1310505 •九、發明說明： k 【發明所屬之技術領域】 本發明係錢-種實·人行缸魏雜纽財法，特別是—種 經由指紋驗證實現個人行動工作站的裝置及其方法。 【先前技術】 自從搭配通用串列匯流排⑽）介面的隨身碟（⑽et _問世 後，因其具梭大__存„、f料傳倾軌及絲方便等優點， 已擺脫了軟制（floppy dlsks) 限麟&雜時的困擾，而 成為-種極為方便的行動儲存裝置。但是一般隨身碟内的重要資料可容易 地被竊取、竄改或破壞，f Λ λ 凸』了各痛％子存取裝置對其保密性的重視 程度已逐漸地升高。 目讀於貝料加_枝包括驗域、⑻加密、財密碼加密、 自'動銷毀...等’驗商品化的產品例如有··指紋職碟透過餘辨識科技 〜護的胃訊，_式缺觸碟錢過_式雜認證將資料 加密保護；硬碟加密裝置，立 八 <硬碟加密鎖、專屬鑰匙、X Wall加密晶 片、DES/TDES(資料加密桿 革）技術的搭配，以對硬碟進行加密。 另外在2005年1〇月]口八& Λ "^的中華民國新型專利第Μ277160號中揭 賂了一種「ΙΕΕΕ1394連接哭夕仅崎壯 U置」’其中在麵1394連接器上設置 有—鎖機構，該鎖機構其中— 〃 、m樣可為機械柄鍮匙鎖、暗鎖或號瑪鎖， 以達防盜之功效。然而 & . 讀體、電子的加密方 式雖成將成本降低，但由於 太备认一 補裔上叹置鎖機構，因此會破壞連接器 本身的結構，且增加了_、_複雜度。 1310505 雖在身碟加密的技術已有前揭的數種，但是這些習知技術僅可單 純地提供資料加密魏護的魏，對於㈣縣不同地點而又紐隨身攜 f個人電㈤或是筆記型電腦的使用者而言’健無法藉由隨身碟方便地隨 時使用專屬於個人的郵件、個人資料失、料、我的最愛⑽丨脈⑽ 等個人資料。 【發明内容】 本發月^供了—種經由指紋驗證實現個人行動:L作站的裝置，包含： 儲存單元、指紋取像單元、自動執行程式。 儲存單元，用以儲存資料並提供個人電腦存取。 指紋取像單元，用以擷取使用者的指紋資料。 自動執行程式，預儲存單元，於儲存單元連接於個人電腦時，在 電腦自動執行以驗證赦資料，於驗證騎時·人資料匯入個人電 ^ ’進而實難人行動讀關目的。於雜存單元停止連接於該個人電 餐時將個人電腦恢復原先的操作環境，不留一點痕跡。 、本發明提供—種經由驗驗證實難人行動工作關方法，透過此— :法’使用者可以隨時地透過個人電腦自由地運用儲存單元中專屬的個人 貪料’一旦該裝置從個人賴移除之後，個人即可恢復料的操作環 境，不留一點痕跡。 只現别述方法的較佳實施方式，包括：儲存個人㈣與自動執行程式 &鍺存單元； 於儲存早辑接於個人賴時，桃紋取像單元擷取缺資料，在個 ϊ〇5 人電知執订自動執行程式以指紋資料進行身分驗證； 於身分驗證通過時’將個人將匯人個人電腦； <「單^ίτ止連接於個人電腦時，將個人電腦回復連接於儲存單元 _環境設定，不留—點痕跡。 有關本發明齡德實細及其功效，紐合目式說明如后。 【實施方式】 —如「弟1圖」所示，依據本發明的較佳實施例，經由指紋驗證實現個 作站的裝置，包含：指紋轉單元10、儲存單元20、自動執行程 式40。 礼、、文取像單兀10，用以擷取使用者的指紋資料。 _早7〇 20包含通訊介面21與記憶體㈡。通訊介面用以連接個 人包腦〇錢、體22用以錯存資料，並經由通訊介面以提供個人電腦邪 存取。 儲存單元2〇可為硬碟、腿ΟΜ、S麵、Nand/Nor Flash、CF卡、S]) 卡、瞧1 SD 卡、miCr〇SD 卡、露卡、RS-MMC 卡、xD 卡、SMC 卡、MS 卡、 MS pro 卡、MO 光碟、〇^R、eD Rff。 執他式4〇 ’預栽於館存單元20之記憶體22，可在儲存單元20 和個人電腦3G連接後於個人電腦财自動執行，配合指紋取像單元10之 指级驗證的功能’允許通過身份驗證的使用者運用儲存單元别中所提供的 個人資料5G，進而實現個人行動玉作站的目的。 ^ θ」斤示自動執行程式40的較佳實施例，可透過在儲存單 1310505 .(20之中建立一虛擬光碟機60的方式來實現，虚擬光碟機60可為可讀窝 光碟機，這個虛擬光碟機6〇内記錄有自動執行程式40和運作時所需的其 他應用程式’例如·自動執行檔（Aut〇Run) 6卜指紋驗證程式⑽、密瑪驗 證程式63、主要管職式64以及無應贿式，而_社要管理程式 64係為自動執行程式4〇在運行時的主程式，除了控制指紋取像單元以 及指紋驗證料62之外，_於建立與管理個人郵件、個人資料夾、標案 資料、我的最愛、私密的槽案區、代辦事項、行事層、帳號、連絡人、郵 φ 件規則、簽名、歷史資料、個人首頁等個人資料50。 如「第2圖」所示，依據本發明的較佳實施例，錯存單元20更包含有 -虛擬硬碟機7G (virtual HD)，其包含—個人雜區71以及—隱藏資料 區72 (hidden area);個人資料區71係供個人資料5〇使用，而隱藏資料 區72則是用以儲存各個使用者的指紋資料或密碼，以作為驗證使用者身份 時的比對依據。 如「第3圖」所示，儲存單元2〇的第一種較佳實施例是一種整合了通 •訊介面21及記髓22 (例如：_記憶體肠h memQry)猶輕(p〇cket dlsk)，而自動執行程式40則是被預载在記憶體泣之中；指紋取像單元μ 可^個身碟整合在-起，-旦隨身碟透過通訊介面2ΐ與個人電腦即 連接後，個人電腦30就會自動開始運行虛擬光碟機6q⑽自純行程式 40 〇 •如「第4圖」所示，儲存單元20的另一種較佳實施例是一種包括有— ‘記憶卡23(腦ory card)以及可與個人電腦3〇進行通訊的讀卡機撕㈣ 9 1310505 ， reader)的形態，其中的讀卡機24可以和指紋取像單元1〇整合在一起，而 自動執行程式40的第一種可較佳實施例是被預載在記憶卡烈之中，而另 -種較佳實施例則可以在讀卡機24内設置-系統記憶體241用以纖自動 執行程式40(見「第5圖」）；-旦讀卡機24與個人電腦3〇連接後，個人 電腦30就會自動開始運行虛擬光碟機6〇内的自動執行程式4〇。 以下就以整合指紋取像單元1〇、儲存單元2〇、動執行程式4〇的隨身 碟為例，針對本發明的裝置及其運作流程作一詳細的說明如下。 φ 其中儲存單兀20的通訊介面21可為通用串列匯流排(USB)的規格，其 支援-般個人電腦的即插即用（plug and play)的功能，其中的記憶體22 被为割為以下數個不同的區塊，分別為： USB code :用以供個人電腦3〇辨識_介面的規格以尋找相應的驅動 程式。 虛擬光碟機6G :包含INF資訊檔、自動執行槽(Aut〇Run)6]l、一指紋 驗證程式62、密碼驗證喊63、主要f理程式64以及其他細程式，如 • #料同步程式’電子郵件程式等，可為可讀寫光碟機。 虛擬硬碟機70 :包含個人資料區71和隱藏資料區72，初始化的情形 下個人貝料區71為開放模式(pubUcm〇de)，主要管理程式％會在可用的 資料區71巾”配—專用的資料區給任何—個新增的使用者運用，然後 這個專用的資料區則會被轉換為專用模式(的碰6 m〇de)以供個人資料 利用，唯有通過身份驗證的使用者，可以使用屬於其專用的資料區；而隱 . 赫瓶72，狀__各做岐触敗痛餘概或是預存密 1310505 » 碼。 提供指示燈⑽巾未示）設置赠縣元20，於鮮_ 2g存取資 料時閃爍。指示燈可為藍光·，於存取資料時藍光_，令使用者感覺安 祥平和，與一般隨身碟採用紅光LED不同。 依據本發w較佳實施例，肋實現_方法的步驟，包括： 1.取得使用者的指紋資料，其可透過—指紋取像單元加以實現。 :θ ’、儲存單元’心、為一種電腦可存取的數位資料儲存裝置，用以 儲存包含使用者的指紋資料和個人資料，以作為指紋辨識時的比對依據， 更進一步地’這倾存單元還提供了可供朗者·_人資料。 3.提供-自動執行程式，勒自練行程式在齡單域個人電腦連 線時會自動地在個人麵端開始運行，用以執行包括制者身份選擇程 序，密碼驗證程式，指紋驗證程式，以及個人資料區切換程序，配合指紋 取像單元及指紋驗證的功能，允許ii過身份驗證的使用者，運用儲存單元 中的個人資料。 