WO2002011076A1

WO2002011076A1 - System and method for operation-integrated user identification

Info

Publication number: WO2002011076A1
Application number: PCT/EP2001/008843
Authority: WO
Inventors: Wolfgang Richter
Original assignee: R2 Ag
Priority date: 2000-07-31
Filing date: 2001-07-31
Publication date: 2002-02-07
Also published as: AU2001293710A1; EP1316072A1; DE10037226A1

Abstract

The invention relates to a system and method for operation-integrated identification of a user. The user identification is made during actions that the user would normally have to perform in order to use the devices. The user data required for the identification are transmitted through the body of the user from a user-end terminal to a user identification system by the user touching a touch-sensitive user interface, said system than checking the user data that are transmitted. If the user data check is successful, indicating that the current user is authorised, a release signal is produced. In response to the release signal, a release device unblocks access to corresponding devices connected downstream. If the user data check indicates that the user is not an authorised user, a block signal is produced to control the release device in such a way that the latter blocks access to the devices connected downstream. The functioning and operativeness of the system for identifying a user is tested by operating the system in a test mode, whereby user data are used to produce a user data test signal through a second touch-sensitive user interface.

Description

SYSTEM AND METHOD FOR ACTION-INTEGRATED IDENTIFICATION

A USER

S DESCRIPTION

Field of the Invention

The present invention relates to a system and a method for identifying a user using data identifying the user. In particular, the present invention relates to a system and a method in which the identification of a user is used for control purposes, in particular for releasing devices and devices, in order to enable only authorized users to use the devices and devices. In particular, the invention is concerned with a so-called action-integrated identification of a user, in which data required for identification are provided by an action by the user, which is normally to be carried out anyway when using (control, operation ...) devices and devices are.

BACKGROUND OF THE INVENTION 0 In devices and devices that are to be used exclusively by authorized users, user-identifying data are used to check the authorization. For this purpose, the devices and devices are assigned identification systems that receive the user data that identify the current user, check them and, in the event of a successful check of the 5 user data that indicates an authorization of the current user, output a suitable signal to the corresponding devices and devices for their release , Furthermore, in the event of a (multiple) failed verification of the user data, which indicates that the current user is not authorized, the identification systems can generate a signal in order to control the devices and devices in such a way that the current unauthorized user can no longer use the equipment and devices. The devices and devices can then be released again under various conditions, for example after a predetermined one has expired Duration and a suitable (external) control of the facilities and devices.

In order to provide user data identifying a user to such identification systems, it is known to use portable storage media (for example smart cards, chip cards, etc.), codes to be entered by a user (for example PIN numbers), data transmitters (radio transmitters), speech recognition devices and devices to capture the fundus or fingerprint of a user.

In the case of identification systems which are used in connection with portable storage media, user codes and data transmitters, it cannot be guaranteed with certainty that only authorized / authorized users will use the devices and devices connected to such an identification system. There it is possible that everyone, i.e. even an unauthorized user who is in possession of a corresponding portable storage medium, user code or data transmitter is identified by the identification systems as an authorized user.

To eliminate this problem, more complex identification systems are used, which have, for example, speech recognition devices or devices for recognizing eye backgrounds or fingerprints. Due to their complexity, these identification systems are more expensive and prone to failure, and are therefore normally used where particularly high security requirements are required. In order to achieve a reliable identification of authorized persons when using speech recognition devices, the speech recognition devices capture as many language characteristics of a user as possible. This can lead to an identification system with a speech recognition device marking an authorized user as unauthorized if the user has a cold, for example, or if the language is changed / falsified by ambient noise. Simpler speech recognition devices avoid this problem, but the security of corresponding identification systems is reduced. For example, unauthorized users can be identified as authorized if their language is not significantly different from the language of an authorized user. The use of Speech generating devices for simulating the speech of authorized users allow these identification systems to be "deceived".

Identification systems with devices for recognizing eye backgrounds and fingerprints are to be classified as particularly secure. The disadvantage here is that these identification systems, often mostly authorized users, do not allow the use of appropriate devices and devices if the data determined when capturing eye backgrounds and fingerprints are falsified. This can be caused, for example, by wearing (sun) glasses and contact lenses, (slight) finger injuries, increased tear formation and changing sweat formation on fingers.

Another disadvantage of the aforementioned identification systems is that a user has to take special actions to provide his user data identifying him / her before he / she can use devices and devices connected to the identification system. The special actions required for identification not only represent an additional effort, but also require that the users must be informed about which actions are to be carried out for identification.

