RU110850U1 - DEVICE OF UNIVERSAL DIGITAL KEY WITH REMOTE AUTHORIZATION BY BIOMETRIC PARAMETERS - Google Patents

Abstract

 1. A universal digital key with remote authorization by biometric parameters, characterized in that it is a programmable digital electronic device with a housing and an autonomous source of electrical power, including:! - long-range wireless communication module with a remote user authorization server,! - short-range wireless communication module with a receiver device of a service requiring authorization! - wireless directional data transmission module, made by the technology of transmission in the infrared range of radio waves,! - USB interface! - electronic digital signature module,! - module for determining biometric parameters,! - display module,! - control module! - rewritable memory device storing driver programs! - microprocessor or microcontroller for information management and processing,! - read-only memory for storing the firmware of a universal digital key. ! 2. A universal digital key with remote authorization according to biometric parameters according to claim 1, characterized in that the wireless communication module with the remote authorization server is based on a radio transmitting device, a standard presented by a mobile operator. ! 3. A universal digital key with remote authorization by biometric parameters according to claim 1, characterized in that the module for determining biometric parameters is a fingerprint scanner. ! 4. A universal digital key with remote authorization by biometric parameters according to claim 1, characterized by

Description

This utility model relates to a universal digital key with remote authorization by biometric parameters (hereinafter referred to as the “Device”).

Currently, the sphere of providing services is becoming more and more widespread, in the form of secure digital information processing systems and economic operations, but existing systems have a number of drawbacks, such as fragmented databases, which makes it necessary to remember multiple complex access passwords, the need to store many electronic digital keys for authorization on different resources, low password and electronic digital signature (hereinafter - EDS) attachment to the end user. The described device avoids the above disadvantages and is designed to provide the end user with maximum convenience when using various services that require personal authorization. Also, this device can be used in situations requiring direct identification of a person.

The closest analogue of the claimed utility model is document RU 2007124574 A, from which a system is known for making it possible to automatically authenticate a personal digital key based on the fact that the personal digital key is located at close range, while the personal digital key can be associated with a person and to enable linking a personal digital key to an account based on automatic authentication, containing a personal digital key that can be l is associated with a person, containing encrypted digital data that is unique to him, and allowing you to automatically establish authenticity based on the fact of his being close to the system of linking with the account; and an account linking system based on automatic authentication of the personal digital key, wherein the account linking system comprises a receiver / decoder circuit that is able to automatically authenticate the personal digital key when the personal digital key is located close to the receiver / decoder circuit, and however, a personal digital key can be associated and associated with an account.

The disadvantage of this solution is that this system provides access to only one resource and is not reliable enough.

Thus, the technical result to which the claimed utility model is directed is the ability to access various resources without the need to use many different ways of accessing each resource individually.

The device is a programmable digital electronic device, with an autonomous source of electrical power, including:

- a long-range wireless communication module with a remote user authorization server,

- short-range wireless communication module with a service receiver device requiring authorization,

- a directional wireless data transmission module made by infrared transmission technology of radio waves,

- Universal Serial Bus (USB) interface for communication with the user's computer and replenishing the energy of the device’s power supply,

- EDS module,

- module for determining biometric parameters,

- indication module,

- control module,

- rewritable flash memory device using Flash technology for storing driver programs,

- microprocessor or microcontroller for managing and processing information

- read-only memory (hereinafter - ROM) for the microprogram (ROM can be integrated into the microprocessor or microcontroller) of the device.

A wireless module with a remote authorization server is based on a radio transmitting device, a standard presented by a cellular operator.

The module for determining biometric parameters is a fingerprint scanner.

The case of the device is made of shockproof material.

The body of the device is made in the form of a key fob.

The device case is made in the form of a bracelet.

The device serves as a link to the system as a whole.

