WO2007042556A1

WO2007042556A1 - Control system with fingerprint sensor

Info

Publication number: WO2007042556A1
Application number: PCT/EP2006/067342
Authority: WO
Inventors: José DOS SANTOS AFONSO
Original assignee: Bio-Elec Engineering
Priority date: 2005-10-12
Filing date: 2006-10-12
Publication date: 2007-04-19
Also published as: FR2891926A3

Abstract

The invention concerns a finite-state control system and its user interface. The user interface comprises as a single input user interface a fingerprint sensor (6) capable of transmitting two types of specific control instructions. The sensor (6) requires a first time interval (Ta) to detect the presence of a finger (14) and a second time interval (Tb) to acquire the fingerprint, the first time interval (Ta) being shorter than the second time interval (Tb). The user interface is capable of transmitting two types of specific control instructions (8) depending on whether a finger (14) has pressed on the sensor (6) during the pressing time interval (Tp) longer than a third time interval (Tc), longer than the first and second time intervals (Ta, Tb); or during a pressing time interval (Tp) shorter than the third time interval (Tc), than the pressing time interval (Tp) is shorter or longer than the second time interval (Tb).

Description

CONTROL SYSTEM WITH FINGERPRINT SENSOR

Field of the invention

The invention relates to the user interface of a finite state control system. The control system includes a processing unit capable of managing the state of the system in the sense of a status of a state machine. The user interface includes a single input user interface having as a single active component a fingerprint sensor. The sensor requires a first duration (Ta) to detect the presence of a finger

(14) and a second duration (Tb) for acquiring a fingerprint, the first duration (Ta) being less than the second duration (Tb).

The invention also relates to a finite state control system comprising this type of user interface. The finite state control system or device can for example be used for the control of an automatic device, with authentication based on the biometric recognition or not, for an access control or locking control system, an anti vehicle flight, vehicle control (with parameterization and speed limitation for example) or a satellite tracking system for a fleet of vehicles.

State of the art

Such types of user interfaces are known in the state of the art and comprise, as a single input user interface, a biometric sensor. The sensor, the only active input component present, is limited to scanning and detecting a fingerprint. These user interfaces have very limited control capabilities. Indeed, it is limited to two states only, namely "authorized" or "unauthorized". This makes it possible to control only very basic systems for example of the type opening or not of a single door. They do not make it possible to control complex finite-state systems by themselves, that is to say comprising more than two finite states.

To control complex finite-state systems, it is necessary to use other input user interfaces. Thus, many control interfaces of the state of the art, although based on a biometric recognition must be programmed via an external device such as a remote control, a keyboard integrated or not in the system, a computer or a dedicated device. In case of the theft of the external device or external programming device, any person in possession of the device can potentially register, that is to say, register his fingerprint as an authorized fingerprint, eliminate the rights of someone or reset the authentication or command system. These devices do not have enough security.

US patent application US2002 / 0130841 for example discloses an input device of a computer comprising a keyboard and a screen. The input device has a sensor for scanning and identifying a fingerprint. The detection of an "authorized" fingerprint then makes it possible to either unblock the computer in general or at least some of the applications installed on it, or to unblock the use of the slider. When the authorization gives the control of the cursor, the sensor can act as a touchpad ("touchpad" in English) such as those found on the laptops controlling the cursor. Here, the touchpad function does not use fingerprint detection, fingerprint detection being only used to give access to the computer or not.

This type of device, although very useful for securely controlling access to a computer, does not allow one to control the computer. Indeed other input devices are needed (keyboard, etc.). Moreover, this type of device can be difficult to use as it is known that the use of touch pads is not easy for people with little dexterity.

Furthermore, US patent application US 2004/0132490 A1 discloses a mobile phone terminal having a screen and a keyboard. A biometric detector is disposed on the operation surface for scanning and identifying a fingerprint. The terminal is controlled in particular according to the orientation of the fingerprint. It is for example possible for a user to dial a telephone number by successive identification of his fingerprint in different orientations on the detector. In order to complete the dialing of the telephone number, the user leaves the finger representing the last digit on the detector longer than a given interval, which automatically triggers the effective dialing of the telephone number for establishing the call.

Although this terminal has undeniable advantages for easy control of a mobile phone including allowing intuitive navigation through a menu, it can be difficult to use for the general public. Indeed, put his finger for the identification of his fingerprint for a precisely shorter duration or precisely greater than a fixed period, respectively for example to dial a new number of a phone number or to complete the composition of a number can be tricky and lead to manipulation errors. In addition, each command requires the detection of the fingerprint, which requires intensive use of the processor of the device.

SUMMARY OF THE INVENTION An object of the invention is to provide a user interface for controlling on its own a complex finite state control system (i.e., having more than two finite states), which is easier to control. use for the general public and generally leading to fewer handling errors, flexible and offering high security.

In particular, the purpose of the user interface according to the invention is to be able to control a complex finite-state system (that is to say comprising more than two finite states) using a single input user interface. having as sole active component a biometric sensor. By allowing data entry only via a fingerprint, the user interface prevents any hacking of the system.

