when such an interruption is detected.

According to one embodiment, the device is configured not to record or not to transfer the physiological data if at least two values of the biometric data acquired during the acquisition of the physiological data do not coincide.

According to one embodiment, the device is configured to extract the physiological data from a physiological signal selected from the group comprising the electrocardiographic signal and the photoplethysmographic signal.

According to one embodiment, the physiological data is selected from the group comprising a sequence of an electrocardiographic signal, a sequence of a photoplethysmographic signal, arterial oxygen saturation and arterial pressure.

According to one embodiment, the biometric data is a fingerprint data.

According to one embodiment, the device comprises at least one acquisition surface of the physiological data intended to come into contact with or facing a first region of the body of the subject, at least one acquisition surface of the biometric data. , intended to come into contact with or facing a second region of the body of the subject, the acquisition surface of the physiological data and the acquisition surface of the biometric data being nested or superimposed, so that the first and second regions of the subject's body are identical or one is included in the other. According to one embodiment, the acquisition surface of the physiological data is that of a conductive electrode, the acquisition surface of the biometric data is that of a fingerprint capture matrix, and the capture matrix The fingerprint is surrounded by the conductive electrode, surrounds the conductive electrode or is covered by the conductive electrode.

According to one embodiment, the acquisition surface of the physiological data receives photoplethysmographic measurement diodes, the acquisition surface of the biometric data is that of a fingerprint capture matrix, and the capture matrix of fingerprint encompasses the acquisition surface of the physiological data or vice versa.

According to one embodiment, the acquisition surface of the biometric data item comprises the surface of a first fingerprint capture matrix and the surface of a second fingerprint capture matrix.

According to one embodiment, the device has a card-shaped support.

Embodiments of the invention also relate to a method for acquiring and transferring physiological data to a human subject, from a physiological signal, comprising a step of simultaneously acquiring a separate bio metric data item. physiological data, and a step consisting of, in response to a request for transfer of the physiological data, performing at least one of the following steps: transferring the physiological data accompanied by the biometric data or data depending on the biometric data; transferring the physiological data in coded form according to the biometric data; do not transfer the physiological data without prior presentation of the biometric data or a data function of the biometric data. According to one embodiment, the method comprises a step of providing at least one acquisition surface of the physiological data intended to come into contact with or facing a first region of the body of the subject, and at least one surface of acquisition of the biometric data, intended to come into contact with or opposite a second region of the body of the subject, which are nested or superimposed, so as to that the first and second regions of the body of the subject are identical or one included in the other.

Examples of implementation of the present invention will be described in a nonlimiting manner in the following with reference to the appended figures among which:

FIG. 1 is the block diagram of a first physiological and biometric data acquisition device according to the invention,

FIG. 2 represents a physiological signal measured by the device of FIG. 1,

FIGS. 3 to 8 are flowcharts or tables describing various configurations of the device of FIG. 1, in connection with the acquisition, the recording or the transfer of a physiological data item,

FIGS. 9A to 9C are views from above and in section of a first embodiment of the device of FIG. 1,

FIG. 10 is a sectional view of a second embodiment of the device of FIG. 1,

FIG. 11 is a view from above of a third embodiment of the device of FIG. 1,

FIG. 12 is the block diagram of a second physiological and biometric data acquisition device according to the invention,

FIG. 13 represents a physiological signal measured by the device of FIG. 12,

FIGS. 14A, 14B are views from above and in section of a first embodiment of the device of FIG. 11,

FIG. 15 is a sectional view of a variant of the first embodiment of the device of FIG. 11,

FIGS. 16A, 16B are top and partial sectional views of a second embodiment of the device of FIG. 11,

FIG. 17 is a sectional view of a variant of the second embodiment of the device of FIG. 11,

FIG. 18 is the block diagram of a third physiological and biometric data acquisition device according to the invention,

FIG. 19 is a view from above of an embodiment of the device of FIG. 18, FIG. 20 is a block diagram of a fourth physiological and biometric data acquisition device according to the invention,

FIG. 21 is a view from above of an embodiment of the device of FIG. 20.