Furthermore, the special actions required for identification can be observed by third parties. Therefore, unauthorized third parties can also receive information about which identification systems are used and which user data are required. For example, unauthorized third parties can gain knowledge of user codes and make fake duplicates of portable storage media and data transmitters.

OBJECT OF THE INVENTION Based on this, the object of the invention is to provide a solution which makes it possible to identify users in a simple and secure manner, ie to check their authorization in order to give them access (control, use, operation, ...) to enable appropriate facilities and devices. In particular, should the invention avoids the above-mentioned problems of known identification systems, for which purpose in particular a user-friendly and secure identification is to be provided.

Solution according to the invention

The present invention is based on the approach of providing data which identify a user and are used for the identification of the same in the context of an action or activity which users normally carry out using devices and devices which are used exclusively by authorized, i.e. correctly identified users should be used. In this way it is avoided that users have to carry out special additional actions for identification. Instead, the identification is carried out according to the invention in an action-integrated manner, i.e. the identification is carried out on the basis of actions which were originally not used for identification but for the operation of corresponding devices and devices. Furthermore, security is increased compared to known identification systems and methods, since the identification is carried out without actions that can be observed by third parties, using user-identifying user data which, in contrast to user-specific parameters (eg language, fingerprint, fundus of the eye), ensure more reliable identification ,

To this end, the present invention provides a system for identifying a user with a first touch-sensitive user interface and a control unit. The first touch-sensitive user interface is used to receive user data which identify a user and, when the first touch-sensitive user interface is touched, is transmitted by a user terminal that is electrically conductively connected to the user via the body of the user, whose body is electrically conductively connected to a user terminal is, the user data on the body of the user is transmitted via the user terminal t. The control unit has an input unit connected to the first touch-sensitive user interface for receiving the user data and a computer unit which checks the user data in order to determine whether the user is an authorized user. Furthermore, the control unit has an output unit that outputs a release signal in response to a successful check of the user data by the computer unit. The release signal can then be used to release downstream devices and devices operated in connection with the system.

In order to safeguard devices and devices connected to the system according to the invention to a greater extent against unauthorized use, the output unit generates a blocking signal when the computer unit fails to check the user data. The locking signal can be used, for example, to activate additional locking mechanisms or locking devices for the devices and devices used with the system that are not used in normal operation, even in a normally locked operating state.

The system according to the invention can also be used in connection with objects which have been proven to be worn on the body, e.g. Machines and

Systems to operate. These include protective devices, for example.

The end user device preferably comprises a body transmission device which is to be connected to the user in an electrically conductive manner in order to transmit the user data to the first touch-sensitive user interface. The user data can be stored in a memory of the user terminal and can be transmitted via the body transmission device using a control unit. Furthermore, the user terminal can have an interface for transmitting data, via which the user data and other data required for operating the user terminal are transmitted between the latter and external devices.

Furthermore, the control device can be assigned a storage unit which has the data required for checking the user data.

In order to inform the user of the result of the check of the user data, a first display device is connected to the control device, which acoustically and / or optically displays the respective check result to the user. For this purpose, the first display device can have illuminants (for example LEDs, light bulbs), alphanumeric and / or have graphic displays (for example LCD displays) and / or acoustic signal transmitters (for example loudspeakers, buzzers, piezoelectric transducers).

Alternatively or additionally, a radio unit connected to the control device can be used to transmit the results of checks of the user data to external devices.

The radio module can also be connected to the input unit of the control device in order to transmit suitable data for the control thereof from an external device.

In addition, the control device can have a data interface which, in addition or as an alternative to the radio module, is used to transmit data from an external device required for controlling the control device.

Furthermore, the system according to the invention can have a second touch-sensitive user interface for receiving the user data, which is connected to the control device for the transmission of the user data. Here too, when the second touch-sensitive user interface is touched, the user data are transmitted from the user terminal, which is connected to the user in an electrically conductive manner, via the user via the body of the user. In this case, the output unit serves to output a release test signal when the computer data has successfully checked the user data transmitted via the second touch-sensitive user interface.

In addition, the output unit can serve to output a lock test signal if the verification of this user data has failed. In this way, the functionality of the system according to the invention and in particular the control device can be checked without generating an enable signal which allows the user to use devices and devices connected to the system according to the invention. Preferably, the first display device is also used here to inform the user of the corresponding check result. In order to additionally check the transmission of data via the first touch-sensitive user interface to the control device, the system according to the invention has a connection arranged between the output unit and the input unit. The user data transmitted via the second touch-sensitive user interface are transmitted via the output unit and the connection to the input unit and checked by the computer unit.

A release device connected to the output unit serves to release devices and devices connected to the system according to the invention in response to the release signal, so that the user can use the devices and devices. In addition, in response to the lock signal, the release device can lock the devices and devices so that the user cannot use them.