For this purpose, the user interface according to the invention is capable, in use mode, of transmitting two types of control instructions intended for the processing unit and which alone, according to the state of the system, the order of it. The type of control instructions is determined by the fact that a finger of the user remains resting on the sensor: either substantially immobile so as to allow the acquisition of a fingerprint during a duration of exposure (Tp ) longer than a third duration (Tc), greater than the first and second durations (Ta, Tb), the control instructions comprising data representing the fingerprint of the user; or either movably or immobile, during a duration of laying (Tp) shorter than the third duration (Tc), the duration of laying (Tp) is less than or greater than the second duration (Tb).

The user interface according to the invention alone makes it possible to control the system simply, in an easy and very secure manner, depending on the state of the system, and thanks to two different types of distinct command commands.

Unlike the prior art, detection and identification of the fingerprint are not necessary for each order. Similarly, the identification of the fingerprint is not used exclusively during the initialization mode, that is to say in the mode for giving access to the system control. Here, we use the features of the sensor during the use mode, that is to say in the mode allowing the same control of the system. Thanks to the sensor, it is thus possible, in use mode, to generate two types of instruction commands according to whether a finger has been immobile for a long time and whether a fingerprint is identified or not. By combining these two types of instructions with information about the state of the system, a large number of commands can be generated to fully control a finite state system.

The user interface according to the invention is particularly easy to use and entering with it two types of distinct commands determined is easier for the following reasons.

Both types of instruction commands can be easily and easily selected by the user, without the user making any mistakes. The user interface is particularly efficient and powerful. Indeed, a third duration, greater than both the first duration (Ta) necessary to detect the presence of a finger (14) and the second duration (Tb) to acquire a fingerprint is used for the discrimination of both distinct order types. This third duration is between 100 milliseconds and 1000 milliseconds, and is preferably between 300 milliseconds and 700 milliseconds. This third duration, which can for example be set at 500 milliseconds, is in a way the boundary for the interpretation of the choice of a user. Users with a sufficient intuitive perception of what constitutes a duration greater or less than the third duration have no difficulty in placing their finger for a period shorter or longer than the third duration. They have no problem generating one or the other type of command. On the other hand, users with a poorer perception of the duration or having a lesser digital or manual skill can, and this is a significant effect of the invention, content themselves with touching the sensor, instead of placing their finger on the sensor. That is, they can simply pass or slide their finger on the surface of the sensor to generate one of two distinct types of commands. In the case of a touch, the finger being mobile, regardless of the duration of the touch, there is no detection of the fingerprint, but just a detection of the presence of a finger. In this case, it is therefore always the command related to a duration less than the third duration that is generated. In order to generate the command linked to a duration greater than the third duration, it suffices to leave the finger motionless for a long time on the sensor, which generally presents no difficulty.

The user interface according to the invention is therefore easier to use for the general public and in particular for people with poor perception of time or less digital or manual skill, and the user interface therefore generally leads to less than manipulation errors. It should be noted, however, that the possibility of generating one of two types of control by touching the sensor does not exclude the possibility of generating the same type of control by placing the finger immobile in short-term, controlled manner. Two approaches are therefore possible to generate the type of commands related to the shorter duration, ie the pose for a duration controlled (less than the third duration), ie the touch (not leading an identification). The user interface is therefore flexible in that it is suitable for two different uses.

The user interface according to the invention offers a great security of access thanks to the need for a fingerprint identification for access to certain commands, a great wealth of potential distinct commands for intuitive navigation in a menu or a tree for example and finally a relative ease and flexibility of use. At least two distinct types of distinct commands may be generated depending on the duration of the finger placement. These types of commands can also be generated depending on whether the sensor is simply touched

(mobility of a finger on the sensor) or that a finger is placed on the sensor for a period longer than the third duration (extended immobility of a finger on the sensor).

According to a particular embodiment of the invention, the user interface is capable, in initialization mode, that is to say in the mode making it possible to give access to the control of the system, to transmit data intended for processing unit, representing a fingerprint detected by the sensor for authorization of use. Thus, the system is particularly secure in that the user must first go through an initialization mode for it to be authorized to use the system. The same sensor is used for initialization mode and usage mode. According to a particular embodiment of the invention, the user interface is capable of transmitting a determined control instruction for the processing unit comprising data dependent on the detected orientation of the orientation of the finger on the sensor.

The sensor is capable of transmitting a determined control instruction dependent on the fingerprint and its orientation on the sensor, that is to say not only dependent on the individual to which the finger belongs but also on the sensor. finger orientation when laying on the sensor. This further increases the possibilities of command instructions transmitted by the user interface. It is then possible to control systems having a large number of finite states.

Alternatively, the user interface is intended to be used with a cover, itself intended to be arranged between the finger and the sensor. In this way, when using the user interface, when placing a finger on the sensor and when the cover is disposed between the finger and the sensor, the user interface is capable of transmitting an instruction of control for the processing unit and dependent on the orientation, the position and / or the detected shape of the cover disposed between the finger and the sensor.

Here again, the user interface is able to transmit a large number of command commands, allowing the control of systems having a large number of finite states. This type of interface is particularly easy to use for people of low dexterity. Indeed, one and the same finger is used to control the system without it being necessary to change the orientation of the finger to generate a different action, which can be difficult and in any case lead to handling errors . It is also not necessary to record several fingerprints corresponding to several different positions or orientations.

According to a particular embodiment of the invention, the user interface comprises a single output user interface indicating only the state of the control system.

The user interface allows you to program the control system only with the fingerprint sensor, the only input device and with a system status indicator, the only output device. A compact and secure user interface is thus realized.

