Contactless optical internet of things user identification device and system
AssigneeU.S. Bank National Association
InventorsJustin P. Yunke, Adam J. Achterhoff
Life of this patent
Estimating the term…
Abstract
A contactless optical device is useable to identify a user, and allows an enterprise to authorize access by that user to enterprise facilities and/or cause presentation of user information of the user. The device is specifically adapted for secure usage within an enterprise network via a wired network interface. The device avoids storage of user-identifying data in persistent memory, to avoid compromise of user data if the device were lost or stolen, or otherwise removed from the enterprise network.
Claims20
A contactless optical user identification device comprising:
- an optical code capture device comprising an optical image capture device and an optical code translation circuit, the optical code translation circuit configured to recognize and translate a machine-readable optical label captured in an image by the optical image capture device into a binary code;
- a wired network access interface communicatively connected to the control circuit and providing both a wired network access connection and power connection for the contactless optical user identification device;
- a control circuit communicatively connected to the optical code capture device, the control circuit comprising:
- a processor;
- and
- a memory comprising:
- a non-volatile memory storing a general purpose operating environment and bootstrap instructions;
- a volatile memory configured to receive special-purpose operating instructions from a bootstrap server identified in the bootstrap instructions in response to execution of the bootstrap instruction, the special-purpose operating instructions causing the device to:
- in response to capture of an image of the machine-readable optical label presented by a user and translation of the machine-readable optical label into a binary code:
- securely transmit the translated binary code to an identification server;
- receive, in response to the translated binary code, an indication of a result of identification of the user from the identification server.
A method comprising:
- in response to execution of a bootstrap instruction from nonvolatile memory, downloading special-purpose operating instructions from a bootstrap server identified by the bootstrap instruction into volatile memory of a contactless optical user identification device, the bootstrap server being positioned within an enterprise network;
- capturing, at the contactless optical user identification device, an image of a machine-readable optical label presented by a user;
- translating the image of the machine-readable optical label into a translated binary code;
- securely transmitting the translated binary code from the contactless optical user identification to an identification server via the enterprise network;
- and
- based on a response from the identification server, providing feedback to the user regarding a result of identification of the translated binary code.
An access management system comprising:
- one or more enterprise servers;
- a contactless optical user identification device communicatively coupled to the one or more enterprise servers via an enterprise network, the contactless optical user identification device being installed at an access portal within an enterprise, the contactless optical user identification device comprising:
- an optical code capture device comprising an optical image capture device and an optical code translation circuit, the optical code translation circuit configured to recognize and translate a machine-readable optical label captured in an image by the optical image capture device into a binary code;
- a wired network access interface communicatively connected to the control circuit and providing a wired network access connection to the one or more enterprise servers;
- a control circuit communicatively connected to the optical code capture device, the control circuit comprising:
- a processor;
- and
- a memory comprising:
- a non-volatile memory storing a general purpose operating environment and bootstrap instructions;
- a volatile memory configured to receive special-purpose operating instructions from a bootstrap server identified in the bootstrap instructions in response to execution of the bootstrap instruction, the special-purpose operating instructions causing the device to:
- in response to capture of an image of the machine-readable optical label presented by a user and translation of the machine-readable optical label into a binary code, securely transmit the translated binary code to an identification server;
- wherein the one or more enterprise servers communicates a result of identification of the user based on the translated binary code to authorize access by the user at the access portal.
Dependencies are inferred from the claim text.