The release device includes electromechanical transducers, electromagnetic actuators, piezoelectric transducers, piezoelectric actuators, devices for generating electrical, optical and / or acoustic signals and any combinations thereof. To release and block devices and devices connected to the system according to the invention, the release device cooperates mechanically with them and / or transmits signals to the devices and devices in order to release or block them depending on the output of the output unit.

In order to check the functionality of the release device, it can be operated as a function of the release test signal and / or the blocking test signal. Since neither the release test signal nor the lock test signal is intended to cause an actual release or lock of devices and devices connected to the system according to the invention, the release device is designed such that when it receives the release test signal and / or the lock test signal as when it receives the release signal and / or the Lock signal is operated, but does not actually release and / or lock the corresponding facilities and devices. Is playing an electromagnetic actuator used in ^¬ as releasing means, the electromagnetic actuator in response to the release test signal and / or the blocking test signal is operated only to the extent that, although its functionality to be checked can, but there is no release and / or blocking of devices and devices connected to the system according to the invention.

A second display device connected to the release device, which can be embodied comparable to the first display device, informs the user of the operation of the release device in response to signals output by the control unit. Depending on the application, it can be advantageous to design the first display device and the second display device as a unit or to use a display device that takes over the functions of the first and second display devices.

D

Furthermore, the system according to the invention can have a safety device which, in response to the blocking signal, provides additional protection against the use of devices and devices connected to the system according to the invention. Examples of the safety device are voltage-generating components,

5 which, in the event of a failed check of the user data, give the user an electric shock ("stun gun"), access devices (for example gratings, covers, doors) which close in response to a blocking signal, optical and / or acoustic monitoring components (for example video cameras , Microphones) and combinations thereof. O

The invention also provides a method of identifying a user in which user data identifying the user is received by touching a first touch-sensitive user interface by a user. The user data is transmitted to the user by an electrically connected

: 5 user terminal transmitted over the user's body when touched. The body of the user is connected to a user terminal in an electrically conductive manner, the user data being transmitted via the user terminal via the body of the user. The received user data is checked to identify the user, i.e. determine its authorization. If the user data is checked successfully,

IO th, which indicates an authorization of the user, a release signal is generated and output, which is suitable for the release of devices and devices that may only be used by authorized users. To transmit the user data, they are transmitted from a body transmission device of the user terminal, which is electrically conductively connected to the user, via the body (essentially via the skin) of the user to the first touch-sensitive user interface.

The transmission of the user data via the body transmission device is preferably carried out repetitively (e.g. continuously, at predetermined time intervals, at predetermined times).

In order to secure the devices and devices to be released only for authorized users against unauthorized use, a lock signal is generated if the verification of the user data has failed, i.e. the user is not an authorized user.

Furthermore, the method according to the invention can comprise steps for checking components which are used in the implementation of the method according to the invention. Here, the user data of the user terminal is received and checked by touching the user via a second touch-sensitive user interface. Upon successful verification of the received via the second touch-sensitive user interface

A release test signal is generated for user data. It is possible to transmit the user data received via the second touch-sensitive user interface to the first touch-sensitive user interface and then to check them. Comparable to the generation of the release test signal, a lock test signal can be generated if the check of the user data received via the second touch-sensitive user interface has failed.

In order to enable and / or prohibit the user from using appropriate devices and devices, these are enabled or disabled in response to the enable signal and / or the disable signal. A release device is preferably used here. Their functionality can be checked using the release test signal and / or the lock test signal, the release input direction is only activated as far as is necessary for a function check, but does not result in actual release and / or blocking of devices and devices to be used only by authorized users.

Brief description of the figures

In the following description of preferred embodiments of the invention, reference is made to the accompanying figures, in which:

1 is a schematic representation of a user terminal for use in the invention;

2 shows an embodiment of the system according to the invention for identifying a user,

3 shows a schematic representation of a further embodiment of the system according to the invention for identifying a user, and

Fig. 4 is a schematic representation of an embodiment of a release device for use in the invention.

Description of preferred embodiments

In order to carry out an action-integrated identification of a user, a device is required which, when the user acts, or more precisely when a suitable user interface is touched, provides data necessary for identifying the user, which identifies the user. For this purpose, an end user device, also referred to as a personal code repeater, is used which has the data identifying the user, hereinafter referred to as user data. In addition to data which directly identify a user (e.g. by a code), the user data can also include further user and / or application-specific data.