FIG. 1 is a block diagram of a first physiological and biometric data acquisition device DV1 according to the invention. The device DV1 comprises a processor PI, a circuit 20 for acquiring a physiological signal SP, a memory Ml of programs and data, a communication interface circuit CIT, here of wireless type, and one or more organs PRP devices schematically represented by a block, which may include a power source, voltage regulators, physiological data or posture sensors, for example a temperature sensor, an accelerometer, a magnetometer, a display or LEDs providing feedback to the user when certain steps described below are performed. A clock circuit with date and time management may also be provided to provide a usable clock signal as a reference time base for certain types of physiological signal analysis, or to associate a data with a data element. date and time of acquisition. The acquisition circuit 20 is controlled by the processor PI via Ctrl control links and supplies the physiological signal SP in digital form to an input INI of the serial or parallel type PI processor.

The physiological signal SP, shown in FIG. 2, is here an electrocardiographic signal ECG measured by the circuit 20 by means of two electrodes 21, 22. This electrocardiographic signal ECG presents the QRS complex, namely three successive contiguous waves which follow the P wave and correspond to the depolarization of the ventricles.

The processor PI analyzes the ECG signal by means of a program-algorithm PAP to extract a physiological data PD. This may consist of a recording of the physiological signal SP in a given time interval, for example from a few seconds to a few minutes, in a record of one or more sets of intervals RR, by detection of the peaks R of the ECG signal , or any other data of interest that can be extracted from the ECG signal. The device DV1 also comprises a bio metric sensor 10 providing a biometric data BD, and an ACP acquisition algorithm program recorded in the memory M1 and executed by the processor P1. The biometric sensor 10 is here a fingerprint sensor and comprises a matrix 11 controlled by an acquisition circuit 12 providing the bio metric data BD in digital form on an input IN2 of the serial or parallel type PI processor. The matrix 11 is here a matrix of capacitive sensors but could also be a matrix of RF modulated sensors, piezoelectric sensors, copolymer layer sensors, stress sensors, optical sensors, pressure sensors, ultrasonic sensors, etc. The acquisition circuit 12 is controlled by the processor PI via Ctrl control links.

The program ACP is configured to ensure the acquisition of the biometric data BD at the same time as the acquisition of the physiological data PD, for example as shown in FIG. 3. The configuration represented in this figure comprises an optional step S00 of first acquisition of the BD biometric data, followed by a SOI acquisition step of the PD physiological data. Step S00 may for example be provided for authenticating an authorized user of the device DV1 and the step SOI be triggered if the biometric data BD is similar to a biometric data previously stored for this user. The ACP program initiates a new acquisition of the biometric data BD during a step S02 which is executed at the same time as the step SOI. This new bio-metric acquisition aims at identifying the subject on which the physiological data PD is measured while this data is being measured.

Since the step S02 is of short duration in front of the SOI step, which can last for several tens of seconds, or even one to several minutes, the ACP program can be configured, in one embodiment, to execute several acquisitions of the bio metric data item. BD during the acquisition of the physiological data, to ensure that the user is the same from the beginning to the end of this acquisition.

During a subsequent step S03, the ACP program verifies that the biometric data is coherent, for example that the successive acquisitions of the bio metric data input during the acquisition of the physiological data correspond to the same person. If the biometric data is not consistent, the ACP program goes to a step S04 of stopping the current process, so that the physiological PD acquired at the SOI step is not processed, recorded or transferred. Analysis and error handling can also be provided. For example, at the end of several biometric inconsistencies, protection mechanisms may be provided such as erasure of data in memory, blocking of the device, connection to a server to signal the anomaly, etc.

