CA2446295C - Smart card access control system - Google Patents
Smart card access control system Download PDFInfo
- Publication number
- CA2446295C CA2446295C CA002446295A CA2446295A CA2446295C CA 2446295 C CA2446295 C CA 2446295C CA 002446295 A CA002446295 A CA 002446295A CA 2446295 A CA2446295 A CA 2446295A CA 2446295 C CA2446295 C CA 2446295C
- Authority
- CA
- Canada
- Prior art keywords
- access
- data
- reader
- card
- application
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00817—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the lock can be programmed
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/20—Individual registration on entry or exit involving the use of a pass
- G07C9/22—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder
- G07C9/23—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder by means of a password
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/20—Individual registration on entry or exit involving the use of a pass
- G07C9/22—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder
- G07C9/25—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder using biometric data, e.g. fingerprints, iris scans or voice recognition
- G07C9/257—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder using biometric data, e.g. fingerprints, iris scans or voice recognition electronically
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/20—Individual registration on entry or exit involving the use of a pass
- G07C9/27—Individual registration on entry or exit involving the use of a pass with central registration
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C2009/00753—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys
- G07C2009/00769—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by wireless means
- G07C2009/00793—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by active electrical keys with data transmission performed by wireless means by Hertzian waves
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00817—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the lock can be programmed
- G07C2009/00841—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys where the code of the lock can be programmed by a portable device
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
- G07C9/00658—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by passive electrical keys
- G07C9/00674—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by passive electrical keys with switch-buttons
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Human Computer Interaction (AREA)
- Lock And Its Accessories (AREA)
- Storage Device Security (AREA)
Abstract
An access control system securely transfers identification and transaction information between an access reader and a contactless smart card over a contactless radio frequency link via an RF modem. The access reader contains a programmable microcontroller, DC/DC converter, regulator, opto-isolators and LEDS, and an RF modem. The smart cards contain identification or transaction data as well as reader programming and de-programming software, which is protected by appropriate security keys. An access reader having the appropriate security keys performs a one to one verification of data stored in the smart card to data from an identification device coupled to the access reader. Upon verification of the validity of the smart card, the access reader transfers identification and transaction information over a data link to any external processor or controller which controls access to a secured area. Both the data format/protocol and operating state out of the access reader is programmable and configurable at any time. The access reader and access cards are compatible with any existing Wiegand, magnetic stripe, and serial based access control systems, and are configurable to emerging Biometric system designs.
Description
51112-8(s) Si'ubART CARD ACCESS COKITROI. SYSTEM
BACKGROUND OF THE INVENTION
,=-ieid of inveniion
BACKGROUND OF THE INVENTION
,=-ieid of inveniion
[0002] This invention relates generally to access systems for accessing restricted areas, and more specifically to a one to one comparison access card reader utilizing security keys for true authenticated verification of the identity of an access card holder attempting to gain access to a restricted area.
Background
Background
[0003] Access readers typically are small boxes located proximate to the entrances to restricted, or secured, areas. To gain access to an area, an access card holder must present an access card to the access reader, which in turn verifies the information on the card with a central computer. Commonly used access cards include both contact and contactless smartcards. In the prior art systems, the central computer stores data files associated with each access card holder, including information regarding employee identification, card validity, and access rules. The verification process of the prior art requires an initial communication between the. access card and the access card reader, communication between the access reader and the central computer, verification of card holder data and access card data at the central computer, communication of the results from the central computer to the access reader, and communication of the results to the access card holder by allowing or denying access to the restricted area.
[0004] The verification process of the prior art is sufficient for low traffic entrances, such as a gated entrances for a small office building, wherein the additional time required for the verification process does not cause long queues of employees waiting to pass through the gate. However, even a slight delay required to swipe a contact card and to verify card holder data at the central computer may be inconvenient for "high traffic" entrance ways. Further, complex comparisons such as biometric identification, requires a complex decision process and associated software that must be performed by the central computer as the currently available access readers and access cards have limited storage capacity and processing capability. In addition, the central computer must have updated information for each person, including infrequent visitors, who have clearance to enter a secured area. The data bases stored at the central computer for these entrance ways have the potential to be unmanageable, particularly for multi-story, multi-company office buildings.
Security necessarily is augmented through use of security personnel stationed at the gates to check and/or verify identification of employees as they enter the gates.
Security necessarily is augmented through use of security personnel stationed at the gates to check and/or verify identification of employees as they enter the gates.
[0005] Installations of the prior art access control systems are costly.
Each new access gate or entrance way requires installation of communication lines to the central computer. For multi-story or expansive buildings, the wiring and/or re-wiring process is both time-consuming and expensive. These factors often present cost-prohibitive blocks to converting rooms, labs, or designated areas into secured access areas. In addition, because each door or gate may have different access rights, the central computer also must keep track of personnel access rights for every door or gate. Installation of a new gated entrance requires update of the central computer data bases. In addition, each change in personnel or a change in personnel access to restricted areas requires an update to the data bases, and for large companies, the changes may be required daily.
Each new access gate or entrance way requires installation of communication lines to the central computer. For multi-story or expansive buildings, the wiring and/or re-wiring process is both time-consuming and expensive. These factors often present cost-prohibitive blocks to converting rooms, labs, or designated areas into secured access areas. In addition, because each door or gate may have different access rights, the central computer also must keep track of personnel access rights for every door or gate. Installation of a new gated entrance requires update of the central computer data bases. In addition, each change in personnel or a change in personnel access to restricted areas requires an update to the data bases, and for large companies, the changes may be required daily.
[0006] The prior art also presents security issues. For example, an access card holder user can enter a secured area with an unreported stolen card if the verification process is for validity of the card, only. Thus, for security purposes, entrance ways are often manned to verify the identity of a person holding the card with a picture identification on the access card. One way to eliminate the requirement of security personnel at each entrance way, is through the use of automatic identification systems connected to the central computer.
Biometric systems such as fingerprint identification systems are becoming 51112-8(S) increasingly popular as the biometric technology develops to further identify an access card holder as he or she passes through the secured entrance way.
Although the biometric systems may add security of verification and eliminate additional security personnel, the central computer is further burdened with storage of the biometric information. Biometric systems typically employ the concept of a "one to many" comparison, that is, an access card holder presents his fingertip for fingerprint imaging, and this one image is transmitted to a central computer for comparison to many fingerprints to find a matching print. The comparison and search time further slows down the identification process to add delays to the time required to pass through a secure entrance way.
Biometric systems such as fingerprint identification systems are becoming 51112-8(S) increasingly popular as the biometric technology develops to further identify an access card holder as he or she passes through the secured entrance way.
Although the biometric systems may add security of verification and eliminate additional security personnel, the central computer is further burdened with storage of the biometric information. Biometric systems typically employ the concept of a "one to many" comparison, that is, an access card holder presents his fingertip for fingerprint imaging, and this one image is transmitted to a central computer for comparison to many fingerprints to find a matching print. The comparison and search time further slows down the identification process to add delays to the time required to pass through a secure entrance way.
[0007] Therefore, a need remains for an access control system that does not require connection to a central computer, but which provides verification of the validity of the access card as well as identification of the access card holder.
A further need remains for access readers and access cards that have expanded storage and processing capability for performing complex decision processes and comparisons, such as biometric identification. Yet a further need remains f.or.an access control system which minimizes installation time and cost, which is.compatible with existing access control systems, and which may be updated to accommodate changes in secure area entrance rules and locations.
SUMMARY OF THE INVENTION
A further need remains for access readers and access cards that have expanded storage and processing capability for performing complex decision processes and comparisons, such as biometric identification. Yet a further need remains f.or.an access control system which minimizes installation time and cost, which is.compatible with existing access control systems, and which may be updated to accommodate changes in secure area entrance rules and locations.
SUMMARY OF THE INVENTION
[0008] It is an advantage of some embodiments to provide an access control system that does not require communication to a central computer for activation, access card verification, and reconfiguration.
[0009] It is another advantage of some embodiments to provide an access control system which employs a one to one verification process at the access card reader and does not require data storage for every access card holder.
[0010] Still another advantage of some embodiments is to provide an access control system that may be configured to emulate a variety of access cards to allow compatibility with existing access systems.
11 PCT/US02/14306 [0011] It is yet another advantage to provide an access control system which may be configured to allow different access rights to a variety of gated entrances.
[0012] A further advantage is to provide an access control system having the option for an unattended or attended secured entrance way.
[0013] In an exemplary embodiment of the present invention an access control system includes a access reader having an RF interface for communication with a contactless smart card, at least one serial connection to an identification (ID) device, and data output lines for controlling access to a secured entrance. The contactiess smart card includes memory divided into a number of blocks, wherein each block is further divided into pages of a predetermined number of bytes. At least one page of each block is utilized to store an application type number key, a read key, and a write key. The access reader communicates with the smart card providing the access reader is supplied with the keys of at least one memory bock of the smart card. The use of keys provides an authenticated read of data from the access card that is not provided in prior art access control systems.
[0014] The access control system of the exemplary embodiment of the present invention utilizes four types of contactless smart cards including activation cards, access cards, deactivation cards, and update cards. In an exemplary embodiment of the invention, the access readers are pre-programmed during manufacture with an initial activation key. The access readers may then be initialized by reading data from an activation card encoded with the same key. The deactivation card returns the access reader to a production state awaiting an activation card. Modifications in access reader data, such as keys, are downloaded to the access reader utilizing an update card. In one embodiment of the invention, the access reader includes a serial port for connection with a personal computer (PC) device. The PC device may be used for initializing or updating the access reader, or for collecting transaction, or "log", data from the access reader.
