DE10133647A1 - Process to access a secured data line using mobile phone and biometric data for identification - Google Patents

Abstract

The system connects such as mobile phone to a fixed computer system using a Bluetooth link. The Bluetooth address of the unit is determined and the data exchange commences to carry out an identification procedure. This is based on the reading of biometric characteristic data that is compared with reference data.

Description

The invention relates to methods for implementing a gesi The service according to claim 1, a mobile terminal to implement a secured service according to claim 9 and a stationary terminal for implementing a gesi The service according to claim 17.

At the "CeBIT 2000" a ticket machine was in hall 26 presented, in which the operation with the help of Access protocol "Wireless Application Protocol" (WAP) see above such as the short-range radio standard "Bluetooth", ge shows. The short empire was made for this application range of Bluetooth to localize a customer in the vicinity of the ticket machine to create a WAP initiate and enforce supported ticket purchase to lead.

The problem here is that there is a risk that white tere potential customers in the sewing area of the ticket car mate and there is an overlap or confusion comes, so it is desirable to the process of the Fahrkar access control, in which the customer de identified and thus confirmed its mandate to trigger sen.

Electronic access, user or access controls ba generally rely on passwords. For electronic payments procedure with money ("electronic wallet") or Eu rocheckkarten ("EC cards") has been used as a password a personal identification number ("PIN") to authenticate those authorized to use the card Person established.  

With such a knowledge-based identification by However, passwords pose a risk that the password in question Person forgets them, especially in many life situations sufficient (access to the workplace, computer, mobile phone, online Banking and the like) an authentication of people is required so that inflation of the passwords or Ge Home numbers that a person must keep in mind Episode is.

There is also a risk that, for example, an EC card is lost or stolen and a third party gets it Card operated by guessing the PIN or by Observe the owner determined.

Therefore, biometric methods for identification gain Replacement or supplement to checking the PIN increasingly important tion because they are based on specific physical characteristics male who are clearly assigned to a specific person can.

The individual expression of these body characteristics is in space mean unique in the world and the owner of this It cannot lose or forget characteristics.

Biometric features also have the advantage that they are prin Sometimes not stolen and only copied or copied with difficulty can be mimicked, so compared to the conventional Methods such as authentication using PIN, a significantly higher level of security is achieved.

In particular, biometric methods distinguish between species distinguish between the recognition of an individual.

Verification (authentication) should determine whether a person is actually who they claim to be his. With this type of recognition, only one-to-one  One comparison of submitted verification data with before stored reference data.

In contrast, the identification of the id stands for the identification tity of a person from a large number of individuals in the Foreground. With this type of recognition, the pre put verification data with a large number of reference compared data from a database.

Regardless of the type of recognition, all bio metric systems first raw measurement data of the relevant kör physical characteristics of the person are recorded before the Sys system can extract the specific characteristics from it. In the An then a comparison is made with the system already known reference data.

More and more systems are ready for the market, the people identify by hand their personal body characteristics.

So at CeBIT 2000 in hall 14 of "Siemens ICN" services equipped with a fingerprint reader automat presented.

The disadvantage of such systems is the enormous storage space need given due to the reference data to be saved and local storage in the machine is too expensive makes.

At the moment, therefore, central storage is carried out in a such automated networked database considered, what ever but the corresponding network infrastructure and creation a central personal database is required.

The object underlying the invention is therefore a secure service simple and inexpensive to reali Sieren.  

This task is accomplished through the process of implementing a secured service according to claim 1, a mobile end device for implementing a secure service in accordance with Claim 9 and a stationary facility for implementation a secured service according to claim 15.

In the method according to the invention for implementing a total a mobile device via a Data transmission interface to a stationary terminal coupled such that the mobile terminal and the stationary Terminal over the data transmission interface the service exchange data related to performance, the mobile end receives biometric reference from a memory assigned to it reads out the reference data of a person and sends them to the stationary Transfers end device. Then the person is asked identify themselves to trigger the provision of the service tify, whereupon collecting biometric data of the Person at a detection device of the stationary endge advised is carried out so that in the stationary terminal Comparison of the biometric reference data with the recorded biometric data and the service at Über matching the reference data with the recorded data is brought.

It is advantageous to use the biometric reference data and that Transfer only by entering at least one password, for example, in addition to the 1st PIN on the cell phone, a 2nd PIN, trigger in the mobile device, so that the sensitive Da not be transferred uncontrolled and accidentally.