依據本發明所揭露的裝置的較佳實施例，初始的設計會在儲存單元令 、個S理者的密碼，使用者第-次使用時可以先以這個管理者的密碼 進g理拉式」’然後就可以管理者的身份建立任一個使用者的指紋資料 或疋在碼亚將指紋貧料或是密瑪儲存於行動儲存裝置中，以作為使用者 在作身她蝴麟依據；M —方面，在「管_式」下，管理者也 β、〜地刪除或疋修改任_個使用者（包括管理者）的指紋資料或是密 1310505 —用屯紋貝料所進仃的身分驗證可為由登入遠方飼服器驗證、資料保 護w、應用程式使用驗證、登入登出驗證、個人資料使兩驗證、權限驗 證、付款身分驗證。 其包含下 如「第6圖」所示，係為本發明之運作流程的較佳實施例， 列步驟： 诎使用者將隨身碟插入個人電腦3〇的_連接璋； 分別為虛擬光碟機60與 102個人電腦30會提示發現二個新的裝置， 虛擬硬碟機70 ; 则人電職依據自動細61的内容，騎行自動執行程式 40 » ⑽自動執行程式40 、佳入「其裡η 更使用者可以透過主要管理程式64選擇 進入㈣喊」或是「個人行 ⑽執行在趣辆機Φ」，麵縣行—結束程序； 63 ; 中的指紋驗證程式62及/或密碼驗證程式 ⑽蝴缺麟(咖物的崎）， 式進入「管雖（较*嫩_卿」； 雜 W在「讀料」讨料管理 資料的功能，用以進行包含：建立使 S猶或疋修改使用者 料餘存於隱藏資_ 72，建立，& 1 ’日紋貝料’並將取得的指紋資 者等功能；當選擇「離開±或疋删除使用者密碼，或是刪除使用 新選擇進入「細模式」或是「 式64的初始畫面，重 仃工作站的模式」，或選擇執行—結 12 1310505 * 束程序； 、、行個人行動工作站的模式」之後，首先會將虛擬硬碟機7〇十 =於使用者專用的資料區開啟並將個人資料區71從職模式切換為專用模 2，接下來’允許使用者彻相關的應肺式運用屬於使用者專用的資料 ^包含建立與管_如··個人郵件、個人#料夾、槽雜料、我的最愛、 私:的棺索區、代辦事項'行事層'帳號、連絡人、郵件規則、簽名、歷 史貧料、個人首頁等個人資料5〇 ; ⑽移除隨身碟’個人_ 3〇即可恢復原先的操作環境，不留一點痕 跡。 ^軸本發_技術内容已經以較佳實施纖露如上，然其並非用以限 疋本發明，任何熟習此技藝者，在不脫離本發明之精神所作些許之更動愈 聘飾，皆應涵蓋於本發日_•，耻本發社倾細當視後附之申 請專利範圍所界定者為準。 【圖式簡單說明】 • 第1圖，以功能方塊圖揭示本發明之裝置的較佳實施例。 第2圖，以功能方塊圖揭示本發明之儲存單元的較佳實施例之一。 第3圖，以功能方塊圖揭示本發明之儲存單元的另—種較佳實施例。 第4圖’以功能方塊圖揭示本發明之儲存單元的另_種較佳實施例。 第5圖’以功能方塊圖揭示本發明之儲存單摘另-種較佳實施例。 '第6圖，揭示本發明之運作流程的較佳實施例之_。 . 【主要元件符號說明】 10..........指紋取像單元 13 1310505 20 ..........儲存單元 21 ..........通訊介面 22 ..........記憶體 23 ..........記憶卡(memory card) 24 ..........讀卡機(card reader) 241........系統端記憶體 30..........個人電腦1310505 • Nine, invention description: k [Technical field to which the invention pertains] The present invention relates to a money-species-human-carrying cylinder, and in particular to an apparatus and method for realizing a personal mobile workstation via fingerprint verification. [Prior Art] Since the introduction of the universal serial bus (10) interface of the flash drive ((10)et _ after the advent, due to its advantages of large shuttle __ deposit, f material transfer rail and silk convenience, has been freed from soft ( Floppy dlsks) is a very convenient mobile storage device. However, important information in the flash drive can be easily stolen, tampered with or destroyed. f Λ λ 凸 』 The importance of the sub-access device to its confidentiality has gradually increased. The product is read in the product, including the domain inspection, (8) encryption, financial encryption, self-destruction, etc. For example, there are ··································································································· X Wall encryption chip, DES/TDES (data encryption) technology, to encrypt the hard disk. In addition, in the first month of 2005, the mouth of the Republic of China " ^ the Republic of China new patent No. 277160 Unveiled a kind of "ΙΕΕΕ1394 connection, crying, only strong and strong 'There is a lock mechanism provided on the 1394 connector, wherein the lock mechanism is - 〃, m can be a mechanical handle key lock, a dark lock or a horn lock to achieve the anti-theft effect. However, the reading body, Although the electronic encryption method reduces the cost, it is too confessed to the slap lock mechanism, which will destroy the structure of the connector itself and increase the complexity of _ and _. 