[0015] Access cards are presented to the access readers to gain entrance to secured areas. The access cards are further formatted to contain application specific data in a designated memory blocks. Each memory block has an application type number key, a read key, and a write key. The application specific data is the data required by the access reader to verify the identity of the access card holder against data received from an identification device. Identification devices of the exemplary embodiment, such as keypads and biometric identification devices, may vary according to the use of the access reader. The access reader includes a microprocessor for comparing the application specific data from the access card with the data received from the identification device. Upon verification of a match of the data, the access reader permits the access card holder to enter the secured area.
[0016] The access reader of an exemplary embodiment of the present invention receives identification data from biometric devices for comparison to identification data contained on the access cards. The biometric devices provide biometric images, e.g., fingerprint images, retinal images, and/or facial images, as well as template minutia of the actual images. The template minutia may be used by an access readerfor automatic comparison of the template minutia from the biometric device with the template minutia stored on an access card. The actual images from the access card and the biometric device may be used by security personnel to make decisions whether to permit an access card holder access to the secured area. Thus, the access control system of the exemplary embodiment provides means for both attended and unattended identification verification.
[0017] The access reader of the exemplary embodiment may be integrated with existing access control systems by programming the access reader to output a data stream required by the existing system upon verification of the identification data from an ID device with the application data from the access card. For example, access control systems that utilize key pads and swipe cards, and which output Wiegand bit streams, may be updated by providing access readers that output the same Wiegand bit streams upon a positive comparison of the key pad entries to the entries stored on the contactless access card. The access reader may be configured to be compatible with other existing access readers, such as magnetic stripe and serial based access control systems in the same manner. The ability to integrate the access reader of the exemplary embodiment with existing systems, enables 51112-8 (S) the existing system to be updated for contactless smart card.
operation without a shut down of the exiting system.
According to one aspect of the present invention, there is provided a system for providing controlled access to a secured area, the system comprising: a secured device for allowing access into the secured area upon receiving at least one access control signal; an identification device for providing identification data corresponding to a biometric measurement by the identification device; an access card having at least one block of memory comprising:
application data corresponding to biometric data of an access card holder; and at least one application security key comprising an application read key; and an access reader for outputting the at least one access control signal for controlling the secured device, the access reader comprising: a memory means for storing configuration data and at least one valid security read key; an RF interface for reading the application data from the access card if the at least one valid security read key is the same as the application read key, the at least one valid security read key providing an authenticated reading of the application data from the access card; at least one input data line for receiving the identification data from the identification device; and a processor means for comparing the application data to the identification data and for outputting the at least one access control signal upon a match between the application data and the identification data.
According to another aspect of the present invention, there is provided a method of controlling access to a secured area using an access reader, the method comprising the steps of: receiving identification data corresponding to a biometric measurement of a user of an access card from a biometric device; reading application 51112-8(S) - 6a -data corresponding to biometric data of an access card holder from an access card, comprising the steps of:
transmitting an application read key from the access reader to the access card; and allowing output of the application data from the access card if the transmitted application read key matches a read key stored on the access card;
comparing the application data to the identification data;
and outputting at least one access control signal upon a match between the identification data and the application data, the at least one access control signal for allowing access to the secured area.
According to still another aspect of the present invention, there is provided a system for controlling access to a secured area, the system comprising: an access card configured to: store, in memory of the access card, biometric data of an access card holder and an application read key; prevent output of the biometric data to one or more access devices until a security read key matching the application read key is received; and output the biometric data to the one or more access devices when the security read key matching the application read key is received; and the one or more access devices, communicatively coupled with the access card, and configured to: read the biometric data from the access card only when the application read key matches the security read key stored in memory of the one or more access devices; receive identification data corresponding to a biometric measurement associated with a user of the access card; compare the biometric data with the identification data; and output at least one access control signal to allow the user access to the secured area upon a match between the biometric data and the identification data.
51112-8 (S) - 6b -BRIEF DESCRIPTION OF THE DRAWINGS
operation without a shut down of the exiting system.
According to one aspect of the present invention, there is provided a system for providing controlled access to a secured area, the system comprising: a secured device for allowing access into the secured area upon receiving at least one access control signal; an identification device for providing identification data corresponding to a biometric measurement by the identification device; an access card having at least one block of memory comprising:
application data corresponding to biometric data of an access card holder; and at least one application security key comprising an application read key; and an access reader for outputting the at least one access control signal for controlling the secured device, the access reader comprising: a memory means for storing configuration data and at least one valid security read key; an RF interface for reading the application data from the access card if the at least one valid security read key is the same as the application read key, the at least one valid security read key providing an authenticated reading of the application data from the access card; at least one input data line for receiving the identification data from the identification device; and a processor means for comparing the application data to the identification data and for outputting the at least one access control signal upon a match between the application data and the identification data.
According to another aspect of the present invention, there is provided a method of controlling access to a secured area using an access reader, the method comprising the steps of: receiving identification data corresponding to a biometric measurement of a user of an access card from a biometric device; reading application 51112-8(S) - 6a -data corresponding to biometric data of an access card holder from an access card, comprising the steps of:
transmitting an application read key from the access reader to the access card; and allowing output of the application data from the access card if the transmitted application read key matches a read key stored on the access card;
comparing the application data to the identification data;
and outputting at least one access control signal upon a match between the identification data and the application data, the at least one access control signal for allowing access to the secured area.
According to still another aspect of the present invention, there is provided a system for controlling access to a secured area, the system comprising: an access card configured to: store, in memory of the access card, biometric data of an access card holder and an application read key; prevent output of the biometric data to one or more access devices until a security read key matching the application read key is received; and output the biometric data to the one or more access devices when the security read key matching the application read key is received; and the one or more access devices, communicatively coupled with the access card, and configured to: read the biometric data from the access card only when the application read key matches the security read key stored in memory of the one or more access devices; receive identification data corresponding to a biometric measurement associated with a user of the access card; compare the biometric data with the identification data; and output at least one access control signal to allow the user access to the secured area upon a match between the biometric data and the identification data.
51112-8 (S) - 6b -BRIEF DESCRIPTION OF THE DRAWINGS
[0018] The present invention will be better understood from the following detailed description of a preferred embodiment of the invention, taken in conjunction with the accompanying drawings in which like reference numerals refer to like parts and in which:
Figure 1 is an illustration of the initialization components for a smart card access control system of a preferred embodiment;
Figure 2 is a block diagram of the access reader states and card types of the preferred embodiment;
Figure 3 is an illustration of the components of an access reader of a first embodiment of the present invention;
Figure 4 is an illustration of a preferred physical configuration of an access reader;
Figure 5 is an illustration of an access control system of a preferred embodiment;
Figure 6 is an illustration of a biometric access control system of a preferred embodiment;
Figure 7 is an illustration of example equipment that may employ the use of the access control system of a preferred embodiment of the present invention;
Figure 8 is an illustration of a memory block of a contactless smart card of the preferred embodiment; and Figure 9 is a flow diagram of a method of the preferred embodiment for an access control system.
51112-8 (S) - 6c -DESCRIPTION OF THE PREFERRED EMBODIMENT
Figure 1 is an illustration of the initialization components for a smart card access control system of a preferred embodiment;
Figure 2 is a block diagram of the access reader states and card types of the preferred embodiment;
Figure 3 is an illustration of the components of an access reader of a first embodiment of the present invention;
Figure 4 is an illustration of a preferred physical configuration of an access reader;
Figure 5 is an illustration of an access control system of a preferred embodiment;
Figure 6 is an illustration of a biometric access control system of a preferred embodiment;
Figure 7 is an illustration of example equipment that may employ the use of the access control system of a preferred embodiment of the present invention;
Figure 8 is an illustration of a memory block of a contactless smart card of the preferred embodiment; and Figure 9 is a flow diagram of a method of the preferred embodiment for an access control system.
51112-8 (S) - 6c -DESCRIPTION OF THE PREFERRED EMBODIMENT
[0019] Figure 5 illustrates the smart card access control system 200 of a preferred embodiment of the present invention. The system 200 includes an access control unit (ACU), also referred to as an access reader 202, which communicates by radio frequency 228 to an access card, e.g., a contactless smart card 208. The access reader may be used for basic applications such as transit access, loyalty transactions, and health care benefits which utilizes a contactless smart card. However, this basic system has minimum use as the access reader 202 is limited to verifying the validity of the smart card 208 rather 51112-8(S) than further identifying the access card holder. Thus, the access control system 200 of the preferred embodiment further includes an identification device 204, such as a keypad or a biometric device. A biometric device inciudes, e.g., a camera and processor for facial or retinal recognition, or a fingerprint pad and processor for fingerprint identification. In other embodiments of the invention, the identification device 204 can be incorporated into the access reader 202.
The output data 220 from the identification device 204 is sent to the access reader 220 which performs a one-to-one (1:1) comparison of the output data 220 with card data read from the access card 208_ A positive verification may be indicated by the iliumination of an indicator and/or by the output of a control signal 222 to a secured device 206 such as a door lock or a gate turnstile.
