WO2001038506A1 - Initialisation d'un systeme de controle d'acces - Google Patents

Initialisation d'un systeme de controle d'acces Download PDF

Info

Publication number
WO2001038506A1
WO2001038506A1 PCT/EP2000/011263 EP0011263W WO0138506A1 WO 2001038506 A1 WO2001038506 A1 WO 2001038506A1 EP 0011263 W EP0011263 W EP 0011263W WO 0138506 A1 WO0138506 A1 WO 0138506A1
Authority
WO
WIPO (PCT)
Prior art keywords
control system
access control
rights
user
memory area
Prior art date
Application number
PCT/EP2000/011263
Other languages
German (de)
English (en)
Other versions
WO2001038506A8 (fr
Inventor
Manfred Bromba
Original Assignee
Siemens Aktiengesellschaft
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens Aktiengesellschaft filed Critical Siemens Aktiengesellschaft
Publication of WO2001038506A1 publication Critical patent/WO2001038506A1/fr
Publication of WO2001038506A8 publication Critical patent/WO2001038506A8/fr

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/30—Individual registration on entry or exit not involving the use of a pass
    • G07C9/32—Individual registration on entry or exit not involving the use of a pass in combination with an identity check
    • G07C9/37—Individual registration on entry or exit not involving the use of a pass in combination with an identity check using biometric data, e.g. fingerprints, iris scans or voice recognition

Definitions

  • the invention relates to a method for initializing an access control system or to such an access control system according to the preambles of claims 1 and 2.
  • Such an access control system is used, for example, to secure data processing devices and terminal devices in communication technology. Such a system ensures that only an authorized person or authorized persons can use a system or is given free access to a secure building area. Control systems that use biometric features are very well suited as an access authorization system. Biometric features are, for example, a fingerprint, the iris of the eye, and other biological characteristics of people.
  • the biometric access authorization compares the biological characteristics of the access seeker with the stored characteristics of one or more authorized persons, that is to say with so-called reference characteristics. If they match, access is granted or the device in question is ready for operation.
  • a device is, for example, a mobile radio device.
  • biometric access control system Many applications of the biometric access control system are mobile, for example door keys, locks, weapons or mobile devices for communication or data processing technology. Due to their small size, these devices only have a limited display and a limited number of input keys. It is therefore difficult without the use of additional devices such as personal computers or Something similar to carry out the processing and administration of the feature or sample data records. Administration is understood to mean, for example, the safe storage of a reference characteristic data record, the assignment of different rights, the deletion or the new recording of reference data records.
  • the object of the invention is to simplify the personalization or personalization of an electronic access control system.
  • the purchaser of the access control system or biometric authentication device receives a non-personalized system that is in a virgin state. In this brand new condition, no user data or user characteristics are stored.
  • the first person to operate the system after commissioning is the authorized person and gets the status of a first-time user, a so-called superuser.
  • a memory area for personalization, that is to say for recording a reference data record of this first user or the authorized person, with which the full scope of rights is coupled.
  • the first user or superuser thus has all rights or access rights in the access control system and further on the relevant device protected by the control system.
  • Characteristics or reference database can be included. Other such rights in the control system can be the deletion of users and access to certain files or phone books in the device.
  • Figure 1 shows the enrollment of a first-time user
  • Figure 2 the access control
  • Figure 3 the enrollment of other users.
  • the access control system is located, for example, in a mobile radio device.
  • the control system checks the operator's fingerprint and has a so-called fingerprint sensor for this purpose.
  • the control of this sensor and the processing of the data are of minor importance for the invention and are not described in more detail.
  • the access control system has an initial storage area with which all rights, that is to say unrestricted use, are connected. This assignment of the rights can be implemented, for example, by a predetermined storage location, by corresponding entries in the memory itself, or by a predetermined address area.
  • an initial enrollment takes place as part of a personalization of the control system, that is to say the first time the superuser, that is to say the first user, is recorded and stored (see FIG. 1).
  • the process of capturing and processing the pattern of the fingerprint currently takes a few seconds. During this period, for example, a lamp can light up or flash.
  • the pattern of the fingerprint is stored in the initial memory as a reference data record. Writing to this memory or memory area again is only possible with the control of the first user.
  • the current fingerprint is saved in the form of a sample or reference data record.
  • the acquisition of the reference data record can take more time than the acquisition of a data record for a comparison.
  • the first user i.e. the superuser
  • a red lamp to put the finger on again. This procedure is repeated until another, for example a green lamp is used to signal that sufficient information is available for the reliable recognition of one or more fingers of the superuser.
  • the access control system is activated by pressing the fingerprint sensor or by pressing an additional button. As will be explained later, this key can be used for further control inputs.
  • the fingerprint sensor When the mobile device is in operation, when the fingerprint sensor is pressed, it is first queried whether the initial memory area is empty (see FIG. 2). If this data base is empty, the superuser is enrolled as described above with reference to FIG. 1.
  • the current print or the associated data record is compared with the saved one.
  • Approval or access takes place in accordance with the current imprint with the reference imprint, making it possible, for example, to make calls using the mobile radio device.
  • a red lamp indicates that the current user has not been released or has been rejected.
  • the access control system requires only a few buttons and display elements both when initializing the system and during operation.
  • the mobile radio device has an additional button, the enrollment button.
  • the enrollment key can be implemented by the key already described, by means of which the control system is activated, for example.
  • access to the mobile radio device can also be activated for other users. Additional users can only be added with the consent of the superuser. By placing the finger of the first user, the impression of the superuser is first authenticated (see FIG. 3). If the result of the comparison is positive and, for example, the enrollment button is pressed at the same time, another user places his finger on the sensor. As already described above, the reference data record is then generated for this user in a sample recording. This date The record is then stored in a user memory area. A change, inclusion of additional users and the deletion of data records is only possible by the first owner.
  • the other users have only limited rights.
  • This scope of rights is coupled to the associated memory area, that is to say the user memory areas.
  • the restriction of rights can apply to both the access control system and the protected device.
  • a plurality of initial memory areas can also be provided, the respective setup of which can only take place under the control of one or all “first users”.