The indicator of the state of the system may for example be a series of controllable light sources, for example light-emitting diodes (LEDs), compact and reliable.

According to a particular embodiment, the output user interface comprises at least two controllable light sources arranged near the sensor for communicating the state of the system to a user. These light sources are preferably the only active output components disposed on the output user interface. Preferably, the sensor is substantially rectangular; and comprising four controllable light sources disposed around the sensor (6) near its four corners. This particular embodiment has the advantage of simplicity of visualization of the states of the system, in a particularly compact manner and not understandable by third parties who do not know the meaning of the codes. Two light sources make it possible to represent four distinct states, three light sources eight distinct states, and so on.

In another embodiment, the output user interface includes at least one speaker disposed near the sensor for communicating the state of the system to a user.

Different sounds indicate the state of the system. If the meaning of different sounds is only known by authorized people is also very secure while suitable for people with poor eyesight.

Advantageously, the user interface can be physically separated from the rest of the control system which makes it possible to avoid piracy of the control system.

The invention also relates to a state control system in the state sense of a finite state machine comprising a user interface according to the invention and a processing unit capable of managing the state of the system in the sense of a state. of a finite state machine, generating and transmitting out of the system actual control data. The processing unit is connected to the user interface. The system has a memory unit connected to the processing unit and capable of holding electrical data representing a state among possible states of the system and data representing authorized fingerprints. The control data is generated according to the state of the system and control instructions transmitted by the user interface.

The control system can generate control instructions only depending on the system status and control data provided by the user interface. Thus, the sensor as the only input user interface is sufficient to control the sending of control instructions out of the system. The control system can be programmed and the database or fingerprint list (with their authorization attributes) can be fulfilled only with the fingerprint sensor as the only input device and thanks to a user interface. single output, indicator of system status. The indicator of the state of the system may for example be a series of controllable light sources, for example light-emitting diodes (LEDs), compact and reliable. A secure control system is thus realized.

According to a particular mode, the memory unit is capable of recording user characteristics corresponding either to master fingers capable of programming the system or to user fingers not being able to program the system.

In order to enter authorized fingers or fingerprints, that is, fingers or fingerprints that have permission to generate commands via the user interface, a or several master fingers (ie one or more administrator fingers) or one or more master fingerprints are recorded during the initialization of the control system. These fingers or fingerprints may in turn register authorized fingers or fingerprints and thus program or parameterize the behavior of the control system vis-à-vis fingerprints.

A system of "master fingers" - "user fingers" aims to substantially guarantee the inviolability of the system programming by a formal recognition, via its biometric characteristics, of the person who wishes to program the system.

The invention also relates to a computer program or support or signal containing such a program, for the management of a user interface and / or a control system according to the invention.

Brief description of the figures

These and other aspects of the invention will be clarified in the detailed description of particular embodiments of the invention, with reference to the drawings of the figures, in which:

Fig. 1 shows a schematic view of a particular embodiment of the user interface according to the invention; Fig.2 shows a schematic view of another particular embodiment of the user interface according to the invention, having two controllable light sources; Fig. 3 to 5 shows three lines of time illustrating the operating principle of the user interface according to the invention;

Fig. 6 shows an example of a tree menu adapted to be traversed by a particular embodiment of the user interface according to the invention;

Fig. 7 schematically illustrates a method of recording fingers or fingerprints in a particular embodiment of the user interface according to the invention;

Fig. 8 schematically shows a sensor and controllable light sources of a particular embodiment of the user interface according to the invention; Fig. 9 schematically illustrates the components of a recognition and tracking system according to another aspect of the invention;

Fig. 10 schematically illustrates a method of recognition and tracking according to this other aspect of the invention;

Fig. 11 to 18 illustrate the use of a sensor according to another aspect of the invention in which a cover is used, the position of the cover generating the transmission out of the sensor of different control instructions; and

Fig. 19 to 25 illustrate tolerances or offsets permissible when using a sensor with cover and / or finger, as shown in Figs. 11 to 18.

The figures are not drawn to scale. Generally, similar elements are denoted by similar references in the figures. Detailed description of particular embodiments

The time lines of Figs. 3 to 5 illustrate the possibilities of controls based on the duration of a mobile or immobile pose of a finger 14 on the sensor 6 according to the invention. The dotted arrow drawn above the line in solid lines in each of the three figures represents the duration of the laying of a finger or the duration of the touch by a finger 14 of the sensor 6. The three arrows in solid lines represent the three durations Ta, Tb and Tc. A pose or a touch of a duration less than the first duration Ta are considered not to have occurred from the point of view of the sensor 6, since they are undetectable.

Six cases can occur: (I) a fitting of a finger 14 on the sensor 6 with a duration greater than the first duration Ta but less than the second duration Tb (see Fig. 3), (II) a pose of a finger 14 on the sensor 6 of a duration greater than the second duration Tb but less than the third duration Tc (see FIG 4), (III) a laying of a finger 14 on the sensor 6 of a duration greater than the third duration Tc (see Fig. 5), (IV) a touch by a finger 14 on the sensor 6 of a duration greater than the first duration Ta but less than the second duration Tb

(see Fig. 3), (V) a touch by a finger 14 on the sensor 6 with a duration greater than the second duration Tb but less than the third duration Tc (see Fig. 4), and

(VI) a touch by a finger 14 on the sensor 6 with a duration greater than the third duration Tc (see Fig. 5).