The output data 220 from the identification device 204 is sent to the access reader 220 which performs a one-to-one (1:1) comparison of the output data 220 with card data read from the access card 208_ A positive verification may be indicated by the iliumination of an indicator and/or by the output of a control signal 222 to a secured device 206 such as a door lock or a gate turnstile.
[0020] Continuing with Figure 5, the access reader 202 of a preferred embodiment may include a serial port 230 for connection 224 with a personal - computer-type (PC) device 212. The PC device 212 may.be utilized with the access reader 202 to program standard production smart cards 208. The programmed smart cards 208, then are utilized to program an access reader 202 for a desired mode of operation. The PC device 212, or a contactless update card 62, as shown in Figure 2, may be used to download database material to the access reader 202. Similarly, the PC device 212 or a contactless memory device 232 may be utilized to upload log lists from the access reader 202. Log lists may include data collected from access cards 208 that are presented to the access reader 202, as well as data identifying the access reader 230. The access reader 202 of the preferred embodiment is connected via another serial connection 226 to a central computer 210. The access reader 202 performs the access identification process in real time, and uploads the results of the "transactions" to the central computer at a later time, for example, each night after a business day.
[0021] Figure 3 illustrates the electrical hardware components of an access reader 100 of a preferred embodiment of the present invention. The access reader 100 includes a microcontroller 104 for performing the access verification processes, and an RF modem 102 for communicating with a contactless smart card. Unit power 116 is connected to a DC to DC converter 108 which supplies 5 volts internal power 128 to the RF modem 102. The DC
to DC converter 108 is connected to a regulator 110 which supplies power 120 51112-8 (S) to the microcontrolfer 104. The RF modem 102 of the preferred embodiment generates a 13.56 MHZ RF field 126, and reads.standard smart cards at distances up to 10 cm. The microcontroller 104 outputs data signals 124 for controlling the secured device 206, as shown in Figure 5, for illuminating an indicator, such as an LED 112, or for communicating with the central computer 210 or the PC device 212. The microcontroller 104 includes memory for storing data such as software applications for validation processes, and negative lists of invalid access cards. Additional input data lines 136 may be required to communicate with multiple identification devices 204 or with an existing access control system reader.
to DC converter 108 is connected to a regulator 110 which supplies power 120 51112-8 (S) to the microcontrolfer 104. The RF modem 102 of the preferred embodiment generates a 13.56 MHZ RF field 126, and reads.standard smart cards at distances up to 10 cm. The microcontroller 104 outputs data signals 124 for controlling the secured device 206, as shown in Figure 5, for illuminating an indicator, such as an LED 112, or for communicating with the central computer 210 or the PC device 212. The microcontroller 104 includes memory for storing data such as software applications for validation processes, and negative lists of invalid access cards. Additional input data lines 136 may be required to communicate with multiple identification devices 204 or with an existing access control system reader.
[0022] Continuing with Figure 3, in one embodiment of the present invention, the access reader 100 includes an opto-isolator 106 for isolating the microcontroller 104 from the unit power 116 and the internal power. A
terminal block 130 of the preferred embodiment utilizes at ieast eight connections as shown in Table 1. Additional connectors/terminals X, Y, etc.
may be necessary for data communications to existing devices (not shown) and external devices 204, 206, 212, 210, as shown in Figure 5. If the microcontroller 104 does not require optical isolation, the unit power 116 and the extemal power 120 may be provided from the same power source by connecting terminals 2 and 8, and by connecting terminals 6 and 7, for the terminal block 130 configuration shown in Figure 3. This configuration uses the external power for the optical isolator and the LED 106, but defeats the optical isolation by connecting the signal ground 132 to the power ground 134.
terminal block 130 of the preferred embodiment utilizes at ieast eight connections as shown in Table 1. Additional connectors/terminals X, Y, etc.
may be necessary for data communications to existing devices (not shown) and external devices 204, 206, 212, 210, as shown in Figure 5. If the microcontroller 104 does not require optical isolation, the unit power 116 and the extemal power 120 may be provided from the same power source by connecting terminals 2 and 8, and by connecting terminals 6 and 7, for the terminal block 130 configuration shown in Figure 3. This configuration uses the external power for the optical isolator and the LED 106, but defeats the optical isolation by connecting the signal ground 132 to the power ground 134.
[0023] As shown in Tabie 1 for one embodiment of the access reader 100, terminals 3 and 4 are data outputs 114. Other embodiments of the invention may require more or fewer data outputs. For example, if the access reader 100 is programmed by activation card to output Wiegand data, the data appears on terminals 3 and 4. If the unit is programmed to output serial or magnetic-stripe data the data appears on pin 3, only.
Terminal Function Comment 1 Internal 5 Volts; or Provides +5 Volts at up to 100mA; or Test Terminal for production testing 2 External 5 to 28 Volts Isolator and LED power (Requires +5 to +28 Volts at 20 mA) 3 Data 1 Optically isolated data out 4 Data 0 Optically isolated data out 5 LED High = Red, low = Green, unconnected = Yellow 6 External Common Isolator and LED power and data signal common 7 Power Common Unit power and internal +5 Volt common 8 Unit Power Requires from +8 to +28 Volts at up to 2.5 Watts TABLE 1. Terminal Block Connections for an Access Reader
Terminal Function Comment 1 Internal 5 Volts; or Provides +5 Volts at up to 100mA; or Test Terminal for production testing 2 External 5 to 28 Volts Isolator and LED power (Requires +5 to +28 Volts at 20 mA) 3 Data 1 Optically isolated data out 4 Data 0 Optically isolated data out 5 LED High = Red, low = Green, unconnected = Yellow 6 External Common Isolator and LED power and data signal common 7 Power Common Unit power and internal +5 Volt common 8 Unit Power Requires from +8 to +28 Volts at up to 2.5 Watts TABLE 1. Terminal Block Connections for an Access Reader
[0024] Figure 4 illustrates a packaging configuration 150 for the electrical components of the access reader 100 of Figure 3. The packaged access reader 150 of a preferred embodiment of the invention utilizes the same area footprint as a single-gang wall plate having a width, W, of 2.75 inches (6.98 cm) and a length, L, of 4.5 inches (11.43 cm). The packaged access reader 150 is mounted onto a surface using two mounting holes 158 that match the holes in a single-gang electrical utility box. Another embodiment of the packaged access reader 150 replaces or fits inside the electrical utility box. The packaged access reader 150 of the preferred embodiment has a depth, D, of 1.5 inches (3.81 cm), but may be configured for any necessary thickness. The packaged access reader 150 has a faceplate area 154 which provides a target for the presentation of an access card. At least one LED 152 on the faceplate 154 illuminates to red to signal an invalid card or a read error. A valid card and a successful identification of the access card holder is indicated by the LED 152 illuminating to green. The LED 152 provides the access card holder with an indication that the access reader 100 is operational. In other embodiments, the packaging configuration be of any form factor desired by a customer.
[0025] Figure 6 illustrates a biometric configuration 300 of one embodiment of the invention. The access card reader 304 is installed adjacent a door and controls the door lock 308. An access card holder presents his access card 306 to the access card reader 304, which reads pre-stored access data from the access card 306. In this configuration 300, a camera 302 sends an image and/or image minutia of the access card holder to the access card reader 304. The access card reader 304 compares the data from the camera 302 with the pre-stored access data on the access card 306 to verify identification of the access card holder. If the image data matches the pre-stored access data, then the identification of the access card holder may be guaranteed to a higher degree than existing control systems that verify one data component, only. This validation is a one to one comparison, and does not require communication with a data base of a central computer.
[0026] To prevent security breaches, the access card reader 304 of the preferred embodiment performs additional verifications before or after the identification process. For example, the access card reader 304 must first establish communication with the access card 306 utilizing specific protocols.
The communication protocols may also identify particular information about the access card 306, such as the serial number of the access card 306. If the access card 306 does not respond to the required communication protocols transmitted by the access reader 304, then the access card 306 is not valid for that particular entrance way 308. Once communication is established between the access card 306 and the access reader 304, the access reader 304 can read data from the access card 306 only if it knows at least one application key and read key stored on the access card 306. In an alternate embodiment, the access card reader 304 further compares the access card information, such as the serial number, with access card holder data, such as negative lists, that are downloaded to the access reader 304 at regular intervals by means of the PC
Device 212, the central computer 210, or an update card 62 as illustrated in Figure 5. If any of the validation processes have a negative result, the access card reader 304 denies access to the secured area.
The communication protocols may also identify particular information about the access card 306, such as the serial number of the access card 306. If the access card 306 does not respond to the required communication protocols transmitted by the access reader 304, then the access card 306 is not valid for that particular entrance way 308. Once communication is established between the access card 306 and the access reader 304, the access reader 304 can read data from the access card 306 only if it knows at least one application key and read key stored on the access card 306. In an alternate embodiment, the access card reader 304 further compares the access card information, such as the serial number, with access card holder data, such as negative lists, that are downloaded to the access reader 304 at regular intervals by means of the PC
Device 212, the central computer 210, or an update card 62 as illustrated in Figure 5. If any of the validation processes have a negative result, the access card reader 304 denies access to the secured area.
