Back to results
US 12,602,962 B2Granted
Contactless optical internet of things user identification device and system
AssigneeU.S. Bank National Association
InventorsJustin P Yunke, Adam J. Achterhoff
Life of this patent
Estimating the term…
Abstract
A contactless optical device is useable to identify a user, and allows an enterprise to authorize access by that user to enterprise facilities and/or cause presentation of user information of the user. The device is specifically adapted for secure usage within an enterprise network via a wired network interface. The device avoids storage of user-identifying data in persistent memory, to avoid compromise of user data if the device were lost or stolen, or otherwise removed from the enterprise network.
Claims19
A contactless optical user identification device comprising:
- an optical code capture device comprising an optical image capture device and an optical code translation circuit, the optical code translation circuit configured to recognize and translate a machine-readable optical label captured in an image by the optical image capture device into a binary code;
- a wired network access interface communicatively connected to a control circuit and providing both a wired network access connection and power connection for the contactless optical user identification device;
- a control circuit communicatively connected to the optical code capture device, the control circuit comprising:
- one or more processors;
- and
- a memory comprising:
- a non-volatile memory storing a general purpose operating environment and bootstrap instructions, the bootstrap instructions, when executed by the one or more processors, initialize the device, wherein to initialize the device includes to:
- establish communication with a bootstrap server identified in the bootstrap instructions;
- transmit an identifier of the contactless optical user identification device identified in the bootstrap instructions to the bootstrap server;
- and
- receive, from the bootstrap server, special-purpose operating instructions, wherein the bootstrap server validates the identifier and selects the special-purpose operating instructions based at least in part on a role assigned to the contactless optical user identification device, wherein the role is determined, based at least in part, on the identifier;
- a volatile memory configured to receive the special-purpose operating instructions, the special-purpose operating instructions causing the device to:
- in response to capture of an image of the machine-readable optical label presented by a user and translation of the machine-readable optical label into a binary code:
- securely transmit the translated binary code to an identification server;
- and
- receive, in response to the translated binary code, an indication of a result of identification of the user from the identification server;
- wherein the memory is configured such that, when power is not supplied to the memory, the bootstrap instructions persist in the memory and the special-purpose operating instructions do not persist in the memory.
14 more elements
A method comprising:
- in response to execution of a bootstrap instruction from nonvolatile memory, initializing a contactless optical user identification device, wherein the initializing includes:
- establishing communication with a bootstrap server identified by the bootstrap instructions;
- transmitting a unique identifier of the contactless optical user identification device to the bootstrap server;
- downloading special-purpose operating instructions from the bootstrap server identified by the bootstrap instruction into volatile memory of the contactless optical user identification device, the bootstrap server being positioned within an enterprise network, the bootstrap server providing the special-purpose operating instructions after validating the unique identifier of the contactless optical user identification device and selecting the special-purpose operating instructions based at least in part on a role assigned to the contactless optical user identification device, wherein the role is determined, based at least in part, on the unique identifier;
- in response to execution of the special-purpose operating instructions:
- capturing, at the contactless optical user identification device, an image of a machine-readable optical label presented by a user;
- translating the image of the machine-readable optical label into a translated binary code;
- securely transmitting the translated binary code from the contactless optical user identification to an identification server via the enterprise network, the special-purpose operating instructions identifying the identification server;
- and
- based on a response from the identification server, providing feedback to the user regarding a result of identification of the translated binary code;
- ceasing providing power to the memory, wherein responsive to the power not being supplied, the special-purpose operating instructions cease to persist in the volatile memory and the bootstrap instructions persist in non-the volatile memory.
8 more elements
An access management system comprising:
- one or more enterprise servers;
- a contactless optical user identification device communicatively coupled to the one or more enterprise servers via an enterprise network, the contactless optical user identification device being installed at an access portal within an enterprise, the contactless optical user identification device comprising:
- an optical code capture device comprising an optical image capture device and an optical code translation circuit, the optical code translation circuit configured to recognize and translate a machine-readable optical label captured in an image by the optical image capture device into a binary code;
- a wired network access interface communicatively connected to the control circuit and providing a wired network access connection to the one or more enterprise servers;
- a control circuit communicatively connected to the optical code capture device, the control circuit comprising:
- one or more processors;
- and
- a memory comprising:
- a non-volatile memory storing a general purpose operating environment and first instructions, the first instructions configured to initialize the contactless optical user identification device, when executed by the one or more processors, by causing the contactless optical user identification device to:
- establish communication with a server, transmit an identifier of the contactless optical user identification device identified in the first instructions to the server;
- and receive, from the server, second instructions, wherein the server validates the identifier and selects the second instructions based at least in part on a role assigned to the contactless optical user identification device, wherein the role is determined based at least in part on the identifier;
- a volatile memory configured to receive the second instructions, the second instructions causing the contactless optical user identification device to:
- in response to capture of an image of the machine-readable optical label presented by a user and translation of the machine-readable optical label into a binary code, securely transmit the translated binary code to an identification server;
- wherein the one or more enterprise servers communicates a result of identification of the user based on the translated binary code to authorize access by the user at the access portal;
- wherein the memory is configured such that, when power is not supplied to the memory, the first instructions persist in the memory and the second instructions do not persist in the memory.
12 more elements
Dependencies are inferred from the claim text.