If the biometric data is coherent, the ACP program goes to a step S05 of establishing a functional link between the biometric data BD and the physiological data PD. During a step S06, the program ACP ensures the recording of the PD data in the memory M1. During a step S07, which can be consecutive or subsequent to the step S06, the program ACP receives from an external device a transfer request of the physiological data PD, via the communication interface circuit CIT. This external device may be a terminal TM1 located in the environment close to the device (see Fig. 1), a remote terminal TM2 accessible via an NTW network, or any other type of device. During a step S08, the ACP program transfers the physiological data PD to the external device. Fig. 4 illustrates an embodiment of steps S02 and SO3. Step S02 comprises steps S020 to S025 and step S03 includes steps S030 and S031. The program ACP puts an index "i" to zero during step S020, then acquires a first biometric data BDi during a step S021. In a next step S022, the ACP program determines whether an interruption has occurred in the reception of the physiological signal SP during the execution of the step S021. If so, the program ACP increments the index i during a step S025, then returns to step S021 for the acquisition of a new biometric data BDi, before returning to step S022. If no interruption has been detected in the physiological signal SP during the execution of the step S021, the program ACP goes to a step S023 where it determines whether the acquisition of the physiological data PD is completed (step SOI). If not, the ACP program returns to step S021 via step S025. An optional step S024 delay of a duration Tr may be provided before step S025, to limit the number of executions of the acquisition step S021. In one embodiment, the duration Tr of this delay is random. If the ACP program finds, at the stage S023, that the acquisition of the physiological data PD is complete, it then verifies, during a step S030, that the biometric data BDi acquired during the different executions of the step S021 are identical. If the answer is negative, the ACP program goes to step S04 to stop the process. If the response is positive, the ACP program goes to an optional step S031 to verify that the biometric data item BD is identical to the initial biometric data item acquired in step S00. If the answer is positive, the program goes to step S05, otherwise to step S04.

FIGS. 5 and 6 illustrate embodiments of the functional link establishment step S05 and the transfer step S08 thereof or the PD physiological data item. The establishment of this functional link aims to obtain a link that is as inalienable as possible between the physiological datum PD and the subject at the origin of this datum. A degree of security more or less strong against attacks on this link can be optionally provided, as will appear in light of the examples that will be described.

In FIG. 5, the step S05 comprises a step S0510 for concatenating the physiological datum PD and the biometric data item BD to obtain a PDBD composite datum. This concatenation can be material, namely consist in a juxtaposition of two bit strings to form a binary string of greater length, or be software, namely consist of a software management of the link between the two data, the PD and BD data. for example being stored in different memory locations stored as comprising two linked data. Step S0510 is followed by a step S0511 for storing the biometric data item BD as an index of the PDBD composite data item, making it possible to retrieve it from the memory M1. This step is of interest when the DV1 device is used by more than one authorized person. If the DV1 device is used by only one person, the use of biometric data BD as an index may not be necessary.

Still with reference to FIG. 5, the step S08, executed after the step S07, comprises a step S0810 where the program ACP requests the external device to provide a biometric data item, and a step S0811 for receiving a biometric data item BD . During a step S0812, the ACP program compares the biometric data BD and BD 'and transfers the PD physiological data or PDBD composite data if these data are identical.

In the embodiment described in FIG. 6, the program ACP includes a cryptography program CP which comprises a key generation function fg and a cryptography function F. During a step S0520, the program ACP generates a key cryptography K from the biometric data BD, such that K = fg (BD). During a step S0521, the program PC transforms the physiological data PD by means of the cryptography function F and the key K, to obtain a composite data PDBD such that PDBD = F _K (PD).

Two embodiments of the step S06 are also shown in FIG. 6. In one embodiment S06A, the step S06 comprises the recording of the PDBD composite data and the key K in the memory M1, then, optionally , the deletion of the physiological data PD and the biometric data BD. In one embodiment S06B, the step S06 comprises the recording of the composite data PDBD in the memory M1, then, optionally, the deletion of the physiological data PD, the biometric data BD and the key K, for n keep no trace.

After step S06A, and following the receipt of a request for transfer of physiological data PD (step S07), the ACP program returns, during a step

50820, a request to provide a biometric data. During a stage

50821, the ACP program receives a biometric data BD '. During a step S0822, the program ACP compares the biometric data BD and BD 'and, if these data are identical, transfers the PDBD composite data to the external device or decodes this data to provide the external device with the initial PD physiological data. In a variant, the program ACP generates an internal key from the biometric data BD, receives an external key at step S0821, assumed to be generated according to the same method and with the same bio metric data as the internal key, compares the key external to the internal key in step S0822 and, if the keys are identical, transfers the PDBD composite data to the external device or decodes this data to provide the external device with the initial PD physiological data. After step S06B, and following the receipt of a transfer request of the physiological data PD (step S07), the ACP program responds during a step S0830 by transferring the composite data PDBD. In this embodiment, it thus belongs to the external device to generate the key K for extracting the biometric data BD from the PDBD composite data supplied by the device DV1. This implies that the external device can acquire the biometric data BD by means that are specific to it, and that it has the key generation function fg, or that it has previously received this biometric data BD even the key K herself.

