Method of authenticating proper access to secured site and device for implementation thereof

#The present invention relates to apparatus for and methods of verifying both the physical identity of an individual and that individual's authority to gain access to a secured site. More particularly, the invention relates to methods of verifying user identity and authority to access an otherwise inaccessible physical space, body of data, etc., and to a hand-held device useful in the implementation of such methods. The methods and apparatus of the invention are of the type including input and recognition of a biometric parameter of the user.

#For purposes of the present discussion and disclosure of the invention, the term “secure(d) site” is used to refer to both physical areas, spaces and devices, as well as electronic domains, databases, and the like, to which access is restricted to certain authorized users. Access to a secured site may be provided either entirely electronically, as to a data bank, or by a combination of electronic and mechanical means, as by releasing a lock in response to authenticated electrical signals. The term “biometric parameter/characteristic/feature” is used to denote one or more physical attributes uniquely associated with a particular individual, such as a finger, thumb or hand print, a retinal or facial scan, a DNA sample, and the like. The term “biometric template” refers to a body of stored or storable electronic signals which uniquely correspond to a biometric parameter. The acronym “PIN” (Personal Identification Number) is defined as a sequence of characters (numbers, letters, symbols, etc.) each of which is, or may be, represented by a corresponding electrical signal, electrically or magnetically recorded code, or the like, and is used synonymously with “password.”

#The art and science of authentication and identification of human individuals is embodied in the simple concept of uniqueness. Uniqueness is defined, within acceptable risk parameters, as one or a combination of only three possible things, namely, (in the order of their traditional ranking from weakest to strongest): 1. something known only (uniquely) by the individual and which is verifiable by the secure host (e.g., mother's maiden name, a PIN, etc.)

#FIG. 1 is an illustration of a hand-held device representing an embodiment of the apparatus of the present invention;

#FIG. 2 is a block diagram illustrating the electronic components of the device of FIG. 1 and an independent PC;

#FIGS. 3 through 6 are partly pictorial flow charts illustrating the sequence of events in initializing, managing and utilizing the device of the invention in conjunction with a secure site; and

#The device of the invention, a physical example of which is shown in FIG. 1, is denoted generally by reference numeral 10. Device 10 includes body portion 12 which contains chips, microcircuits and other electronic modules for carrying out the various functions described later herein. Also on body 12 are window 14 through which an LCD display is visible, keypad 16 and biometric input pad 18. Ordinary keys 20 are shown, attached to body 12 by chain 22 passing through slot 24 at one end of the body; the keys have nothing to do with the present invention, but are shown to provide an indication of the intended scale of device 10, namely, that of a pocket-sized, hand-held item. In the illustrated embodiment keypad 16 includes a total of five keys, namely, up and down scroll keys 16U and 16D, respectively, left and right scroll keys 16L and 16R, respectively, and “enter” key 16E.

#A block diagram of the electronic components of device 10 is seen in FIG. 2. Block 22 represents the conventional electronics which present signals generated by pressing the various keys of keypad 16 to microprocessor 24. Block 26 represents electronics, also of a commercially available type, which generate signals commensurate with a template of the bionic characteristic (thumb print) presented to input pad 18. The electronics which interface signals from processor 24 with the LCD display on device 10 are represented by block 28, and a conventional output port 30 may optionally be provided on body 12 for transmission of data through line 31 to separate computer (PC) 33 or through line 35 directly to secure site 37 in situations where the user is physically proximate to the secure site or to input means therefor having an input port compatible with output port 30. Rather than (or in addition to) providing an output port on device 10, the user may view the characters of display output 28 and manually enter them on keyboard 39 of PC 33 (or secure site 37. The remaining blocks in FIG. 2 represent other conventional components, any or all of which may be on-chip peripheral devices, including random number generator 32, real-time clock 34, ROM program storage 36; SRAM data storage 38 and nonvolatile flash/EEPROM memory 40, all of which interface with, or are a part of processor 24.

#Turning now to FIGS. 3–7, the sequence of events in various stages of use of device 10 are illustrated. Preferably, device 10 is issued to a user by a manufacturer or other source with a unique code, tantamount to a serial number, as well as a number of “prompts” stored in selected memory locations. It is also preferred that the device be delivered to the user with a tamper proof seal in place over the biometric input pad and/or keypad. After removal of the seal, device 10 is initialized, i.e., set up prior to first use, by pressing enter key 16E and placing the user's thumb on input pad 18. Biosensor 26 generates a bionic template in the form of signals unique to the thumb print and transmits this template to processor 24 where it is stored in SRAM storage 38. Upon completion of this function, processor 24 connects a location in ROM storage 36 with LCD display output 28 causing the prestored prompt “Accepted” to appear in window 14. This indicates to the user that the biometric template commensurate with the user's thumb print has been generated and stored. Device 10 may then be deactivated by pressing enter key 16E or after passage of a predetermined period of non-use.