1310505 There are several kinds of pre-existing ones, but these conventional techniques can only provide information encryption Wei Wei, for the users of different places in the county, but also carry the personal electric (five) or notebook computer. Jian can't easily use personal information such as personal mail, personal data loss, material, my favorite (10) 丨 (10), etc. by using the portable disk. [Invention content] This month Action: L station device, including: storage unit, fingerprint image capture unit, automatic execution program. Storage unit for storing data and providing personal computer access. Fingerprint image capture unit for capturing users Fingerprint data. Automatic execution program, pre-storage unit, when the storage unit is connected to the personal computer, it is automatically executed on the computer to verify the data, and when the verification is performed, the person data is transferred to the personal computer. When the miscellaneous storage unit stops connecting to the personal electric meal, the personal computer is restored to the original operating environment without leaving any traces. The present invention provides a method for verifying the actual action of the person through the verification, through this method: Users can freely use the personal greed in the storage unit at any time through the personal computer. 'After the device is removed from the individual, the individual can restore the operating environment without leaving any traces. The preferred embodiment includes: storing the personal (4) and automatically executing the program & storage unit; when storing the early album and connecting to the individual, the peach image capturing unit takes the missing information, and the 5 person knows the binding. The auto-execution program uses the fingerprint data for identity verification; when the identity verification is passed, 'the individual will transfer the personal computer; <“single ^ίτ is connected to the personal computer , The PC is connected to the storage unit _ reply environment setting, without leaving - trace point. Regarding the age of the present invention and its efficacy, the description of the neon is as follows. [Embodiment] - As shown in "Brief 1", in accordance with a preferred embodiment of the present invention, a device for implementing a station via fingerprint verification includes a fingerprint transfer unit 10, a storage unit 20, and an auto-execution process 40. The ritual and the essay take the image 10 to capture the user's fingerprint data. _7 〇 20 contains communication interface 21 and memory (2). The communication interface is used to connect the individual to the brain, the body 22 is used to store the data, and the personal interface is provided through the communication interface. Storage unit 2〇 can be hard disk, leg ΟΜ, S-face, Nand/Nor Flash, CF card, S]) card, 瞧1 SD card, miCr〇SD card, 露卡, RS-MMC card, xD card, SMC Card, MS card, MS pro card, MO disc, 〇^R, eD Rff. The memory 22 pre-stored in the library unit 20 can be automatically executed on the personal computer money after the storage unit 20 and the personal computer 3G are connected, and the function of the fingerprint verification unit 10 is allowed to be allowed. The authenticated user uses the personal data 5G provided in the storage unit to realize the purpose of the personal action jade station. The preferred embodiment of the automatic execution program 40 can be implemented by means of a virtual disk drive 60 in the storage unit 1310505. The virtual disk drive 60 can be a readable disk drive. The