Moreover, although the transfer step S08 has been described as intervening after the step S07 for receiving a transfer request of the physiological data PD, the program ACP can alternatively be configured to transfer the composite data without the save previously in its memory (step S06). This transfer can also be initiated automatically after the acquisition phase and does not require the prior receipt of a transfer request (step S07).

The tables of FIGS. 7 and 8 describe two variants of the method of transfer of the physiological data PD that has just been described, using an asymmetric cryptographic function. In the example of FIG. 7, it is not required of the external device TM1, TM2 that it knows the bio metric data BD before transferring the physiological data PD to it. In the example of FIG. 8, on the contrary, it is required that the external device TM1, TM2 know the bio-metric data before transferring the physiological data PD to it.

In FIG. 7, the device DV1 first acquires the biometric data BD and the physiological data PD during the SOI steps S02 already described. At a step S090, the device DV1 generates, from the biometric data BD, a private encryption key K1 and a decryption public key K2. At a step S091, the external device TM1, TM2 sends a request for transfer of the physiological data PD. In step S07, the device DV1 receives the request for transfer of the physiological data PD. At a step S092, the device DV1 transfers the public key K2 to the external device, which receives it at a step S093. At a step S094, the device DV1 encrypts the physiological data item PD optionally concatenated with the biometric data item BD, by means of the private key Kl and cryptography function. At a step S094, the device DV1 transfers the encrypted PD physiological data or the encrypted PD, BD data. At a step S095, the external device receives the PD physiological data or the encrypted PD, BD data. At a step S096, the device DV1 decrypts the physiological data PD or the data PD, BD by means of the public key K2 and the cryptographic function.

It will be clear to one skilled in the art that this embodiment creates an unalterable link between the identity of the user (identified by his biometric data) and the physiological data belonging to him, without it being necessary to transfer its name or even the biometric data, the user being identified by the public key K2 which is constant and can be regenerated later from a new acquisition of the biometric data. In FIG. 8, the device DV1 first acquires the biometric data BD and the physiological data PD during the SOI steps S02 already described. At a step S 100, the device DV1 generates, from the biometric data BD, a decryption private key K1 and a public encryption key K2 (unlike the embodiment of FIG. 7, where the public key is a key of decryption and the private key an encryption key). At a step S 101, the device DV1 encrypts the physiological data PD by means of the public key K2 and the cryptographic function. At a step S 102, the external device TM1, TM2 acquires the biometric data BD '. At a step S103, the external device generates, from the biometric data BD ', a decryption private key Κ and a public encryption key K2'. In a step S 104, the external device transmits a request for transfer of the physiological data PD, which is received by the device DV1 at step S07. At a step S105, the external device transfers the public key K2 'to the device DV1. At a step S 106, the device DV1 receives the key K2 'and compares it with the key K2. At a step S 107, if the public keys K2 and K2 'are identical, the device DV1 transfers the encrypted PD physiological data with the public key K2. At step S 108, the external device receives the encrypted PD data. At a step S 109, the device DV1 decrypts the data PD by means of the private key ΚΓ and the cryptographic function. This embodiment, which is more oriented than the previous one towards the confidentiality of the biometric data, enables the external device to show the device DV1 that it possesses the biometric data item BD without however transferring it in the clear. It goes without saying that a variant may consist of transferring something other than a public key, for example data generated from the biometric data BD by means of a known transformation function of the two devices. In this case, the method becomes similar to the previously described variant of the steps S0820 to S0822 of the method of FIG. 6. In addition to the concatenation or the encryption, other methods can be provided to generate a functional link between the physiological data PD and biometric data BD, for example:

the interleaving of the bits of the physiological data PD with the bits of the biometric data BD,

a coding of the physiological datum PD as a function of the biometric data BD without key generation, the biometric data BP being used as a key,

the addition to the physiological data PD of a signature calculated according to the bio metric data BD. Also, as is apparent from the example of FIG. 5, this functional link can be the result of a configuration of the ACP program provided so that the device DV1 does not dissociate the two data during the transmission of the physiological data. PD to an external device, or requires that the biometric data BD be presented to him before transferring the physiological data PD.