[0027] In an alternate embodiment of the invention, the access card reader 304 may also write an invalidation code to the access card 306 providing the access card reader 304 has a correct write key. The invalidation code on the smart card may be recognized by all or specific access readers. Access readers that recognize the invalidation code may then deny access to corresponding secured areas until the access card 306 is re-validated by security personnel.
[0028] For additional security, it is possible to require the access card holder to present the access card 306 before exiting the same, or another, entrance. Because the identification of the access card holder and the validity of the access card 306 is determined by the access card reader 304 immediately upon presentation of the access card 306, the access card holder may gain entrance into a secured area using an access card 306 that is invalid.
However, a further validation may be performed for access card readers 202 that are connected to a central computer 210, as shown in Figure 5. The transaction log data, including, for example, the access card serial number and time of entrance is uploaded to the central computer 210 or a memory device 232 at regular intervals and/or after a pre-determined number of identification verifications. The central computer performs a validity check of the transaction data for each access card 208 against data stored in the central computer. If the card is determined to be invalid, the central computer 210 then downloads updated information to the access readers 202 of the secured area to deny exit for the access card holder, and alerts security. The preferred embodiment of the access reader 202 also includes an additional security measure for notifying security personnel of an attempted removal of the access reader 202. For example, upon the detection of a loss of power, the access reader 202 sends an identifying signal to the central computer 210.
However, a further validation may be performed for access card readers 202 that are connected to a central computer 210, as shown in Figure 5. The transaction log data, including, for example, the access card serial number and time of entrance is uploaded to the central computer 210 or a memory device 232 at regular intervals and/or after a pre-determined number of identification verifications. The central computer performs a validity check of the transaction data for each access card 208 against data stored in the central computer. If the card is determined to be invalid, the central computer 210 then downloads updated information to the access readers 202 of the secured area to deny exit for the access card holder, and alerts security. The preferred embodiment of the access reader 202 also includes an additional security measure for notifying security personnel of an attempted removal of the access reader 202. For example, upon the detection of a loss of power, the access reader 202 sends an identifying signal to the central computer 210.
[0029] Figure 1 illustrates the initialization components 10 for the smart card access control system of a preferred embodiment. The components 10 include an access reader 14, a standard production smart card 16, and a personal computer device 12. The access reader 14 includes a serial port for data communication 18 between the access reader 14 and the PC device 12, e.g., a laptop or hand held computer device. In an alternate embodiment of the invention, a central computer, as shown in Figure 5, that is hardwired to the access reader 14 may perform the installation and configuration processes of the PC device 12. Continuing with Figure 1, the PC device 12 together with the access reader 14 are utilized to create various card types 54 from standard production smart cards 16. Figure 2 illustrates the access reader states 52 and card types 54 of the preferred embodiment. The different card types 54 are used with the access reader 14 for activation, access, deactivation, and update purposes.
[0030] Continuing with Figure 2, the access reader 14 has two operational reader states 52 which are the deactivated operational state and the activated operational state. Upon power-up, the access reader 14 of the preferred embodiment indicates its operational state by, for example, beeping three times to indicate that it is in the deactivated operational state. In the deactivated operational state, the access reader 14 waits for an activation card 56 to lock it into the activated state. When a valid activation card 56 is presented to the access reader 14, the access reader 14 is locked into the activated operational state using the application type number, the read key, and output format specified by the activation card 56. If a production smart card 16 is presented to the access reader 14 while the reader is in the deactivated operational state 52, and the smart card is not a valid activation card 56, the access reader 14 will signal an error condition, e.g., two beeps.
[0031] The activated operational state of the access reader 14 utilizes customer specific application type keys which are pre-loaded into the access reader 14. Upon power-up, the access reader 14 of the preferred embodiment indicates that it is in an activated operational state by, for example, beeping once for a duration of one second. Table 2 lists the actions that an access reader of the preferred embodiment takes upon presentation/detection of an access card 16. In the activated operational state, the access reader 14 only reads access cards 58 that are encoded by a customer with an appropriate read key in order to prevent unauthorized cards from communicating data to the access reader 14. In the preferred embodiment, the read key of the access card 58 is encrypted to produce a hash key. The access reader 14 reads the hash key and uses the encryption code to determine whether the read key of the access card 58 is valid. The use of the read/hash key provides an authenticated security which is not found in current access systems. Other systems which provide un-authenticated Wiegand identification numbers can easily be replicated via playback attack.
[0032] As shown in Table 2, if the read key is invalid, the access reader 14 beeps twice to indicate the invalidity of the access card 58 and no data is output to control access to the secured area. In the preferred embodiment, the serial card number or any other identifying data of the invalid access card 58, if available, is stored in a log file in the access reader for subsequent uploading to a PC device 212, a central computer 212, or contactiess memory device 232.
The information them may be utilized to perform actions such as alerting security or placing the access card 212 on a negative list. If the read key stored in the access reader 14 is correct, the access reader 14 can attempt to read data from the access card 58. If data is not available, the access reader 14 signals access card 58 invalidity by beeping twice. If data is available, the access reader performs a cyclic redundancy check (CRC) on the data to determine whether parity is correct. If all three conditions are met, then the access card 58 is valid and the access reader 14 outputs formatted data to perform actions to allow the access card holder to gain access to the secured area. Security may be increased by maintaining the secrecy of the hash key and/or the CRC.
Correct Data Valid Access Reader Action Read Key Read CRC Beeps Output 1 N N N 2 none 2 Y N N 2 none 3 Y Y N 2 none 4 Y Y Y 1 Formatted Data 5 Other Reader Errors 2 none Table 2 - Access Reader Actions for an Activated State
The information them may be utilized to perform actions such as alerting security or placing the access card 212 on a negative list. If the read key stored in the access reader 14 is correct, the access reader 14 can attempt to read data from the access card 58. If data is not available, the access reader 14 signals access card 58 invalidity by beeping twice. If data is available, the access reader performs a cyclic redundancy check (CRC) on the data to determine whether parity is correct. If all three conditions are met, then the access card 58 is valid and the access reader 14 outputs formatted data to perform actions to allow the access card holder to gain access to the secured area. Security may be increased by maintaining the secrecy of the hash key and/or the CRC.
Correct Data Valid Access Reader Action Read Key Read CRC Beeps Output 1 N N N 2 none 2 Y N N 2 none 3 Y Y N 2 none 4 Y Y Y 1 Formatted Data 5 Other Reader Errors 2 none Table 2 - Access Reader Actions for an Activated State
[0033] Referring to Figures 2 and 5, the access cards 58 of the preferred embodiment are standard production contactless smart cards formatted for use with the access control system 200. If desired, these cards 58 can be securely shared among multiple systems, such as transit system fare-card applications, building physical access control applications, equipment access applications and loyalty applications. The memory in a standard production smart card 208 is divided into blocks. Each block 400, as shown in Figure 8, contains multiple pages of read/write memory for storage of application data 408, and an associated page for storing a read key 404 and a write key 406. Each block 400 is assigned an application type number (ATN) 402, e.g., transit or access control.
[0034] For example, in a standard memory smart card, there are a number of available memory blocks 400. A set of one or more blocks 400 of memory on a smart card 208 used for an application is referred to as a customer memory area (CMA). Each customer memory area can use up to the total number of blocks available on the smart card 208. For access control applications, the customer memory area can vary from 16 bytes for simple identification to up to 32 Kbytes for intensive biometric identification since access reader 202 uses only one application type number 402 and read key 404 from cards that it has been programmed to use. Since each customer memory area uses customer specified read and write cryptographic keys 404, 406 to secure the card, each customer memory area is both secure and inaccessible to anyone, i.e., an access card reader, that does not have the correct cryptographic keys 404, 406.
[0035] Adding access control capabilities to an existing smart card requires at least one application block 400 to be unused and available in the smart card memory. This allows multiple applications, such as transit for subway and buses, loyalty, payment systems, identity, and/or additional physical access control applications, to be loaded seamiessly and securely onto the same contactless smart card. Figure 7 illustrates example applications of the access control system 200. Each application may be connected 382 to a central computer 380. A first application for physical access control is illustrated as a door 370 controlled by an access reader 372 having a keypad ID device 374.
An employee presents his or her access card 58 to the access reader 372 and enters a code on the keypad 374. The code is verified with identification data 408 stored on the smart card to determine the validity of the smart card. In an alternate embodiment of the invention, other identification devices may be used in place of, or in addition to, the key pad 374. For example, in an alternate embodiment of the invention, the access reader 372, 352, 360 may require more than one identification device. In such an embodiment, the smart card application data 408 contains the identification data for comparison with the data received from each identification device. The access control system may also be used to control access to equipment such as personal computers 350.
For example, an access reader 352 having an RF interface 354 for reading a smart card, and a fingerprint pad 356 for identifying the access card holder, may be used with security software installed on the personal computer 350 to limit 51112-8 (S) access to the computer 350. The smart card may also contain an application type number 402 that is utilized by access readers 360 at transit gates 358.
An employee presents his or her access card 58 to the access reader 372 and enters a code on the keypad 374. The code is verified with identification data 408 stored on the smart card to determine the validity of the smart card. In an alternate embodiment of the invention, other identification devices may be used in place of, or in addition to, the key pad 374. For example, in an alternate embodiment of the invention, the access reader 372, 352, 360 may require more than one identification device. In such an embodiment, the smart card application data 408 contains the identification data for comparison with the data received from each identification device. The access control system may also be used to control access to equipment such as personal computers 350.