The end user device 100 shown in FIG. 1 is controlled by a microcontroller 102. User data supplied via an external data input 106 are stored in a memory 104, those via the data input 106 by new user data can be replaced. In order to permanently store data in the end user device 100, there is a programmable memory 108 which receives user data to be permanently stored (“to be burned in”) via an external programming input 110. Whether the user data can be deleted in the memory 104 or permanently stored in the programmable memory 108 depends on the application of the user terminal.

To transfer the user data in the memories 104 and / or 108, these are connected to a shift register 112. The use of the shift register 112 enables the user data to be transmitted repeatedly (e.g. continuously, at predetermined time intervals, at predetermined times, ...). In this way it is ensured that the user data are provided each time a corresponding user interface is touched. The user data output by the shift register 112 is modulated by a modulator 114. The user data modulated by the modulator 114 becomes one with the body of the user via an output 116

5 electrically conductively connected body transmission device 118, which the

Transmits user data about the body and in particular about the skin of the user.

Furthermore, the body transmission device 118 can also receive data and transmit it to the memories 104 and 108. In this way, the functions provided by the inputs 106 ^> .o and 110 can also be implemented via the body transmission device 118.

In an embodiment of the end user device 100, not shown, the memories 104 and 108 are not present. In this case, user data to be transmitted are

5 is entered via the external data input 108 directly into the shift register 112, which has the supplied user data until the energy supply to the end user device 100, for example implemented by a battery, is exhausted. This limit on the lifespan of the end user device 100 may well be desirable if, for example, the end user device ^" 100 only during a predetermined period of time

30 (e.g. the duration of a fixed-term employment relationship) should provide user data. Here, instead of a battery, a capacitor of a Gold Cup can be used, for example, in the form if the user device 100 is to be func ^¬ onsbereit only very short notice. In order to inform the user of the end user device 100 about the current state of the energy supply thereof, the end user device 100 can comprise an optical and / or acoustic energy supply display unit. Illuminants whose luminous intensity depends on the current state of the energy supply, graphic displays (for example LCD displays) which indicate the current state of the energy supply, for example in the form of a scale, and acoustic signal transmitters which warn the user by generating an acoustic warning signal can be used for this inform when the energy supply is running low.

In order to provide the user data required to identify the user to a system for identifying a user, which is described in more detail below, the user touches a touch-sensitive user interface, which is also described below. The user data is transmitted via the body transmission device 118 and the body of the user to the touch-sensitive user interface and is used to identify the user as follows.

A system 201 shown in FIG. 2 for identifying a user comprises a first touch-sensitive user interface 202 with an electrically conductive material forming a sensor 204, with a capacitor 206 and a trigger amplifier 208.

The sensor 204 shown as a single component in FIGS. 2 and 3 can also comprise a plurality of sensors or sensor components in order to also provide the touch-sensitive function of the first touch-sensitive user interface 202 in regions which are spaced apart from one another.

The trigger amplifier 208 is connected via an input 210 to an input unit 212 of a control device 214. The control device 214 has a computer unit 216 connected to the input unit 212, one assigned to the computer unit 216

Storage unit 218 and an output unit 220 connected to the computer unit 216. An enabling device 224 described in more detail below with reference to FIG. 4 is connected via an output 222. Display devices 228ι, ..., 228 _{n are} connected to the output unit 220 via outputs 226ι, ..., 226 _n . The display devices 228 can be, for example, illuminants (LEDs) that emit light of different wavelengths (for example red, green, yellow light). An alphanumeric and / or graphic display (LCD display) can also be used, for example, which performs the functions of the display devices 228ι, ..., 228 _n described below. In this case, depending on the display devices 228 used, only one output 226 may be required.

The control device 214 also has a data interface 230 and an output 232 and a connection 234 from the output 232 to the first touch-sensitive user interface 202.

To operate the system 201 to identify a user, the system 201 is activated by touching the sensor 204 by the user, for example with a finger. A touch ripple voltage in the range of 30 to 100 Hz is supplied to the trigger amplifier 208 via the capacitor 206. The trigger amplifier 208 generates a square-wave signal and feeds this to the input 210 of the control device 214. The control device 214 is preferably operated in a power-saving sleep mode until the square wave signal supplied by the trigger amplifier 208 gives the control device 214 a rectangularly amplified hum voltage and “wakes up”. In this way, an energy supply, not shown, of the system 201 is protected.