virtual CD player records the automatic execution program 40 and other applications required for operation. For example, the automatic execution file (Aut〇Run) 6 fingerprint verification program (10), the grammar verification program 63, and the main management function 64 And the non-bribery type, and the social management program 64 is the main program of the automatic execution program 4, in addition to controlling the fingerprint image capturing unit and the fingerprint verification material 62, _ establishing and managing personal mail, personal Folders, project data, my favorite, private slot area, charge d'affaires, transaction level, account number, contact person, postal rule, signature, historical data, personal home page and other personal information 50. As shown in the preferred embodiment of the present invention, the faulty unit 20 further includes a virtual hard disk drive 7G (virtual HD), which includes a personal miscellaneous area 71 and a hidden area 72; Data area 71 is for a The user data is used for 5〇, and the hidden data area 72 is used to store the fingerprint data or password of each user as a comparison basis for verifying the identity of the user. As shown in Fig. 3, the storage unit 2〇 The first preferred embodiment is an integrated communication interface 21 and a memory 22 (for example: _memory intestines h memQry), and the automatic execution program 40 is preloaded. In the memory weeping; the fingerprint image capturing unit μ can be integrated into the body, and after the flash drive is connected to the personal computer through the communication interface 2, the personal computer 30 will automatically start to run the virtual optical disk drive 6q (10). Pure stroke type 40 〇• As shown in Fig. 4, another preferred embodiment of the storage unit 20 is a type including a memory card 23 and a communication with a personal computer. The card machine tears (4) 9 1310505, reader), wherein the card reader 24 can be integrated with the fingerprint image capturing unit 1 , and the first preferred embodiment of the automatic execution program 40 is preloaded in the memory. Among the cards, another preferred embodiment can read the card. In-24 setting - the system memory 241 is used to automatically execute the program 40 (see "Fig. 5"); after the card reader 24 is connected to the personal computer 3, the personal computer 30 automatically starts to run the virtual disk player 6 The automatic execution program in the 〇4〇. The following is a detailed description of the apparatus of the present invention and its operational flow by taking the portable image capturing unit 1〇, the storage unit 2〇, and the running program of the program 4〇 as an example. φ The communication interface 21 of the storage unit 20 can be a universal serial bus (USB) specification, which supports the plug-and-play function of a general-purpose PC, in which the memory 22 is cut. For the following different blocks, they are: USB code: used for personal computer 3 identification _ interface specifications to find the corresponding driver. Virtual CD player 6G: contains INF information file, automatic execution slot (Aut〇Run) 6]l, a fingerprint verification program 62, password verification shout 63, main f program 64 and other fine programs, such as • #料同步程序' An e-mail program, etc., can be a CD-ROM drive. The virtual hard