In the case (I), the presence of the finger 14 is detected but the fingerprint is not identified; in the case (II) and (III), the presence is detected and the fingerprint is identified; in cases (IV), (V) and (VI), the presence is detected but the imprint is not (scanning is not possible because of the touch, ie the mobility on point) . A first determined command corresponds to cases (I), (II), (IV), (V) and (VI) and a second determined command corresponds to case (III).

A FingerLoc ^® AFS 8600 RF-type fingerprint sensor 6, available from AuthenTec, 709 S. Harbor City Blvd., Melbourne, Florida 32901, United States of America, may for example be used. This sensor 6 reacts only to the presence of a finger whose skin is irrigated by the blood. It performs a large number of frames per second (up to 1500). If the sensor 6 in question is configured to send 1500 signals per second, Ta is then equal to 0.66 milliseconds. The number of successive signals transmitted by the sensor 6 itself to the processing unit can advantageously be counted so as to calculate the duration of laying or touching a finger 14 on the sensor 6, and so decide one action or the other following this time. The time required for a complete scan of a fingerprint is about 100 milliseconds, Tb is therefore about 100 milliseconds in this case.

The FingerLoc® AFS 8600 sensor measures 9216 points of the internal fingerprint (approximately 1 millimeter under the skin) on 1 square centimeter of sensory surface. Then it analyzes these 9216 points to extract between 12 and 20 which have special characteristics called "minutiae" and each having 4 parameters. These characteristic points constitute a "signature" or "Template" digital footprint. Each finger 14 presented is then analyzed and compared to the "signatures" in memories. When a "template" in memory corresponds to that of the presented finger, the processor then gives the order of the action corresponding to this "template".

Fig. 1 schematically illustrates a particular embodiment of a user interface according to the invention in the form of a control box 2. The control box 2 comprises a fingerprint sensor 6 on a control surface 4, the housing 2 being capable of transmitting a control signal representing a control command 8.

The control box 2 according to this particular embodiment is part of a more general control system comprising, in addition to a fingerprint sensor 6, a memory unit (not shown) capable of containing at least electrical data representing a state among possible states of the system, and data acquisition units from the sensor 6, processing thereof and control for the generation of the actual control (opening or locking a door for example).

The memory unit (not shown) makes it possible to store a state in the sense of a state of a finite state machine, and also allows the storage of the data relating to the authorized fingerprints.

The acquisition unit (not shown) consists of electromagnetic or electronic means for acquiring data from the sensor 6 and transmitting a signal acquired (not shown), electrical, electromagnetic or optical for example, based on the data acquired.

The processing unit (not shown) is constituted by electromagnetic or electronic means for receiving the acquired signal, for consulting and / or modifying the data of the memory unit as a function of the acquired signal, and thus modifying for example the state of the system, for transmitting a signal, electrical, electromagnetic or optical, for example, depending on the data and representing the state of the system, and for transmitting a signal representing the command.

The control unit (not shown) consists of electromagnetic or electronic means for receiving the signal representing the command, and is capable of transmitting a physical command as a function of the signal.

The memory units, acquisition, processing and control may or may not all be present in the housing 2 itself. In a particular embodiment of the control box 2 according to the invention and the more global control system including the box 2 according to the invention, the processing, memory and control units are separated from the sensor 6. In this particular embodiment, a separate housing, hidden or arranged in a difficult to access location includes processing units (or management), memory and control. This technology can be called "intelligence deported".

In this particular embodiment and with the use of an AFS 8600 sensor for example, the sensor 6 itself can have dimensions of 20 x 20 x 1.5 millimeters and the housing 2 itself about 28 x 28 x 6 millimeters. The separate housing including processing, memory and control units may have dimensions of 84 x 55 x 24 millimeters for example. These examples underline the compact and potentially discrete nature of the two cases.

Physically separate the "identification or acquisition area" (i.e. biometric sensor 6 and acquisition unit) from the "control area" (i.e. the processing units , memory and command) prevents a person can access the control part by tearing the user interface and can bypass the identification or authentication, or can replace the box with another configured to its own. advantage.

Fig. 2 shows a schematic view of another particular embodiment of the housing 2 according to the invention, having two controllable light sources 12 and controlled by a central unit 10. The light sources 12, for example light-emitting diodes, act as a peripheral device. exit. Each state of the system is represented on the diodes by a binary combination, allowing the user to know at any time where he is in a menu, for example a system programming menu or an access menu or command. The light sources 12 may be replaced by other types of sound device (such as a vibrator or buzzer for example) or tactile for example. Fig. 6 shows an example of a tree menu that can be traversed by a particular embodiment of the control box 2 according to the invention.

During initialization, it is necessary to record via the sensor 6 at least one master finger, which is then considered as a higher level administrator. The possibility is then given to the "master" to program and manage the control system, the list of fingerprints and authorized users, etc.