For example, an access reader 352 having an RF interface 354 for reading a smart card, and a fingerprint pad 356 for identifying the access card holder, may be used with security software installed on the personal computer 350 to limit 51112-8 (S) access to the computer 350. The smart card may also contain an application type number 402 that is utilized by access readers 360 at transit gates 358.
[0036] A method for smart card access control 450 is illustrated in Figure 9, with reference to system components of Figure 5. In a first step 452, the access reader 202 establishes communication with a smart card 208 configured as an access card. If communication is established successfully, then the smart card 208 has responded to a communication protocol used by the access reader 202. In step 454, the access reader 202 reads and stores access card application data from the access card. The access reader determines whether the access card is valid in step 456. If the access card is invalid, step 458, for example, parity is incorrect or the read keys used by the access reader 202 are invalid, access to the secured area is denied, step 464.
[0037] The preferred embodiment of the invention provides the optional steps of recording the access card data in a iog file, step 460, and writing an invalid flag to the access card, step 462. In some implementations, the access reader 202 must have a write key for the access card 208 in order to write the invalid flag. Other implementations are possible for allowing the access reader 202 to write the invalid flag. In step 466, the access reader 202 receives identification data from an ID device 204, and compares the application data with the identification data, step 468. A data match in step 470 resuits in the access reader 202 outputting a signal 222 to a secured device 206 to allow an access card holder access to a secured area. In optional steps 472 and 474, the access reader 202 stores the transaction data to a log file and updates a status on the access card 208.
[0038] Although a preferred embodiment of the invention has been described above by way of example only, it will be understood by those skilled in the field that modifications may be made to the disclosed embodiment without departing from the scope of the invention, which is defined by the appended claims.
WE CLAIM:
WE CLAIM:
Claims (22)
1. A system for providing controlled access to a secured area, the system comprising:
a secured device for allowing access into the secured area upon receiving at least one access control signal;
an identification device for providing identification data corresponding to a biometric measurement by the identification device;
an access card having at least one block of memory comprising:
application data corresponding to biometric data of an access card holder; and at least one application security key comprising an application read key; and an access reader for outputting the at least one access control signal for controlling the secured device, the access reader comprising:
a memory means for storing configuration data and at least one valid security read key;
an RF interface for reading the application data from the access card if the at least one valid security read key is the same as the application read key, the at least one valid security read key providing an authenticated reading of the application data from the access card;
at least one input data line for receiving the identification data from the identification device; and -16a-a processor means for comparing the application data to the identification data and for outputting the at least one access control signal upon a match between the application data and the identification data.
a secured device for allowing access into the secured area upon receiving at least one access control signal;
an identification device for providing identification data corresponding to a biometric measurement by the identification device;
an access card having at least one block of memory comprising:
application data corresponding to biometric data of an access card holder; and at least one application security key comprising an application read key; and an access reader for outputting the at least one access control signal for controlling the secured device, the access reader comprising:
a memory means for storing configuration data and at least one valid security read key;
an RF interface for reading the application data from the access card if the at least one valid security read key is the same as the application read key, the at least one valid security read key providing an authenticated reading of the application data from the access card;
at least one input data line for receiving the identification data from the identification device; and -16a-a processor means for comparing the application data to the identification data and for outputting the at least one access control signal upon a match between the application data and the identification data.
2. The system of claim 1, wherein the secured device is a transit gate.
3. The system of claim 1, wherein the secured device allows operation of electronic equipment having a device processor, further comprising:
security software for execution by the device processor, the security software disallowing use of the electronic equipment unless the at least one access control signal is received by the security software.
security software for execution by the device processor, the security software disallowing use of the electronic equipment unless the at least one access control signal is received by the security software.
4. The system of claim 1, wherein the identification device is a biometric device and the identification data is image data. .
5. The system of claim 4, wherein the identification data comprises template minutia comprising characteristics of the identification data.
6. The system of claim 5, wherein the processor means for comparing the application data is automated.
7. The system of claim 4, wherein the access reader further comprises means for displaying the image data and the application data, the displayed image data and application data for use by a security person for making a decision regarding issuance of the at least one access control signal for allowing access to the secured area.
8. The system of claim 1, wherein the access reader has a plurality of reader states comprising:
an activated state for controlling access to the secured area; and a deactivated state, the deactivated state having an activation key for reading an activation card.
an activated state for controlling access to the secured area; and a deactivated state, the deactivated state having an activation key for reading an activation card.
9. The system of claim 1, further comprising an update card for updating the configuration data of the access reader.
10. The system of claim 1, wherein the at least one application security key of the access card further comprises an application write key.
11. The system of claim 10, wherein the memory means of the access reader further stores a valid security write key for writing to the access card if the valid security write key is the same as the application write key.
12. The system of claim 11, wherein the access reader writes an invalid flag to the access card if the application data does not match the identification data.
13. A method of controlling access to a secured area using an access reader, the method comprising the steps of:
receiving identification data corresponding to a biometric measurement of a user of an access card from a biometric device;
reading application data corresponding to biometric data of an access card holder from an access card, comprising the steps of:
transmitting an application read key from the access reader to the access card; and allowing output of the application data from the access card if the transmitted application read key matches a read key stored on the access card;
comparing the application data to the identification data; and outputting at least one access control signal upon a match between the identification data and the application data, the at least one access control signal for allowing access to the secured area.
receiving identification data corresponding to a biometric measurement of a user of an access card from a biometric device;
reading application data corresponding to biometric data of an access card holder from an access card, comprising the steps of:
transmitting an application read key from the access reader to the access card; and allowing output of the application data from the access card if the transmitted application read key matches a read key stored on the access card;
comparing the application data to the identification data; and outputting at least one access control signal upon a match between the identification data and the application data, the at least one access control signal for allowing access to the secured area.
14. The method of claim 13, wherein the at least one access control signal opens a gated entrance.
15. The method of claim 13, wherein the at least one access control signal allows the use of a processor enable device.
16. The method of claim 13, wherein the step of providing identification data corresponding to an access card holder to the access reader comprises the step of:
producing an image of the access card holder, wherein the image is one of a facial image, a retinal image, and a fingerprint image.
producing an image of the access card holder, wherein the image is one of a facial image, a retinal image, and a fingerprint image.
17. The method of claim 13, wherein the step of comparing the application data to the identification data is performed by the access reader.
18. The method of claim 13, wherein the step of comparing the application data to the identification data is performed by a security person.
19. The method of claim 13, further comprising the step of:
writing an invalid flag to the access card upon a mismatch between the identification data and the application data, the invalid flag for at least partially restricting use of the access card.
writing an invalid flag to the access card upon a mismatch between the identification data and the application data, the invalid flag for at least partially restricting use of the access card.
20. The method of claim 13, further comprising the step of:
provided that the access reader has a write key for the access card, writing an invalid flag to the access card upon a mismatch between the identification data and the application data, the invalid flag being for at least partially restricting use of the access card.
provided that the access reader has a write key for the access card, writing an invalid flag to the access card upon a mismatch between the identification data and the application data, the invalid flag being for at least partially restricting use of the access card.
21. The method of claim 13, further comprising the step of updating configuration data of the access reader using a contactless update card.
22. A system for controlling access to a secured area, the system comprising:
an access card configured to:
store, in memory of the access card, biometric data of an access card holder and an application read key;
prevent output of the biometric data to one or more access devices until a security read key matching the application read key is received; and output the biometric data to the one or more access devices when the security read key matching the application read key is received; and the one or more access devices, communicatively coupled with the access card, and configured to:
read the biometric data from the access card only when the application read key matches the security read key stored in memory of the one or more access devices;
receive identification data corresponding to a biometric measurement associated with a user of the access card;
compare the biometric data with the identification data; and output at least one access control signal to allow the user access to the secured area upon a match between the biometric data and the identification data.
an access card configured to:
store, in memory of the access card, biometric data of an access card holder and an application read key;
prevent output of the biometric data to one or more access devices until a security read key matching the application read key is received; and output the biometric data to the one or more access devices when the security read key matching the application read key is received; and the one or more access devices, communicatively coupled with the access card, and configured to:
read the biometric data from the access card only when the application read key matches the security read key stored in memory of the one or more access devices;
receive identification data corresponding to a biometric measurement associated with a user of the access card;
compare the biometric data with the identification data; and output at least one access control signal to allow the user access to the secured area upon a match between the biometric data and the identification data.