In order to touch user data via the body transmission device of the user end that is electrically conductively connected to the body of the user

To transfer device 100 to system 201, the surface of sensor 204 is electrically conductive. The user data is transmitted via the input 210 and the input unit to the computer unit 216 and is checked by this, wherein the computer unit 216 accesses the storage unit 218, to obtain for checking the user data geeigne ^¬ th data. The data / information required for operating the control device 214 and in particular the computer unit 216, for example in the form of a Software programs can be present in a volatile memory, not shown, which is preprogrammed when the system 201 is manufactured or is programmed via the data interface 230 before the system 201 is started up. This data / information can also be stored in the memory unit 218 in an erasable manner so that it can be updated via the data interface parts 230. Activation and deactivation of the system 201 can also be achieved in this way in order to effect a basic blocking or release of downstream devices and devices.

The data used to check the user data, some of which is stored in the storage unit 218, include the user data of one or more authorized users and, depending on the respective application of the system 201, further data, briefly release data, which are used to control the release device 224 as described below , In order to update this data, for example to add new user data to additional authorized users, to delete or change existing user data, and to add, change or delete release data, corresponding data from an external device (not shown) is sent via the data interfaces 230 and / or the user terminal 100 supplied. Thus, the user terminal 100 can also be used to change the own and / or external user data of the system 201 if the user terminal 100 e.g. is authorized to do so by the relevant release or control data.

When checking the user data received via the touch-sensitive user interface 202, the computer unit 216 compares this with the user data of the storage unit 218. This check is successfully completed when the received user data contains the stored user data for an authorized user or with user data of an authorized user of the stored user data match for multiple users. If there is no user data in the memory unit 218 that matches the received user data, the check by the computer unit 216 has failed.

If the received user data is successfully checked, the control device 214 generates an enable signal and, if the check fails, a blocking signal, which is sent to the output unit 220 and the outputs 222 and 226 Release device 224 and the display devices 228 are output. These signals can also include one or more periods for releases / blockings, time intervals to be observed between successive releases / blocks, a maximum number of releases / blocks and different types of release (eg different access authorizations). It is further provided that these signals are at least partially transmitted to the user terminal 100 via the output 232, the connection 234 and the first user interface 202. If, for example, several systems 201 are used, it is possible in this way to enable release by one of the systems 201 only if the user terminal 100 transmits data which indicate a release by another (previously used) of the systems 201 (which linked them) Using multiple systems 201 is also referred to as "daisy chaining").

Depending on the respective signal output by the output unit 220, the release device 224 releases or blocks devices or devices used in connection with the system 201 for use by an authorized user, so that an unauthorized user has no access to them. For this purpose, the release device 224 can generate suitable control signals and output them to the devices and devices and / or mechanically enable or block their use. The operation of the release device 224 is described in more detail below with reference to FIG. 4.

The release or blocking by the release device 224 can also take place depending on the release data. The release dates define additional conditions that must be met for an authorized user to use downstream facilities. Examples of this are the definition of one or more periods for releases, time intervals to be observed between successive releases, a maximum number of releases and different types of release (e.g. different access authorizations). The release data can also contain information about the use of further systems 201 and / or other identification or security systems ("daisy chaining").

In order to display the result of the check of the user data to the user, the display devices 228 are output as a function of the output unit 220. operated enable and disable signals. In the simplest case, the display devices 228 comprise light sources emitting light of different wavelengths, for example a red LED and a green LED. If a release signal is present and a device or device connected to the system 201 is released for use by the user, this is indicated to the user by the lighting up of one of the lamps, for example the green LED. If the check of the user data has failed and the use of the device or device is blocked by the release unit 224, the user recognizes this by the operation of the other illuminant, for example the red LED. In addition or optionally, the display devices 228 can also comprise acoustic signal generators which, depending on the release and blocking signals, generate tones of different intensities and frequencies or corresponding voice signals (for example: "release", "no valid authorization - no release"). In particular, when the system 201 is used in connection with portable devices and devices and consequently only a limited energy supply is available, the display devices 228 are also used to display the current state of the energy supply.

To check the functionality, the system 201 is operated in a test mode. In the test mode, the control device 214 generates a signal using the user data stored in the storage unit 218, which reproduces the user data stored for an authorized user. This signal, hereinafter referred to as the user data test signal, is fed via the output 232 of the output unit 220 via the connection 234 to the input 210 of the control device 214. In the embodiment shown in FIG. 2, the user data test signal is passed via the capacitor 206 and the trigger amplifier 208 to the input 210 in order to also use the

Test capacitor 206 and trigger amplifier 208. However, the user data test signal can also be transmitted directly via the connection 234 to the input 210 if, for example, the components 204, 206 and 208 of the touch-sensitive user interface 202 are integrated in the same construction.