The user having the programming rights begins by authenticating on the sensor 6. Once recognized, the control system authorizes it to enter the programming mode. The output device indicates in which part of the tree type menu "is" the user via a code defined by the programmer (for example a binary code displayed on light-emitting diodes). Each new acquisition of an image via the input device (with use and new verification of the authentication data - for greater security - or not - for the speed of processing), that is to say for example the fingerprint sensor, allows to enter the local submenu and / or validate. To switch from one option to the other several ways are possible according to the type of technology used (touch, or pose of a duration less than the third duration as explained above, or even change of finger 16 in the case of a fingerprint sensor 2, hand change for recognition of the shape of the hands, etc.). Fig. 7 schematically illustrates a method of recording fingers 14 or fingerprints according to a particular embodiment of the invention. This method allows the programming of the control system. Once the master finger (or "administrator" finger, no matter what name is given) saved, the system goes to a given position "A" in the menu. If a short fingerprint is detected (if the duration of the identification is less than the third duration as explained above) (case (I) or (II)) or if a touch is detected (generating a presence detection, but no identification) (case (IV), (V) or (VI)), the state of the control system, i.e. in this case the situation in the menu, goes into position "A + 1", that is to say in a next position of the same level in the tree. If, on the other hand, an immobile pose or identification of a duration longer than the third duration is detected (case (III)), the state of the control system, that is to say in this case the situation in the menu, goes into a submenu if however such a submenu exists. If this is the case, the same navigation scheme as described above is generated again. If there is no submenu, a case (III) then triggers the validation of the chosen option (a particular action is performed), an optional visual or audible validation signal is issued and the method ends. .

This is just an example of a programming menu that is traversed by a master finger. Similar menus may exist for conventional control by a user or intermediate finger. The control box 2 and the control system of which it is part have more robust security features than the housings controllers and control systems using a password, a card or any other non-biometric identification means.

For a "master" finger, once recognized, the processor can enter the programming menu and allows the "owner" of the finger 14 to set the program or use some of its functions such as the registration of a new user, the recording of additional "master" fingers, the deletion of a user, the setting of the desired level of security, the acquisition of information on the state of the system (used memory, version, ...) , etc.

The position in the menu is given to the user through a set of controllable light sources 12. In a particular embodiment of the user interface or housing 2 according to the invention, the sensor 6 is rectangular or square and is adjacent to each corner of a light emitting diode 12 (LED). The user who knows the exit code is able to find his way through the ignition sequence of light emitting diodes 12 (LED). The simplest method is to code in "binary" on the 4 light-emitting diodes 12 (LED), which allows to have 16 possibilities:

Fig. 8 schematically shows a sensor 6 having four controllable light sources 12 of a particular embodiment of the user interface or housing 2 according to the invention. At the top left is shown the basic diagram of the sensor 6 surrounded by four diodes 12, the other three sensors representing with a given sequence (a black circle representing a lit diode) as an example. This type of housing 2 comprising sensor 6 and diodes 12 is robust, compact and discrete. Diodes of different colors can also be used to enrich the interface.

In one of its aspects, the invention also relates to a system for controlling access and parameterization of a vehicle comprising a fingerprint sensor

6, and allowing the effective fight against the car-j acking, whether the prevention of theft

(anti-theft) or flight processing (post-flight). In particular, the system is a system for recognizing and tracking users via biometric systems and transmitting information over networks (satellite, mobile phone or similar) for the management of authorization of use, monitoring vehicles and means (construction machines, trailers, ...) and user tracing.

Currently, the tracking devices of vehicles make it possible to know exactly the position of a vehicle. There are also systems allowing to act possibly on the controls of the car

(fuel supply, power supply, ....).

These techniques are mainly used by companies with large fleets of vehicles. Other systems, which can be combined with the one mentioned above, make it possible to "recognize" a user through the use of codes, passwords, badges, etc. Thanks to controllers and central management, we try to find out who has gone where, without really getting there and without really controlling everything that's going on.

The identification systems used (badges, passwords, codes, etc.) do not make it possible to reliably ascertain the identity of the person who presents himself. Indeed these systems control what the person who comes "owns" (badge), or "knows" (code, password), but not who she is physically. Thus, another person having had access to an identifier, can "deceive" these controllers, and pretend to be a "rightful".

The invention consists in authenticating and ensuring the "real" identity of the person, by using one or more "biometric" systems based on the recognition of physical characters intrinsic to each person (surface fingerprints and / or revealed by blood flow (or capacitive effect) or equivalent technology, shape of the hand, frequencies and modulation of the voice, ...), in order to control the good use of means (vehicles, construction machinery, ...), in terms of space and time (use in a sector and defined period of time).

The system requires identification of the user in order to be able to use a given vehicle or medium, and allows to know remotely the identity of the user, his position and the time of the action. To this end, the system according to the invention couples biometric sensors with tracking systems

(tracking) satellite (or network) and fleet management or equivalent by network and / or satellite.

The mandatory identification before each start of the vehicle (or other means), ensures that the user is authorized to use it, and send via network (Internet, GSM, ...) a signal to the central monitoring station indicating the identifiers of the vehicle and the user, as well as its geographical position, the time of the event, and possibly the actions started. In order to constantly ensure the proper use of the means, the control panel can also request identification at a pre-defined frequency, in order to avoid starting by an "authorized", and manipulation by an "unauthorized" third party.

From a distance, the control panel can also send data via the network: new users, changes to schedules or authorized locations, etc. The objective of the invention is to ensure the proper use of the means (of a company, community, ...) following a pre-established and known charter of both the central and authorized users. Managed biometric files do not physically reproduce captured features, thus ensuring respect for individual freedoms. Only certain points are known, not the total footprint.

