JP2003509771A - Security equipment - Google Patents

Abstract

(57) Summary The present invention mainly relates to a device including a key device (11) and a lock device (12) and a security device (10) for guaranteeing access to information in the device. The key device (11) is located at a distance from the lock device and includes an input device (13) and a communication device (14). The identification of the user is performed in the key device (11) before the locking device accepts locking / unlocking.

Description

Detailed Description of the Invention

TECHNICAL FIELD The present invention relates to a security system for ensuring the safety of information units or sets.

BACKGROUND OF THE INVENTION With the rapid development in the electronics field, more and more electrical devices that are miniaturized and have mobility are occurring. Mobility itself has made not only the device itself, but also the information stored therein attractive and intriguing to thieves.

Known security devices provide locking using hardware or software combined with a primary input signal.

In the case of a hardware lock, a first input device is used, for example a fingerprint input (biometric sensor), a pin code with or without an additional device such as a so-called smart card.

In the case of software, verification software is used, which uses the correct input (
The pin code, fingerprint, etc.) are controlled to be presented via an external input device. Normal,
The software is installed in an easily accessible storage device such as a hard disk.

DISCLOSURE OF THE INVENTION It is an object of the present invention to provide a highly reliable and secure device that prevents access to the device and / or the information stored therein.

Another object of the invention is to provide a device that can be combined with various devices for both locking and identity entry.

One advantage of the device according to the invention over the known techniques is that, among other things (if applicable in a computer), the operating system and the BIOS of the computer do not have to be modified. The fact is that such a system
Makes it easy to push without having more knowledge in the area.

Furthermore, the locking device according to the invention is integrated in the protected device, which means that it is completely safe and moreover the regular inputs and outputs of the device, ports etc. need to be modified. Absent.

These objects are achieved primarily by a security device that secures access to the device or information therein, including a key device and a locking device, the key device extending from a locking device including an input device and a communication device. Located within a distance, the identification of the user is characterized in that locking / unlocking is carried out in the key device before it is accepted. Hereinafter, the present invention will be described with reference to the accompanying drawings.

BEST MODE FOR CARRYING OUT THE INVENTION A device 10 according to the present invention, which is schematically shown in FIG. 1, mainly comprises two devices indicated by 11 and 12.

The first device consists of a sensor or key part 10 for entering an identity, which carries out the identification of the user. The key portion 10 can be divided into two devices, an input device 13 and a key device 14, which are not necessarily,
It is preferably integrated into one physical device 11.

Preferably, the input device 13 can be any type of device by which unique identification information can be entered. Such devices may include biometric sensors, PIN-code readers, voice detectors, eye detectors, card readers, etc., which are well known to those skilled in the art.

The second part consists of a locking device 12 which protects the object 15 in question.

The key device 14 starts a unique communication procedure between the key unit 11 and the lock unit 12. Unique to the present invention is that the user identification is performed directly in the key portion 11 and not in the lock portion.

After registration of the user, the corresponding lock can be opened. 2 to open the lock
There are two possibilities, one is for a predetermined time and the other is always (in case of manual selection) less secure. If the lock opens under some time,
The user needs to identify again when the time has passed.

For example, a pin code or the like is input under the operation of inputting the identity by pressing a finger on the sensor (FSP). If the user's identity is authorized, an encrypted electronic message from the key device is sent to the lock device, and the locked resource or object 15 (eg hard disk in the computer) is available to the user. It is said that

By using a secure transfer method between devices, it is guaranteed that it is impossible to send a fake message to the lock device to gain access to the locked device.

The external device, the key device 14, is provided with an electronic device which mainly comprises a microprocessor 16 having an embedded and substantially protected program and data memory. The latter is a precautionary measure, allowing access to the program or stored key information for reading and copying.

There is preferably a list of authorized users stored in the key device 14.
Maintenance of this register, such as adding new authorized users, deleting users, etc., is performed locally without communicating with other devices.

The key device in every case decides whether the object should be protected, opened or locked. Decisions are usually based on operator / user decisions, i.e. the key is initiated by an authorized user. If the operator does not identify himself despite the request within a certain time, the locking device may be responsible for locking after a predetermined time.

Since the computer and data storage device cannot be read externally outside the processor (security feature inside the processor), the key device can be completely open and must not be protected against infringement.