The user data test signal representing user data is checked in the same way as user data provided via the touch-sensitive user interface 202. In contrast to the user data verification described above will be in response after the user data test signal has been checked, no release and blocking signals are generated in order to prevent the system 201 operated in the test mode from actually releasing or blocking devices and devices connected via the release device 224. A release test signal and a lock test signal are therefore generated, which are respectively output to the display devices 228 via the outputs 226. In response to the received release test signal or the received lock test signal, the result of the check of the user data test signal is reproduced by the display devices 228, wherein it is additionally indicated that the system 201 is operating in the test mode. To display the test mode, an additional light source, for example a yellow LED, can be used or the above-mentioned light sources (red, green LED) can be operated in a manner that differs from the operation when checking the user data provided via the touch-sensitive user interface 202 (eg flashing mode).

Since only user data of authorized users is used as the basis for checking the user data test signal, in this case a successful check indicates a faulty operating state of the system 201. Accordingly, an error in the system 201 can be concluded from a failed check.

The embodiment of the system for identifying a user shown in FIG. 3 comprises, in addition to components 204 to 234, which correspond to components 202 to 234 of system 201 shown in FIG. 2, further components. Thus, an output 236 is connected via a connection 238 to a second touch-sensitive user interface 242 connected to the control device 214 via an input 240. Like the first touch-sensitive user interface 202, the second touch-sensitive user interface 242 comprises a sensor 244 with an electrically conductive surface, a capacitor 246 for DC voltage and DC light suppression.

IJ cover and a trigger amplifier 248. The second touch-sensitive use l. Interface 242 is operated like the first user interface 202 to activate the system 201 and to provide user data by means of a touch by a user. Furthermore, a sensor device 252 is connected via an input 250 and a radio unit 256 is connected to the control device 214 via an input 254. The sensor device 252 has one or more sensors which, depending on the application of the system 201, can be optical (for example infrared-sensitive), acoustic (for example ultrasound-sensitive, speech-sensitive), temperature-sensitive, motion-sensitive, acceleration-sensitive sensors and proximity sensors.

The radio unit 256 is used to transmit data between the system 201 and external devices (not shown) in order to supply the data mentioned to the control device 214 when describing the user terminal 100 and the data interface 230. In addition, the radio unit 256 is connected to the output unit 220 via an output 258 in order to transmit signals generated by the control device 214 to the external devices, not shown.

Furthermore, the control device 214 is connected to a safety device 262 via an output 260. The security device 262 is used in addition to the blocking function of the release device 224 in order to provide additional protection against undesired use of devices and devices operated in connection with the system 201 by unauthorized users. For this purpose, the safety device 262 can, for example

(High-) voltage-generating components ("stun guns"), access-preventing devices (e.g. grilles, covers), optical and / or acoustic signal transmitters (e.g. signal lamps, sirens) or combinations thereof.

The release device 224 is additionally connected to second display devices 264ι, ..., 264 _n , which can be embodied in a manner comparable to the display devices 228, the display devices 228 and 264 used in the system 201 being able to be different. The display devices 264 serve to display the operating state and the functionality of the release device 224. In order to be able to differentiate and clearly assign the information provided by the display devices 228 and 264, the display devices 228 and 264 should include display components which, due to their type (e.g. LEDs of different colors, optical vs. acoustic components ...), their operating mode (e.g. continuous signals vs. intermittent sig- nale) and / or have their spatial arrangement safely differentiated and assigned. In this case, particular attention must be paid to the fact that the display devices 228 and 264, in contrast to the embodiment shown in FIG. 3, are integrated in the same construction.

In addition to the operating states and functions described with reference to FIG. 2, the additional components of the system 201 allow further operating states and functions. For example, data / information, for example in the form of a software program or user data, for the operation and control of the control device 214 can be transmitted via the radio unit 256, for example to a remotely located system 201 or one operated in connection with portable devices and devices To provide system 201 with such data / information. The use of the radio unit 256 thus enables, for example, a simple and quick change of user data in the storage unit 218 or a control of the system 201, in which the system 201, in particular the release device 224, is deactivated or activated in order to use those operated with the system 201 To release or block facilities and devices for every user.

Furthermore, radio unit 256 can be used to transmit output signals from controller 214 for processing by external devices (not shown). In this way, the operating states of the system 201 can be detected and evaluated in response to user data provided via the touch-sensitive user interfaces 202 and 242 and the functionality of the system 201 in the test mode. The operating and control data and information present in the system 201 and the user data stored in the storage unit 218 can also be checked in this way. Furthermore, it is provided that the control device 214 transmits user data provided via one of the touch-sensitive user interfaces 202 and 242 via the radio unit 256 in order, for example, to record a current user, 1 ^~ and the time / period and frequency of use by a current user. Accordingly, it is possible to operate the system 201 or in a desired manner to control (for example activate, as described above) when, for example, single or multiple users, the authorization will be temporarily / or withdrawn dig and completeness, ^¬. The withdrawal of authorizations is necessary, for example when facing ^¬ given periods of use and / or - frequencies for single or multiple users have been exceeded.