The invention can be extended to any remote management system of predefined users identified by biometric methods: fingerprints, morphology of hands, recognition of voice, face, iris, etc. It can be applied to any field requiring instant knowledge of a vehicle user or medium: management of a fleet of company vehicles, management of a set of industrial vehicles, or specific application of the maritime, aeronautical, etc. .

Fig. 9 schematically illustrates the components of a recognition and tracking system according to the particular embodiment described above.

Communications between the processing unit of the control system comprising the sensor 6, the tracking unit and the monitoring unit can be done by several communication networks or protocols: ethernet, internet, satellite, GSM, GPS, USB, RS232 or others. The main information that is sent to the central are: the fingerprint digital signature file presented, the geographical position, the time, the date, etc. The data returned by the central allow the means (vehicle, construction equipment, ...) to start operating under the defined conditions.

The history of the data and information exchanged is recorded, for a time defined specifically for each application. At an interval "t", also configurable, the central interrogates the housing and updates the data (possibly with the request for a new identification) by returning the commands corresponding to the identified person, the geographical position, the time, the date , etc. in order to operate the vehicle or medium in normal conditions, restrict the operation according to the identified person (special functions, speed limitation, ...), etc.

Fig. 10 schematically illustrates a method of recognition and tracking according to the aspect of the invention discussed above. Once a finger 14 detected, if it is recognized, an authorization request is sent to the central. The request includes the signature of fingerprint (or more generally the biometric signature), the geographical position, etc. The control panel verifies what actions can be taken by the user corresponding to the received impression, at given time T. If the required actions are not accepted, a refusal signal is sent, otherwise a signal or signals allowing limited actions or not is sent. In addition, a communication at regular intervals is established between the vehicle housing (or other means) and the central to allow the recording of the history of actions of the user and the vehicle over time.

In a variant of the invention, the fingerprint sensor 6 is replaced by a sensor of the characteristics of the hand, a sensor of the characteristics of the iris, or a sensor of the characteristics of a face. In the case of the detection of the characteristics of the hand, the description above applies mutatis mutandis. In the case of the detection of the characteristics of the iris, the left eye and the right eye can be used in turn to generate different control commands determined and navigate a menu for example. The duration of exposure of the iris The detector can also be used to generate different determined control commands.

By command or control instruction, it is necessary to understand any signal representing a command instruction for the control of an automatic device. By control box is meant any control, registration, authentication, management, programming or control interface via a biometric recognition system, even as part of a larger control surface.

Those skilled in the art will understand that any type of fingerprint sensor 6 can be used in the user interface according to the invention, insofar as the detection time of the presence of a finger (duration Ta) is longer. short than the detection time of a fingerprint (duration Tb). The use of a "no-trace" subcutaneous impression sensor significantly increases the level of safety compared to other technologies used by surface impression sensors, since it is impossible to "deceive" the sensor 6 with false fingers 14.

The invention also relates to a computer program or support or signal containing such a program, as claimed.

In a variant of the invention, the fingerprint sensor 6 is not capable of transmitting a determined control instruction 8 dependent on the detected orientation of a finger 14 on the sensor 6, but has the other characteristics of the invention. In this variant, the sensor 6 is totally insensitive to the orientation of the fingerprint.

According to another aspect of the user interface or control unit 2 according to the invention, the fingerprint sensor 6 is intended to be used with a cover 16, itself intended to be disposed between the finger 14 and the sensor 6 when using the housing 2. The housing 2 according to this aspect is capable of transmitting a determined control command 8 dependent on the orientation, the position and / or the detected shape of the cover 16 disposed between the finger 14 and the sensor 6, or, in other words, dependent on the shape of the "visible" part of the surface of the sensor 6, visible part allowing the contact between the finger 14 and the sensor 6.

The invention also relates to a method of using the housing 2 described above, and whose sensor 6 is illustrated in FIG. 11 to 18, with a cache 16 for the transmission of determined commands out of the housing 2. The invention also relates to the use of a cache 16 for the implementation of the method.

The cover 16 may be a sheet of paper, cardboard, plastic, a wooden wafer, a credit card, an identity card, a bank note, a coin or any other similar object.

In a particular embodiment, the cover 16 is an object comprising an edge, and a substantially flat area in the vicinity of this edge. The thickness of the object at the edge is small enough to allow, when the object is arranged to conceal or hide partially the surface of the sensor 6, a finger 14 placed both on the area and the sensor 6 (that is to say straddling the edge) is in contact with the surface of the sensor 6.

Different orientations of the cover 16 with respect to the sensor 6 are illustrated in FIGS. 12 to 18. FIG. 11 illustrates the sensor 6 without cache. Place the cover 16 on the left half (Fig. 12), on the right half (Fig. 13), on the upper half (Fig. 14), on the lower half (not shown), on the upper left corner (Fig. Fig. 15), on the centered upper triangular quarter (Fig. 16), on the upper left triangular half (Fig. 17), on the upper left triangular eighth (Fig. 18) or on any other part of the sensor surface 6 generates a determined command instruction 8.