For example, the lock device 12, which communicates with the key device via a serial connection, is mounted and protected on or in the locked object 15. The key device 11 is discovered by the lock device each time an attempt is made to access the locked object by bypassing the regular login procedure. Alternative steps can be initiated, ie long periods of inactivity, warning messages, erasing data on the hard disk / key device, etc.

Communication between the key and the locking device is carried out, for example, by digitally encoded signals via a serial connection.

Connections can be asynchronous and can be made at relatively high transfer rates. Communication is by a special locking protocol, which can also include known parity and time controls.

As mentioned above, the purpose of the security system according to the invention is, inter alia, to prevent unauthorized access, for example to a computer, in particular to a hard disk and the information therein. An encryption protocol can be used for the communication between the key part 11 and the lock part 12 in order to obtain almost complete security.
The probability of successful compromise is determined by the length of the random number, the protected length of the key and the length of the response. It can easily be smaller than, for example, 10 ^-18 , meaning that it is practically secure against unauthorized access.

The lock protocol is a communication procedure that guarantees the integrity of transmission to a computer.
Ensure that no unauthorized breaches of data exchange between devices occur. If the message exchange is performed correctly, each locked object is opened and left open. If any error is detected, the object will be locked.

The following message exchanges can be used to verify the authentication (FIG. 2).
reference). The key device and key code 14 initiate the verification sequence by sending a request to the lock device. b. The locking device responds with a varying randomly generated message. c. At the same time, the number is calculated using a special algorithm that utilizes a protected key. This value, completely derived from the response message sent, is stored for later use. d. The key device responds with a number calculated from the message received using the same algorithm and key used in the lock device. This number can be used unchanged in the response, or coded so that the lock device can interpret it. If the lock device receives a message containing the same number as calculated in the transmission during step b, the authentication is considered confirmed.

If it is found that the message exchange is correct according to steps a to d above, each locked object is either unlocked or left open. If the responses do not match, the object remains locked.

The concealed key code may be different between the key and locking device and between locking devices. It is possible because the key device is initiated with specific additional information for each connected lock device. This allows the lock device to return the correct response to the lock device (as if it had access to the lock device key code). In most preferred embodiments, a biometric sensor device is used as the input device.

Biometric sensors include significant advantages for human identification at entrances, computer access, etc. Above all, it is fast and extremely secure against identification, especially if you forget your password and fall into the wrong hands. In combination with the present invention, the sensor unit performs biometric identification of the user's fingerprint. Once the user's fingerprint identification is authorized, an encrypted message is sent from the key device to the lock device to make the locked resource available to the user.

The authorized fingerprint register is in the key device. The maintenance of this register, ie the addition of newly authorized fingerprints, the removal of fingerprints etc. is done locally without any communication with other devices.

The sensor device may be provided with display means such as two light emitting diodes, red and green, to facilitate registration and cancellation of fingerprints. The diode indicates whether the lock is closed or opened and the fingerprint registration / removal status.

[0034]   The following are some non-limiting examples that clarify various aspects of the invention.

A first non-limiting example shown in FIG. 3 is a fingerprint sensor 31 or a biometric sensor, that is, a hard disk device 30 (or another memory device or storage device) in a computer device provided with an add-on device. Related to. Add-on is one of many applications of the lock system according to the present invention. Having an add-on device means, for example, that a lock device connected to the computer device (or the like) via a special electrical device arranged on the controller board 32 (ISA, PCI, etc. card to be inserted into the computer) is provided. Standard device, such as a hard disk. The electronic device also includes an application that includes a key device and that communicates with software in the computer via the data bus. On the board 32, the sensor 31 or other identification device is directly or, for example, IR or wireless (Blue
tooth) and the like.

In this preferred embodiment, a standard hard disk is modified according to the invention to work with a locking device. It means that an internal locking system is provided to prevent the disk from accessing data through the hardware. The appropriate procedure depends on the device (disk) structure.

The connection to the device is the same as the connection to a normal hard disk, namely the signal cable and the power supply from the computer power unit. Additional connections are provided for communication between the lock and the controller.

The locking function according to the invention is obtained by a key device and a locking device, respectively. The fingerprint sensor is connected via a cable and a switch to the interface of the controller device, on which the key device is applied. The lock device is located on the hard disk.