If there is a data exchange between the stationary device and mobile terminal via a wireless, in particular according to IrDA or Bluetooth-designed, data transmission interface, It is sufficient if the user of the mobile device tes in the transmission range of the stationary device to initiate the secured service in which for example an Ap installed on the mobile device  plication is started, in order to detect whether the mobile terminal is in transmission range, according to Bluetooth in particular the so-called inquiry procedure and according to IrDA, the reception of the infrared beam is used the.

When exchanging data between the stationary device and mobile terminal via a serial, especially according to V.24 or RS-232-C configured data transmission interface, the user is forced to connect his mobile device with an stationary terminal device attached, for example to connect a standardized plug, to be able to trigger the service transaction so that here too an unwanted transmission of the biometric refe limit data is avoided. It is also excluded that a second person only because of their proximity to the statio nary terminal disrupts the transaction with the user like it with a wireless connection is conceivable.

The biometric data in the mobile device in one locally available memory is saved and read from there relatively fast accesses are possible.

A central to a mobile network of the mobile device ordered memory that, such as in a cell Ren cellular network, part of a central radio transmitter / radio catching device, in particular a mobile radio base station, has the advantage, among other things, that the biometric ref reference data only need to be saved once, so that even if the user frequently turns off his mobile device deceives, this data is immediately available.

When the mobile device is connected to the stationary terminal, in particular according to the "Wireless Ac cess Protocol "WAP designed communication program with User guidance is started, the user has the feedback that he can initiate the desired service  and also immediately has an application required for this ready to hand.

Has an identification based on face geometry data as well as those on iris and retina or voice patterns based identification the advantage that to capture the no touch is necessary, the iris or Retinal pattern identification particularly forgery-proof and also has a low false detection rate.

In contrast, has an identification based on voice patterns additionally the advantage that they, just like one on Un Identification based on script dynamics, a high Ak enjoys user acceptance.

An advantage of psychometric data, such as the Typing dynamics consist of no additional hardware is needed to capture them. It will just be the one before existing infrastructure, for example PC with keyboard, ge uses.

Identification based on hand geometry data points the advantage of having been in the business for more than ten years To be use while aside from a wide spread a banking system based on fingerprint data Identification is also very forgery-proof as well as a has a low false detection rate.

The mobile terminal according to the invention for implementing a ge secured service, has a data transfer interface for connecting the mobile device to stationary terminal and a device for detecting egg ner coupling of the mobile device via the data transfer interface to the stationary device. In addition is it with a facility for data exchange the service data and has both resources to access stored biometric reference data as  also a device for transmitting the biometric refe reference data.

With the handset according to the invention, a gesi Realize secure service, one of which is at the ge secured service involved, in particular the inpatient facility, with required biometric Reference data supplied so that any instance without equipped with access to biometric reference data to be able to provide a secured service to perform.

Mobile phones, PDAs and notebooks are common mobile devices, which generally also by one person or at least one very limited group of people used or carried with them are and already have circuit characteristics, in particular interfaces, as well as applications, in particular re browser, so that an extension to the invention ß mobile terminal can be made inexpensively.

Is the data transfer interface as serial, esp special V.24 or RS-232-C interface is designed the user is forced to use his mobile device with an am tional terminal device attached, at for example a standardized plug to connect to to be able to trigger the service process, so that too here an unwanted transfer of the biometric reference is avoided. In addition, it is impossible that a second person only because of their proximity to the stationary Terminal disrupts the transaction with the user, as is the case with ei ner wireless connection is conceivable. Also are serial Interfaces widespread, so that compatibility problems me be reduced.

Is the data transmission interface as a wireless, esp special IrDA or Bluetooth interface designed, It is sufficient if the user of the mobile device  tes in the transmission range of the stationary device to initiate the secured service in which for example an Ap installed on the mobile device plication is started, in order to detect whether the mobile terminal is in transmission range, according to Bluetooth in particular the so-called inquiry procedure and according to IrDA, the reception of the infrared beam is used the. In addition, the mobile character of mobile devices is being used supports what leads to greater acceptance by potential users could lead.

The mobile terminal has both a memory, in particular SIM card, for storing biometric reference data as also means for accessing stored in memory stored data, can be quickly on the reference data access, which results in higher user acceptance ge. In addition, exchangeable storage media, such as "SIM Card "," SmartCard "," Memory Stick "or the like part that even when replacing (buying new) the mobile device There is no need to save the reference data again. SIM Cards also have the advantage that they are personal and are usually already protected with a PIN and also from one central authority, the provider, what the egg reduced the possibility of abuse and secondly act as an instance for capturing the biometric reference data and to assign this data to a person tet.