disk drive 70 includes a personal data area 71 and a hidden data area 72. In the case of initialization, the personal bedding area 71 is in an open mode (pubUcm〇de), and the main management program % will be in the available data area 71. The dedicated data area is used by any new users, and then this dedicated data area is converted to a dedicated mode (for 6 m〇de) for personal data utilization, only authenticated users. It can be used in its own dedicated data area; and hidden. He bottle 72, __ each do 岐 岐 或是 或是 or pre-storage 1310505 » code. Provide indicator light (10) towel not shown) set gift county 20, Blinks when the fresh _ 2g accesses the data. The indicator light can be blue light. When the data is accessed, the blue light _, the user feels peaceful and peaceful, and the red light LED is different from the general flash drive. For example, the steps of the rib implementation method include: 1. Acquiring the user's fingerprint data, which can be implemented by the fingerprint image capturing unit: θ ', storage unit 'heart, for a computer-accessible digital data storage Device for storing inclusions The user's fingerprint data and personal data are used as the basis for comparison during fingerprint identification. Further, the 'pour storage unit also provides information for the lang. _ people. 3. Provide - automatic execution of the program, self-training When the trip-type single-domain PC is connected, it will automatically start running on the personal side to execute the system including the maker identity selection program, the password verification program, the fingerprint verification program, and the personal data area switching program. The function of the unit and the fingerprint verification allows the user who has passed the authentication to use the personal data in the storage unit. According to a preferred embodiment of the device disclosed in the present invention, the initial design is in the storage unit and the controller. The password, the user can use the password of the manager to enter the first time of the user's password. Then, the identity of any user can be established as the administrator or the fingerprint is poor. It is stored in the mobile storage device as a basis for the user to be the basis of the user; in the aspect of M, in the "tube_style", the manager also deletes or repairs the beta. Changed fingerprint information of _ user (including manager) or secret 1310505 - identity verification with 屯 贝 贝 can be verified by logging in to the remote feeder, data protection w, application verification, login Logout verification, personal data enable two verifications, authorization verification, payment identity verification. The following is a preferred embodiment of the operational flow of the present invention as shown in the "figure 6". Steps: 诎 The user inserts the flash drive into the _ port of the personal computer; respectively, the virtual optical disk drive 60 With 102 PC 30 will prompt to find two new devices, virtual hard drive 70; then the electric power according to the content of automatic fine 61, riding automatic execution program 40 » (10) automatic execution of the program 40, good entry "in the η more The user can choose to enter (4) shouting through the main management program 64 or "personal line (10) execution in the fun machine Φ", face county line - end