Except for the locking function, the electronic device that communicates with the computer program is located in the locking device. The program can, inter alia, give a warning about the locking of the hard disk. Moreover, locking can be implemented from software.

A switch is used to restart the computer and is usually mounted on the front.
It is excited (Vin = + 5V) when the main voltage is switched on, even if the computer is shut down. When switched on, a signal is provided to the motherboard to boot the computer. By using a fingerprint sensor, it can be switched off, instead Vin is connected to the controller card via contacts. From there, it is further connected to a fingerprint sensor. In this way, the fingerprint sensor is always switched on. Authorized login gives a signal from the controller card to the motherboard to replace the normal button press.

Locking can be initiated in several ways. -Automatically, if a certain amount of time has passed (for example, an unauthorized operation) -when the user locks via the locking system. -When a user locks using a monitoring procedure, as described below.

Unlocking can usually be performed in one way, ie by giving the correct fingerprint. If it is not available when the person enrolling the fingerprint has to unlock the disc, for example, the responsible system manager or security may unlock the device using a special code. It must be code complex enough to prevent practically any access.

If a false signal is given to the hard disk to try to forcibly lock the hard disk, subsequent access attempts may be locked, for example, for some period of time or until the responsible person resets the lock function.

The fingerprint sensor can also be completed by other locking devices, eg smart cards.

Except for the functions described above, the add-on device is completely compatible with the standard hard disk.

Special software may be required to install the add-on device. It manages the lock function through the controller card and shows the status to the user. In particular, the user must be warned in good time before the disc is locked. The program can also lock the device directly. Suitably the program is always active and the status of the disc is shown in the system tray (activity field) where various commands can also be given.

Another application area for the system according to the invention is for “notebooks / laptops”, ie portable computers, HDDs, FDDs, CDs.
, All kinds of storage media such as main controller board including all components such as RAM, ROM, flash memory, BIOS, controller unit controlling data medium, etc. are secured.

In stationary computers / servers, protection such as components on network cards for network management can be applied.

The system can be configured as a remote controller combined with a mobile telephone as a code provider device. A non-recursive code data code generator for accessing computers, alarm systems, car locks, passage systems, etc.

A transaction code via the telephone system, GSM, WAP, etc. may also be generated. The device according to the invention can unlock the device and then select the type of action.

In applications where the invention is used, for example, in banking transactions via a computer, it is possible to provide a customer with a sensor / key device according to the invention. The customer device is provided with an embedded unique pin code and special algorithm. The pin code can be of the type used on credit and bank cards, but it is somewhat advanced. The same pin code can be stored in the key device used by the customer. The pin code can be changed by the special terminal of the bank. The customer's account number can be associated with the same unique code.

At the bank, when a transaction request is received, a response is generated by a special computing device,
It proves that the request from the correct key device belongs to the correct account holder and is authoritative.

This function can be described in more detail by following the steps below. -The customer contacts the bank with a computer program installed on his computer and enters his account number. -The bank issues a reply including the identification section, lock data, etc. -The customer selects the type of transaction, writes the amount, and verifies the transaction. -The program sends the locking transaction mentioned above and transaction data including amount, account number, time stamp, etc. -A reply is received only if the locking device receives the correct identification from the key device, the response can include identity, varying locking / unlocking data and transaction data and is sent to the bank. Transaction data (eg total amount)
And the trader's certificate is verified at the same time. -As mentioned above, the bank uses an algorithm with the customer's pin code to validate the response, allowing the correct response to be made on the incoming response and transaction data,
If it is guaranteed that nothing has changed after biometric control,
The transaction is accepted and the customer is informed.

For example, when a transaction is conducted via the Internet, for example, a key device in which a biometric sensor or the like is arranged can be provided to the user. The user's key device can be provided with a unique identification in the form of a checksum or the like. The same unique identification can be associated with the user's account number at the bank. The bank is provided with control means for verifying the correct transaction request as described above. In this case, verification and transactions are first performed at the bank and then to sellers as previously described.

In a future example, the present invention will be used in a mobile device such as the mobile telephone shown in FIG. The security device 40 consists of two parts 41 and 42 which pivot with respect to each other (according to the present example), the part 42 including a connector 43 which connects to a communication port (not shown) of a telephone 44. This device comprises a sensor unit 45, such as a biometric sensor, and the corresponding electronic device and memory arranged on the sensor part 41. The electronic device can be powered from the power supply of the telephone. The connecting portion is connected to the telephone, and the sensor portion 41 is mounted on the back surface of the telephone on the battery, for example. Once connected, the phone can be used as a control or key device as described above.