Applications Claiming Priority (5)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US28903901P | 2001-05-04 | 2001-05-04 | |
US60/289,039 | 2001-05-04 | ||
US31838501P | 2001-09-10 | 2001-09-10 | |
US60/318,385 | 2001-09-10 | ||
PCT/US2002/014306 WO2002091311A1 (en) | 2001-05-04 | 2002-05-06 | Smart card access control system |
Publications (2)
Publication Number | Publication Date |
---|---|
CA2446295A1 CA2446295A1 (en) | 2002-11-14 |
CA2446295C true CA2446295C (en) | 2008-11-04 |
Family
ID=26965400
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CA002446295A Expired - Fee Related CA2446295C (en) | 2001-05-04 | 2002-05-06 | Smart card access control system |
Country Status (8)
Country | Link |
---|---|
US (1) | US7376839B2 (en) |
EP (1) | EP1384207A1 (en) |
JP (1) | JP2004528655A (en) |
CN (1) | CN1278283C (en) |
AU (1) | AU2002257249B2 (en) |
CA (1) | CA2446295C (en) |
MX (1) | MXPA03010049A (en) |
WO (1) | WO2002091311A1 (en) |
Families Citing this family (124)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7219837B2 (en) * | 2002-09-12 | 2007-05-22 | Integrated Engineering B.V. | Identification system |
US20040139021A1 (en) * | 2002-10-07 | 2004-07-15 | Visa International Service Association | Method and system for facilitating data access and management on a secure token |
US7373658B1 (en) | 2002-10-25 | 2008-05-13 | Aol Llc | Electronic loose-leaf remote control for enabling access to content from a media player |
US7647277B1 (en) | 2002-10-25 | 2010-01-12 | Time Warner Inc. | Regulating access to content using a multitiered rule base |
US7315946B1 (en) * | 2003-04-14 | 2008-01-01 | Aol Llc | Out-of-band tokens for rights access |
US7177915B2 (en) | 2002-12-31 | 2007-02-13 | Kurt Kopchik | Method and apparatus for wirelessly establishing user preference settings on a computer |
JP2005045557A (en) * | 2003-07-22 | 2005-02-17 | Sony Corp | Communication device |
US20050061875A1 (en) * | 2003-09-10 | 2005-03-24 | Zai Li-Cheng Richard | Method and apparatus for a secure RFID system |
EP1536306A1 (en) | 2003-09-30 | 2005-06-01 | Broadcom Corporation | Proximity authentication system |
US20050122210A1 (en) * | 2003-12-05 | 2005-06-09 | Honeywell International Inc. | Dual technology door entry person authentication |
US7172115B2 (en) * | 2004-04-02 | 2007-02-06 | Riptide Systems, Inc. | Biometric identification system |
FR2870619A1 (en) * | 2004-05-18 | 2005-11-25 | St Microelectronics Sa | METHOD FOR READING THE MEMORY PLAN OF A CONTACTLESS LABEL |
US7293698B2 (en) * | 2004-07-12 | 2007-11-13 | Macaps International Ltd. | Wiegand converter and method of generating a bi-directional data |
FR2877468B1 (en) * | 2004-10-29 | 2007-01-26 | Immotec Systemes Soc Par Actio | METHOD AND EQUIPMENT FOR MANAGING ACCESS CONTROL BADGES |
JP4612398B2 (en) | 2004-11-11 | 2011-01-12 | Necインフロンティア株式会社 | Verification device and verification method |
KR20060067584A (en) * | 2004-12-15 | 2006-06-20 | 삼성전자주식회사 | Smart card having hacking prevention function |
US7457952B2 (en) * | 2004-12-16 | 2008-11-25 | Xerox Corporation | Authentication tag for S/W media |
US20060136717A1 (en) | 2004-12-20 | 2006-06-22 | Mark Buer | System and method for authentication via a proximate device |
US7367494B2 (en) * | 2005-03-08 | 2008-05-06 | Cubic Corporation | Automatic integrated sensing and access control |
US7900253B2 (en) * | 2005-03-08 | 2011-03-01 | Xceedid Corporation | Systems and methods for authorization credential emulation |
US8720775B2 (en) | 2005-03-08 | 2014-05-13 | Cubic Corporation | Automatic integrated sensing and access control |
US7697737B2 (en) * | 2005-03-25 | 2010-04-13 | Northrop Grumman Systems Corporation | Method and system for providing fingerprint enabled wireless add-on for personal identification number (PIN) accessible smartcards |
US7706778B2 (en) * | 2005-04-05 | 2010-04-27 | Assa Abloy Ab | System and method for remotely assigning and revoking access credentials using a near field communication equipped mobile phone |
US20060224420A1 (en) * | 2005-04-05 | 2006-10-05 | Apsrfid, Llc | Healthcare insurance security system |
US8698604B2 (en) * | 2005-04-25 | 2014-04-15 | Lg Electronics Inc. | Reader control system |
TWM277062U (en) * | 2005-04-29 | 2005-10-01 | Jia Fu Internat Dev Co Ltd | Dactyloscopy entrance guard devices |
AU2006247449A1 (en) * | 2005-05-16 | 2006-11-23 | Mastercard International Incorporated | Method and system for using contactless payment cards in a transit system |
CN100477958C (en) | 2005-06-13 | 2009-04-15 | 株式会社日立制作所 | Vein authentication device |
JP4692174B2 (en) * | 2005-09-14 | 2011-06-01 | 株式会社日立製作所 | Personal authentication device and door opening / closing system |
US8232860B2 (en) | 2005-10-21 | 2012-07-31 | Honeywell International Inc. | RFID reader for facility access control and authorization |
US7747861B2 (en) * | 2005-11-09 | 2010-06-29 | Cisco Technology, Inc. | Method and system for redundant secure storage of sensitive data by using multiple keys |
FR2895121B1 (en) * | 2005-12-15 | 2008-12-26 | Cogelec Soc Par Actions Simpli | SYSTEM AND METHOD FOR ACCESS CONTROL, ACCESS CONTROL, KEYS AND CUSTOMIZATION METHOD OF THE SYSTEM |
JP2007206991A (en) * | 2006-02-02 | 2007-08-16 | Hitachi Ltd | Bioinformation processor and bioinformation processing program |
US7818783B2 (en) * | 2006-03-08 | 2010-10-19 | Davis Russell J | System and method for global access control |
US20070252001A1 (en) * | 2006-04-25 | 2007-11-01 | Kail Kevin J | Access control system with RFID and biometric facial recognition |
US8074271B2 (en) | 2006-08-09 | 2011-12-06 | Assa Abloy Ab | Method and apparatus for making a decision on a card |
US9985950B2 (en) | 2006-08-09 | 2018-05-29 | Assa Abloy Ab | Method and apparatus for making a decision on a card |
US20080208681A1 (en) * | 2006-09-28 | 2008-08-28 | Ayman Hammad | Payment using a mobile device |
US8346639B2 (en) | 2007-02-28 | 2013-01-01 | Visa U.S.A. Inc. | Authentication of a data card using a transit verification value |
US8523069B2 (en) | 2006-09-28 | 2013-09-03 | Visa U.S.A. Inc. | Mobile transit fare payment |
US8118223B2 (en) | 2006-09-28 | 2012-02-21 | Visa U.S.A. Inc. | Smart sign mobile transit fare payment |
US8386349B2 (en) * | 2007-02-28 | 2013-02-26 | Visa U.S.A. Inc. | Verification of a portable consumer device in an offline environment |
US20080203170A1 (en) * | 2007-02-28 | 2008-08-28 | Visa U.S.A. Inc. | Fraud prevention for transit fare collection |
US8738485B2 (en) | 2007-12-28 | 2014-05-27 | Visa U.S.A. Inc. | Contactless prepaid product for transit fare collection |
US7527208B2 (en) | 2006-12-04 | 2009-05-05 | Visa U.S.A. Inc. | Bank issued contactless payment card used in transit fare collection |
US20080155239A1 (en) * | 2006-10-10 | 2008-06-26 | Honeywell International Inc. | Automata based storage and execution of application logic in smart card like devices |
US7853987B2 (en) * | 2006-10-10 | 2010-12-14 | Honeywell International Inc. | Policy language and state machine model for dynamic authorization in physical access control |
US8166532B2 (en) * | 2006-10-10 | 2012-04-24 | Honeywell International Inc. | Decentralized access control framework |
US20080091681A1 (en) * | 2006-10-12 | 2008-04-17 | Saket Dwivedi | Architecture for unified threat management |
US20080172723A1 (en) * | 2007-01-16 | 2008-07-17 | Dominic Pesapane | System and method of collecting data in an access control system |
US9286481B2 (en) * | 2007-01-18 | 2016-03-15 | Honeywell International Inc. | System and method for secure and distributed physical access control using smart cards |
WO2008114425A1 (en) * | 2007-03-20 | 2008-09-25 | Fujitsu Limited | Card information rewrite device, card information rewrite method, card information rewrite program, card information recording device, and card information management device |
US8598982B2 (en) * | 2007-05-28 | 2013-12-03 | Honeywell International Inc. | Systems and methods for commissioning access control devices |
US8351350B2 (en) | 2007-05-28 | 2013-01-08 | Honeywell International Inc. | Systems and methods for configuring access control devices |
WO2008157759A1 (en) * | 2007-06-20 | 2008-12-24 | Honeywell International Incorporated | Mapping of physical and logical coordinates of users with that of the network elements |
US9548973B2 (en) | 2007-08-24 | 2017-01-17 | Assa Abloy Ab | Detecting and responding to an atypical behavior |
US20140049360A1 (en) * | 2007-08-24 | 2014-02-20 | Assa Abloy Ab | Data collection using a credential |
US20090050697A1 (en) * | 2007-08-24 | 2009-02-26 | Collier Sparks | Apparatus for distributed data storage of security identification and security access system and method of use thereof |