program; 63; fingerprint verification program 62 and / or password verification program (10) butterfly Lack of Lin (the singularity of the coffee), the style enters the "tube (more than _ _ qing); miscellaneous W in the "read material" to discuss the management of the data function, for inclusion: to make the S or 疋 modify the user The remaining materials are stored in the hidden capital _ 72, the establishment, & 1 1 'day grain bedding' and will get the fingerprints and other functions; when you choose "Leave ± or 疋 delete the user password, or delete the new selection to enter" Fine mode or "the initial picture of style 64, "Reset the mode of the workstation", or select Execute - End 12 1310505 * Beam program; ,, the mode of the personal mobile workstation", first open the virtual hard drive 7 〇 10 = in the user-specific data area and The personal data area 71 is switched from the job mode to the dedicated mode 2, and then 'allows the user to use the relevant user-specific data for the relevant lung type^ including the establishment and management of the personal mail, personal #clip, slot Miscellaneous materials, my favorite, private: the squatting area, the agent's 'action layer' account, contact person, mail rules, signature, historical poor, personal home page and other personal information 5 〇; (10) remove the pen drive 'personal _ 3〇 can restore the original operating environment without leaving any traces. ^The shaft of the technical content has been better implemented with the above, but it is not intended to limit the invention, anyone who is familiar with this technology, does not leave Some of the changes made by the spirit of the present invention should be covered by the date of this issue. The shame of the company is defined by the scope of the patent application. [Simplified illustration] 1 picture to function The block diagram shows a preferred embodiment of the apparatus of the present invention. Fig. 2 is a functional block diagram showing one of the preferred embodiments of the storage unit of the present invention. Fig. 3 is a functional block diagram showing the storage unit of the present invention. Another preferred embodiment. Fig. 4 is a functional block diagram showing another preferred embodiment of the storage unit of the present invention. Fig. 5 is a functional block diagram showing the storage list of the present invention. Preferred Embodiments. Fig. 6 is a view showing a preferred embodiment of the operational flow of the present invention. [Main element symbol description] 10..........Finger image capturing unit 13 1310505 20 .. ........storage unit 21 ..... communication interface 22 ..... memory 23 .......... memory card ( Memory card) 24 ..........card reader 241........system memory 30..........PC
40..........自動執行程式 50..........個人資料 60 ..........虛擬光碟機 61 ..........自動執行檔(AutoRun) 62 ..........指紋辨識程式 63 ..........密碼驗證程式 64 ..........主要管理程式 70..........虛擬硬碟機(virtual HD) T1..........個人資料區 72..........隱藏資料區（hidden area) 1440..........Automatic execution program 50..........Profile 60 .......... Virtual CD player 61 ........ ..Automatic execution (AutoRun) 62 ..........Finger recognition program 63 .......... password verification program 64 .......... main management program 70..........virtual hard disk (virtual HD) T1..........profile area 72..........hidden area (hidden area ) 14