The phone can only be accessed by the correct person who has been verified via the sensor to use the phone, eg payment via the telephone network, remote control, door opening, access to a computer (eg It can also be used to control other devices when doing things such as (via an IR interface). In this case, the locking device can be realized in the telephone.

Other applications that utilize the present invention include: -A radio add-on (RFR), a memory device such as a hard disk equipped with a biometric or transponder card reader,-A locking device for a portable device (handheld computer) that only works when a transponder is nearby. The transponder can be incorporated in a wristwatch, for example. In addition, the wristwatch can be equipped with a biometric sensor that communicates with the handheld computer via IR or RF. -The locking device can be incorporated into the remote control to ensure that only one authorized user can access the remote control. -In case of encryption / decryption, i.e. e-mail or file, encryption can be performed by public key and decryption by private key which is verified with respect to the correct person using the biometric sensor. You can

The present invention is not limited to the use of one key or locking device, and several keys and locking devices may be combined, with one or several key / locking devices cooperating. The block diagram of FIG. 5 shows such a device, L ₁ -L ₅ indicating locking devices and k ₁ and k ₅ indicating key devices. For example, the key device k ₁ may open some locking devices, for example L ₁ -L ₄ and k ₂ may open L ₄ and L ₅ .
The term open also means accessing various resources and information. The communication between the lock devices and between the lock device and the key device can be performed via wireless, Internet (other network), IR, etc., and is preferably decrypted as described above.

While only preferred embodiments of the present invention have been illustrated and described, it is understood that several changes and modifications can be made within the scope of the appended claims.

[Brief description of drawings]

[Figure 1]   FIG. 3 is a block diagram of the main parts of the device according to the present invention.

[Fig. 2]   FIG. 5 is a diagram showing communication between two devices in a device according to the invention.

FIG. 3 is a block diagram of a first embodiment for implementing the device according to the present invention in a computer.

[Figure 4]   1 is a schematic side view of a mobile communication device provided with a device according to the invention.

[Figure 5]   FIG. 6 is a block diagram according to another aspect of the present invention.

[Procedure amendment]

[Submission date] May 8, 2002 (2002.5.8)

[Procedure Amendment 1]

[Document name to be amended] Statement

[Name of item to be amended] Claims

[Correction method] Change

[Contents of correction]

[Claims]

[Procedure Amendment 2]

[Document name to be amended] Statement

[Name of item to be corrected] 0005

[Correction method] Change

[Contents of correction]

In the case of software, verification software is used, which uses the correct input (
The pin code, fingerprint, etc.) are controlled to be presented via an external input device. Normal,
The software is installed in an easily accessible storage device such as a hard disk. U.S. Patent No. 5,668,876 challenge code using the service by providing a pager been fixed to compute a unique response code to the challenge code transmitted on the basis of the input personal identification number, and the internal key It is related to authentication for users who do. The response code is input to a simple terminal such as a telephone, when the unique response code is accepted, the user can access the desired service, such as cashless transactions or long distance phone service. WO 00/24554 El in public-key encryption system - describes a Gamaruarugo rhythm. Each passphrase or biometric information of the user is encrypted by a symmetric algorithm using the individual user identification key obtained by (fingerprint, voiceprint, retina scrutiny or face scrutiny) hash, the secret fresh random number server and is generated at the secret key of the user, it is maintained within an accessible storage peripherals to the server and sent to the user device via the network unsafe optionally a secret key that is fresh random number and encrypted. Attacker in order to prevent the use of the random number used before in block reply attack or find a random number, the exchange of the nature of the challenge response protocol is utilized, it will authenticate the user to the server the server Pass at least one secret fresh random number from the user device. In this exchange, forming a signed hash of the first random number and the user first and second random number as part of the challenge response protocol that is distributed to the user together for use to sign the document The second random number used to do this is provided to the user equipment in encrypted form with a freshness value and a signature by a server that hashes the first and second random numbers and freshness value together .