With the sensor device 252, environmental parameters for the system 201 (e.g. temperature, light, movement, vibration, moisture, noise, speech) and operating states of devices and devices can be detected, which can be released or blocked by the release device 224. Data / information recorded in this way can be recorded and stored for the pure data acquisition, but can also be used to operate the system 201. Depending on the application of the system 201, it may be necessary to generate the release signal only when not only valid user data identifying an authorized user are available, but other requirements are also met. Examples of such applications are pressure chambers which may only be opened by an authorized user when a predetermined pressure is present, temperature chambers which are only released when a predetermined inside and / or outside temperature is reached, processing units in which access by an authorized user as a result a release by the system 201 should not cause the supply of contaminated, moist ambient air, etc. The sensor device 252 can also be used when the system 201 is operating in the test mode, corresponding (desired or undesirable) environmental parameters and operating states being simulated.

The safety device 262, which is activated by the blocking signal or by the blocking test signal for test purposes, supplements the blocking functions of the release device 224, which directly ensures the blocking of downstream devices and devices and should be designed accordingly. In order to prevent or at least deter, in particular, violent, unauthorized use of devices and devices operated with the system 201, mechanical devices that prevent physical access by an unauthorized user can be used as security devices 262, devices that draw attention to the user Excite the surroundings of the system 201 and / or at remote locations, devices which deter an unauthorized user, for example by supplying high voltages (stun guns) or tear gas. The user touches so that an authorized user can check, before actually using devices and devices operated with the system 201, whether the system 201 is working properly, ie identifies the user as an authorized user, and whether his user terminal 100 is transmitting his user data correctly the sensor 244 of the second touch-sensitive user interface 242. As a result of this touch, the control device 214 is activated and supplied with the user data of the user terminal 100, as when the first touch-sensitive user interface 202 is touched. Thereafter, the control device 214 is operated in the test mode described above, in which case the user data test signal transmitted to the input unit 212 is obtained from the user data received via the second touch-sensitive user interface 242 and not from user data stored in the memory unit 218. The check of this user data test signal, the generation of the release test signal or the lock test signal and the display of the check result is carried out as described above. A successful check indicates that the system 201 and the user terminal 100 are working correctly, whereas a failure of the check suggests a malfunction of the system 201 and / or the user terminal 100.

The connection 238 can also be used to carry out a check of the second touch-sensitive user interface 242 in a comparable manner during data transmission via the first touch-sensitive user interface 201. Furthermore, it is provided to transmit data from a user terminal 100 via the two touch-sensitive user interfaces 202 and 242 to another user terminal 100 for programming and / or updating data. Authorization data required for this purpose are in the end user devices 100 concerned and in the control device 214 provided.

Furthermore, the test mode of the system 201 can also include a check of the release device 224. For this purpose, it is necessary for the release device 224 to respond to the release test signal and / or the lock test signal without causing an actual release or blocking of downstream devices and devices. A suitable embodiment of the release device is described in more detail below with reference to FIG. 4. The functionality of the release device 224 is displayed as a function of the release and lock test signals by means of the display devices 264.

4 schematically shows an embodiment of the release device 224, which can be activated in the test mode for functional testing without causing an actual release or blocking of downstream devices and devices. The enabling device 224 comprises an electromagnetic actuator 266 and a transistor 268 connected in series between a supply voltage U and a ground, the base connection of which is connected to the output 222 of the control device (not shown). In parallel to the electromagnetic actuator 266, a diode 270 is connected between the supply voltage U _b and the output of the transistor 268 connected to the electromagnetic actuator 266. If the transistor 268, which can also be an optocoupler, receives the release test signal or the blocking test signal via the output 222, the electromagnetic actuator 266 is supplied with energy in such a way that it activates (moves) in the sense of a release or blocking of downstream devices and devices. without actually releasing or blocking it. This can be achieved, for example, in that the release test signal and the lock test signal are shorter than the release signal and the lock signal, respectively, in order to time-limit the energy supply to the electromagnetic actuator 266 for functional testing in the test mode. After such an activation for test purposes, the electromagnetic actuator 266 is deactivated, ie it moves back into its rest position, whereby a current flow through the diode 270 is generated in the actuator 266 due to the induction effect. If an LED is used for the diode 270, the function check of the release device 224 can be displayed in a manner comparable to the display devices 264 (FIG. 3).