The sensor 6 and the data processing means integrated therewith may be programmed and / or configured in such a way as to allow recognition and discrimination of any discrete arrangements of the cache 16 with respect to the sensor 6. At each distinct disposition may be then correspond to a particular control command 8. In particular, at each rotation of

90 degrees of a given arrangement of the cover 16 with respect to the sensor 6 illustrated in FIG. 11 (for example from the arrangement shown in Fig. 12 to that illustrated in

Fig. 14, or that illustrated in FIG. 14 to that illustrated in FIG. 13, etc.), we obtain a new geometric, valid and "discriminant" layout. Sensors 6 having a non-square shape may also be used. In a particular embodiment of the control box 2 according to the invention, a sensor 6 of hexagonal shape is used (not shown). In this case, at each rotation of 60 degrees of a given disposition of the cover 16 with respect to the sensor 6, a new geometric disposition, potentially "discriminating", is obtained, which can correspond to a determined command instruction 8.

The control instruction 8 may allow the control of an access system, for example the opening of a certain door (for example Fig. 12), the opening of another door (for example Fig. 13 ), the activation of an alarm (for example Fig. 14) or its deactivation (for example lower half). The command instruction 8 may further allow the programming of a system, for example to generate the following actions: register a fingerprint of a new user, delete a user, reset the system, and other similar actions.

In a particular embodiment, one and the same finger 14 is used for controlling (or programming) a system (access for example), without it being necessary to change the orientation of the finger 14 to generate a action different, and without it being necessary either to record a finger 14 in several different positions or orientations or with a cover 16 disposed in several different positions or orientations. A single recording of the finger 14 on the sensor 6 without cover 16 (FIG 11) is sufficient. The registration of a finger 14 and the use of the housing 2 are easy.

The sensor 6 is programmed to be able to compare, by a processing of digital data forming part of the general knowledge of the skilled person, the complete fingerprint of an individual and its fingerprint partially hidden. Depending on the portion of the visible imprint and the portion of the masked imprint, the sensor is programmed to engage or generate a particular, determined or command function. It is the user who positions and orients the cover 16 before placing his finger 14 on the surface of the sensor 6 partially hidden by the cover 16.

RF fingerprint sensor 6

FingerLoc® AFS 8600, as described above, can for example be used.

According to an embodiment of the housing 2 and the method according to the invention, the cover 16 may also consist of a tongue intended to be placed for example in the middle of the sensor 6 over its entire height, according to one or the other of its diagonals, or over its entire width, so as to respectively generate four different instructions depending on the orientation of the tongue placed on the sensor 6, not to mention the instruction corresponding to the fitting of the finger 14 on the sensor 6 without cache 16.

According to a particular embodiment of the housing 2, the method and the use according to the invention, several caches 16 of different shape are used to generate, when laying the finger 14 on the sensor 6, different instructions. Can be used for example: a tab terminated by a disk for a given instruction, a tab terminated by a square for another determined instruction, a tab terminated by a triangle for a determined third instruction, and so on. This makes it possible to generate as many instructions as there are different forms of cache 16.

In a particular embodiment, the sensor 6 according to the invention is capable of transmitting out of the housing 2 a determined control command 8 dependent both on the detected orientation of the cover 16 disposed between the finger 14 and the sensor 6, the detected orientation of a finger 14 on the sensor 6, and

- Since a finger 14 remains resting on the sensor 6 - substantially immobile, during a laying time Tp longer than a third duration Tc, greater than the first and second times Ta, Tb; or

in a mobile or stationary manner, during a laying time Tp shorter than the third duration Tc, that the laying duration Tp is less than or greater than the second duration Tb.

In a particular embodiment, the sensor 6 is able to transmit out of the housing 2 a determined control command 8 dependent on two of the three factors mentioned in the previous paragraph. The housing 2 and the method using the cover 16 can be used with any type of biometric sensor 6, such as a hand-shaped sensor, and for any type of application, such as an anti-theft system. car-jacking, an access control system or a locking system.

A finger 14 placed a first time on the sensor 6 is never placed a second time exactly in the same position and orientation relative to the sensor 6. Similarly, a cover 16 placed a first time on the sensor 6 is never disposed a second time exactly in the same position and orientation relative to the sensor 6. Two discriminant poses of a finger 14, like two discriminating provisions of the cover 16, must be sufficiently distinct in terms of orientation and position so that a user can easily distinguish them.

A translational vector of separation (or displacement in translation) and a rotational angle of separation (or shift in rotation) must be taken into account. In addition, a translational tolerance and a rotational tolerance are taken into account in order to consider two poses of a finger 14, or two provisions of the cover 16, as identical from the point of view of the corresponding instruction 8.

The translational vector of separation is the minimum distance separating two families of poses of a finger 14 (or cache 16) so that they remain considered as two distinct poses from the point of view of the corresponding instruction 8. It has been observed that 'a vector 5 to 10 millimeters of translational translation, for example 8 millimeters, around a reference pose is well suited.

The rotational angle of separation is the minimum angle separating two families of poses of a finger 14 (or cover 16) so that they remain considered as two distinct poses from the point of view of the corresponding instruction 8. It has been observed that a rotational angle of separation of 20 to 45 degrees, for example 29 degrees is well suited.

The translational tolerance is the maximum distance from which a fitting of a finger 14 (or cover 16) can be separated from the reference pose so that the two poses remain considered as the same "pose" from the point of view of the corresponding instruction 8. It has been observed that a maximum translational tolerance of 2 to 8 millimeters, or more specifically 2 to 4 millimeters, for example 3 millimeters, around a reference pose is well suited.