In addition to this functional link, the simultaneous acquisition of the physiological data PD and the biometric data BD makes it possible to establish a temporal correlation of these data, to ensure that the physiological data PD corresponds to a specific person.

In addition to such a temporal correlation, a topographic correlation can be provided between the acquisition means of the physiological datum PD and the acquisition means of the bio metric data BD. By designating as "SI" an acquisition surface of the physiological datum PD intended to come into contact with or facing a first region of the body of the subject, and by "S2" an acquisition surface of the biometric data BD, intended to come into contact with or opposite a second region of the body of the subject, such a topographic correlation results in the fact that the surfaces S1 and S2 are nested or superimposed so that the first and second regions are identical or one included in the other. Thus, the subject on which the physiological data PD is extracted is necessarily the same person as the subject identified by the biometric data BD, since the regions of the body concerned are identical or nested. This avoids any risk of corruption of the link between the PD physiological data and the identity of the subject on which this data is extracted.

Figs. 9A and 9B are top and sectional views of an embodiment of the DV1 device implementing such topographic correlation. The electrodes 21, 22 for acquiring the ECG signal, of respective surface areas SI and SI ', extend on a support 1. The matrix 11 of the fingerprint sensor, of surface S2, is placed at the center of the electrode 21. Thus, the surface S2 is included in the surface SI. For this purpose, the sensor 10 is assembled in a housing 13 which is arranged or nested ("embedded") in the support 1. A lower portion of the housing 13 receives the acquisition circuit 12, realized in the form of an integrated circuit or printed circuit, and an upper portion thereof receives the sensor array 11, the latter extending substantially in the plane of the support 1. The electrodes 21, 22 are formed by depositing and etching an electrically conductive layer on the support 11, so that the electrode 21 surrounds the matrix 11.

A micromodule MM receiving the other elements of the device DV1, in particular the processor PI, the memory M1, the circuit 20 for acquiring the signal ECG and the communication interface circuit CIT, is arranged inside the support 1 and is electrically connected to the electrodes 21, 22 and to the acquisition circuit 12. A PWS power supply source is also provided in the support 1, as well as an antenna circuit ACT of RF or UHF type coupled to the interface circuit CIT communication.

In one embodiment, the support 1 is a plastic card. In another embodiment, the support 1 is a housing comprising a housing receiving the micromodule MM. A USB plug connection may be provided, in place of or in addition to the CIT wireless communication interface circuit. Fig. 9C shows an example of use of the DV1 device. The user puts a finger of one hand on the electrode 22, and a finger of the other hand on the electrode 21 and the matrix of sensors 11. The device DV1 is here configured to detect the presence of a finger on at least one of the surfaces S1, S2, by detecting the presence of the finger on the electrode 21 or detecting the presence of the finger on the sensor array 11. The detection of the presence of the finger triggers a first acquisition of fingerprint (step S00) then the execution of steps S02 and SOI for the simultaneous acquisition of the physiological data PD extracted from the ECG signal and several fingerprint data BD (steps S020 to S031). During the acquisition of the physiological data PD, the acquisition circuit 20 continuously reads the ECG signal in the form of a difference between an electric potential measured on the electrode 21 and an electric potential measured on the electrode 22. Simultaneously, the matrix 11 of the sensor 10 makes it possible to obtain an image of the surface of the finger covering it. Depending on the reliefs of the surface of the finger in contact, the capacity measured by each elementary sensor of the matrix is different if a "peak" or a "valley" is above the sensor. The information provided by each elementary sensor may be binary (presence of peak or valley) or encoded on N bits (distance between the zone of the finger considered and the sensor) depending on the type of matrix 11 used.