Claims

1. System for identifying a user, having a first touch-sensitive user interface (202) for receiving user data identifying a user when touched by the user, whose body is electrically conductively connected to a user terminal (100), the user terminal (100) transmits the user data via the body of the user, and a control device (214) with - an input unit (212) for receiving the user data, a computer unit (216) for checking the user data, and an output unit (220) for outputting an enable signal when successful Verification of user data.

2. System according to claim 1, with the output unit (220) for outputting a blocking signal in the event of a failed check of the user data.

3. System according to one of the preceding claims, in which the user terminal (100) has the user data and a body transmission device (118) which can be electrically conductively connected to the user for transmitting the user data.

4. System according to one of the preceding claims, with a second touch-sensitive user interface (242) for receiving when the user touches the user terminal (100), which is connected to the input unit (212), and the output unit (220) Output of a release test signal in response to a successful check of the user data received via the second touch-sensitive user interface (242).

5. System according to claim 4, with the output unit (220) for outputting a lock test signal in response to a failed check of the user data received via the second touch-sensitive user interface.

The system of claim 4 or 5, wherein the input unit (212) has a first input (210) connected to the first touch-sensitive user interface (202) and a second input (240) connected to the second touch-sensitive user interface (242), and the Output unit (220) for transmitting the user data received via the second touch-sensitive user interface (242) is connected to the first touch-sensitive user interface (202), the computer unit (216) being set up to receive the user data received from the second touch-sensitive user interface parts (242) to receive and check via the first input (210).

7. System according to one of the preceding claims with a release device (224) which can be used to release devices and devices connected to the system in response to the release signal.

8. System according to one of the preceding claims, with a release device (224) which can be used to block devices and devices connected to the system in response to the block signal.

9. System according to one of claims 4 to 8, wherein the release device (224) is set up to be activated in response to the release test signal while maintaining the operating state of devices and devices connected to the system in the sense of a release.

10. System according to one of claims 4 to 9, wherein the release device (224) is set up to be activated in response to the lock test signal while maintaining the operating state of devices and devices connected to the system in the sense of a lock.

11. System according to one of the preceding claims, with a display device (228, 264) for displaying results of the verification of the user data and / or for displaying the operating state of the system.

12. System according to one of the preceding claims, in which the release device (224) has an electromagnetic actuator (266) and the display device (228, 264) for displaying the operating state of the release device (224) is connected to the electromagnetic actuator (266) Diode (270).

13. System according to one of the preceding claims, with a radio unit (256) for receiving control data for the control device (214) and / or for sending data relating to the signals of the output unit (220) and / or the operating state of the system play.

14. System according to claim 13, having a central control which has a transmission device for transmitting the control data and / or receiving the data of the radio unit (256).

15. A method for identifying a user, comprising the following steps: providing a first touch-sensitive user interface (202) for receiving user data identifying a user,

Touching the first touch-sensitive user interface (202) by the user whose body is electrically conductively connected to a user terminal (100), the user data (100) transmitting the user data about the body of the user,

Transmitting the user data from a user terminal (100) which is electrically conductively connected to the user via the body of the user, - checking the user data to determine whether the user is an authorized user

Is user, and

Output a release signal when the user data has been successfully verified.

16. The method according to claim 15, in which a blocking signal is output in the event of a failed verification of the user data.

17. The method according to claim 15 or 16, in which the user data is transmitted from the user terminal (100) via a body transmission device (118) of the user terminal (100) that is electrically conductively connected to the user when the first touch-sensitive user interface (202) is touched.

18. The method according to any one of claims 13 to 17, with the following steps: providing a second touch-sensitive user interface (242) for receiving the user data,

Touching the second touch-sensitive user interface (242) by the user,

Transmission of the user data from the user terminal (100), which is electrically conductively connected to the user, via the body of the user,

Transferring the user data via the second touch-sensitive user interface (242), - checking the via the second touch-sensitive user interface

(242) received user data, and

Output of a release test signal in response to a successful check of the user data received via the second touch-sensitive user interface (242).

19. The method as claimed in claim 18, in which a lock test signal is output in response to a failed check of the user data received via the second touch-sensitive user interface (242).

20. The method according to claim 24 or 25, wherein the user data received via the second touch-sensitive user interface (242) is transmitted to the first touch-sensitive user interface (202) and forwarded by the latter for checking.

21. The method according to any one of claims 15 to 20, wherein the release device

(224) in the sense of a release of devices and devices connected to the release device in response to the release test signal while maintaining the loading Operating state of devices and devices connected to the release device is activated.

22. The method according to any one of claims 15 to 21, wherein the release device (224) is activated in the sense of blocking devices and devices connected to the release device in response to the lock test signal while maintaining the operating state of devices and devices connected to the release device.