The rotational tolerance is the maximum angle that a pose of a finger 14 (or cover 16), or more precisely a determined axis of said finger 14 (or said cover 16), can do with respect to the reference pose (c that is to say, with respect to the given axis) being considered as the same pose from the point of view of the corresponding instruction 8. It has been observed that a maximum rotational tolerance of 8 to 20 degrees, for example 15 degrees, around a reference pose is fine.

In certain particular embodiments, the tolerances can be parameterized in terms of distance and angle. In others, they are configurable only as a percentage of similarity between the imprint presented and those in memory, 100 percent corresponding to the same imprint in exactly the same position, 0 percent corresponding to any imprint in any position. A similarity percentage of 90 to 98 percent, for example 95 percent, of the position of 12 to 20 characteristic points of the fingerprint, selected from 9000 acquired points, is used in a particular embodiment.

Fig. 19 illustrates the sensor 6 without cache 16 or finger 14. FIG. 20 illustrates a reference position of a cover 16 placed on the sensor 6, corresponding to a first function or determined command 8. FIG. 21 illustrates a tolerated offset of the cover 16 on the sensor 6 with respect to the reference position, which may also cause the first determined function or control 8. FIG. 22 illustrates an excessive shift of the cover 16 on the sensor 6 relative to the reference position, may cause either a second function or determined command 8, or no function or command.

Fig. 23 illustrates a finger 14 placed on the sensor 6. FIG. 24 illustrates the translation offset allowed for the same function. Fig. The permissible rotational offset for the same function.

Claims

A user interface (2) of a finite state control system comprising a processing unit capable of managing the state of the system in the sense of a state of a finite state machine, the user interface comprising: a single input user interface having, as the only active component, a fingerprint sensor (6), the sensor (6) requiring a first duration (Ta) to detect the presence of a finger

(14) and a second duration (Tb) for acquiring the fingerprint, the first duration (Ta) being less than the second duration (Tb);

characterized in that

the user interface (6) is capable, in use mode, of transmitting two types of control instructions for the processing unit which, by themselves, depend on the state of the system, the control thereof, the type of control instructions (8) being determined by the fact that a finger (14) of the user remains resting on the sensor (6): either substantially immobile so as to allow the acquisition of a fingerprint, during a duration of laying (Tp) longer than a third duration (Tc), greater than the first and second durations (Ta, Tb), the control instructions comprising data representing the fingerprint of the user ; or - either movably or immobile, during a duration of laying (Tp) shorter than the third duration (Tc), that the duration of laying (Tp) is less than or greater than the second duration (Tb).

2. The user interface (2) according to claim 1, wherein the user interface (2) is capable, in initialization mode, of transmitting data, intended for the processing unit, representing a fingerprint detected by the sensor. view of an authorization of use.

User interface (2) according to one of the preceding claims, wherein the user interface is capable of transmitting to the processing unit a determined control instruction including data dependent on the detected orientation of the orientation of the user. finger on the sensor.

4. User interface (2) according to one of the preceding claims, wherein the user interface (2) is intended to be used with a cache

(16), itself intended to be disposed between the finger (14) and the sensor (6), so that when using the user interface (2), when laying a finger

(14) on the sensor (6) and when the cover (16) is disposed between the finger (14) and the sensor (6), the user interface (2) is capable of transmitting a control command (8) for to the processing unit (2) and dependent on the orientation, the position and / or the detected shape of the cover (16) disposed between the finger (14) and the sensor (6).

User interface (2) according to one of the preceding claims, wherein it comprises a single output user interface indicating only the state of the control system.

User interface (2) according to the claim

5, wherein the output user interface comprises at least two controllable light sources (12) disposed near the sensor (2) for communicating the state of the system to a user.

7. User interface (2) according to the claim

6, wherein the sensor (6) is substantially rectangular; and comprising four controllable light sources (12) disposed around the sensor (6) near its four corners.

The user interface (2) according to any one of claims 6 to 7, wherein the controllable light sources (12) are light emitting diodes.

The user interface (2) according to any one of claims 6 to 8, wherein the at least two controllable light sources (12) are the only active output components disposed on the output user interface.

The user interface (2) according to any one of claims 6 to 8, wherein the output user interface comprises at least one speaker disposed near the sensor (2) for communicating the state of the system (2). ) to a user.

User interface (2) according to any one of the preceding claims, wherein the third duration (Tc) is between 100 milliseconds and 1000 milliseconds, and is preferably between 300 milliseconds and 700 milliseconds.

User interface (2) according to any one of the preceding claims, wherein the user interface is separated from the remainder of the control system.

A state control system in the state sense of a finite state machine comprising - a user interface according to any one of claims 1 to 12; a processing unit capable of managing the state of the system in the sense of a state of a finite state machine, generating and transmitting out of the system actual control data, the processing unit being connected to the user interface ; and a memory unit connected to the processing unit and capable of holding electrical data representing a state among possible states of the system and data representing authorized fingerprints,

characterized in that the control data is generated according to the state of the system and control instructions transmitted by the user interface.

14. The control system according to claim 13 wherein the memory unit is capable of recording corresponding user characteristics either to master fingers able to program the system, or to user fingers not being able to program. the system .

15. Computer program or support or signal containing such a program, for the management of a user interface according to any one of claims 1 to

12 and / or for the management of a control system according to one of claims 13 to 14.