Another way to avoid abuse the one and on the other hand greater flexibility in exchange Reaching the mobile device is achieved if that mobile terminal a device to access in one central data stored data that a Mobile network, in particular a server of the mobile network, is assigned to the mobile terminal, which is particularly the case is used advantageously when the mobile device for egg ne use in a cellular mobile network, the example  works according to the GSM standard and used there.

The stationary terminal according to the invention for implementing a secured service has a data transfer Interface for connecting a mobile device to the stationary terminal and a device for detecting egg ner coupling of the mobile device via the data transfer interface to the stationary device. The far ren has an exchange facility Service-related data and on the one hand means to collect biometric data of one person and the other Means for comparing reference biometric data with the recorded biometric data and a facility for Providing the service in accordance with the Refe reference data with the recorded data.

The stationary terminal device according to the invention allows egg Realize a secure service, the stationary end device neither a local nor a decentralized, via a own network accessible database for storing biometri sher reference data required. In addition, the stationary endge advises so flexibly that there is no central bio metric reference data from new users is required as a new users only a mobile terminal according to the invention must pair with the stationary device for data exchange, to send him his reference data and by rendering its biometric features on the stationary terminal secured process initiated with the data exchange close so that the service is provided.

Further advantageous developments are in the dependent claims given.

If the stationary terminal has a device for access on in a central memory that egg a cellular network is assigned to the mobile terminal, stored reference  data on the data transmission interface so that the stationary terminal, for example via a V.24 or wireless bluetooth interface, access in one accessible via the network assigned to the mobile terminal Database with stored biometric reference data holds without even having facilities for network connection to have to.

The use of parallel interfaces has the advantage that a higher data throughput is achieved.

Embodiments of the invention are explained with reference to FIGS. 1 to 3. Show

Fig. 1 is a flowchart illustrating the inventive method for implementing a secure service.

Fig. 2 shows a first embodiment with an arrangement of the stationary terminal and mobile terminal according to the invention.

Fig. 3 shows a second embodiment with an arrangement of the stationary terminal and mobile terminal according to the invention.

The exemplary embodiment of the method according to the invention shown in FIG. 1 is used in an arrangement in which a stationary device (machine) providing a secure service and mobile phones are each provided with a Bluetooth radio module (BT) designed according to the Bluetooth (BT) standard. Module).

In a first step S1, the BT module of the Automat initiated an "Inquiry Procedure", with which according to BT standard addresses are in the radio transmission / reception area BT modules located are queried so that by receiving the presence of other BT modules in the radio  / Radio reception area of the initiating BT module detected can be.

Checking whether an address has been received, i. H. there is a BT module in the radio transmission / reception area, is carried out in a second step S2.

If the check shows that a BT module is in the radio transmission / Radio reception area can be in a third step S3 the BT module of the machine initiates a "paging procedure" with which, according to the BT standard, the establishment of a direct Radio connection to the detected BT module is initiated.

Alternatively, the roles can also be reversed, i. H. that in the first step the BT module of a cell phone needs to be initiates the necessary procedures and carries out the check, being variations of the procedures or even replacing the procedures through comparable procedures within the framework of the professional skills are conceivable as a further alternative.

If the connection establishment is completed in step S3, find in a fourth step S4 bidirectional communication held, among other things, for initiating the service required data exchanged and required Applications are started. An application is here the launch of one on the wireless application protocol (WAP) based user guidance that requires a required interac tion of the user of the cell phone with the service automation realized.

Comparable other applications are also conceivable, WAP However, applications have the advantage that they are widely used are spreading.

As a further alternative, it is also conceivable that an inter action takes place on the machine, which is particularly important offers when a data transfer is not wireless, but  implemented via a serial interface is, because in this case the cell phone is already copied to the machine pelt and the input / output devices of the machine can be used. In this case, one in the Automa Implemented user guidance application started.

Is the interaction so advanced that the parameters of the for the service to be provided are defined in one fifth step S5 biometric reference data of the user of the Cell phones are read from a memory of the cell phone and sent to the Transfer automatons.

Alternatively, the vending machine can be set up via the BT connection a cellular connection to the cellular provider or to egg service provider of the machine and calls over the cell phone connection the reference data of this user, whereupon this transmitted to the machine via the BT connection.

To ensure that the user has control over the Transfer of its reference data, it is conceivable or transfer using a password, especially a PIN.