US9883381B1 (en) * | 2007-10-02 | 2018-01-30 | Sprint Communications Company L.P. | Providing secure access to smart card applications |
US8179227B2 (en) * | 2007-11-08 | 2012-05-15 | Honeywell International Inc. | Employing external storage devices as media for access control panel control information |
US20110071929A1 (en) * | 2008-01-30 | 2011-03-24 | Honeywell International Inc. | Systems and methods for managing building services |
EP2098998B1 (en) * | 2008-03-03 | 2016-05-25 | DORMA Deutschland GmbH | Access control system and method for operating such a system |
US9063897B2 (en) * | 2008-06-26 | 2015-06-23 | Microsoft Technology Licensing, Llc | Policy-based secure information disclosure |
US8392965B2 (en) * | 2008-09-15 | 2013-03-05 | Oracle International Corporation | Multiple biometric smart card authentication |
US9742555B2 (en) * | 2008-09-25 | 2017-08-22 | Nokia Technologies Oy | Encryption/identification using array of resonators at transmitter and receiver |
EP2332386A4 (en) * | 2008-09-30 | 2014-07-23 | Honeywell Int Inc | Systems and methods for interacting with access control devices |
US9219956B2 (en) * | 2008-12-23 | 2015-12-22 | Keyssa, Inc. | Contactless audio adapter, and methods |
US9954579B2 (en) * | 2008-12-23 | 2018-04-24 | Keyssa, Inc. | Smart connectors and associated communications links |
WO2010099575A1 (en) | 2009-03-04 | 2010-09-10 | Honeywell International Inc. | Systems and methods for managing video data |
US9019070B2 (en) | 2009-03-19 | 2015-04-28 | Honeywell International Inc. | Systems and methods for managing access control devices |
US8850281B2 (en) * | 2009-05-12 | 2014-09-30 | Empire Technology Development Llc | Digital signatures |
US9032476B2 (en) * | 2009-05-12 | 2015-05-12 | Empire Technology Development Llc | Secure authentication |
US8379856B2 (en) * | 2009-06-17 | 2013-02-19 | Empire Technology Development Llc | Hardware based cryptography |
US8915431B2 (en) * | 2009-07-06 | 2014-12-23 | Visa International Service Association | Transit access system and method including device authentication |
US9280365B2 (en) * | 2009-12-17 | 2016-03-08 | Honeywell International Inc. | Systems and methods for managing configuration data at disconnected remote devices |
US8707414B2 (en) * | 2010-01-07 | 2014-04-22 | Honeywell International Inc. | Systems and methods for location aware access control management |
GB2491759A (en) | 2010-03-01 | 2012-12-12 | Cubic Corp | Security polymer threat detection distribution system |
US8847727B2 (en) | 2010-04-26 | 2014-09-30 | David Alan Shapiro | Electronically-controlled water dispensing system |
CN102236939B (en) * | 2010-05-05 | 2012-12-26 | 国民技术股份有限公司 | Access method for radio frequency communication with low-frequency magnetic communication |
AU2010224455B8 (en) * | 2010-09-28 | 2011-05-26 | Mu Hua Investments Limited | Biometric key |
CN101976365B (en) * | 2010-11-05 | 2012-09-19 | 中国航天科工集团第二研究院七○六所 | Safe radio frequency identification system |
US8787725B2 (en) | 2010-11-11 | 2014-07-22 | Honeywell International Inc. | Systems and methods for managing video data |
WO2012174603A1 (en) | 2011-06-24 | 2012-12-27 | Honeywell International Inc. | Systems and methods for presenting dvm system information |
CN104137154B (en) | 2011-08-05 | 2019-02-01 | 霍尼韦尔国际公司 | Systems and methods for managing video data |
US9344684B2 (en) | 2011-08-05 | 2016-05-17 | Honeywell International Inc. | Systems and methods configured to enable content sharing between client terminals of a digital video management system |
US10362273B2 (en) | 2011-08-05 | 2019-07-23 | Honeywell International Inc. | Systems and methods for managing video data |
US9420403B1 (en) | 2012-01-31 | 2016-08-16 | Sprint Communications Company L.P. | Remote deactivation of near field communication functionality |
TW201340037A (en) * | 2012-03-30 | 2013-10-01 | Utechzone Co Ltd | Synchronized seamless multi-control element coupling and decoupling device |
US9715776B2 (en) | 2012-06-25 | 2017-07-25 | Xceedid Corporation | Access credential reader connector |
CN102890667A (en) * | 2012-09-17 | 2013-01-23 | 广州英码信息科技有限公司 | Device and method for processing wiegand data |
US8888002B2 (en) * | 2012-09-18 | 2014-11-18 | Sensormatic Electronics, LLC | Access control reader enabling remote applications |
US9818104B1 (en) | 2013-01-25 | 2017-11-14 | Sprint Communications Company L.P. | Secure online credit card transactions |
EP2959421A4 (en) * | 2013-02-25 | 2016-11-02 | Assa Abloy Ab | Secure access to secure access module-enable machine using personal security device |
US9509719B2 (en) * | 2013-04-02 | 2016-11-29 | Avigilon Analytics Corporation | Self-provisioning access control |
SE539039C2 (en) * | 2013-05-03 | 2017-03-28 | Assa Ab | Reader device for an electronic access key for a lock and method for configuring a reader device |
EP2821970B2 (en) | 2013-07-05 | 2019-07-10 | Assa Abloy Ab | Access control communication device, method, computer program and computer program product |
EP2821972B1 (en) | 2013-07-05 | 2020-04-08 | Assa Abloy Ab | Key device and associated method, computer program and computer program product |
US9443362B2 (en) | 2013-10-18 | 2016-09-13 | Assa Abloy Ab | Communication and processing of credential data |
US10523903B2 (en) | 2013-10-30 | 2019-12-31 | Honeywell International Inc. | Computer implemented systems frameworks and methods configured for enabling review of incident data |
CN104636771A (en) * | 2013-11-12 | 2015-05-20 | 上海华虹集成电路有限责任公司 | Non-contact module testing circuit and method |
GB2520484A (en) * | 2013-11-15 | 2015-05-27 | Mastercard International Inc | System and method for Authorising access to facilities |
US20150261693A1 (en) * | 2014-03-14 | 2015-09-17 | International Business Machines Corporation | Dynamic storage key assignment |
US9251330B2 (en) | 2014-04-09 | 2016-02-02 | International Business Machines Corporation | Secure management of a smart card |
SG11201701819PA (en) | 2014-09-10 | 2017-04-27 | Assa Abloy Ab | First entry notification |
JP6499303B2 (en) * | 2015-01-27 | 2019-04-10 | クワーン チー インテリジェント フォトニック テクノロジー リミテッド | Optical communication transmitter and receiver |
EP3094122B1 (en) * | 2015-05-13 | 2018-12-26 | Assa Abloy Ab | Systems and methods for protecting sensitive information stored on a mobile device |
US9798966B2 (en) | 2015-08-19 | 2017-10-24 | Honeywell International Inc. | Systems and methods of smart card based mobile pull stations |
US9619952B1 (en) * | 2016-02-16 | 2017-04-11 | Honeywell International Inc. | Systems and methods of preventing access to users of an access control system |
US10748086B2 (en) | 2016-03-07 | 2020-08-18 | Mastercard International Incorporated | Systems and methods for facilitating event access through payment accounts |
US10635995B2 (en) | 2016-03-07 | 2020-04-28 | Mastercard International Incorporated | Systems and methods for facilitating event access through payment accounts |
US10115249B2 (en) * | 2016-05-23 | 2018-10-30 | Yevgeny Levitov | Card-compatible biometric access control system |
CN106529651B (en) * | 2016-11-15 | 2019-03-08 | 安徽汉威电子有限公司 | A kind of radio frequency card using double-encryption algorithm |
GB2564477A (en) * | 2017-07-06 | 2019-01-16 | Argus Global Pty Ltd | An access terminal control system |
EP3655929A1 (en) | 2017-07-18 | 2020-05-27 | Assa Abloy AB | Perimeter offline secure exchange of access control token |
US11151240B2 (en) | 2017-12-11 | 2021-10-19 | Carrier Corporation | Access key card that cancels automatically for safety and security |
CN111354112A (en) * | 2019-02-18 | 2020-06-30 | 杭州海康威视数字技术股份有限公司 | Access control system, access method and device of access control equipment and gateway equipment |
KR102650599B1 (en) | 2019-03-25 | 2024-03-21 | 아싸 아브로이 에이비 | Ultra-wide band device for access control reader system |
EP3928114A1 (en) | 2019-03-25 | 2021-12-29 | Assa Abloy Ab | Physical access control systems with localization-based intent detection |
US20210173368A1 (en) * | 2019-12-06 | 2021-06-10 | Board Of Trustees Of Michigan State University | Smart Hotel System |
CN111428603B (en) * | 2020-03-18 | 2023-05-09 | 杭州指安科技股份有限公司 | Electronic device and method for guaranteeing registered fingerprint quality in fingerprint identification system |
CN111540098B (en) * | 2020-05-08 | 2022-07-26 | 湖南奇谷智能科技有限公司 | Intelligent face recognition entrance guard device |
US11663353B1 (en) * | 2020-06-29 | 2023-05-30 | United Services Automobile Association (Usaa) | Systems and methods for monitoring email template usage |
CN112070940B (en) * | 2020-08-05 | 2022-08-12 | 日立楼宇技术(广州)有限公司 | Access control authorization method, access control release method, device, access control controller and medium |