Landscapes

  • Engineering & Computer Science (AREA)
  • Human Computer Interaction (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)
  • Collating Specific Patterns (AREA)

Abstract

L'invention concerne un procédé d'initialisation d'un système de contrôle d'accès, notamment d'un système biométrique, selon lequel un modèle mémorisé est comparé à un modèle actuellement enregistré. Selon l'invention, une zone mémoire initiale est destinée à l'enregistrement de données modèle, cette zone mémoire étant associée à une étendue illimitée des droits.
PCT/EP2000/011263 1999-11-22 2000-11-14 Initialisation d'un systeme de controle d'acces WO2001038506A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
EP99123150.7 1999-11-22
EP99123150 1999-11-22

Publications (2)

Publication Number Publication Date
WO2001038506A1 true WO2001038506A1 (fr) 2001-05-31
WO2001038506A8 WO2001038506A8 (fr) 2001-11-08

Family

ID=8239434

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2000/011263 WO2001038506A1 (fr) 1999-11-22 2000-11-14 Initialisation d'un systeme de controle d'acces

Country Status (1)

Country Link
WO (1) WO2001038506A1 (fr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102006022584A1 (de) * 2006-05-15 2007-11-22 Siemens Ag Zugangsvorrichtung und Verfahren zum Betreiben derselben

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5280527A (en) * 1992-04-14 1994-01-18 Kamahira Safe Co., Inc. Biometric token for authorizing access to a host system
EP0918300A2 (fr) * 1997-11-22 1999-05-26 TRW Inc. Corrélateur de caractéristiques pour empreintes digitales
WO1999027501A1 (fr) * 1997-11-19 1999-06-03 Siemens Aktiengesellschaft Procede de retransmission d'une autorisation d'acces definie en termes de biometrie et systeme de controle d'acces anthropometrique avec un controle d'acces defini sur le plan biometrique
EP0924657A2 (fr) * 1997-12-22 1999-06-23 TRW Inc. Technique de vérification d'identité à distance avec un dispositif d'identification personel
JPH11262059A (ja) * 1998-03-12 1999-09-24 Nec Mobile Commun Ltd 移動通信用携帯端末及び個人識別方法