After receiving the biometric reference data in a sixth step S6 of the user by a message about the WAP application asked to go to the machine and on a biometric detection device of the Au identify tomatoes.

After collecting the raw biometric data and processing if necessary this data of the user by the recording device, these are compared to the previously transmitted reference data in egg nem seventh step S7 compared.

A query in an eighth step S8 reveals that the raw data match the reference data, i.e. the user  is identified, the ge is in a ninth step S9 desired service provided.

If the query in step S8 shows that there is no match ment, the service is ver in a step S10 refuses and alternatively a new identification attempt wishes.

In FIG. 2, an exemplary arrangement is shown for releasing a ticket.

A ticket machine TA according to the invention and a Handset MT according to the invention, which is so close to the ticket machine TA that there is a radio link according to the short-range radio standard Bluetooth, where the handset MT has a first Bluetooth module BT1 and the ticket machine TA has a second Bluetooth module BT2 has.

The owner of the MT handset is now able to be over Handset MT the necessary data for the creation of a Enter tickets, which are then sent via the Bluetooth Radio connection can be transmitted to the ticket machines TA.

Are the necessary data exchanged, so that only the ticket is to be issued via the Bluetooth Radio connection fingerprint reference data of the user abge call that is stored on the SIM card of the MT handset are.

The user then confirms the initiated ticket buy by using a fingerprint scanner FSC of the Ti cket automat TA identified by placing his thumb.

Is the identity by matching that by hanging up the thumb data with the fingerprint  If the reference data is confirmed, the ticket is issued and the Transaction completed.

With this arrangement, on the one hand, a higher level of Si security because the user of the handset already has one first security hurdle by registering the MT handset in the cellular network has taken (entering a PIN after Switch on the MT handset). Possibly. he needs an additional one Enter the PIN to initiate the transaction.

A second security hurdle is given by the fact that the Be users biometrically, especially by fingerprint is checked so that someone who stole the booked cell phone len cannot initiate a transaction.

Another advantage arises from the fact that the user must actually be in front of the ticket machine and wil yourself the transaction triggers the biometric Sensor activated so that it is avoided that such wirelessly processed transactions by several people, that are in front of a machine, are triggered or one disrupt existing transaction.

The arrangement shown should not be on machines be restricted, but is also for access controls or Payment processes at cash registers or for other services require secure identification of the user fairly applicable.

Because storage space will continue to fall in price in the future, it is also conceivable that the handset MT has a larger memory for such purposes.

As miniaturization continues, the end could also gets the form factor of, for example, a credit card accept.  

A further exemplary arrangement can be seen in FIG. 3. In contrast to the previous example, it is an ATM machine that communicates with a mobile unit MT via a Bluetooth radio connection.

Another difference from the example described above is that the biometric reference data, in the example shown in FIG. 3 iris data, are not read from the SIM card of the mobile part MT, but via a mobile radio connection of the mobile part MT to its base station BS from a database DB connected to the base station BS can be read out, the mobile radio connection being initiated by a financial institution which is responsible for the automated teller machine GA via the Bluetooth radio connection.

The user of the handset is then asked ne iris data from one attached to the ATM ATM IRIScanner to be recorded, so that if they match the desired amount of money can be paid out.

One advantage of this arrangement over a query over one Bank network is that the customer can provide his iris reference data Conclusion of his mobile phone contract by the corresponding Provider must be recorded and saved, so that there for the identity is assigned to the reference data can and on the other hand the data even when changing the device do not have to be generated again.

Claims (22)

1. Procedure for implementing a secured service with the following steps:

• a) A mobile terminal (MT) is coupled via a data transmission interface (BT1, BT2) to a stationary terminal (TA, GA) (S1, S2, S3),
• b) the mobile terminal (MT) and the stationary terminal (TA, GA) exchange data relating to the service via the data transmission interface (BT1, BT2) (S4),
• c) the mobile terminal (MT) reads biometric reference data of a person from a memory (SIM, DB) assigned to it and transmits it to the stationary terminal (GA, TA) (S5),
• d) the person is asked to identify himself to initiate the provision of the service (S6),
• e) the biometric data of the person are recorded by a recording device (FSC, ISC) of the stationary terminal (TA, GA),
• f) in the stationary terminal (TA, GA), the biometric reference data are compared with the recorded biometric data (S7),
• g) the service is provided if the reference data matches the recorded data (S8, S9, S10).