TWI773072B (en) * | 2021-01-05 | 2022-08-01 | 亞旭電腦股份有限公司 | Log in system and log in method of field |
Family Cites Families (45)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4415893A (en) | 1978-06-27 | 1983-11-15 | All-Lock Electronics, Inc. | Door control system |
FR2457524B1 (en) | 1979-05-23 | 1985-11-15 | Chauvat & Sofranq Reunis | CODED CARD DOOR FOR SELECTIVE DOOR OPENING |
US4245213A (en) | 1979-08-20 | 1981-01-13 | Igor Kriger | Security system |
IL63201A (en) | 1980-07-01 | 1985-01-31 | Scovill Inc | Electronic security device such as door lock |
US4534194A (en) | 1981-03-16 | 1985-08-13 | Kadex, Incorporated | Electronic lock system |
US5986564A (en) | 1984-03-28 | 1999-11-16 | Computerized Security Systems, Inc. | Microcomputer controlled locking system |
US4634846A (en) | 1984-05-22 | 1987-01-06 | American District Telegraph Company | Multimode programmable stand-alone access control system |
US4644484A (en) | 1984-05-22 | 1987-02-17 | American District Telegraph Company | Stand-alone access control system clock control |
US6822553B1 (en) | 1985-10-16 | 2004-11-23 | Ge Interlogix, Inc. | Secure entry system with radio reprogramming |
USRE33873E (en) | 1986-02-27 | 1992-04-07 | Microcomputer controlled combination lock security system | |
US4755799A (en) | 1986-02-27 | 1988-07-05 | James Romano | Microcomputer controlled combination lock security system |
US4789859A (en) | 1986-03-21 | 1988-12-06 | Emhart Industries, Inc. | Electronic locking system and key therefor |
US4712398A (en) | 1986-03-21 | 1987-12-15 | Emhart Industries, Inc. | Electronic locking system and key therefor |
US4902882A (en) | 1987-09-23 | 1990-02-20 | Emhart Industries, Inc. | Code reader |
US5245329A (en) | 1989-02-27 | 1993-09-14 | Security People Inc. | Access control system with mechanical keys which store data |
DE69006885T3 (en) | 1989-04-14 | 1999-05-20 | Hitachi Ltd | Control device for cars. |
US5337043A (en) | 1989-04-27 | 1994-08-09 | Security People, Inc. | Access control system with mechanical keys which store data |
US5467082A (en) | 1989-10-25 | 1995-11-14 | Sanderson; Glenn A. | Proximity actuator and reader for an electronic access system |
JPH05507573A (en) | 1990-06-14 | 1993-10-28 | メディコ・セキュリティ・ロックス・インコーポレイテッド | Distributed database security system |
US5198643A (en) | 1991-02-26 | 1993-03-30 | Computerized Security Systems, Inc. | Adaptable electronic key and lock system |
GB9125540D0 (en) | 1991-11-30 | 1992-01-29 | Davies John H E | Access control systems |
US5418525A (en) | 1992-03-04 | 1995-05-23 | Bauer Kaba Ag | Person identification system |
US5259025A (en) * | 1992-06-12 | 1993-11-02 | Audio Digitalimaging, Inc. | Method of verifying fake-proof video identification data |
WO1994001645A1 (en) | 1992-07-04 | 1994-01-20 | Smart Lock Limited | Improvements relating to locks |
US5396558A (en) * | 1992-09-18 | 1995-03-07 | Nippon Telegraph And Telephone Corporation | Method and apparatus for settlement of accounts by IC cards |
US5815084A (en) | 1993-05-20 | 1998-09-29 | Harrow Products, Inc. | Programmer for contact readable electronic control system and programming method therefor |
US5526428A (en) * | 1993-12-29 | 1996-06-11 | International Business Machines Corporation | Access control apparatus and method |
US5457747A (en) | 1994-01-14 | 1995-10-10 | Drexler Technology Corporation | Anti-fraud verification system using a data card |
US5907149A (en) | 1994-06-27 | 1999-05-25 | Polaroid Corporation | Identification card with delimited usage |
US5679945A (en) | 1995-03-31 | 1997-10-21 | Cybermark, L.L.C. | Intelligent card reader having emulation features |
DE19528297A1 (en) | 1995-08-02 | 1997-02-06 | Bayer Ag | Unit of data storage card and read / write device |
US5979754A (en) | 1995-09-07 | 1999-11-09 | Martin; Jay R. | Door lock control apparatus using paging communication |
US5943624A (en) * | 1996-07-15 | 1999-08-24 | Motorola, Inc. | Contactless smartcard for use in cellular telephone |
US6112991A (en) | 1997-02-18 | 2000-09-05 | Unisys Corporation | Gray-shade pass card reader |
US6119940A (en) | 1997-02-18 | 2000-09-19 | Unisys Corporation | Identification methods |
US6085976A (en) * | 1998-05-22 | 2000-07-11 | Sehr; Richard P. | Travel system and methods utilizing multi-application passenger cards |
US6003014A (en) | 1997-08-22 | 1999-12-14 | Visa International Service Association | Method and apparatus for acquiring access using a smart card |
US6084967A (en) * | 1997-10-29 | 2000-07-04 | Motorola, Inc. | Radio telecommunication device and method of authenticating a user with a voice authentication token |
US6041412A (en) * | 1997-11-14 | 2000-03-21 | Tl Technology Rerearch (M) Sdn. Bhd. | Apparatus and method for providing access to secured data or area |
DE69815272T3 (en) * | 1997-12-22 | 2007-12-27 | Northrop Grumman Corp. (N.D.Ges.D.Staates Delaware), Los Angeles | Fingerprint comparison controlled access to doors and machines |
US6000609A (en) | 1997-12-22 | 1999-12-14 | Security People, Inc. | Mechanical/electronic lock and key therefor |
US6219439B1 (en) * | 1998-07-09 | 2001-04-17 | Paul M. Burger | Biometric authentication system |
JP2000231608A (en) | 1999-02-10 | 2000-08-22 | Hitachi Ltd | Mobile object identification device and ic card |
JP2000259278A (en) * | 1999-03-12 | 2000-09-22 | Fujitsu Ltd | Device and method for performing indivisual authentication by using living body information |
US6213403B1 (en) | 1999-09-10 | 2001-04-10 | Itt Manufacturing Enterprises, Inc. | IC card with fingerprint sensor |
-
2002
- 2002-05-06 US US10/141,575 patent/US7376839B2/en not_active Expired - Fee Related
- 2002-05-06 AU AU2002257249A patent/AU2002257249B2/en not_active Ceased
- 2002-05-06 WO PCT/US2002/014306 patent/WO2002091311A1/en active Application Filing
- 2002-05-06 MX MXPA03010049A patent/MXPA03010049A/en active IP Right Grant
- 2002-05-06 JP JP2002588488A patent/JP2004528655A/en active Pending
- 2002-05-06 EP EP02726844A patent/EP1384207A1/en not_active Withdrawn
- 2002-05-06 CA CA002446295A patent/CA2446295C/en not_active Expired - Fee Related
- 2002-05-06 CN CNB028132319A patent/CN1278283C/en not_active Expired - Fee Related
Also Published As
Publication number | Publication date |
---|---|
CN1524250A (en) | 2004-08-25 |
CN1278283C (en) | 2006-10-04 |
JP2004528655A (en) | 2004-09-16 |
WO2002091311A1 (en) | 2002-11-14 |
US20030028814A1 (en) | 2003-02-06 |
AU2002257249B2 (en) | 2006-08-31 |
MXPA03010049A (en) | 2004-12-06 |
CA2446295A1 (en) | 2002-11-14 |
US7376839B2 (en) | 2008-05-20 |
EP1384207A1 (en) | 2004-01-28 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CA2446295C (en) | Smart card access control system | |
AU2002257249A1 (en) | Smart card access control system | |
US20090050697A1 (en) | Apparatus for distributed data storage of security identification and security access system and method of use thereof | |
US7475812B1 (en) | Security system for access control using smart cards | |
US8322608B2 (en) | Using promiscuous and non-promiscuous data to verify card and reader identity | |
US7900253B2 (en) | Systems and methods for authorization credential emulation | |
EP0379333B1 (en) | Secure data interchange system | |
US8102240B2 (en) | Controller providing shared device access for access control systems | |
CN109074693B (en) | Virtual panel for access control system | |
US7392943B2 (en) | Identification system | |
KR101878432B1 (en) | A recognition device for access control in a multi-access control system and control method for operating convergence | |
US7118033B2 (en) | Access system | |
CN110782567A (en) | Unlocking method and setting method of intelligent lock | |
US6092724A (en) | Secured network system | |
GB2428116A (en) | Controlling access to a workstation via wireless communication | |
KR100476179B1 (en) | Access control system using finger-print identification | |
US6012632A (en) | Secured network system | |
JP2002522852A (en) | Security system | |
KR20080094228A (en) | System and method for controlling coming and going using smart card | |
US20200026829A1 (en) | Biometric access control identification card | |
CN211906385U (en) | Entrance guard's device and system with intelligent recognition function | |
KR100360540B1 (en) | Entrance control system and method | |
CN110147662A (en) | Verification method, device, storage medium and electronic device | |
CN110599650A (en) | Access control system based on trusted mobile terminal and control method | |
JPH1139489A (en) | Fingerprint collating device |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
EEER | Examination request | ||
MKLA | Lapsed |
Effective date: 20150506 |