Figure 10 shows a variant 2Γ of the electrode 21, formed by a thin layer of a conductive material covering the entire surface of the sensor array 11 without preventing acquisition of the fingerprint. Figure 11 shows another variant 21 "of the electrode 21, formed by depositing a conductive material which covers a small portion of the matrix 11, the surface SI being here included in the surface S2.

FIG. 12 is the block diagram of a device DV2 which differs from the device DV1 in that it comprises a circuit 30 for acquiring a physiological signal SP which is here a photoplethysmographic signal PPG. For this purpose, the circuit 30 is coupled to at least one light emitting diode 31 and at least one photodiode 32. The various configurations of the device DV1 previously described in connection with FIGS. 3 to 6 also apply to the device DV2. Figure 13 shows schematically the signal form PPG measured by the device DV2. The PPG signal has a roughly sinusoidal appearance and has peaks denoted "R" by analogy with the electrocardiographic signal ECG, the occurrence of which is representative of the subject's cardiac activity. At each heartbeat, the moment of occurrence of a peak "R" of the signal PPG is correlated, with a slight phase shift, at the time of occurrence of the peak R of the ECG signal, because the signal PPG accounts for the pulsatile nature Pulse resulting from cardiac contractile mechanical activity, rheological properties of the blood and mechanical properties of the vessels. Thus the pseudo-period defined by the duration of the peak-to-peak interval of the PPG signal is a function of the duration of the RR interval.

As previously, the physiological data PD supplied by the PAP program may consist of a recording of the physiological signal PPG over a determined time interval, from a few seconds to a few minutes, or in a record of a series of RR intervals, by extraction peaks "R", also over a determined time interval. The physiological datum PD may also consist of any other data of interest that can be extracted from the PPG signal, for example the oxygen saturation of the hemoglobin or "Sa02", or the arterial pressure, these two data being measurable by analysis of the PPG signal. Finally, the physiological data PD may also consist of a combination of these different physiological data.

FIGS. 14A, 14B are views from above and in section of an embodiment of the device DV2 offering a topographical correlation between a surface S3 for acquiring the signal PPG and the surface S2 of the matrix 11 of the impression sensor digitalis. The sensor 10 is as previously assembled in a housing 13 which is arranged in a support 1 of the card or housing type. A lower part of the housing 13 receives the acquisition circuit 12, made in the form of an integrated circuit or printed circuit, and an upper part thereof receives the sensor array 11, which extends substantially in the plane of the support 1. The diodes 31, 32 are arranged in the upper part of a housing 33 which is arranged in the center of the housing 13, through the sensor array 11, the latter being provided with a central opening for inserting the housing 33 in the housing 13. A lower portion of the housing 33 receives the signal acquisition circuit 30 PPG, realized as an integrated circuit or printed circuit. The surface S3 of the housing 33 is considered as the surface PPG signal acquisition, and flush with that of the support 1. It is here of the order of a few square millimeters, for example 2 mm x 2 mmm, and is included in the surface S2. As before, the support 1 can receive a micromodule MM comprising the other components of the device DV2, as well as a power source PWS, an antenna circuit ACT and / or a USB socket, the micromodule being electrically connected to the housings 13 and 33. In a variant, the acquisition circuits 12 and 30 are arranged in the micromodule MM and the housings 13 and 33 receive only the array of sensors 11 and the diodes 31, 32. In this case, as shown in FIG. 15, the housings 13 and 33 can be replaced by a housing or housing 130 provided in the support, receiving the matrix of sensors 11 and the diodes 31, 32, the surface S3 being defined as that of the region including the diodes 31, 32 extending in the center of the surface S2 of the sensor array 11.

With reference to FIG. 14B or FIG. 15, when a user places a finger on the matrix of sensors 11, the detection of the presence of the finger triggers a first fingerprint acquisition (step S00) and then the execution of the fingerprints. steps S02 and SOI for the simultaneous acquisition of the physiological data PD and of several fingerprints BD (steps S020 to S031). During the acquisition of the physiological data PD, the acquisition circuit 30 continuously reads the signal PPG received by the photodiode 32, which reflects the variations experienced by the light signal emitted by the diode 31 when it passes through the finger of the subject (schematized by arrows in FIGS. 14B, 15).