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5280527A (en) * 1992-04-14 1994-01-18 Kamahira Safe Co., Inc. Biometric token for authorizing access to a host system
WO1999027501A1 (fr) * 1997-11-19 1999-06-03 Siemens Aktiengesellschaft Procede de retransmission d'une autorisation d'acces definie en termes de biometrie et systeme de controle d'acces anthropometrique avec un controle d'acces defini sur le plan biometrique
EP0918300A2 (fr) * 1997-11-22 1999-05-26 TRW Inc. Corrélateur de caractéristiques pour empreintes digitales
EP0924657A2 (fr) * 1997-12-22 1999-06-23 TRW Inc. Technique de vérification d'identité à distance avec un dispositif d'identification personel
JPH11262059A (ja) * 1998-03-12 1999-09-24 Nec Mobile Commun Ltd 移動通信用携帯端末及び個人識別方法

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
PATENT ABSTRACTS OF JAPAN vol. 1999, no. 14 22 December 1999 (1999-12-22) *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102006022584A1 (de) * 2006-05-15 2007-11-22 Siemens Ag Zugangsvorrichtung und Verfahren zum Betreiben derselben

Also Published As

Publication number Publication date
WO2001038506A8 (fr) 2001-11-08

Similar Documents

Publication Publication Date Title
EP1892674A1 (fr) Système de contrôle d'accès basé sur le modèle cérébral
EP0805607B1 (fr) Méthode d'accès d'au moins une partie des données d'une carte à microprocesseur
DE3438106A1 (de) Verfahren zum ermitteln der gebrauchsberechtigung eines benutzers eines teilnehmergeraetes fuer signaluebertragung
DE19934098A1 (de) Verfahren zum eingabefreien Starten eines gegen unbefugte Nutzung mit einer PIN geschützten Geräts
CH662193A5 (de) Verfahren zum erstellen einer vorgegebenen anzahl von berechtigungselementen.
DE19645937B4 (de) Verfahren und System zum personenabhängigen Steuern einer Telekommunikations-Endeinrichtung
EP1402711B1 (fr) Telephone mobile
WO2001038506A1 (fr) Initialisation d'un systeme de controle d'acces
DE19522050A1 (de) Speicherkarte
EP1912184A2 (fr) Dispositif et procédé destinés à la production de données
DE19645936A1 (de) Verfahren und System zum personenabhängigen Steuern einer Telekommunikations-Endeinrichtung
DE19904440A1 (de) Verfahren zur Verifizierung der Identität einer Person
DE4436605A1 (de) Verfahren zur sicheren Ver- und Entriegelung von Schlössern mit einer Authentisierung
DE10100188B4 (de) Verfahren zum Speichern und Wiederauslesen eines oder mehrerer PIN-Codes
EP2150943A1 (fr) Procédé d'utilisation initiale d'une carte à puce
EP1669903A2 (fr) dispositif electronique mobile avec accès protégé
DE102007051398A1 (de) Verfahren zur auf einer PIN basierenden Sicherung eines tragbaren Datenträgers gegen unberechtigte Nutzung
DE3707994C2 (de) Verfahren zum Schutz gegen eine unberechtigte Umkodierung
WO1997049576A1 (fr) Procede de verification des autorisations d'acces dans un recepteur radio, et recepteur radio correspondant
EP3465511B1 (fr) Déclenchement sur une base biométrique d'une action utile au moyen d'un jeton d'identification
EP1152377B1 (fr) Procédé et terminal pour mettre en oeuvre des transactions en utilisant un support de données portatif
WO1996010812A1 (fr) Commande a plusieurs stades d'acces a des cartes de support de donnees
DE102019208565A1 (de) Verfahren zur Authentisierung eines Nutzers
DE10123346A1 (de) Verfahren zur Codierung und Decodierung von Zugangscodes für elektronische durch Zugangscodes gesicherte Systeme
EP1177534A1 (fr) Systeme et procede pour comparer des donnees biometriques

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): CN IN JP SG US

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR

121 Ep: the epo has been informed by wipo that ep was designated in this application
AK Designated states

Kind code of ref document: C1

Designated state(s): CN IN JP SG US

AL Designated countries for regional patents

Kind code of ref document: C1

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR

WR Later publication of a revised version of an international search report
122 Ep: pct application non-entry in european phase