2. The method according to claim 1, characterized in that the reading of the reference data and the transmission by Enter at least one password in the mobile device (MT) is triggered. 3. The method according to any one of claims 1 or 2, characterized ge indicates that data between stationary terminal (TA, GA) and mobile terminal (MT) via a wireless, especially designed according to IrDA or Bluetooth, Da transmission interface (BT1, BT2) who the.   4. The method according to any one of claims 1 to 3, characterized ge indicates that a data exchange between stationary rem terminal (TA, GA) and mobile terminal (MT) via one serial, especially according to V.24 or RS-232-C serial designed, data transmission interface (BT1, BT2) be transmitted. (I would use parallel interfaces do not generally exclude.) 5. The method according to any one of claims 1 to 3, characterized ge indicates that a data exchange between stationary rem terminal (TA, GA) and mobile terminal (MT) via one parallel data transmission interface (BT1, BT2) via will wear. 6. The method according to any one of the preceding claims, since characterized in that a in the mobile device (MT) locally available memory (SIM) is read out. 7. The method according to any one of claims 1 to 5, characterized ge indicates that a central to a cellular network (BS) memory (DB) allocated to the mobile terminal (MT) is read out. 8. The method according to any one of the preceding claims, since characterized in that when the mo bilen terminal to the stationary terminal, esp special communication program designed according to WAP is started with user guidance. 9. The method according to any one of the preceding claims, since characterized by that for identification face geo metry, iris and / or retina pattern, voice pattern, Hand geometry, fingerprint data and / or psychometri cal, especially signature, typing dynamics and / or Facial expressions, data can be used.   10. Mobile terminal (MT) for implementing a secure service, in particular according to one of claims 1 to 8, characterized by

• a) a data transmission interface (BT1) for connecting the mobile terminal (MT) to a stationary terminal (TA, GA),
• b) a device for detecting a coupling of the mobile terminal (MT) via the data transmission interface (BT1) to the stationary terminal (TA, GA),
• c) a device for data exchange of data relating to the service (BT1, µP1),
• d) means for accessing stored biometric reference data (µP1),
• e) a device for transmitting the biometric reference data (BT1, BS, µP1).

11. Mobile terminal (MT) according to claim 9, characterized ge identifies it as a cell phone, PDA or notebook is designed. 12. Mobile terminal (MT) according to one of claims 9 or 10, characterized in that the data transmission interface (BT1) as serial, especially V.24 or RS-232-C, interface is designed. 13. Mobile terminal (MT) according to one of claims 9 or 10, characterized in that the data transmission Interface (BT1) selected as a parallel interface is. 14. Mobile terminal (MT) according to one of claims 10 to 11, characterized in that the data transmission interface (Btl) as a wireless, especially IrDA or Bluetooth, interface is designed. 15. Mobile terminal (MT) according to one of the preceding claims, characterized in that

• a) it has a memory (SIM), in particular SIM card, for storing biometric reference data,
• b) has a device for accessing data stored in the memory (µP1)

16. Mobile terminal (MT) according to one of claims 10 to 14, characterized by a device for accessing in a central memory (DB) that a cellular network (BS) of the mobile terminal (MT) is assigned, saved saved data. 17. Stationary terminal (TA, GA) for implementing a secured service, in particular according to one of claims 1 to 9, characterized by

• a) a data transmission interface (BT2) for connecting a mobile terminal (MT) to the stationary terminal (TA, GA),
• b) a device (µP2) for detecting a coupling of the mobile terminal (MT) via the data transmission interface (BT2) to the stationary terminal (TA, GA),
• c) a device (BT2, µP2) for data exchange of data relating to the service,
• d) means (FSC, ISC) for collecting biometric data of a person,
• e) means (µP2) for comparing biometric reference data with the recorded biometric data,
• f) device for providing the service if the reference data matches the recorded data.

18. Stationary terminal according to claim 17, characterized records that it is used as a ticket, cash, "Electronic Cash "- or cash machine is designed. 19. Stationary terminal according to one of claims 17 or 18, characterized in that the data transmission interface as serial, especially V.24 or RS 232-C, interface is designed.   20. Stationary terminal according to one of claims 17 or 18, characterized in that the data transmission interface designed as a parallel interface is. 21. Stationary terminal according to one of claims 17 or 18, characterized in that the data transmission interface as a wireless, especially IrDA or Bluetooth, interface is designed. 22. Stationary terminal according to one of claims 17 to 20, characterized by a device for accessing in a central memory that a a cellular network is assigned to the mobile terminal, stored reference data via the data transmission interface.