Figs. 16A, 16B are top and sectional views of another embodiment of the DV2 device. The fingerprint sensor 10 is as previously arranged in the upper part of a housing 13 'and the diodes 31, 32 are arranged in the upper part of a housing 33'. The housing 13 'is here smaller than the housing 33 and is housed in the latter, so that the surface S2 of the sensor array 11 is here included in the surface S3 of the housing 33'. The diodes 31, 32 are arranged near two opposite edges of the housing 33 so that the photoplethysmographic measurement region, including the light rays emitted and received by the diodes, extends above the sensor array 11. alternatively, the acquisition circuits 12 and 30 are arranged in the MM micromodule and the housings 13 'and 33' receive only the matrix of sensors 11 and the diodes 31, 32. In this case, as shown in FIG. 17, the housings 13 'and 33' can be replaced by a housing or housing 131 provided in FIG. support, receiving the matrix of sensors 11 and the diodes 31, 32, the surface S3 being defined as that of the region including the diodes and encompassing the surface S2 of the sensor array 11.

FIG. 18 is the block diagram of a device DV3 that differs from the device DV2 in that the fingerprint sensor 10 comprises two sensor arrays 11-1, 11-2 controlled by the acquisition circuit 12. As illustrated in FIG. 19, these sensor arrays 11-1, 11-2, of respective surfaces S2-1, S2-2, are arranged along two edges of the housing 33 receiving the diodes 31, 32, the surface S3 being therefore framed by the surfaces S2-1, S2-2. Such an arrangement is considered as a nesting of acquisition surfaces offering the desired property of topographic correlation of these surfaces. In this case, two fingerprint data BD1, BD2 corresponding to two distinct parts of the finger are combined to form a resulting bio metric data BD to identify the subject to which the physiological data PD is attached.

Fig. 20 is a block diagram of a DV4 device which includes both the PPG photoplethysmographic signal acquisition circuit 30 and the ECG electrocardiographic signal acquisition circuit 20 previously described. FIG. 21 shows an imbrication of the acquisition means that can be provided with such an embodiment:

the electrode 21, of surface S1, surrounds the matrix of sensors 11, of surface S2, and the electrode 22 of surface S1 ', surrounds the housing 33, of surface S3, receiving the diodes 31, 32.

It will be apparent to those skilled in the art that the present invention is susceptible of various other embodiments. Although the above has been described the joint implementation of a topographic correlation and a temporal correlation in the PD physiological data acquisition and biometric BD, embodiments of a device according to the The invention can implement topographic correlation without temporal correlation, for example by dissociating the biometric acquisition phase from the physiological acquisition phase. In this case, it may be advantageous to monitor the continuity of the physiological signal during the entire period of biometric and physiological acquisition, to ensure that the user has not removed his finger between the two phases of acquisition. Conversely, embodiments may implement a temporal correlation without topographic correlation, especially when the biometric data BD can not be acquired on the same part of the subject's body as the physiological data PD, such as a biometric voice data or data. biometric based on an analysis of the iris.

Claims

Device (DV1, DV2, DV3, DV4) comprising:

means (20, 21, 22, 30, 31, 32, 33, P1, M1, PAP) for acquiring physiological data (PD) on a human subject, from a physiological signal (SP) , characterized in that it further comprises means (10, 11, 12, PI, MI) for acquiring a biometric datum (BD) of the subject, distinct from the physiological datum, and in that it is configured for:

acquiring (S02) the biometric data (BD) simultaneously with the acquisition (SOI) of the physiological data (PD), and

in response to a request for transfer of the physiological data (PD) transmitted by an external device (TM1, TM2), performing at least one of the following actions:

transfer the physiological data accompanied by the biometric data or data (K2) according to the biometric data,

transfer the physiological data in a coded form according to the biometric data,

- Do not transfer the physiological data without prior presentation by the external device of the biometric data or data (K2) function of the biometric data.