─────────────────────────────────────────────────── ─── Continued front page    (81) Designated countries EP (AT, BE, CH, CY, DE, DK, ES, FI, FR, GB, GR, IE, I T, LU, MC, NL, PT, SE), OA (BF, BJ , CF, CG, CI, CM, GA, GN, GW, ML, MR, NE, SN, TD, TG), AP (GH, GM, K E, LS, MW, MZ, SD, SL, SZ, TZ, UG , ZW), EA (AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), AE, AG, AL, AM, AT, AU, AZ, BA, BB, BG, BR, BY, BZ, C A, CH, CN, CR, CU, CZ, DE, DK, DM , DZ, EE, ES, FI, GB, GD, GE, GH, GM, HR, HU, ID, IL, IN, IS, JP, K E, KG, KP, KR, KZ, LC, LK, LR, LS , LT, LU, LV, MA, MD, MG, MK, MN, MW, MX, MZ, NO, NZ, PL, PT, RO, R U, SD, SE, SG, SI, SK, SL, TJ, TM , TR, TT, TZ, UA, UG, US, UZ, VN, YU, ZA, ZW

Claims (15)

[Claims] 1. A security device (1) mainly comprising a key device (11) and a locking device (12) for ensuring access to a device or information in the device.
0), the key device (11) is located within a certain distance from the lock device and
3) and communication device (14), wherein the identification of the user is performed in the key device (11) before the key device accepts locking / unlocking. 2. The device according to claim 1, wherein the device is a computer, a cashier dispenser, a door lock, a car door,
A security device, which is a remote controller, a mobile communication device, a portable computer, or the like. 3. The device according to claim 1 or 2, wherein the input device is a biometric sensor, a PIN code reader, a voice detection device, an eye detection device, a card reader, a mobile phone, or the like. Security device. 4. The device according to any one of claims 1 to 3,   The user identity is stored in the key device,   A security device characterized by the above. 5. The device according to any one of claims 1 to 4, wherein a. A verification sequence by the key device is started by sending a request to the lock device, and b. The lock device is changed. Responding with a substantially randomly generated message, c. Calculating a number derived completely from the response message sent by an algorithm using a protected key, d. Authentication is confirmed when the locking device receives a message that responds to a number calculated from the received message using the algorithm and key and contains a value that is identical to the value calculated during the transmission under step b. A security device, characterized in that the key device communicates with the lock device. 6. The device of claim 5, wherein the value can be used unchanged in the response or is encrypted for interpretation by a locking device. 7. A security device for a memory device in a computer device provided with a biometric sensor (31), the memory device being provided with an internal locking system, which as hardware prevents access to data. And is connected to a computer device via a controller device (32), which includes a key device and connects the controller device directly or via a link connected to the sensor (31) or other identification device. A security device, characterized in that it functions to communicate with a part of the computer device via. 8. The security device according to claim 7, wherein:   The controller device is an ISA card, a PCI card, etc.,   A security device characterized by the above. 9. The security device according to claim 7 or 8, wherein:   The controller device includes a key device,   A security device characterized by the above. 10. The security device according to claim 7, wherein the computer device is activated by the sensor via a controller device. 11. A security device according to any one of claims 7 to 10, wherein the locking can be initiated in several ways, automatically and / or after a certain amount of time has elapsed. Or a security device, which can be initiated by a user through a locking system and / or by using a security procedure. 12. A mobile communication device provided with a device or a security device (40) for ensuring the acquisition of information in the device, the security device being an external device connected to a communication port of the communication device, A biometric sensor connected to the communication device is provided, the communication device comprising one of a key device and / or a locking device, the identification of the user being within the locking device before the locking / unlocking is accepted by the locking device. A mobile communication device, characterized in that: 13. A method for ensuring access to a device or information within a device within a security device (10) substantially including a key device (11) and a locking device (12), the input device (13). ) And a locking device including a communication device (14), the key device (11) being arranged to identify the user within the key device (11) before the locking / unlocking is accepted by the key device. Access guarantee method. 14. The method of claim 13 wherein: a. Verification is initiated by the key device by sending a request to the lock device; b. The lock device responds with a fluctuating randomly generated message; c. The calculated key is used to calculate a number at the same time by a special algorithm and stored for later use; d. Calculated from the received message using the same algorithm and key used in the lock device. A method that includes verifying the authentication step, where the key device responds with a numeric value that is e. 15. The method of claim 4, wherein   The value is completely derived from the response message,   A method characterized by the following.