The device operates as follows:

If authorization is required on a resource requiring authorization (hereinafter referred to as the Service), the end user performs the required actions with the connection of the Device, scans the fingerprint of a finger registered in the system on the Device, or another biometric parameter. The device receives the Service server ID from the authorization device to further determine the destination of the authorization key. The Device transmits the biometric scan result data to the remote authorization server (hereinafter referred to as the UA Server), in encrypted form, together with the unique electronic digital signature of the Device, by which the UA Server identifies the owner of the Device, as well as the Service server ID of the user waiting for authorization. Information is processed on the UA Server and, when the result of biometric scanning is positively compared with the data in the user account, it generates a random access key, and also determines the database ID of the user passing through the database of the Service. One instance of the key, together with the user ID, is transmitted via a secure channel to the server serving the Service, the second packet of identical data determined by the Service ID to the Device. The device, in turn, transmits the received authorization key and user ID to the computer with which the authorization was requested, via short-range wireless communication (if there is a receiver device, for example, in a self-service terminal) or via USB. The computer transmits the received key to the server serving the Service. Both copies of the authorization key are compared on the server of the Service, with a positive result of the comparison, the user gets access to the Service.

A secure communication channel between the authorization server and the Service server, assumes that the Service server has a registered digital signature for identification and exchange of cryptographic keys.

The condition for communication with the authorization device over the wireless channel is the presence of an IR transmitter on the authorization device to prevent erroneous communication with another authorization device located in the reception area (the directivity of data transmission via the infrared port is used). Devices and authorization devices are exchanged via the infrared port with temporary keys to open a communication channel via a wireless interface.

The device is a biometric scanner with a unique electronic digital signature, and therefore, it can be used in cases where remote authorization is not required, or is impossible due to some factors. In such cases, the transmission of the scan result separately, or together with a unique key, is possible directly to the receiver device via the short-range radio interface. This design feature of the Device can be used for authorization on the security alarm systems of buildings and cars, as well as in the access control system for working hours and access to rooms with limited access.

This device can be used for example in:

- Authorization of citizens on government resources (Pension Fund, Rosregistration, etc.),

- authorization of users of self-service terminal networks,

- authorization of access to buildings and the like,

- authorization of the vehicle owner,

- authorization of users of Internet resources and services,

- in many other ways.

Due to the complexity of building a network of radio transmitting devices, the claimed device can use ready-made solutions in the person of a mobile operator (hereinafter referred to as the Operator). With this decision to build a network, a Wireless communication module with the UA Server is installed in the Device based on the radio transmitting device, a standard provided by the Operator. This solution provides a wide area of reliable reception of the signal of the transmitting antennas by the device, and also eliminates the development of the wireless module as a new project, using existing developments in the field of mobile communications.

In view of the decisive value of the ratio “dimensions / battery life”, it is recommended to limit oneself to the minimum color indication on the device’s case, the minimum control system size, and also choose a small built-in biometric scanner.

The body of the device is created taking into account maximum durability, impact strength and protection from harmful external factors. The USB interface is made of materials that increase the resistance of the connector to harmful mechanical and other factors.

The device may have a system for quickly locking the device by its digital signature in case of loss, theft, illegal use and other cases. As well as quick replacement and re-registration of a new device for the end user.

The Device uses decryption-resistant cryptographic methods when establishing a connection between the Device and the UA Server, and the latter with the Service server (for transferring a copy of the authorization key) and the shortest possible lifetime of the random authorization key in order to prevent its interception and the possibility of use by other persons.

Claims (6)

1. A universal digital key with remote authorization by biometric parameters, characterized in that it is a programmable digital electronic device with a housing and an autonomous source of electrical power, including: - a long-range wireless communication module with a remote user authorization server, - near field communication module with a service receiver device requiring authorization, - module directional wireless data transmission, made by technology of transmission in the infrared range of radio waves, - USB interface - electronic digital signature module, - module for determining biometric parameters, - indication module, - control module, - rewritable memory device storing driver programs, - a microprocessor or microcontroller for controlling and processing information, - read-only memory for storing the firmware of a universal digital key. 2. A universal digital key with remote authorization according to biometric parameters according to claim 1, characterized in that the wireless communication module with the remote authorization server is based on a radio transmitting device, a standard presented by a mobile operator. 3. A universal digital key with remote authorization by biometric parameters according to claim 1, characterized in that the module for determining biometric parameters is a fingerprint scanner. 4. A universal digital key with remote authorization by biometric parameters according to claim 1, characterized in that the housing is made of shockproof material. 5. A universal digital key with remote authorization by biometric parameters according to claim 1, characterized in that the housing is made in the form of a key fob. 6. A universal digital key with remote authorization by biometric parameters according to claim 1, characterized in that the case is made in the form of a bracelet.