2. Device according to claim 1, configured to, in response to a transfer request of the physiological data, transfer composite data (PDBD) generated according to at least one of the following methods:

concatenation of the biometric data and the physiological data,

coding the bio metric data from the physiological data or from a public or private key (K, K1, K2) generated from the biometric data,

interleaving the bits of the physiological data with the bits of the biometric data,

adding to the physiological data a signature calculated according to the biometric data.

3. Device according to claim 1, configured to, in response to a transfer request of the physiological data, transfer the physiological data in an encrypted form by means of a private key (K1) generated from the data biometric, and also transfer a public key (K2) allowing the external device to decrypt the physiological data.

4. Device according to one of claims 1 to 3, configured (S023, S024, S025) to acquire several times the biometric data (BD) during a period of acquisition of the physiological data (PD).

5. Device according to one of claims 1 to 4, configured (S022) to detect an interruption in the reception of the physiological signal (SP) during the acquisition of the physiological data (PD), and initiate an acquisition of the biometric data (BD) when such an interruption is detected.

6. Device according to one of claims 4 and 5, configured (S04) not to record or not to transfer the physiological data if at least two values (BDi) of the bio-metric data acquired during the acquisition of the physiological data. do not coincide (S030).

7. Device according to one of claims 1 to 6, configured to extract the physiological data (PD) of a physiological signal selected from the group comprising the electrocardiographic signal (ECG) and the photoplethysmographic signal (PPG).

8. Device according to one of claims 1 to 7, wherein the physiological data is selected from the group comprising a sequence of an electrocardiographic signal (ECG), a sequence of a photoplethysmographic signal (PPG), arterial saturation in oxygen and blood pressure.

9. Device according to one of claims 1 to 8, wherein the biometric data (BD) is a fingerprint data.

10. Device according to one of claims 1 to 9, comprising:

at least one acquisition surface (SI, S3) of the physiological datum (PD) intended to come into contact with or opposite a first region of the body of the subject,

at least one acquisition surface (S2) of the biometric data item (BD) intended to come into contact with or opposite a second region of the body of the subject, wherein the acquisition surface (S1, S3) of the physiological data and the acquisition area (S2) of the biometric data are nested or superimposed, so that the first and second regions of the subject's body are identical or one included in the other.

The device of claim 10, wherein:

the acquisition area (S I) of the physiological data (PD) is that of a conductive electrode (21, 2V, 21 "), and

- The acquisition surface (S2) of the biometric data (BD) is that of a matrix (1 1) of fingerprint capture.

and wherein the fingerprint capture array (1 1) is surrounded by the conductive electrode (21) or surrounds the conductive electrode (21 ") or is covered by the conductive electrode (2).

The device of claim 10, wherein:

the acquisition surface (S3) of the physiological data (PD) receives diodes (31, 32) of photoplethysmographic measurement,

the acquisition area (S2, S2-1, S2-2) of the biometric data item (BD) is that of a fingerprint capture matrix (1 1, 1 1-1, 1 1-2) ,

and wherein the fingerprint capture matrix (11) includes the acquisition surface (S3) of the physiological data (PD) or vice versa.

13. The device according to claim 12, wherein the acquisition area (S2-1, S2-2) of the bio metric data (BD) comprises the surface of a first (1-1) capture matrix of fingerprint and the surface of a second (1 1-2) fingerprint capture matrix.

14. Device according to one of claims 1 to 13, comprising a support (1) in the form of a card.

15. A method for acquiring and transferring physiological data (PD) on a human subject, based on a physiological signal (SP), characterized in that it comprises a simultaneous acquisition step (S02). biometric data (BD) distinct from the physiological data, and a step of, in response to a transfer request of the physiological data (PD), perform at least one of the following steps:

- Do not transfer the physiological data without prior presentation of the biometric data or data (K2) function of the biometric data.

16. The method of claim 15, including a step of providing at least one acquisition surface (SI, S3) of the physiological data (PD) intended to come into contact with or facing a first region of the body of the body. subject, and at least one acquisition surface (S2) of the biometric data (BD), intended to come into contact with or opposite a second region of the body of the subject, which are nested or superimposed, so that the first and second regions of the subject's body are identical or one included in the other.